Privacy policy.

This policy explains what Tomato, a free web browser for the Mac, keeps on your Mac, what leaves it and when, and how you stay in control. Last updated 1 October 2026.

The short version

  • Tomato keeps your browsing on your Mac.
  • Nothing leaves your Mac unless you do something that needs it, or you switch it on.
  • Tomato never sells your data, shows you adverts or follows you across websites.
  • You can see, export and delete everything Tomato keeps, from My data.

What stays on your Mac

  • Your tabs, history and downloads list. History is kept for a year unless you choose 3 months or forever in Settings.
  • Insights, trends, reading progress and suggestions. They are worked out on your Mac from your own browsing.
  • Saved passwords and addresses. They are kept in your Mac's Keychain. Showing a password needs Touch ID or your Mac password.
  • Keys for Claude, ChatGPT and Google, also in your Mac's Keychain.
  • What you ask the assistant while it uses the model on your Mac, and the pages it reads for you.
  • The agent's records: the sites you allowed it to act on, and the steps it took.
  • Your voice. Dictation, voice commands and reading aloud all run on your Mac, and the sound is never saved.

What leaves your Mac, and when

  • Websites you visit. Like any browser, Tomato connects to the sites you open and sends them what they ask for, such as cookies. What you type in the address bar goes to your search engine only when you press Return.
  • Your account, only if you sign in. Your name, email address, picture, bookmarks, search engine and homepage are kept in your Tomato account so your other Macs match. Accounts are stored with Supabase. History does not sync in this beta.
  • Cloud models, only if you choose one. If you choose Claude or ChatGPT with your own key, your question and the tabs, selection or text you point the assistant at go to Anthropic or OpenAI. Your history, insights or calendar go too only if you switched that kind of data on in Settings, and all three start off. Even then, they go only as a short list of facts that you see, and can change or remove, before anything is sent. Those companies' own privacy policies cover what they receive.
  • Crash reports, only if you say yes. A report holds program names and positions, the Tomato version, the macOS version and the kind of chip. It never holds your pages, what you typed or your files. Tomato asks after each crash unless you chose Always send.
  • Usage counts, only if you turn them on. Anonymous counts of which features are used, with a random number that changes every 90 days. They never include addresses, searches, page text, task titles, calendar details, email or note text, or file names, and nothing ties them to your account. Settings shows what is waiting to be sent.
  • Google, only if you connect it. Google Calendar and Google Drive talk straight to Google from your Mac. Tomato asks only for your calendars and for Drive files you pick. Nothing passes through Tomato's servers.
  • Apple, when you use tasks or scheduling. Tasks go to a list called Tomato in Apple Reminders, and times you accept go to your calendar. If you use iCloud, Apple keeps them in step under its own policy.
  • Gmail and Google Keep. The agent works in these websites only after you allow it, just as you would by hand.
  • What Tomato itself needs. Once a day Tomato checks for an update, sending only its version number. It downloads lists of dangerous sites and checks addresses against them on your Mac, so no address you visit is sent to be checked. When you turn on the assistant, Tomato downloads its model files once from Hugging Face, with the page check's model on Macs that can run it, and nothing about you attached.

What Tomato never does

  • It never sells or rents your data.
  • It shows no adverts and builds no profile of you for advertising.
  • It never sends your history, the pages you read or your visits to Tomato's servers in readable form.
  • It fills a saved password only on the exact site it was saved for, after you click the field, and never shows one of your keys to a web page.
  • The agent never pretends to be a person or another browser when it visits a site.

The assistant and the agent

  • The assistant and agent are off until you turn them on.
  • Once on, the agent reads the tabs you point it at.
  • Before it clicks, types or fills anything on a site where you are signed in, it asks you.
  • It always stops and shows you exactly what it will do before it signs in, buys or pays, sends a message, deletes something, changes an account, or likes, follows or comments, even on a site you allowed.
  • Text on a web page cannot change your request, your permissions or your settings.
  • The agent cannot open Tomato's own screens or files on your Mac, and cannot run programs.

Your choices

  • See and delete. My data, in the Tomato menu, lists every kind of data Tomato keeps, on your Mac and in your account, and deletes any of it.
  • Export. My data saves a copy of everything in one file.
  • Delete your account. Account has Delete account, which removes your account and what it holds.
  • Turn things off. Settings turns off usage counts, counting your time online, suggestions from your reading and each Google service. Removing a cloud key stops anything going to that company.
  • Private windows keep no history, no downloads list and no insights. In this beta they still share cookies and site data with normal windows.

Where the website and updates come from

Tomato's website and update information are hosted by Vercel, and the installers by Cloudflare.

The website uses Google Analytics to count visits, and it asks you first. Nothing is stored in your browser until you choose Accept, and choosing Reject loads it not at all, then or on any later visit. Your choice is remembered in your own browser. The site loads nothing else from anyone else.

There is no session recording anywhere: nothing watches or replays what you do on the site or in Tomato. Tomato in fact blocks the companies that sell session recording, along with other trackers.

Registering for the beta

If you give your email address on Tomato's website to register for the beta, that address is stored

so we can send you one invitation when a place is free. Nothing else is stored with it beyond the

date you registered.

  • It is never sold, never shared, and never used for anything but that invitation.
  • It is not part of My data in the app, because it is not tied to a Tomato account. Write to

tomato@v-ai.org and your address is removed.

  • Every address is deleted once Tomato is publicly released, or sooner if you ask.

Children

Tomato is not for children under 13, and a Tomato account cannot be made without confirming you are

13 or older. The beta registration form asks the same. If you believe a child under 13 has given us

an address or made an account, write to tomato@v-ai.org and it will be removed.

Changes to this policy

When this policy changes, the new version comes with the next Tomato update and appears on the website, with a new date at the top.

Contact

Questions about your data, or a request to see, export or delete it: tomato@v-ai.org.