The short version: your data stays on your Mac. All of it.
Sendral reads Apple's local databases on your Mac — the Messages database (chat.db), Contacts, Calendar, Reminders, and Notes — and mirrors them into a local SQLite database, also on your Mac. That's how your AI gets fast, structured access to your stuff.
All of this happens on-device. Your messages, contacts, events, reminders, and notes are never uploaded, synced, or transmitted anywhere. There is no server-side copy because there is no server.
Exactly three kinds of network calls, ever:
Neither call includes any of your personal data — no message content, no contacts, nothing from your Apple databases.
Starting the free trial asks for your email address. It's stored with your trial record and used for two things: sending your license key if you buy, and letting you know that your trial is about to end and that it has ended. Those two notices are part of the trial you started, so they aren't something you opt out of — the trial simply finishes and they stop.
The checkbox beside it is separate and off by default: tick it and you'll also get occasional tips and product updates, which you can unsubscribe from at any time without affecting anything else. Leaving it unticked is the default and costs you nothing. Your email is never sold, and never shared beyond the service that delivers these messages.
Purchases are processed by Stripe. They handle your payment details and email address under their own privacy policy; I never see your card number. I see what any Stripe seller sees: the order and the email you bought with, which is used to send your license key and handle support.
Sendral serves data to whatever MCP client you connect (Claude Desktop, Claude Code, Cursor, etc.). What that client does with the data — including sending it to an AI model's API — is governed by that client and your agreement with its vendor, not by Sendral. Sendral itself sends nothing to anyone.
By default, Sendral pseudonymizes what your AI sees. Before a response leaves Sendral for an MCP client, phone numbers and email addresses are replaced with opaque tokens like [[P:3f9a7c]] — in contact records and inside message text. The token-to-number mapping lives only in Sendral's local database on your Mac; when your AI asks to send a message to a token, Sendral swaps the real number back in locally. The AI vendor never receives the actual identifier. An optional stricter mode also replaces contact names with tokens. Both switches are in Settings, and you can turn aliasing off entirely if you'd rather your assistant see real numbers.
Be clear about the limit: aliasing is pseudonymization, not anonymity. The text of your messages still goes to whatever AI you connect — it has to, or the AI couldn't summarize or reply — and message content can itself identify people ("hey, it's Mom"). What aliasing removes is the direct link between your conversations and real-world phone numbers, email addresses, and (in strict mode) names.
Email support@sendral.app. Solo developer — replies typically within 2 business days.