What stays on your computer
By default, everything about a project is on your computer: its files, the agent, the commands it runs, the preview, the checks, run history and memory.
Two things leave your computer because they must:
- Your requests and the code the agent reads go to the model provider you chose (OpenAI, Anthropic, or another), so the model can answer. That provider's terms apply. With a local model, they stay on your computer.
- A cloud project runs in Graspable cloud (sandboxes at our provider, E2B), or in your own cloud if you set one up. See Cloud Agents.
- Fast mode sends the step it speeds up (the file being edited, the lines a search reads, or the command output) to Graspable and our provider for that step, Morph. Graspable does not store it. Fast mode is off unless you turn it on. See Fast mode.
Graspable itself receives only what this page lists.
Run summaries
After each finished run, the app sends one anonymized summary to Graspable. This is on by default, and it is sent only while you are signed in to a Graspable account.
The summary contains:
- the engine, model and template,
- the version of Graspable's own instructions to the agent, and the text of those instructions (written by Graspable, the same for everyone),
- the outcome and duration,
- counts: events, tool calls, approvals, denials, repairs, memory items recalled and saved,
- whether the build passed first time,
- tokens and cost,
- System One decisions, as numbers and labels,
- the app version,
- if the team is testing a variant of the agent's instructions, which variant your run got. You can see that variant in the Context list of the run.
The summary is tied to a run key made by scrambling your account ID with the run ID, not to your name.
Ratings
Under every agent message there are copy, 👍 and 👎 buttons. A rating is something you choose to send.
A rating sends the rating itself with the same kind of anonymized details as a summary: engine, model, instruction version, and what the agent had done so far. With 👎 you can pick reasons and type a comment, which is sent too.
The agent's message and your request are sent only when you tick Include this response and my request.
If you are signed out or offline, the rating is saved and sent later. The app tells you which.
What is never sent
Run summaries never contain:
- your requests,
- your code or file contents,
- file names or paths,
- the commands or other details of what the agent did,
- your memory.
API keys and sign-ins are never sent to Graspable.
Turn it off
Open Settings → Help improve Graspable and untick Send anonymized run summaries.
With it off, no summaries are sent and your runs are not placed in instruction tests. Ratings are separate: they are sent only when you click 👍 or 👎.
Where keys and sign-ins are stored
| What | Where |
|---|---|
| API keys for model providers | Your system's keychain |
| Your Graspable account sign-in | Your system's keychain |
| System One and cloud provider keys | Your system's keychain |
| ChatGPT sign-in for the Graspable agent | A file in ~/.graspable/agent on your computer |
| Claude Code sign-in | Claude Code's own storage. Graspable never reads it |
| Codex CLI sign-in | The Codex CLI's own storage. Graspable never reads it |
| Tokens of your cloud agents | ~/.graspable/cloud.json, readable only by you |
A key is read from the keychain when a run starts and handed to the agent on your computer. For a cloud project, the key is sent with the run to your cloud agent over an encrypted connection and is not stored there.
Other connections the app makes
- Updates: the app checks for new versions when you ask in Settings → Updates.
- Model lists: the Graspable agent looks up a public catalog of models.
- Plans: Settings → Plan asks Graspable for the plan list and, when signed in, your plan.
- Headset sharing: when you choose Share on Wi-Fi, the preview is reachable on your local network until you stop. See Preview and headset.
- System One: if you add a provider, each judged action is sent to that provider. See Approvals and safety.