Privacy · Updated 7 October 2026
Your work stays yours.
Workbench is a free Mac app published by Ethan Harley. The everyday tools need no account. Your recordings, text and images stay on your Mac unless you turn on or start something that needs them.
The short version
Five promises.
- No analytics, advertising, tracking or Workbench account.
- Your work reaches the Workbench team only in a problem report you choose to send.
- Built-in speech recognition runs on your Mac and works offline after the first model download.
- Anything that leaves your Mac is something you turned on or started.
- We can’t access or remotely erase the files on your Mac.
On your Mac
What stays here.
Almost everything. Removing the app doesn’t erase your files, and updating keeps them.
- Drafts, transcripts, dictionary entries and preferences.
- Previous meeting recordings and recovery checkpoints remain untouched in Workbench’s saved-data folder. The separate Meetings app imports copies only when you choose; Workbench no longer records or detects meetings.
- Snaps: the original, crops, annotations and notes. A hand-off to an assistant contains the visible crop and annotations by default.
- Snap & Talk sessions, in a folder you choose, preserved even when Experimental features is off. A session folder can hold original and edited images plus your narration, so review the whole folder before sharing it.
- Drawings, boards, imported images, persona cards and scenes. Drawing uses overlay windows and doesn’t record the screen. Boards and the standalone persona library are never uploaded; a persona placed in a synced scene uploads as part of that scene.
- Assistant work: the selected snapshot, the provider’s receipt and the returned draft. Transcripts, saved selections, hand-off snapshots and results are separate local records, outside sync.
- Exported audio goes only where you choose.
More detail
Unfinished captures. One unfinished capture keeps its recording and recovery text on your Mac until you save or discard it. Quit stops recording but keeps the recovery for the next launch; a successful save releases it. This cleanup never deletes imported audio originals, and recovery is outside photo and scene sync.
Cleaning up dictation. Original keeps the transcription as heard, and Light applies local cleanup rules; neither calls a model. Natural uses Apple’s on-device model or an Ollama server on this Mac. Speech recognition and cleanup are separate choices, and downloading a model is separate from choosing it. The original transcription is always kept, a fallback to Light is reported, and Workbench never silently switches to a cloud text model.
Personas. Importing a persona makes a local copy of its image. Removing a persona keeps the image for any scene that uses it.
Leaving your Mac
What can leave, and only when.
Each of these happens because you turned it on or started it.
- Model downloads. The host sees normal request information, such as your IP address.
- Problem reports, only when you choose Help › Report a Problem… and press Send report. See Problem reports.
- Assistant tasks. Only when you start a reviewed task, the official Codex or Claude Code app you installed sends the selected text, supported images and chosen skill instructions, under that provider’s sign-in and policies. Workbench never extracts credentials or falls back to paid API billing. Cancelling stops local work, but anything already submitted may have been processed. Results are never sent to colleagues, suggested transcript details are never applied automatically, and meeting audio never goes to an assistant automatically.
- Team packs. GitHub requests, including an update check at launch and every six hours.
- iCloud photo hand-off and scene sync, if you turn them on, go to your own iCloud.
- Logo search opens Google Images inside Workbench, so your search words go to Google. No cookies or history are kept after it closes, and only the image you choose is saved, as a local copy.
- What you send yourself. Copying, dragging, exporting, sharing and screen sharing follow the destination’s policies. Your meeting app decides what the audience sees: whole-screen sharing can include floating personas and controls, while a shared browser tab doesn’t include native overlays. QuickTime and iPhone Mirroring are separate Apple apps.
More detail: local servers, preserved text and Shortcuts
Local transcription server. The selected audio and model name go to the loopback address you configured. Remote addresses and redirects are refused. The server is separate software and may forward audio, so check its settings.
Ollama. Model details are checked before the transcript and editing instructions go to the loopback address. Remote addresses, redirects and models identified as cloud-backed are refused. These checks rely on what the server reports; they don’t audit the server or prove it never forwards text.
Retired Read text. Read text-to-speech and its online providers are removed. An old Read draft is preserved exactly as a text file in Library, while the original saved fields remain available for recovery. Existing audio exports, credentials and model caches are not deleted. Workbench no longer reads those TTS credentials or sends text to a reading provider.
Shortcuts. Apple’s Record Audio action owns recording and its Stop button. Transcribe with Workbench uses your selected speech engine, and the actions after it decide where the text goes, including services that sync online.
