How GhostReply Handles Your Data

The short version

GhostReply needs access to private information to do its job. It reads the Messages database on your Mac so it can understand a conversation and learn how you write. The app keeps its configuration, reply profile, and usage statistics in your home folder. When it needs an AI answer, it sends relevant conversation material from your Mac to Groq under your own Groq account and API key.

GhostReply also uses network services for the free trial, license checks, software delivery, checkout, and basic product analytics. Those services receive identifiers and event information, but GhostReply does not send them your iMessage text. This page separates those data paths so you can decide whether the tradeoff works for you.

Information that stays on your Mac

With Full Disk Access, the terminal app running GhostReply can read the local Messages database. GhostReply uses that access to load recent one-to-one conversation history, identify new incoming messages, and build examples of your writing style. It may also use local Contacts data to replace phone numbers or email handles with names. Group chats are not a supported auto-reply target.

The main GhostReply folder is ~/.ghostreply. It contains the downloaded app plus local files such as config.json, profile.json, and stats.json. These files can include the Groq API key, license or trial state, preferences, a learned writing profile, contact examples, and reply counts. Sensitive configuration fields are obfuscated and tied to the Mac, but you should not treat that as a substitute for securing your macOS account and backups.

Anyone or any software with sufficient access to your Mac account may be able to inspect local files. Use a strong Mac password, keep the system current, and do not share your user account with people who should not see this information.

Information sent directly to Groq

GhostReply uses Groq for cloud AI inference. Depending on the feature and reply mode, the request can contain selected conversation samples, recent messages, the message that needs a reply, local style or life-profile instructions, and instructions for the chosen tone. The request goes from the GhostReply app on your Mac to the Groq API using the API key you supplied. GhostReply's backend does not proxy or receive that message content.

This means GhostReply is not a completely offline or on-device AI product. Groq controls how its service processes and retains API data. Review Groq's current data documentation and your Groq Data Controls before using GhostReply. Groq can change its service and policies, so its own documentation is the current source of truth.

GhostReply license, trial, and event data

GhostReply's backend handles license activation and the 10-reply trial. Those requests can include a machine identifier, trial token and reply count, app version, license key for validation, activation status, and error information. The backend may store a shortened hash of a license key, the machine identifier, validation results, version, timestamps, and non-content product events. It does not need the text of the messages you send or receive.

The app and backend may send product analytics to PostHog. Examples include the app version, trial status, reply mode, discovery source, whether a reply was sent, and whether a license was activated. If you give GhostReply an optional email or buy a license, the email associated with that flow may also be attached to analytics. Reply event analytics do not include the reply text, incoming message text, or contact name.

On the website, GhostReply creates a random source identifier in local browser storage. Page and checkout events can include that source ID, the current and first landing page, referrer, UTM campaign values, page name, and the button used. This helps connect a visit with an installation or purchase without adding message content.

Services involved

• Groq receives AI inputs and returns generated replies under your Groq account.
• LemonSqueezy handles checkout, payment, customer, receipt, and license records.
• PostHog may receive the non-content product and website analytics described above.
• GitHub hosts the installer and app updates that GhostReply downloads.
• GhostReply's backend handles trial state, license validation, and non-content events.

Each provider has its own terms, security practices, and retention rules. GhostReply cannot promise how a third party will handle data beyond the controls and agreements that provider offers.

Retention, removal, and support

GhostReply does not publish a fixed deletion schedule for backend license, trial, or analytics records. Provider records follow each provider's policies and legal obligations. Running ghostreply --uninstall removes the main local GhostReply folder and shell alias, but it does not erase provider records, macOS logs or backups, or every trial-related system record.

For a privacy question, email support@ghostreply.lol. Do not include message contents, a Groq API key, a license key, or an unredacted screenshot. Explain the issue in general terms and include only the minimum account or purchase information needed to find the relevant record.