Privacy Policy
Overview
This Privacy Policy applies to Arcadia SW Systems Inc. ("we", "us", "our") and the apps we publish — including QR Cute, Checkpoints, PixelPulse Groovebox, CityGrid, and Agent Fi for Mac — as well as this website. None of our apps require an account. Most of our apps run entirely on your device and never contact a server at all. Two apps work differently, and are described in their own sections below: CityGrid, which is a hosted web app with a public-data backend, and Agent Fi, which is local-first but can optionally connect to AI providers and other services you configure yourself.
Where a practice is specific to one app — such as an optional permission or integration — that is called out below.
Apps Covered by This Policy
- QR Cute — custom QR code generator for iOS
- Checkpoints — local version history for folders, for Mac
- PixelPulse Groovebox — 8-bit and lo-fi music groovebox for Mac
- CityGrid — live, open-data map of Toronto (web app at citygrid.ca)
- Agent Fi for Mac — local-first AI assistant for program and project managers
Data We Collect
None of our apps require an account or login.
QR Cute, Checkpoints, and PixelPulse Groovebox collect no data at all — they run entirely on your device and never send anything to a server. They do not track your location, use analytics or crash-reporting tools, or display advertising.
CityGrid is a live web app with a server backend that serves public open-data feeds (transit, weather, closures, and similar civic data). It does not collect personal data either, but — unlike our fully local apps — it does use:
- Cookieless, first-party analytics — aggregate usage metrics, without raw IP addresses, search text, third-party trackers, or personal profiles, to understand overall reach
- Anonymous push notifications — if you opt in to a transit alert, your browser creates a push subscription used only to deliver that alert; it's tied to your browser, not to an account or identity
Agent Fi for Mac is local-first, not local-only: by default nothing leaves your Mac, but if you connect a cloud AI provider or another external service, some data is sent to the destination you've configured. This is different enough from our other apps that it has its own section below — see Agent Fi for Mac.
None of our apps use third-party advertising or third-party tracking SDKs, and none of them sell your data.
Agent Fi for Mac
Agent Fi for Mac is a local-first AI assistant for program and project managers. Unlike our other apps, it is local-first, not local-only: it can run entirely offline with a local model, but it can also connect to AI providers and other services you configure, in which case those connections receive some of your data. This section describes exactly what can be sent, to whom, and under what conditions. Arcadia operates no server for Agent Fi and receives none of this data — everything below goes directly from your Mac to the destination you've configured.
Where your data can go
- OpenAI, Anthropic, or a custom OpenAI-compatible endpoint — if you add an API key in Settings → Models, your chat requests are sent to that provider. If you set a custom base URL (for example, a self-hosted or third-party gateway), requests go to that host instead — the destination is partly your own choice, and Agent Fi shows you exactly which host is configured.
- Atlassian (Jira and Confluence) — if you connect Jira or Confluence with your own site URL and API token, Agent Fi can read and write issues or pages on your instance. This is a separate, credentialed connection from your AI provider.
- MCP servers you configure — Agent Fi supports the Model Context Protocol. In the Mac App Store version, MCP connections are limited to remote servers over HTTPS that you add yourself; nothing connects automatically.
- Local models via Ollama — if you use a local model, requests go to Ollama running on your own Mac and never leave your device. This is the option that keeps Agent Fi fully offline.
What can be sent, and when
If you use a cloud provider (OpenAI, Anthropic, a custom endpoint, or MCP over HTTPS), by default only your typed message and the recent turns of that conversation are sent — nothing else.
The following are only ever included if you explicitly approve it, in Settings → Guardrails:
- Text from documents you've imported
- Facts you've saved to durable memory
- Calendar events and reminders, when you ask about them
- The display name you've set for yourself
You can grant or withdraw this approval at any time; both actions are recorded in Agent Fi's local audit log. Automatic memory extraction and session summaries run on your local model only and are never sent to a cloud provider as part of that process. If you use a local model exclusively, nothing at all leaves your Mac.
