It acts in your name. Here is the deal.

1The short version

• EyeSpeak is a voice-driven assistant that acts on your Mac: it moves the pointer, presses keys, clicks controls, edits documents, runs a fixed set of file commands, and calls services you have connected. Because it acts in your name, on your machine, with your permissions, you are responsible for what it does — the same way you would be if you had done it yourself.
• EyeSpeak is in closed beta. It is free, invitation-only, rate-limited, incomplete, and will change. It may be suspended or ended at any time.
• The assistant relies on speech recognition and AI models that make mistakes. Released builds always ask before an irreversible step, and rm goes to the Trash, but no safeguard is perfect. Supervise it, keep backups, and do not use it where a wrong action could hurt someone or cost you money you cannot recover.
• You get a personal, revocable licence to use the App. Do not share your account, invitation or download link; do not try to get around the gateway or your allowance; do not use EyeSpeak to break the law or the terms of a service it connects to.
• Your documents, your data and what you create with EyeSpeak stay yours.
• We provide EyeSpeak as is, and our liability to you is limited as set out in §17. Nothing in these Terms removes rights you have as a consumer that the law does not let us exclude.

2Definitions

3Who may use EyeSpeak

• You must be at least 13 years old (or 16 where that is the age of digital consent in your country). EyeSpeak is not directed at children.
• You need a Google account with a verified email address; that is the only sign-in method the Gateway accepts.
• During the beta you need an invitation. The Gateway refuses sign-in from an email address that has not been invited, and from an account an Operator has suspended.
• If you use EyeSpeak on a computer or with accounts that belong to an employer, school or other organisation, you confirm that you are permitted to install software that holds Accessibility, Microphone, Screen Recording and Automation permissions on that machine and to connect those accounts.
• You may not use EyeSpeak if you are barred from doing so under the laws of your country or under sanctions or export-control rules that apply to us.

4The beta programme

What “beta” means here. The App, Gateway and Website are pre-release software. Features are incomplete, will change without notice, and may be removed. Learned routes and priors on your Mac may be reset by an update. Response quality, speed and availability vary with the model providers behind the Gateway and with your Allowance.

Invitations. Invitations are issued to a specific email address, carry an expiry, and are for the invited person only. The download link issued with an invitation allows a limited number of downloads per day and must not be forwarded or posted. We may decline, revoke or re-issue an invitation at our discretion.

Experiments. The Gateway may place your account in a named cohort that routes some requests to a different reviewed model profile, so we can compare quality and cost. Cohorts are off by default, are set explicitly by an Operator, and never widen your Allowance or the set of providers named in the Privacy Policy.

No obligation to release. Participating in the beta does not entitle you to any future version, to a paid plan on particular terms, or to continued access. We may end the beta, or your part in it, at any time (§15).

Not confidential, but be considerate. We do not require you to keep EyeSpeak confidential. We do ask that you not publish benchmarks or recordings of pre-release behaviour as if they represented a finished product.

5Your account

• Your account is your Google identity. We key it on Google’s stable subject ID, so changing your email address does not create a second account.
• One account is for one person. Do not share sign-in sessions, and do not let someone else redeem your invitation. A session token presented after it has been rotated revokes the whole session family — the App will sign you out on every device.
• You are responsible for activity under your account, including Commands given by anyone who can hold your push-to-talk key while you are signed in. Lock your Mac when you leave it.
• Sign out revokes the session on the server, deletes the session from your Keychain, and clears the local analytics queue. Signing out on one Mac does not remove EyeSpeak’s Google grant for other Macs; revoke that at myaccount.google.com/permissions.
• Operators can move an account between plans, change group Allowances, and suspend or restore an account. Every such change is written to an audit trail with the Operator’s identity and the before/after values.

6Licence

What you get. Subject to these Terms, we grant you a personal, limited, non-exclusive, non-transferable, revocable licence to install and run the App on Macs you own or control, and to use the Gateway and Website through it, for your own use during the beta.

