Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.screenpi.pe/llms.txt

Use this file to discover all available pages before exploring further.

screenpipe is local-first. screen, audio, input, browser metadata, meeting transcripts, and connected-app context are stored on your machine unless you explicitly enable a cloud provider, sync/archive path, or external integration.

data flow

what leaves the machine?

featureleaves your machine by default?when data leaves
screen and audio capturenonever unless another feature sends selected context
local search and timelinenolocal only
MCP servernolocal assistant can read data; remote MCP over HTTP is your responsibility
chat with local Ollamanolocal only
chat with cloud AIyesselected context is sent to that AI provider
pipes with cloud modelsyespipe context is sent to the selected model
connected app proxyyesrequests go to the connected third-party API
cloud media analysisyes, if enabledmedia snippets can be sent to the configured enclave/provider
PII filter enclaveyes, for enclave modetext is processed in the confidential enclave
cloud archive or remote syncyes, if enabledencrypted data is uploaded or synced to your target
feedback/log bundleonly when you send itdiagnostic logs you submit for support

local storage

datadefault location
screenpipe data~/.screenpipe/
recorded media~/.screenpipe/data/
connectionssecure store first, legacy ~/.screenpipe/connections.json fallback
app settingsapp store plus local config files
e2e test dataisolated .e2e/ directory in the app repo

privacy controls

controlwhere
pause or stop captureapp controls and settings
included/excluded windowssettings -> recording
microphone and system audiosettings -> recording
clipboard capturesettings -> recording or CLI flag
API authsettings -> privacy -> API security
LAN accesssettings -> privacy
cloud media analysissettings -> privacy
AI PII removalsettings -> privacy
retention and delete rangesettings -> storage or data APIs
archivecloud archive settings
team sharingsettings -> team

PII removal modes

modewhat happens
local text modeltext is redacted locally before selected AI workflows use it
local image modelscreenshots can be redacted locally when image PII is enabled
enclave modetext is sent to a confidential enclave designed not to persist data
cloud media toggle offcloud audio, video, and image analysis is blocked
the safest setup is local capture, local search, local Ollama, and cloud media analysis off. the most capable setup can include cloud AI, connected apps, archive, sync, and team sharing.

browser session inheritance

the embedded agent browser can optionally inherit login state from supported real browsers. this is opt-in and uses one-time Keychain consent per browser source. use it when:
  • an agent browser needs authenticated pages
  • you want screenpipe to avoid repeated manual sign-in
  • you trust the local machine and the agent task
turn it off or decline the prompt when:
  • the page contains financial, health, or sensitive personal data
  • you do not want agent workflows to access logged-in sessions
  • you are on a shared device

teams and admins

team sharing is encrypted client-side. the server stores membership and encrypted blobs, but not the team encryption key. invite links contain the key, so share them through a trusted channel and treat them as sensitive. admins should document:
  • whether cloud AI is allowed
  • which models and presets employees can use
  • which integrations are approved
  • retention policy
  • whether LAN API access is allowed
  • how support logs are collected

irreversible actions

before deleting data:
  1. confirm the time range or device ID.
  2. export or archive anything needed.
  3. run the delete action.
  4. verify the timeline and /search no longer return that range.