Privacy Policy

Last updated: September 24, 2026 · Continuum is published by Montauk Analytics Inc.

1. Who we are & what Continuum does

Continuum (“the app”, “we”, “us”) is a native console for AI coding agents. It runs on your Mac, iPhone, and Apple Watch, and lets you start and control AI coding sessions and chats. The iPhone and Watch apps connect to a companion process running on your own Mac over a private network (Tailscale); your Mac runs the AI command-line tools you have installed and authenticated.

2. Data sent to AI providers

To generate responses, Continuum transmits the content you choose to send - your messages and prompts, and the contents of any files you attach or reference - to the AI provider you select for that session or chat. Local-provider sessions route this content through your paired computer. If you choose Continuum-hosted inference, the content passes through Continuum's cloud service to the provider used for that request. Providers include:

• Anthropic (Claude) - privacy policy
• OpenAI (Codex / ChatGPT) - privacy policy
• Cursor (Anysphere) - privacy policy
• xAI (Grok) - privacy policy
• Google (Gemini / Antigravity) - privacy policy
• OpenCode - opencode.ai

Each provider processes the content under its own privacy policy and terms. Depending on the session, the provider account may be one you configured or one used by Continuum's hosted inference service. We encourage you to review the policies linked above. Continuum does not control how those providers use content sent to them.

Your consent. Before you can send anything to an AI provider, Continuum shows you a one-time disclosure describing what is sent and to whom, and asks you to agree. You choose which providers to enable, and you can stop using any provider at any time.

3. Data processed by Continuum services

• Account and subscription data - your sign-in identity, account membership, plan, entitlements, and payment references. Authentication is provided through WorkOS and payments through Stripe.
• Sign-in sessions - for each browser or desktop-app sign-in, Continuum records when it started and was last used, whether it is the web or desktop app, a browser and operating-system label (for example "Chrome on macOS"), and an approximate country and region derived from the connection by our network provider. The full browser user-agent string and your IP address are not stored with the session. You can review these sessions and sign them out in Settings > Security; each one expires after 30 days, and your organization's administrators can see and sign out the sessions for their organization.
• Device and relay data - records needed to pair your devices, route encrypted traffic, deliver notifications, and operate optional cloud sessions.
• Shared transcripts - Share sends the transcript items shown in its approval flow to Continuum, which stores an immutable, redacted snapshot and serves the link until it expires or is deleted.
• Hosted inference content - when you select hosted inference, Continuum's service processes the prompt and selected context needed to deliver that request to the AI provider.
• Organization usage data - organization features can upload usage records when an authorized user or administrator enables that workflow.
• Synced session transcripts - when workspace sync is enabled for an organization, the complete session records your devices publish are stored by Continuum so they can be read back on your other devices. The durable copy can include prompts, responses, model reasoning records, commands, tool inputs, model and effort settings, and the provider account identifier. It is available only to specifically authorized Continuum archive operators for audited quality analysis and possible future model-training preparation; it is not available to ordinary staff administrators. Continuum does not use this archive for model training without a separate documented legal and consent basis. The copy is encrypted at rest, is not removed when a member leaves the organization, and is deleted when the organization itself is deleted.
• Analytics and site operations - the public website and signed-in products use PostHog, Mixpanel, and Google Analytics; the marketing site also uses Better Stack monitoring and Google sign-in/marketing services. Product telemetry can be disabled with the available privacy control.

4. Google user data (Outbound)

Outbound is Continuum's CRM and email outreach workspace. If you connect a Google account to it, Continuum asks Google for these permissions and uses each one only for the features listed:

• Read your Gmail messages (gmail.readonly) - to sync your mailbox into the Outbound inbox, link each conversation to the matching account and contact, detect replies and bounces to your outreach, and let the Outbound assistant search and read your synced email when you use it.
• Send email as you (gmail.send) - to send the emails you write in Outbound, and the sequence steps you set up, from your own address.
• Read your Google contacts (contacts.readonly) - to import your contacts into Outbound as people and accounts.

