This Privacy Policy explains how GearFive (“GearFive”, “we”, “us”), a product operated by Kelios LLC, collects, uses, and protects information when you use the GearFive macOS application, the control plane, and this website (together, the “Service”). GearFive provides AI coding-agent governance for managed Mac fleets — measuring spend, enforcing model and budget policy, and surfacing waste.
The core principle: GearFive is metadata-only and local-first. The contents of your prompts, model completions, files, and source code are processed on the device and never leave it. We sync usage metadata only — never the substance of what you or your agents write.
Information we collect
Account & organization data
When you or your organization sign up, we collect identifiers such as name, work email, company, and role. For organization deployments, an administrator provisions and manages accounts on behalf of the organization.
Device & identity data
To associate usage with a device without identifying a person, GearFive derives a stable device identifier from the device's hardware. This identifier is hashed (with domain separation) and re-derived on each run; the raw hardware identifier is never stored, logged, or transmitted. We also record the operating system version, application version, and whether the device is enrolled in mobile device management (MDM).
Usage metadata
GearFive parses AI coding-agent activity locally and uploads only a compact summary: model identifiers, token counts, estimated cost (at published list prices), session and event timestamps, and the name of the agent or tool. It does not collect or transmit prompt text, completion text, file contents, or source code.
Billing data
For paid organization plans, payment is handled by our third-party payment processor. We receive limited billing details (such as plan, status, and the last four digits of a card) but do not store full payment-card numbers.
Website & analytics data
This website uses Firebase / Google Analytics to understand aggregate traffic — pages viewed, referrer, and approximate device and browser information — using cookies and similar identifiers. See Cookies & analytics below.
How we use information
- To provide the Service — fleet cost visibility, policy enforcement, and waste analysis.
- To authenticate users and secure accounts and devices.
- To process billing for paid plans and prevent fraud.
- To provide support and respond to your requests.
- To improve and develop the Service using aggregated, non-identifying metadata.
- To comply with legal obligations and enforce our Terms.
Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract, our legitimate interests in operating and securing the Service, your consent (for example, analytics cookies), and compliance with legal obligations.
How we share information
We do not sell personal data. We share information only:
- With service providers who host and operate the Service on our behalf — including Google Cloud / Firebase and our payment processor — under contractual confidentiality and security obligations.
- With your organization. If GearFive is deployed by your organization, administrators can see fleet usage metadata and policy state for managed devices. They cannot see your prompts or source.
- For legal reasons — to comply with law, enforce our terms, or protect rights, safety, and security.
- In a business transfer — as part of a merger, acquisition, or sale of assets, subject to this Policy.
Data retention
We retain account and usage metadata for as long as your account is active and as needed to provide the Service, then for a limited period as required for legal, accounting, or security purposes. Aggregated, non-identifying data may be retained longer.
Security
We protect data in transit with TLS and apply least-privilege access controls. For details of our security architecture, see the Security page.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Because we do not sell personal data, there is nothing to opt out of in that respect. To exercise any right, contact us at privacy@gearfive.io. If GearFive was provided by your organization, please also contact your administrator, who is the controller of that data.
Cookies & analytics
Our website uses cookies and similar technologies for essential functionality and for analytics. You can control cookies through your browser settings and opt out of Google Analytics using Google's opt-out tools. The macOS application does not use advertising cookies.
Children
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children.
International transfers
GearFive is operated from the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses.
Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where required.
Contact
Kelios LLC — GearFive Privacy.
Email: privacy@gearfive.io