What you may not do. Except where the law expressly allows it despite this clause, you may not:

• copy, modify, or create derivative works of the App or Gateway;
• remove or alter code signatures, notarization, the update-verification keys compiled into the App, or any proprietary notice;
• reverse-engineer the Gateway’s authentication, allowance or proxy protocol, or send the Gateway requests other than those a released App sends;
• redistribute the App, an invitation, or a download link, or make the Service available to third parties as a hosted or resold offering;
• use the Service to build a competing product by systematically extracting its plans, prompts or routing behaviour.

Source publication is not an open-source licence. We may publish source code so that the commitments in the Privacy Policy can be verified. Unless a licence file in a repository says otherwise, that publication grants no right to use, copy, modify or distribute the code beyond reading it.

Third-party components. The App includes open-source components under their own licences (for example Qt under LGPL-3, and packages under MIT, BSD and Apache-2.0 terms). Those licences govern those components; nothing in these Terms restricts rights they grant you. The App also drives Blender, FreeCAD and Anki on your Mac when you have installed them; your use of those programs is under their own licences.

Reservation. We and our licensors keep every right not expressly granted here. EyeSpeak, the EyeSpeak wordmark and the App’s design are ours.

7What EyeSpeak does on your Mac, and your responsibility for it

This section is the heart of these Terms.

7.1What the App can do

To carry out a Command, the App may, in your name and with the macOS permissions you have granted it:

• read the accessibility structure of the frontmost application and the structure of a web page;
• move the pointer, click, scroll, drag, press keys and type text;
• choose menu items, fill fields and press buttons — including buttons that send, submit, delete or pay;
• open applications and URLs;
• read and write documents (.txt, .csv, .xlsx, .docx, .pdf, .pptx) and save files;
• run one file command at a time from a fixed list — ls, find, mdfind, grep, du and other readers, and mv, cp, mkdir, touch, rm, trash, ditto, open — against your own files. rm is redirected to the Trash rather than deleting outright. Arbitrary shell commands, pipes and scripts are not on the list and are refused; the Rscript interpreter is disabled in released builds;
• drive Blender, FreeCAD and Anki over local connections;
• call Gmail, Calendar and Drive on your behalf if you granted those scopes (Privacy Policy §6), from a fixed list of endpoint templates.

7.2The safeguards, and their limits

• Approval gate. A step the planner marks as dangerous — deleting, sending, overwriting an existing file, a mutating file command, a mutating API call, a destructive key combination, a “Send” or “Delete” control — shows an Approve/Deny prompt before it runs. In a released build this gate cannot be turned off for dangerous steps: the “none” approval setting removes prompts only from steps that are not dangerous, and the developer environment variable that would skip prompts is ignored.
• Classification is heuristic. Whether a step is “dangerous” is decided by matching the control’s label, the menu path, the key combination or the command against reviewed lists. A control with an unusual label, or an application whose “delete” is a plain icon, can be missed. The gate lowers risk; it does not remove it.
• Verification and undo are best-effort. After each step the App checks the screen for the expected result and can undo or re-plan a step that appears to have failed, within bounded limits on turns and steps. It cannot reverse an email that has been sent, a payment that has been made, or an edit in an application without undo.
• Interrupting. Releasing the push-to-talk key stops listening; pressing Deny stops the step; moving the pointer into a screen corner triggers the automation failsafe and aborts the current action.
• Recognition errors. Transcription is performed by a third-party model and can mishear you. A misheard word can turn “move” into “remove”. Read the transcript the overlay shows before approving a dangerous step.

7.3What you agree

• You direct the App. Every action it takes is taken at your instruction, and you are responsible for it as if you had performed it yourself — including its effect on files, messages, purchases, accounts and other people.
• Supervise it. Do not run EyeSpeak unattended, and do not use it while an application in front of it could commit something irreversible that you are not watching.
• Keep backups. EyeSpeak edits files in place. Keep copies of anything you cannot afford to lose.
• Do not use it for high-stakes control. EyeSpeak is not designed, tested or licensed for use where a wrong click could cause injury, death, environmental damage, or significant financial or legal loss — for example operating medical devices, industrial systems, vehicles, trading platforms, or executing legal or financial transactions without independent confirmation.
• Grant permissions knowingly. The App works only with Accessibility, Microphone and (for some commands) Screen Recording and Automation permissions. Granting them lets the App do everything §7.1 lists. You can revoke each in System Settings at any time; the corresponding features stop working.

