Privacy

Mycelium

The Mac app that finds dates in your messages.

What it reads

• iMessage — the Messages history already on your Mac (chat.db), read directly. That is why Mycelium asks for Full Disk Access, in System Settings › Privacy & Security › Full Disk Access. macOS has no smaller permission for Messages.
• Gmail, if you connect an account — message headers and bodies within a recent window, to find dates in them.
• Google Calendar and Tasks, if you connect an account — written to when you schedule something; the calendar access used cannot read your existing events.
• Telegram, if you sign in to it from Mycelium — your Mac talks to Telegram directly.
• A Canvas calendar feed, if you paste one in — the assignment due dates it publishes. It carries no login and no grades.
• Chat exports you drop in yourself (WhatsApp, Telegram, Instagram, Messenger).

What goes online

• A check for a new version, about once a day. It sends nothing about you.
• The accounts and feeds above, only once you connect them. Each talks to that service directly from your Mac.
• Add-ons you turn on may fetch the public web pages they track — for example, Acorn checks scholarship pages for changes and dead links.
• Phone access, if you switch it on (below).

Where it is kept

In files in ~/Library/Application Support/Mycelium, on your Mac. Sign-in tokens are kept in the macOS Keychain, not in those files. Nothing is pooled, sold, or used to train anything, and nothing is uploaded except the encrypted phone copy below, if you ask for it. There is no analytics, no telemetry, and no crash reporting.

The language model that reads uncertain items runs on your Mac. Message text is never sent to a model over the internet.

Phone access (optional)

Off until you switch it on under Phone in the app. When it is on, your Mac leaves a copy of your list — the items, their dates, the text they were found in, and a few months of your calendar — in a mailbox on this site, so your phone can show it and send back what you approve, dismiss or tick off, even while the Mac is off.

That copy is encrypted on your Mac (AES-256, signed with HMAC-SHA256) with a key that exists only on your Mac and in the link you open on your phone. The key sits after the # in that link, which browsers never send to any server, so the mailbox — stored with Upstash, through Vercel — holds only data it cannot read. The mailbox is named by a random code, not by your name or account. Changes from your phone are encrypted the same way, and your Mac refuses any it cannot verify.

Switching phone access off stops the copies. “New link” replaces the key and the mailbox, so an old link can neither read nor send anything. A mailbox nobody has touched for 60 days is deleted automatically.

Google user data

Mycelium’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Concretely: Google data is used only to show you your own dates inside the app on your own Mac, it is never transferred to anyone, it is never used for advertising, and no human ever reads it. If you switch on phone access, dates found in your mail can be part of the encrypted copy sent to your phone; that copy exists only to show you your own items there, and no one but you can decrypt it.

Removing it

Disconnect an account in the app to forget its token. Delete ~/Library/Application Support/Mycelium to remove everything Mycelium has stored. You can revoke Mycelium’s access to your Google account at any time at myaccount.google.com/permissions. If you used phone access, switch it off first; the encrypted mailbox it leaves behind is unreadable without your key and is deleted after 60 days untouched.

Lichen

The strip at the edge of your screen for Claude usage. Lichen is independent and not affiliated with Anthropic.

Lichen runs on your Mac and keeps what it shows there. It reads your plan usage from the Claude desktop app’s local cache, and your Claude Code sessions from their files under ~/.claude. It doesn’t send any of that anywhere, and nothing goes to Bryant.

Two add-ons, both off until you turn them on, do use the internet:

• Ask about your screen sends your question and a screenshot to Claude, through the Claude Code you installed and signed in to yourself.
• The meeting recorder sends the transcript to Claude and writes the notes into the Google Doc you choose.

What Claude does with those requests is covered by your own agreement with Anthropic, not by this page.

Web apps and InfathomReel

• The Trail and The Org System are demos. They are filled with sample data, and anything you change is kept in your own browser.
• Peppermint and Magic Tree need no account. Peppermint keeps your picks in your browser; if you open a room for phones to join, their votes pass through a live relay.
• InfathomReel works by Instagram message, so it needs an Instagram account. The Reel you send it is processed on its server so it can watch it and check it.

Contact

Questions about any of this: bryguy.vo@gmail.com.