Outbound can archive or unarchive threads you choose in Gmail using gmail.modify. It only removes or adds the INBOX label. It never deletes or trashes Gmail messages, or changes any other Gmail label. This applies to accounts you connect and mailboxes connected by your Google Workspace administrator through domain-wide delegation. Existing connections without this permission archive only in Outbound until you reconnect.

What we store. For each synced message, Continuum stores the sender, recipients, subject, date, headers, and the text of the message body. It does not store file attachments. By default Outbound syncs the last 180 days of email, and you can change that range for each mailbox. Synced messages and imported contacts are stored in your organization's Outbound workspace and in its searchable knowledge base, where members of your Continuum organization can see them according to the mailbox's sharing settings (a private mailbox is visible only to the member who connected it). The long-lived credential Google issues (the refresh token) is encrypted before it is stored, and short-lived access tokens are kept only in memory.

AI features. When you use the Outbound assistant, for example to ask about a conversation or draft a reply, it can search and read synced email you have access to, and the relevant message content is sent to the AI model provider serving that request, only to produce the answer or draft you asked for. Outbound's AI features, including the assistant, drafting, research, and reply classification, are processed only by xAI (Grok). Gmail data and other Outbound mail and customer data are never sent to Meta (Muse Spark), DeepSeek, OpenRouter, or any free AI model. If xAI is unavailable, the Outbound AI request fails rather than being sent to a different provider.

Limited Use. Continuum's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing Outbound features described above.
• We do not sell it, and we do not use or transfer it for advertising, including retargeting and personalized or interest-based ads.
• We do not use it to develop, improve, or train generalized AI or machine-learning models, and we do not transfer it to anyone for that purpose.
• We do not use it to determine credit-worthiness or for lending purposes.
• We transfer it only as needed to provide those features (to xAI, the only AI model provider for Outbound, and the infrastructure that hosts Continuum), for security purposes, to comply with the law, or as part of a merger, acquisition, or sale of assets, with notice to you.
• No person at Continuum reads it unless you give us permission for specific messages, it is needed to investigate security issues or abuse, or the law requires it.

Disconnecting and deletion. You can disconnect or delete a mailbox in Outbound at any time. Either way, Continuum asks Google to revoke the grant, deletes its stored credential for that mailbox, and stops syncing. You can also remove Continuum's access from your Google Account permissions. Email and contacts that have already synced stay in your organization's workspace until they are deleted. To have them deleted, email support@continuumcode.ai.

5. Data processed only on your own devices by default

Except when you choose an optional service described above, the following stays on your devices and paired computer:

• Chat & session history - stored locally on your Mac and the device you're using.
• Usage & cost history - the $/token figures are computed locally from the log files the AI command-line tools write on your Mac, unless you use an enabled organization-upload feature.
• Pairing tokens - used to securely connect your iPhone/Watch to your Mac; stored in the Apple Keychain.
• Settings & preferences - stored locally / in your private iCloud where applicable.

6. What we do not do

• We do not sell or rent your personal data.
• We do not show in-product advertising.
• We do not upload local session history or files unless you choose a feature that needs that content, such as an AI request, hosted inference, Share, or an enabled organization workflow.
• Continuum's local mode does not require a Continuum account.

7. Security

Connections between your devices and your Mac use the Tailscale private network with a bearer token held in the Keychain. Communication with AI providers uses standard encrypted transport (HTTPS/TLS) as implemented by each provider's tools.

8. Children

Continuum is a developer tool and is not directed to children. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction).

9. Your choices

You decide which AI providers and optional cloud features to use and what to send. You can avoid hosted inference and Share, disable product telemetry with the available privacy control, delete local chats and sessions on your devices, and manage data held by an AI provider directly through that provider. See Delete your account for deletion of account-linked Continuum service data. Account and hosted-service use is also covered by the Continuum Terms of Use.

10. Changes to this policy

If we make material changes, we will update this page and revise the “Last updated” date above.

11. Contact

Questions about this policy? Email accounts@montaukanalytics.xyz.