Canto
Tulip
opsty
subtank
SaferowMac apps that keep to themselves.
- Runs on your Mac
- No account needed
- Every app lists what it sends
Field notebook
Canto beta
notes · research · meetings
A private notebook that reads with you.
- Price
- Free on one MacPro from $29 once · 3 Macs $39
- Requires
- macOS 14 or later · Apple silicon
- Latest
- 1.0 beta 6 · Oct 17, 2026stable: 0.10.3
- What it sends
- The update check. Web search, cloud models, publishing and sync only when you use them; usage data only if you opt in.
Tulip beta
for the Music app
Nothing in your library changes until you say so.
- Price
- Free to browse and checkPro from $24 · 3 Macs $29 · 14-day trial
- Requires
- macOS 14 or later · Apple silicon
- Latest
- 2.0 beta 3 · Oct 11, 2026
- What it sends
- Only the lookups you allow, each named on its page.
opsty
a terminal for the Mac
The terminal you don’t have to watch.
- Price
- Free
- Requires
- macOS 13 or later · Apple silicon
- Latest
- 0.3.0 · Oct 5, 2026
- What it sends
- 0 requestsNothing: no network requests.
subtank
lives in the menu bar
See what’s left in every AI plan.
- Price
- Free
- Requires
- macOS 13 or later · Apple silicon and Intel
- Latest
- 0.0.9 · Oct 8, 2026
- What it sends
- Only the update check.The services you add are read only once you add them.
Saferow beta
MySQL · Postgres · SQLite
Answers with receipts. Changes with a lock.
- Price
- Free does the whole jobPro $9.99 once · coming soon
- Requires
- macOS 13 or later · Apple silicon
- Latest
- 0.2 beta 3 · Oct 20, 2026
- What it sends
- The update check, about once a day. A cloud model only if you choose one; with Pro, a license check about twice a week.No telemetry. Your connections, queries and rows stay on your Mac unless you choose a model in the cloud.
LONELYDUCK SOFTWAREWhat leaves your MacCanto 1.0 beta 6 · Oct 17, 2026
- Update check
- every 6 h
- Web search
- when you use it
- Cloud models
- when you use it
- Publishing
- when you use it
- Sync
- when you use it
- Usage data
- if you opt in
- Account needed
- 0
Every host, by name: the privacy page ›
LONELYDUCK SOFTWAREWhat leaves your MacTulip 2.0 beta 3 · Oct 11, 2026
- Lookups
- only those you allow
- Each host
- named on its page
- Your library
- stays on this Mac
- Account needed
- 0
Every host, by name: the privacy page ›
LONELYDUCK SOFTWAREWhat leaves your Macopsty 0.3.0 · Oct 5, 2026
- Network requests
- 0
- Telemetry
- none
- Account needed
- 0
Every host, by name: the privacy page ›
LONELYDUCK SOFTWAREWhat leaves your Macsubtank 0.0.9 · Oct 8, 2026
- Update check
- the only request to subtank
- Services you add
- only those
- Telemetry
- none
- Account needed
- 0
Every host, by name: the privacy page ›
LONELYDUCK SOFTWAREWhat leaves your MacSaferow 0.2 beta 3 · Oct 20, 2026
- Update check
- about once a day
- Model downloads
- only those you start
- Cloud models
- only one you choose
- License check
- Pro only
- Telemetry
- none
- Account needed
- 0
Every host, by name: the privacy page ›