Problem reports
Sent only when you press Send.
Help › Report a Problem… lets you tell the Workbench team what went wrong. Nothing is collected until you write, capture or record it, and nothing is sent until you press Send report.
- What is sent: your words, the screenshot and voice note if you add them, and safe details about this copy of Workbench: its edition, version, build and source revision, the macOS version, which tool you were using, whether Workbench has microphone, screen and Accessibility access, and a problem code. Details shows these before you send. If you add your email, the team sees it with your report, and can search for it in their private inbox, so they can reply.
- What is never sent: window or document titles, file paths, your clipboard, history, other recordings, device names or logs.
- Who receives it: the Workbench team, in a private inbox at Sentry (sentry.io) that only the team can open. Sentry sees normal request information, such as your IP address; storing it is turned off. Workbench’s own check service then asks Sentry whether the report and its files arrived, using only the report’s numbers, file sizes and fingerprints.
- How long: the team keeps reports for up to 90 days. A report that hasn’t been sent yet waits on your Mac and sends by itself when you’re online. Remove from this Mac deletes your copy. To have the team delete a sent report sooner, send a report that asks and quotes its number.
- Which builds: reports are sent from the released Workbench app. Test and development builds offer Save a copy instead, which puts the report in a folder you choose.
Permissions
Asked for only when you need them.
Nothing is requested at first launch. You can change any of these in macOS System Settings.
- Microphone: when you start Voice to Text, enabled Snap & Talk narration or a problem report’s voice note, and while a persona’s React to my voice is on. React to my voice measures loudness and records nothing.
- Screen Recording: for Snap, Snap & Talk and a problem report’s screenshot. Capture happens only when you start Region, Window or Screen, use a shortcut, or choose Replace screenshot or Add screenshot.
- Accessibility (optional): to paste automatically into your chosen field. Workbench doesn’t press Return.
- System Audio Recording: Workbench does not request it. The separate Meetings app owns its own recording permissions.
- Camera: only for a profile photo, Persona’s live camera bubble, or device video in a presentation. The bubble is a mirrored live picture: it records no audio or video, saves no photo and streams nowhere. Hide, End, Quit and sleep release the camera.
- Device capture needs the relevant macOS permission.
More detail: optional features and Desktop screenshots
Experimental features starts off. Snap & Talk’s controls, shortcuts and background work stay inactive until you enable it. Disabling it preserves your session folders. Workbench performs no meeting detection.
Import Desktop screenshots… reads your Desktop only when you choose it, saves the screenshots to History and moves the originals to the Trash. Keep new screenshots off the Desktop changes the macOS save location to ~/Pictures/Workbench Screenshots.
Your files
Where things live.
- Saved work:
~/Library/Application Support/Workbench, and~/Library/Application Support/Workbench Previewfor the test edition. An unfinished problem report and reports waiting to send are in itsReportsfolder. - The speech model: the shared FluidAudio folder in Application Support.
- Collected screenshots:
~/Pictures/Workbench Screenshots. Snap & Talk sessions: the folder you choose. - Importing Voice or StageMark data makes a copy and leaves the original in place.
- A
.workbenchsceneexport contains the scene’s full assets, not a flattened preview.
Updates
Signed updates, nothing personal.
- Downloaded editions check for signed updates through this website on Vercel and download them from GitHub.
- Checking and downloading are both on by default, and each can be turned off in Settings. An update waits for a recording or presentation to finish.
- No recordings, transcripts, scene content, unique identifier or hardware profile are sent. The hosts get normal request information, such as your IP address.
- Workbench and Workbench Preview use separate update feeds. Local development builds check neither.
Optional accounts
GitHub and iCloud, only if you connect them.
- GitHub, for team packs. Device sign-in at github.com/login/device, reading only the repository you add, through api.github.com. The token is kept in this edition’s Keychain and disconnecting removes it. Pack content is pinned to a commit, checked, kept locally and works offline. GitHub’s policies apply.
- iCloud is used only by photo hand-off and personal scene sync, both off unless you turn them on. Neither uses a Workbench login, a public link or a developer server, and no end-to-end encryption is claimed.
More detail: photo hand-off
Only pictures you choose go to a private CloudKit container in your Apple Account. It needs a configured, signed build and the same Apple Account on both devices; the notarized Mac Preview includes this configuration. There is no full-library upload.
