Myna
Privacy Notice
What we collect, what never leaves your computer, and who else sees any of it.
Version 2026-09-25, effective 25 September 2026
The controller is Tomer Gilad, an independent developer based in Israel, operating as Myna Recorder; details are on our legal information page. Contact privacy@mynarecorder.com.
1. What stays on your computer
This stays on your computer, except for data sent when you use the AI features in section 3:
- your recordings, and every keystroke they contain;
- your scripts and projects;
- your image crops, which are pictures of your screen;
- your clipboard history and the items you pin. Recorder keeps them encrypted on your computer; it records text you copy and skips what a password manager marks as private;
- what the screen watchdog looks at, unless you set a row to Ask AI — see section 3;
- your diagnostic log, if you switch one on;
- your application settings — hotkeys, capture options, everything in the Settings window;
- your Telegram or Discord details. Notifications go straight from your computer to that service, never through us;
- the names of files, applications or windows you use.
The app sends no telemetry, analytics or crash reports.
Recordings, scripts and crops sit unencrypted in your Documents folder, so backup and cloud-sync tools can read them. Your licence key, settings, clipboard history and AI conversation are encrypted, and unreadable on another computer.
2. What we collect
- your email address, and your password as a hash;
- your licence key, and a hashed fingerprint of your computer;
- a check-in every 30 minutes while the app is open: the time, that fingerprint and the app version;
- if you use Recorder without an account, a check-in when it starts and every 30 minutes that carries only the app version, which we receive with your IP address and tie to no account;
- the name you give each computer;
- your AI usage: how much, what it cost, and when;
- your IP address and app or browser version, with account and licence events;
- which terms version you accepted, and when;
- page visits, counted by Cloudflare without cookies and never tied to your account;
- support emails you send us.
We use it to run your account, your licence and your AI credits, to keep the records the law requires, and to stop abuse. Under the EU and UK GDPR, and the rules that match them elsewhere, these are the reasons we may do so:
| Why we use it | On what basis |
|---|---|
| Running your account, licence and AI credits, and the AI features you use: your email, licence, computer fingerprint, check-ins, usage, and what those features send | To carry out our contract with you |
| Security, stopping abuse and fixing faults: your IP address, sign-in attempts, records of refused requests, and the check-ins of Recorder used without an account | Our legitimate interest in protecting the service and the people who use it |
| Keeping a record of which terms you accepted and when, and answering your support emails | Our legitimate interest in being able to show what was agreed, and in helping you |
| Billing, tax and accounting records | A legal obligation |
| Counting visits to the website, without cookies and never tied to your account | Our legitimate interest in knowing how the site is used |
We do not rely on your consent for any of this. You can object to processing that rests on our legitimate interests, as described in section 6.
We do not collect card details, location, contacts or browsing history. We process your automation work when you use the AI features described in section 3. We never sell personal data, and we do no profiling.
3. The AI features
These are the only features that send your work off your computer, and only when you use them. Everything goes your computer → our server → an AI provider → back, so a provider never sees your IP address, email or licence key unless they appear in what you send. Requests carry a code derived from your account, so that a provider can reuse work it has cached; it does not tell them who you are.
The assistant sends text: your message, the names of your image crops (never the images), recent conversation turns, and the script in your editor.
Screen text reading uploads an actual image of the selected part of your screen, with everything visible in it. A screen watchdog row set to Ask AI does the same, as often as it checks; a row set to Image compares locally and sends nothing. Close or move anything you do not want transmitted.
The agent uploads a picture of your screen at every step — the main screen, or every screen if you choose — with everything visible on it, including unrelated windows, messages and other people's details. With it go your goal and what the run needs to continue: the summary so far, the previous actions and what they were expected to do, and any errors. A run started from the Scheduler, Telegram or Discord sends the same. Stopping a run cannot recall what has already been sent. Close anything you do not want transmitted before you start it.
We do not routinely retain prompts or scripts. For refused requests, we keep security records for 180 days to investigate abuse or disputes. These include a prompt fingerprint and a refusal reason, which may quote a short part of the prompt.
Our AI providers are in the United States. They may keep what we send under their own policies, and their terms say it is not used to train their models. Write to privacy@mynarecorder.com and we will tell you which ones we use.
5. How long we keep it
| What | How long |
|---|---|
| Account details | While your account exists |
| Licence and activation records | While the licence exists |
| Billing and AI usage records | As long as tax law requires |
| Support email | Up to 2 years |
Security records, such as sign-in attempts and refused AI requests, are deleted automatically within 180 days.
6. Your rights
Depending on where you live you may have the right to access a copy of your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw consent where we rely on it. Email privacy@mynarecorder.com. We answer within one month, and may ask you to write from the address on the account.
7. Closing your account
When you ask us to close your account we remove your email address, make the password permanently unusable, revoke your licences and overwrite the keys, overwrite the hashed machine fingerprints, clear the labels you gave your computers, and invalidate any outstanding links.
We keep the financial record: what was used, what it cost, and when. Tax law requires it, and by then it belongs to an account that no longer identifies you.
9. Contact and complaints
privacy@mynarecorder.com. Myna Recorder is not directed at children and we do not knowingly collect data from anyone under 16.
If you are unhappy with how we handled your data, please tell us first. You may also complain to a supervisory authority: in the EEA or UK the one where you live; in Israel, the Privacy Protection Authority.