Version 1.0 · July 2026. Documents expected outbound Internet connections from the Continuo macOS app. Peer keyboard, mouse, clipboard, and file content use the authenticated local connection only, not these endpoints.
Summary
Continuo sends no telemetry and no keyboard, mouse, clipboard, or transferred-file content to an Internet service. Peer content stays on the authenticated local peer connection.
The app may still contact the endpoints below for distribution, licensing, and payments. Each entry lists domain, purpose, trigger, payload category, whether it can be disabled, and whether user input content is included.
Peer connection (local network)
Paired Mac on LAN (Bonjour-discovered)
- Purpose: Encrypted keyboard, mouse, clipboard, and file transfer between your Macs
- Trigger: Active session with a paired peer
- Payload: Peer application data (encrypted)
- Can disable? Yes: deny Local Network or unpair
- Input content? Yes. On your LAN only.
Internet endpoints
github.com / objects.githubusercontent.com
- Purpose: Mirror for release binaries and release metadata
- Trigger: Fallback when the primary download host is unavailable; manual download from GitHub
- Payload: Binary/metadata (version, checksums)
- Can disable? N/A (user-initiated or automatic fallback only)
- Input content? No
api.polar.sh (and related Polar hosts)
- Purpose: Payment checkout and licence portal in the browser only
- Trigger: Buying Pro on the website; managing billing in the portal
- Payload: Payment and account data (handled by Polar)
- Can disable? N/A for purchase (user-initiated in browser)
- Input content? No
- Note: The Continuo app does not call
api.polar.shdirectly. Licence validation and activation go through the Worker endpoints below.
usecontinuo.app /api/license/*
- Purpose: Validate, activate, restore, deactivate, and list Mac activations for a Pro licence (Worker proxy)
- Trigger: Entering or refreshing a licence in Settings; restore after OS reinstall; activate on a new Mac; deactivate to free a seat
- Payload: Licence key, device hash (Mac ID), device name, signed entitlement response
- Can disable? Yes: stay on Free tier
- Input content? No
usecontinuo.app /download/*
- Purpose: Download signed app binaries (website or browser initiated)
- Trigger: User clicks Download on the website, opens a release link, or uses Check Now (browser)
- Payload: Binary DMG (disk image containing the signed app)
- Can disable? N/A for manual download; automatic update checks can be turned off in Settings › About › Updates
- Input content? No
- Note: The server logs request metadata (version, referrer host, browser type, country) for aggregate download statistics. The Continuo app does not phone home for this.
usecontinuo.app /changelog/*
- Purpose: Release notes index and per-version changelog pages
- Trigger: User opens changelog links in a browser
- Payload: Static HTML or JSON/markdown API responses
- Can disable? N/A (user-initiated)
- Input content? No
usecontinuo.app /api/trial/*
- Purpose: Start and check the 14-day Pro trial
- Trigger: Every launch and every return to the foreground while no licence is stored, whether or not a trial was ever started
- Payload: Device hash (one-way), trial timestamps, signed trial token
- Can disable? No while unlicensed. Activating a licence replaces this call with the licence check below
- Input content? No
usecontinuo.app /api/pricing
- Purpose: Read the current Pro price so the in-app upgrade screen does not quote a stale figure
- Trigger: Opening the upgrade screen
- Payload: None. It is a plain GET with no identifier of any kind
- Can disable? Yes: do not open the upgrade screen
- Input content? No
usecontinuo.app /api/report
- Purpose: Send a crash, hang, or self-reported bug so it can be fixed
- Trigger: You press Send in the crash/hang prompt, choose “Report a Bug…” from the menu, or have set Diagnostics to “Always send” in Settings › General (the one case that sends with no per-crash prompt, because choosing that setting is itself the standing consent)
- Payload: The crash or hang text with device-stable identifiers and personal details removed (home paths, user name, Mac names, IP addresses, email addresses, licence keys), a matching window of Continuo’s own log redacted the same way, app version and build, macOS version, Mac model, locale, a random per-install ID, and anything you typed, including a reply email address if you chose to give one
- Can disable? Yes, for the automatic prompt: set Diagnostics to “Never”. A manual report can still be sent on request from “Report a Bug…”
- Input content? No
- Note: Reports are stored 90 days, then the body is deleted automatically. A small metadata index (build, OS version, crash signature, install ID, and similar fields, not the report body) may be kept longer for troubleshooting trends. Stored reports are readable only through an internal endpoint protected by a bearer token.
usecontinuo.app (documentation and support links)
- Purpose: Link to documentation and support from in-app help (planned)
- Trigger: User opens help links
- Payload: Static web pages
- Can disable? N/A (user-initiated)
- Input content? No
Not in scope for this manifest
- This marketing website (
usecontinuo.app) when you visit it in a browser. See the Privacy Policy. - Email when you contact support: only what you choose to send.
- Polar checkout in the browser when you buy Pro: payment data goes to Polar, not through the Continuo app.
Verification status
No telemetry endpoints
- Status: Documented intent; verify against release entitlements and traffic capture before launch
No input content on Internet endpoints
- Status: Documented intent; verify against release build
Update-check preference
- Status: Shipped. Settings › About › Updates toggle disables automatic checks; download and changelog pages live on
usecontinuo.app
In-app help links to usecontinuo.app
- Status: Planned
Changes
Continuo will update this manifest when endpoints change. Report discrepancies to hvu@usecontinuo.app or use Report a security issue in the site footer.