Privacy
Last updated May 2026
We built Procestra to respect the way you work. This page tells you exactly what each app does with your data. Plain English, not legalese.
What stays on your machine
Everything. All three Procestra apps are local-first. We do not have servers that store your work. There is no Procestra account. There is no syncing through us. There is no analytics service we send information to.
When you write a seed in Seed, arrange a board in Espalier, or save a file inside a Provenance-tracked project, those actions touch files on your Mac and nothing else.
Cloud-synced files
If you keep your project folders in iCloud Drive, Google Drive, Dropbox, or another file-syncing service, Procestra treats them like any other local file. The cloud service does its own syncing; we don't know about it.
If a document lives only in a browser (a Google Doc you only edit on the web, for instance), Provenance cannot track it. There is no local file for us to watch.
What Provenance specifically records
Provenance is the most data-rich app in the suite. Here's exactly what it logs, in your project's local .ledger folder:
- File saves: when a tracked file changes, Provenance records a timestamp and a git snapshot.
- Check-ins: short reflections you type into the app yourself.
- Sources: URLs, files, or passages you choose to log as references.
- Artifacts: supporting material you explicitly add.
Everything in the ledger is something you saved, wrote, or chose to add. Nothing is captured in the background.
What Provenance does not record
- Keystrokes: Provenance does not record what you type or how fast. There is no keystroke log anywhere.
- Screen activity: no screenshots, no screen recording, no window-focus tracking.
- Webcam or microphone: never accessed.
- Pastes or clipboard: Provenance does not monitor what you copy or paste. There is no paste tracking and no clipboard watching anywhere in the app.
- Browsing history: Provenance does not look at your browser or anything you do outside the files you've chosen to track.
The hash-chained ledger
Provenance's event log is hash-chained. Each event includes a SHA-256 hash derived from the previous event. If anyone modifies the log retroactively (including you), the chain breaks visibly. That is a feature for you: it lets you prove your own process honestly. It is not a system Procestra monitors or sees.
You can verify the chain yourself. The documentation explains how.
What this website does
This website (procestra.app):
- Doesn't use analytics services like Google Analytics or Plausible. We don't track visits.
- Doesn't set cookies for tracking.
- Doesn't include third-party ad or marketing scripts.
- If you submit a form here (for example, to get notified about an app), we store the email address you enter in a flat list, and use it only to email you about Procestra. We will not share or sell it. You can ask us to remove your address at any time.
This site is hosted on Netlify. Form submissions are processed by Netlify; their privacy policy applies to that data.
If anything here changes
We'll update this page and the date above. We won't change the substance of the privacy promise without a clear note explaining what changed.
Questions: hello@procestra.app