Jira and Confluence are a separate case: because that data already lives on a third-party server you connected yourself with your own credentials, reading it isn't gated the same way — but every write (creating or editing an issue or page) still requires your confirmation before it happens.
Retention and deletion
Conversation history, memory, imported documents, integration settings, and the audit log are all stored locally in Agent Fi's app data on your Mac. Agent Fi gives you direct control to delete this data at any time: clear auto-extracted memories, session summaries, or all memories; clear imported documents; clear the audit log; or run a full factory reset that wipes all local app state and returns Agent Fi to its first-run state. None of this data is retained by us, because we never receive it.
Data Stored on Your Device
This section applies to QR Cute, Checkpoints, and PixelPulse Groovebox. CityGrid is a hosted web app rather than a local app, so it's covered separately above. Agent Fi's local storage and deletion controls are covered in its dedicated section above.
These apps store the content you create locally on your device only:
- QR Cute — the QR code configurations you save (content, style settings, and any custom logo image), stored using Apple's SwiftData framework
- Checkpoints — the version history of the folders you choose to track, stored as local file snapshots
- PixelPulse Groovebox — the music projects and patterns you create, and any WAV files you export
This data remains entirely on your device and is never transmitted anywhere by us. If you enable iCloud backup or iCloud Drive on your device, this data may be included in your backups according to Apple's standard iCloud policies, which you control through your device settings.
Permissions & Optional Access
Some apps request optional access to power specific features:
- Clipboard (QR Cute) — when QR Cute launches or returns to the foreground, it checks your clipboard for a URL and offers to paste it automatically. This is read locally and never transmitted. On iOS 16 and later, the system displays a notification whenever an app reads the clipboard.
- Photo Library (QR Cute) — used only if you choose to add a custom center logo to a QR code. This access is optional; you can use the app without granting it.
- Contacts (QR Cute) — QR Cute does not access your contacts. It only includes contact details you manually type into a vCard-style QR code.
- Folder Access (Checkpoints) — Checkpoints only reads and writes within folders you explicitly add as a tracked project. It does not access other files on your Mac.
- Browser Notifications (CityGrid) — if you opt in to a transit alert, CityGrid asks for permission to send browser push notifications. This is anonymous and tied to your browser subscription, not to a personal account, and you can revoke it at any time in your browser settings.
- Calendar & Reminders (Agent Fi) — read and, with your confirmation, write access via Apple's EventKit, used only when you ask the agent about your schedule or reminders, or ask it to create or update one. This stays on your Mac and is only included in a request to a cloud provider if you've separately approved that category above.
- Document/Folder Access (Agent Fi) — Agent Fi only reads files and folders you explicitly choose via the system file picker. It does not browse your filesystem on its own.
- Microphone & Speech Recognition (Agent Fi) — optional voice input. Your speech is transcribed on-device to fill the chat composer; the audio itself is never uploaded.
- Camera — none of our apps access the camera.
Claude / MCP Integration (Checkpoints)
Checkpoints offers an optional integration with Claude Desktop, and other Model Context Protocol–compatible clients, so you can manage your version history through conversation. This integration is off unless you set it up yourself. When you use it, information you ask about — such as checkpoint labels, dates, or file differences — is shared with the MCP client and AI provider you've connected, and is governed by that provider's own privacy policy. We do not receive or store this information.
In-App Purchases
Some of our apps, such as QR Cute, offer an optional one-time in-app purchase to unlock premium features. Purchases are processed entirely by Apple through the App Store. Arcadia SW Systems Inc. does not receive or store any payment information. CityGrid is free to use and has no purchases of any kind.
Children's Privacy
We do not knowingly collect any information from children under 13. None of our apps have user accounts or use advertising, and none of them are directed at or designed for use by children.
Changes to This Policy
If this privacy policy changes, the updated version will be posted at this URL with an updated "Last updated" date.
Contact
If you have any questions about this privacy policy, please contact us at:
Arcadia SW Systems Inc. — Canada