8Allowances and fair use

What is enforced. Each account has an Allowance, stored on the Gateway and checked before every model or transcription request. The beta Allowance at the time of writing is 200 model calls, 4 million input tokens, 1 million output tokens and 3,600 seconds of transcription per UTC day, within an estimated model-cost ceiling of US $0.50 per day and US $3.00 per calendar month. Operators may set different weekly and monthly ceilings for a plan; the App shows your remaining Allowance and the local time it resets.

How it behaves. Limits are enforced by reservation: a request reserves an upper bound before it is sent to a provider and is settled to actual usage afterwards. A request that cannot be funded within your remaining Allowance is declined before it reaches a provider. Unused Allowance does not carry over. Reinstalling, changing devices or signing out and in does not reset usage. Reported usage that exceeds its reserved bound stops further paid requests on that account until an Operator has reviewed it.

Other limits. The Gateway also accepts at most 20 bug reports and 50 update downloads per account per day, 20 downloads per invitation per day, and 20,000 analytics events per account per day. Operator sign-in codes are rate-limited.

Fair use. Allowances are for one person’s interactive use. Scripting the App, replaying its traffic, sharing an account to pool Allowances, or otherwise generating load that a person at a keyboard would not, is a breach of these Terms. We may lower an Allowance, decline requests or suspend an account to protect the Service or our cost exposure, and will tell you when we do so for your account specifically.

9Acceptable use

You agree not to use the Service, or to give EyeSpeak a Command, to:

• break any law, or infringe anyone’s rights — including privacy, copyright, trade-mark, contract or confidentiality;
• access an account, computer, network or data you are not authorised to access, or interfere with anyone else’s use of a system;
• send spam, harass, threaten, defame or impersonate anyone, or generate material that sexualises minors, promotes violence, or provides serious uplift to weapons capable of mass harm;
• breach the terms of a service EyeSpeak connects to on your behalf — including Google’s API terms, your institution’s Canvas policy, and the usage policies of Wikipedia and PubMed;
• breach the usage policies of the model providers named in the Privacy Policy §7, which apply to Content sent through the Gateway on your behalf;
• probe, scan, overload or attack the Gateway or Website, or bypass or attempt to bypass sign-in, Allowances, rate limits, the reviewed request shapes, or the allow-lists in the App;
• submit Content you have no right to submit, or Content you are under a legal or contractual duty to keep off third-party services;
• misrepresent Output as human-authored where a law, rule or the recipient requires disclosure, or use Output to deceive.

We may investigate suspected breaches using the structural data the Privacy Policy describes. We do not read your Content to do so — the Gateway does not keep it.

10Connected services and third parties

Google. When you grant Gmail, Calendar and Drive scopes, EyeSpeak calls those APIs directly from your Mac. Our use of Google user data is described in the Privacy Policy §6.1 and complies with the Google API Services User Data Policy, including its Limited Use requirements. Your use of Google services remains subject to Google’s own terms.

Canvas, Wikipedia, PubMed, Google Places. These are called from your Mac only when a Command needs them, with credentials (if any) that you supply in your own configuration. You are responsible for your use of those services and for the credentials you configure.

Model providers. Commands are carried out with models from Anthropic, Cerebras and OpenAI, reached only through the Gateway. We choose which models are available and may change them. We do not control those providers’ models and are not responsible for the content of their responses; §16 applies.

Local programs. Blender, FreeCAD and Anki are driven on your Mac through their own scripting interfaces. We are not responsible for those programs or for changes they make to your files at EyeSpeak’s instruction; §7.3 applies.

