Legal

Privacy Policy

Last updated 23 October 2026

1. Who we are

Cursorling is a Mac app and the service behind it, made by Next Combinator, 213/10/C, West Agargaon, Dhaka, Bangladesh ("Cursorling", "we", "us"). This policy covers the app, our website at cursorling.si and our servers. We are the controller of the personal data described here.

2. What we collect

Your account

When you sign in with Google we receive your name, email address and Google account ID. We also keep the date you signed up and, if you tell us, how you found Cursorling.

What you send when you ask something

Dictation

When you dictate, your speech is turned into text and sent to tidy up punctuation, along with the custom words you've taught it. We count the words for your plan's allowance.

What Cursorling remembers

Facts you tell it to remember, things it learns that help it help you, and notes from the short interview during setup. You can see and clear these in Settings.

Helpers (Clickys)

When you send a helper off on a task, we keep the task, its progress and its result so you can see them later. Helpers do their work on your Mac and ask before taking actions that matter.

Connected apps

If you connect apps like Gmail, Notion or Slack, the connection runs through our integrations provider. We send it only an internal ID for your account, never your name or email. Cursorling reads or acts in those apps only for tasks you ask for, and asks before it sends or changes anything.

Plans, payments and invites

We keep counts of your messages and dictation words so plan limits work. Payments are handled by Paddle, who acts as the seller; we receive your subscription status, plan and billing dates, never your card details. For Invite & earn we keep who invited whom and the credit earned.

What stays on your Mac

Your settings, shortcuts and on-device preferences stay on your Mac.

What we don't collect

No background screen recording, no keystroke logging, no advertising IDs and no tracking across other apps or websites.

3. How we use it

Where the law asks for a legal basis: we rely on performing our contract with you for the service itself, on our legitimate interests for security and improving reliability, on legal obligations for billing records, and on your consent where we ask for it.

4. Who we share it with

We don't sell personal data. We share it only with the providers that run parts of the service for us, under contracts that limit what they can do with it:

ProviderWhat forWhat they receive
OpenRouterSending your questions and your helpers' work to the AI model that answers, and memoryScreenshots, your words, conversation, document text, helper tasks
OpenAISome voices, and helpers when we use OpenAI directlyAnswer text to speak; helper tasks in that case
DeepgramSpeech to textMicrophone audio while you hold the key
ElevenLabsSpoken answersThe text Cursorling is about to say
GoogleSign-inThe sign-in request
PaddlePayments, taxes and invoices (seller of record)Your email, billing details and purchases
ComposioConnected appsAn internal account ID and the app actions you approve
SpotifyFinding music you ask forThe search words
Our hosting and database providersRunning our serversThe account data described above

Under their API terms, our AI providers (and the model makers OpenRouter passes your request to) don't use what we send them to train their models. They may keep it for a limited time, for example up to 30 days, to watch for abuse, and then delete it.

We may also share data if the law requires it, to protect people's safety, or as part of a merger or sale of our business, in which case this policy still applies to your data.

5. How long we keep it

6. Permissions on your Mac

macOS asks you to allow each of these, and you can turn them off in System Settings › Privacy & Security at any time:

7. Your choices and rights

Depending on where you live (for example the EU, UK or California), you have rights to access, correct, delete and port your data, to object to or restrict processing, and to withdraw consent. You can also complain to your local data protection authority. We don't sell or share personal data for cross-context advertising as those terms are used in California law.

8. Security

Data travels over encrypted connections, sign-in tokens are kept in your Mac's Keychain, and keys to outside services are encrypted on our servers. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

9. Children

Cursorling isn't for children under 13, or under 16 in the EEA and UK without a parent's consent. If you believe a child has given us data, email us and we'll delete it.

10. International transfers

Our providers may process data in the United States and other countries. Where the law requires it, we use safeguards such as the European Commission's Standard Contractual Clauses.

11. Changes

If we change this policy we'll update the date at the top, and for important changes we'll tell you in the app or by email before they take effect.

12. Contact

Questions about privacy: privacy@cursorling.si. Postal: Next Combinator, 213/10/C, West Agargaon, Dhaka, Bangladesh.