Skip to main content
Screenpipe is local-first. Screen, audio, input, browser metadata, meeting transcripts, and connected-app context are stored on your machine unless you explicitly enable a cloud provider, team sync, or external integration.

​
Data flow

​
What leaves the machine?

​
Local storage

​
Changing your storage location

You can move Screenpipe data to a different drive or external storage:
  1. Quit Screenpipe completely — ensure the app is not running
  2. Copy ~/.screenpipe/ to your new location — e.g., /Volumes/MyDrive/.screenpipe/
  3. Set the environment variable SCREENPIPE_DATA_DIR=/Volumes/MyDrive/.screenpipe before starting Screenpipe
  4. Restart Screenpipe — the app will now use the new location
Note: if scheduled tasks still read or write to the default location after changing settings, ensure:
  • Screenpipe itself (the main app) was fully restarted after the change
  • Any CLI or scheduled processes use the same SCREENPIPE_DATA_DIR value
  • If using the desktop app, the settings change is saved and the app was restarted
For backups, quit Screenpipe before copying ~/.screenpipe/, keep the backup encrypted, and test that it can be restored. Do not use a slow or unreliable network drive as the live database path.

​
Privacy controls

​
PII removal modes

The safest setup is local capture, local search, local Ollama, and cloud media analysis off. The most capable setup can include cloud AI, connected apps, team sync, and team sharing.

​
Browser session inheritance

The embedded agent browser can optionally inherit login state from supported real browsers. This is opt-in and uses one-time Keychain consent per browser source. Use it when:
  • An agent browser needs authenticated pages
  • You want Screenpipe to avoid repeated manual sign-in
  • You trust the local machine and the agent task
Turn it off or decline the prompt when:
  • The page contains financial, health, or sensitive personal data
  • You do not want agent workflows to access logged-in sessions
  • You are on a shared device

​
Agent and scheduled task security

Local agents and scheduled tasks can access the Screenpipe context exposed by their tools. Depending on their runtime and permissions, they may also read files, control input, or act in connected apps. Review those capabilities separately from Screenpipe API permissions. Secrets visible in captured content may be accessible to the agent. Secure your setup:
  • Exclude sensitive windows — add your password manager, banking site, or cloud console to settings → recording → ignored windows. Test the rule with harmless content; existing recordings and other data sources need separate review.
  • Use connection proxies — instead of pasting API keys into prompts, create a Screenpipe connection so tokens are managed securely.
  • Trust only official scheduled tasks — use scheduled tasks from the official task library or audit custom scheduled tasks before installing.
  • Scope tasks narrowly — a scheduled task searching only “the last meeting” is lower-risk than one searching “all screen text.”
  • Review logs — use screenpipe pipe logs <name> to see what data a scheduled task accessed.
If uncomfortable with agents accessing your screen data, disable the embedded agent browser and use CLI or API only.

​
Teams and admins

Team sharing is encrypted client-side. The server stores membership and encrypted blobs, but not the team encryption key. Invite links contain the key, so share them through a trusted channel and treat them as sensitive. Admins should document:
  • Whether cloud AI is allowed
  • Which models and presets employees can use
  • Which integrations are approved
  • Retention policy
  • Whether LAN API access is allowed
  • How support logs are collected

​
Irreversible actions

Before deleting data:
  1. Confirm the time range or device ID.
  2. Make a reviewed backup of anything needed.
  3. Run the delete action.
  4. Verify the timeline and /search no longer return that range.