Security

Builds

• Every release is signed with an Apple Developer ID and notarised by Apple.
• Updates are fetched over HTTPS from adhdterminal.com and verified against an EdDSA key built into the app before they are installed. A build that does not verify is discarded.

Network

• The app talks to Anthropic through Claude Code, under your account, and to adhdterminal.com for the daily update check. Nothing else.
• The local hook server listens on 127.0.0.1 only and accepts connections from your own machine only.

Data

State lives in one file in your home folder. There is no cloud copy, no account and no telemetry.

Reporting a problem

Write to hello@adhdterminal.com with the subject Security. We acknowledge within two working days and keep you informed until the fix ships. Please give us a reasonable time to fix before publishing.