What leaves your Mac
The complete list of network requests the app can make, when each one happens, and what it carries.
Every request the app can make has a single reason, and they are all below. There is no analytics and no tracking. If a request is not on this page, the app does not make it.
The list
| Destination | When it happens | What it carries |
|---|---|---|
huggingface.co | You download a speech model, or the voice model for speaker names (about 22 MB) | The model file request, pinned to a revision; the download is checked by SHA-256 |
| Atlassian's sign-in page | Only when you sign in to Jira, in your browser | The sign-in, as any browser sign-in does |
mcp.atlassian.com | Only if you connect Jira | atlassianUserInfo and getAccessibleAtlassianResources at sign-in, then the Jira reads and writes you make |
<site>.atlassian.net | Only when the gateway names no browse address for the site | A GET /_edge/tenant_info check of up to four candidate hosts — three drawn from links, plus one guessed from the sign-in email address — until one answers with the granted cloud id |
ollama.com | You install the local model runtime or pull a model | The download or pull request |
ollama.com | Only with Allow Ollama cloud models on | The cloud model list (at most once a day, cached for 24 hours), and the inference request for the cloud model you chose |
| The summary server you chose, if it is off this Mac | Each summary job: summaries, action items, titles, follow-up emails, descriptions, the day summary | The meeting text and the prompt, and the API key if you gave one; see Summary servers |
privategoat.app | The app checks for updates, about once a day when automatic checks are on | The version you have, and the request's IP address |
| The GitHub release named in the appcast | An update is downloaded | The download request, and its IP address |
The Summary Setup window looks for servers on 127.0.0.1 only (ports 11434, 1234, 8080, 8000 and 1337), never on
other machines. 127.0.0.1:11434 — the local Ollama server, the default — is on the loopback interface: summaries, action descriptions,
to-do descriptions, follow-up emails, day digests and memory embeddings never leave the Mac there. See
Local models.
Apple's on-device speech assets are managed by macOS, not requested by PrivateGoat; the app makes no transcription request. Live Subtitles and the translating capture levels translate with Apple's on-device translator; a missing translation language is installed by macOS in System Settings, not downloaded by PrivateGoat.
What is never sent
- Meeting audio, in any feature, by any code path.
- Transcripts, summaries, notes, to-dos or memory notes — unless you send them to Jira yourself, share a
meeting through the team folder, or turn on Allow Ollama cloud models and pick a cloud model. Sending
an action to Jira puts its title, description and the quoted moment in an issue. Sharing copies the summary and transcript into the team folder you
chose; the folder's own sync service moves them, never the audio. With a cloud model chosen, the meeting text used for summaries, action items, titles, follow-up emails and
day summaries goes to
ollama.comwhen each is written — summaries after every meeting while automatic summarising is on, as it is by default. Memory notes never use a cloud model. Audio never does. - Your coding-agent chats, the words learned from them and your dictation corrections: they are read and kept on the Mac (see What stays on your Mac).
- Analytics, usage events, identifiers, or a system profile with the update check.
- Your Jira data to anyone but Atlassian.
Turning the optional requests off
| Request | How to stop it |
|---|---|
| Automatic update checks | Settings → General → Updates → Check for updates automatically off |
| Cloud model listing and inference | Settings → AI → Allow Ollama cloud models off (off by default) |
| A summary server off this Mac | Settings → AI → Change… → choose a server On this Mac (the default) |
| Atlassian requests | Sign Out of Jira… in the Jira surface, or never connect it |
| Model downloads | Do not download a model; a model already on the Mac is used as it is |
With automatic checks off, the app contacts the update site only when you choose Check for Updates…. With the cloud switch off, no cloud listing is requested and cloud models are not shown.
What each request sees
Atlassian sees your account sign-in, as it would in a browser. privategoat.app and the GitHub release see
the version and the IP address of the request, nothing about a meeting. ollama.com sees a model download
or the text of a cloud inference request — never audio.
Related
- What stays on your Mac — the local side of the same boundary.
- Updates — the update check in detail.
- Local models — the cloud switch and its default.