The sender keeps the original. The copy is a freshly rendered JPEG, at most 3,840 pixels on the long edge, without copied GPS or camera metadata. iCloud stores the picture, an optional title, the capture time, a source-platform label and technical validation data. Pictures and titles can still identify people or workplaces. Apple’s policies and storage apply.
Turning it off stops cloud work and keeps local photos. Cloud removal deletes the cloud record only; local copies and pictures placed in scenes stay, and local removal is a separate action. Hand-off doesn’t transfer recordings, text, scene documents or wallpaper settings.
More detail: personal scene sync
In a configured build, saved scenes go to a private CloudKit database: existing scenes, later edits, names, layout and crop settings, and every image they use, including logos and persona artwork. It’s for your own devices only, with no team workspace or public link.
Packages keep image bytes plus original artwork for recovery. Imported images may keep camera or location metadata, so remove it before importing. Sync runs while Workbench is active; edits transfer after a short pause, and delivery depends on connectivity, Apple and the receiving app being active.
Turning sync off stops new cloud work, keeps local copies and doesn’t remove earlier uploads. Changing Apple Account pauses transfers and keeps local work. Deleting a scene sends a deletion marker, but the Preview keeps the package and its assets, so this isn’t permanent erasure from the device or iCloud; there is no in-app permanent purge yet. A conflicting unsent edit may survive as a kept copy, and independent copies are unaffected. Recordings, transcripts, standalone persona groups and system wallpaper settings are never synced.
This website
Just pages.
- No analytics, advertising or feedback database. Vercel, which hosts the site, receives normal page requests.
- A feedback draft on the contribute page stays in that page until you close or reload it. Review on GitHub sends the draft to GitHub, and posting an issue makes it public, so remove private details first.
- In the app, Say hello to Ethan and Matt opens an editable email draft in your own email app, with no transcripts, recordings, device details or usage history. You choose whether to send it. Workbench never sends email itself, and a download doesn’t identify your email or notify Ethan and Matt.
Paused editions: Chrome extension, iPhone and iPad
Development of these is paused and none is offered for download. These notes apply only to test builds that are already installed.
Chrome extension (paused Preview). It works with the matching Workbench Preview for macOS to save named web destinations and return to explicitly paired Chrome profiles. It handles destination names and profile labels you type, a generated profile identifier, saved addresses and temporary tab and window identifiers. The popup reads the current tab’s address locally; query parameters and fragments are stripped before saving or sending, and embedded usernames and passwords are rejected. It checks the current and pending addresses of permitted tabs. It doesn’t read page content, forms, stored passwords, cookies or history, and doesn’t sign in or rotate credentials.
Chrome stores the label, identifier and pairing state locally; session storage holds tab bindings and an unfinished draft, and a permission-step draft can be restored for 15 minutes (an expired one may remain until overwritten or the session ends). Tab identifiers are never stored durably and Chrome Sync isn’t used. Names, addresses and labels go through native messaging to the Mac app’s Library, which owns the records, and aren’t part of photo or scene sync. Nothing goes to a developer server or third parties, with no analytics, advertising or sale of data. Opening a destination contacts that site normally, and no site credentials are requested. Site access is optional, requested on Allow this site to inspect tab addresses and focus a tab; a new tenant subdomain needs a new grant. There are no content scripts and Incognito is disabled. Removing the extension removes its Chrome data and closing Chrome clears session storage; the Mac Library records stay. The extension states compliance with the Chrome Web Store User Data Policy, including Limited Use. Please keep private destinations and customer details out of public issues.
iPhone and iPad (paused). Apple’s on-device SpeechAnalyzer runs after you explicitly prepare its speech assets, unsupported devices and languages are reported, and there is no cloud fallback. Audio stays in the app’s container with one recovery slot, and recording stops when the app leaves the foreground. Reading uses Apple voices, and the Lock Screen shows a generic title instead of your passage. Photos and Files imports are your choice, and saving to Photos asks for add-only permission. It doesn’t inspect the photo library, watch the clipboard or set the wallpaper. Local copies stay in the container and the Preview keeps imported originals after records are deleted; deleting the app can remove local work, so export first, and backups follow your Apple settings. No analytics, tracking or account; cloud transfers need photo hand-off or scene sync turned on. The Mac-only local server, Speko, Accessibility and overlay features don’t apply there.
Contact
Questions and security.
- General questions: GitHub issues.
- Security problems: report privately, not in a public issue.