The Foyer Pledge

Foyer is a menu‑bar manager. It runs on your Mac, and it's built so your Mac is the only computer that ever knows how you use it. This is a promise about that — written plainly enough that you can check every line. It ships inside every notarized release of Foyer.

What Foyer never does

No telemetry. No usage data, no events, no "anonymous statistics." There's nothing to opt out of because there's nothing being collected.
No analytics or tracking SDKs — ever. No Amplitude, Google Analytics, Firebase, phone‑home crash reporters, ad or attribution frameworks. Not disabled by default — not in the binary at all. This is the one promise we will never walk back.
No account, no sign‑in, no cloud. Your layout, rules, and settings live in a file on your Mac and are never uploaded.
No selling or sharing of data — because there's no data to sell or share.

Every network connection Foyer makes

Exactly twice, both to our own domain, both disclosed and both switch‑off‑able:

Update check — Foyer asks foyer.nyrai.ai whether a newer version exists, sending only your current version. Turn it off in Settings ▸ General.
License check — on activation, Foyer sends your license key and an anonymous machine fingerprint to our self‑hosted server at foyer.nyrai.ai (no third‑party licensing service). The fingerprint only enforces the 2‑Mac household limit and isn't tied to your name, email, or serial in any readable form. Afterward Foyer works offline, re‑checking occasionally with a 30‑day offline grace.

That's the complete list. There is no third connection.

How to verify this yourself

Run Foyer behind Little Snitch, LuLu, or tcpdump — you'll see foyer.nyrai.ai and nothing else.
Foyer ships notarized by Apple with the hardened runtime, so the binary you run is the one we signed.
The trust page publishes this same list and a Little Snitch capture with each release.

If anything ever changes

Ownership. If Foyer is ever sold or transferred, we'll publish notice on this site at least 30 days before it takes effect.
Telemetry. If we ever intend to add any data collection, we'll publish notice at least 30 days before it ships — and the version you already installed will never gain telemetry retroactively. A pledge that could be rewritten silently would be worth nothing, so the promise is tied to a public, dated notice.

What this pledge does not cover

This is a privacy‑and‑ownership promise, not a price promise. We may run sales, offer discounts, or change what Foyer costs — and we deliberately make no commitment about price here, because a "we'll never change the price" clause would forbid ordinary things like a launch discount and turn every normal sale into a broken promise. What we're promising is about your data and who owns Foyer, not what's in your wallet.

Signed on behalf of Foyer
NYRAI LLC · [email protected] · foyer.nyrai.ai
— nagabs