Cohort Insights
Privacy

Privacy Policy

Cohort Insights is a native macOS app that talks directly to Google Analytics on your behalf. We've designed it so that your data never touches our servers — because we don't have any.

Last updated May 21, 2026

The short version

  • No tracking. We do not collect usage analytics, crash reports, or telemetry from the app.
  • No servers. Cohort Insights connects directly from your Mac to Google's APIs. We never see your Google Analytics data.
  • Your credentials stay on your Mac. OAuth tokens are stored in the macOS Keychain.
  • No sharing or selling. We have nothing to share, sell, or hand over.
Plain-English summary. Sign in to Google in the app. Your tokens stay in the Keychain. The app fetches your GA4 data from Google directly. Nothing leaves your machine except those Google API requests.

1. Who we are

"Cohort Insights," "we," "us," and "our" refer to the makers of the Cohort Insights macOS application. If you have questions about this policy, you can reach us at privacy@cohortinsights.com.

2. What information the app handles

Cohort Insights handles two kinds of information, both of which stay on your Mac:

  • Google OAuth tokens. When you sign in, Google issues an access token and refresh token. The app stores these in the macOS Keychain (accessible only by Cohort Insights and its widget extension under your user account). We never see or receive these tokens.
  • Google Analytics data. The app sends authenticated requests directly to Google's Analytics Data API and Admin API. The responses (reports, property lists, etc.) are rendered on your machine and cached locally in a private app-group container so the desktop widget can read them between refreshes. We do not transmit, mirror, or store this data on any infrastructure of ours.

3. What we collect

Nothing. Cohort Insights does not include any analytics, crash-reporting, attribution, or telemetry SDKs. There is no network connection from the app to us. We do not run servers that the app contacts, and we have no way to identify or track individual users of the app.

4. Permissions the app uses

  • Outgoing network access — to reach analyticsdata.googleapis.com and analyticsadmin.googleapis.com, and to complete Google's OAuth flow.
  • Keychain access — to store and read your Google OAuth tokens.
  • App Group container — a private on-disk area shared between the main app and the widget extension. Cached GA4 report responses live here so the widget can render without re-hitting the API.

5. Google Analytics

Cohort Insights is a third-party client for Google Analytics 4. Your use of Google Analytics is governed by Google's own terms and privacy policy. The Google data you see in the app is fetched under your own Google account; the same data is available to you in the Google Analytics web UI. We are not affiliated with Google.

6. Cookies and trackers on this website

This website (cohortinsights.com) is a static marketing site. It does not set cookies, run analytics scripts, or embed third-party trackers. Standard web-server access logs may be retained by our hosting provider for security and abuse prevention; those logs are not used for analytics or advertising.

7. Children

The app is not directed to children under 13, and we do not knowingly collect personal information from anyone — including children — because we do not collect personal information at all.

8. Changes to this policy

If we make material changes to how the app handles data, we'll update this page and bump the "Last updated" date at the top. For substantive changes, we'll also note the change in the app's release notes.

9. Contact

Questions or concerns? Email privacy@cohortinsights.com.