Privacy

Your iMessage database (chat.db) is opened read-only. It is never modified, never copied, never uploaded. Contacts are read on your Mac only. Name lookups never leave the machine. Reactions, automated senders such as two-factor codes and delivery alerts, and any conversation you have not run a dossier on are never read for analysis.

Generated dossiers are cached locally on your Mac, keyed by a scrambled code rather than a readable phone number or email.

To write a dossier, Dossier sends one scrubbed conversation over HTTPS to a service we operate. It sends up to the most recent 250 messages. The service runs the analysis using Anthropic's Claude model and returns the result. The request includes message text, timestamps, who sent each message, a display name for the other person, whether you tagged them personal or professional, whether it is a group chat, and which analysis mode you chose.

Phone numbers and email addresses are stripped and replaced before anything leaves your Mac, in message text and in contact labels alike. People who are not in your address book are sent as REDACTED.

We do not keep the transcript. It is processed in memory and discarded. The app does not store it. Our service does not log or persist it. Our service records only counters and outcome labels such as “succeeded” or “rate-limited”.

Dossier signs you in anonymously on first launch. No email, no password. This is so requests are authenticated and your free generations can be counted. Tied to that account we store your free generation and credit counts, and your date of birth once you pass the age check. If you link an email address, we store that email. If you buy credits, we keep a payment-processor customer ID to manage the purchase. Each account can only read its own records.

We do not sell your data, and we do not share it with advertisers.

Cloud sync is off by default and requires a linked email. It governs whether finished dossiers are stored on our servers. While it is off, they stay in the on-device cache and we do not store them. While it is on, newly generated dossiers and your relationship tags are kept on our servers so you can reach them from another device.

Turning cloud sync off does not stop conversations being sent for analysis. Writing a dossier always sends a scrubbed slice of that conversation to our service, including a display name for the other person, whether sync is on or off. See “What is sent when you run a dossier” above. Sync decides whether the finished dossier is stored, not whether the analysis happens.

Synced dossiers are tied to your account and readable by us. They are not anonymous and not end-to-end encrypted. We keep raw phone numbers and email addresses out of them, but a synced dossier still carries first names and brief message excerpts. If that matters to you, leave cloud sync off.

Turning sync off deletes the cloud copies and keeps your local cache. Two honest limits: the delete is best-effort and retries on next launch if it fails, and a second Mac still signed in with sync on can upload its own copies again.

A synced dossier has to record who it is about. It does not use a phone number or an email address; it uses a scrambled code derived from the contact's handle and a secret key held separately from the database. The code cannot be reversed or tested against a guessed phone number by someone holding only the database, and it is different for every account. Two users writing about the same person produce records we cannot match to each other.

Someone holding both the database and the separately held key could test guesses. And this protects who a dossier is about, not what it says: a saved dossier can still quote short excerpts, and excerpts can name people.

The Mac app collects basic product analytics: which screens are used, how long a generation takes. It is tied to your account's random ID, never your name, email or phone number. No message content is ever included. Our analytics provider derives an approximate location from your IP address, as most apps and websites do: your city. It comes from the network you are on, never from your Mac's location services, and it is never an address.

This website is counted separately, and differently. It records which pages are viewed and when the download link is used. It sets no cookies and stores nothing in your browser, and it is not tied to your account: signed in or not, the website does not know who you are. Your IP address reaches our analytics provider, as it does on any website you visit, and is used only to tell repeat visits apart within a day. The website derives no location from it.

Page addresses are recorded without their query strings. If you arrive from a sign-in email, the one-time token and the address in that link are removed before anything is sent.

We call the app's analytics pseudonymous, not anonymous. The ID is random, but it is the same ID your account uses. If you have linked an email, we could connect usage back to you. We do not build profiles this way. We are telling you because “anonymous” would be the wrong word.

The website's counting is separate from the app, held in a different project at our analytics provider.

Analysis runs on Anthropic's Claude model, called by our service rather than from your Mac, so the model key is never on your computer. Your messages never train AI models. Not ours, not anyone else's.

You can use Dossier without linking an email. You can leave cloud sync off, which keeps every dossier on your Mac. You can turn sync off later to delete the cloud copies. You can revoke Full Disk Access in macOS System Settings at any time, which stops Dossier reading messages at all. To ask what we hold about your account, or to have it deleted, email support@justdossier.com.

Dossier is for ages 13 and up. The first time you generate a dossier the app asks for your date of birth to confirm this. A date under 13 is rejected and not stored.

Dossier is operated by Majr Technology Corporation. “We” on this page means that company.

If this policy changes in a way that affects what we collect or who can see it, we will say so here and date the change. This page was last updated on 19 August 2026.