11Updates and changes to the Service

• The App checks for updates against a signed manifest from the Gateway and installs only bundles that pass Apple’s notarization check and our Ed25519 manifest signature. Updates may be rolled out to a fraction of installs at a time.
• An update may require a newer version of macOS. The App will tell you when it cannot install an update for that reason.
• We may add, change, limit or remove features, models, integrations, Allowances or channels at any time, and may require an update to continue using the Gateway. We will use reasonable efforts to announce material removals in the App or by email.
• We may suspend the Service for maintenance, to respond to a security incident, or when a provider we depend on is unavailable.

12Feedback and bug reports

Feedback. If you send us suggestions, feature requests or comments, you grant us a perpetual, irrevocable, royalty-free licence to use them without restriction or attribution. You keep any rights in Content you include.

Bug reports. A bug report is sent only when you open the preview and press Send. It contains transcripts, window titles, menu paths and plans for one Command, as the Privacy Policy §10 describes. By sending one you grant us a licence to use it to diagnose and fix problems, to improve EyeSpeak’s handling of the applications and Commands it shows, and to discuss it internally and with the model providers if that is necessary to resolve a provider-side fault. We delete reports on request and no later than 90 days after submission.

13Your Content and your Output

• Your Content is yours. We claim no ownership of your documents, your screen, your speech, your data in connected services, or anything else the Privacy Policy calls Content. You grant us only the licence needed to process it for the Command you gave — through the Gateway, to a model provider, and back — and no more.
• Your Output is yours. As between you and us, you own the Output EyeSpeak produces for you, to the extent we can grant it. Output may resemble output produced for other people who asked for similar things, and may contain errors. You are responsible for checking Output before relying on it, and for any use you make of it.
• We do not train on your Content or Output. The Privacy Policy §7 describes the providers’ data policies.

14Fees

The beta is free. We do not charge for beta access, and we do not sell Allowance top-ups.

We intend to offer paid plans after the beta. Before any charge is made, we will publish the price and the plan’s terms, ask you to agree to them, and never convert a beta account to a paid one without that agreement. Operators may grant complimentary plans at their discretion; a complimentary plan may be withdrawn at any time.

15Suspension and termination

By you. Stop using the App at any time. To close your account, email privacy@eyespeak.ai from the address on the account; the Privacy Policy §15.2 describes what is deleted. Uninstalling the App does not delete your account or the local files listed in the Privacy Policy §15.3.

By us. We may suspend or terminate your account, your invitation, or your access to any part of the Service, with or without notice, if we reasonably believe that:

• you have breached these Terms or the Acceptable Use rules in §9;
• your usage threatens the security, stability or cost of the Service;
• a model provider or other third party requires it;
• we are required to by law; or
• we discontinue the beta or the Service.

A suspended account fails its next request with a message saying so. Where practical we will tell you why and how to respond. We will not suspend an account solely because you exercised a privacy right or turned off analytics and crash reports.

Effect. On termination your licence under §6 ends, the Gateway stops accepting requests from your sessions, and the retention schedule in the Privacy Policy §13 applies. Sections 6 (reservation), 7.3, 12, 13, 16, 17, 18, 19 and 22 survive termination.

16Disclaimers

EyeSpeak is provided “as is” and “as available”. To the fullest extent the law allows, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty arising from course of dealing or usage of trade.

In particular, we do not warrant that:

• the App will correctly hear, interpret or carry out any Command;
• an action classified as safe is safe, or an action the App verifies as complete is complete;
• the Service will be available, uninterrupted, secure or free of errors, or that defects will be corrected;
• Output will be accurate, complete, lawful, or fit for any purpose;
• the Service will meet the requirements of any regulated activity; or
• your Allowance will be sufficient for any particular use.

AI models can produce confident, plausible and wrong results. Speech recognition can mishear. Screens can change between a plan and its execution. The safeguards in §7.2 reduce these risks; they do not eliminate them.

Some jurisdictions do not allow the exclusion of implied warranties. Where that is so, the exclusions above apply to the extent permitted, and any implied warranty that cannot be excluded is limited to the shortest period the law allows.

17Limitation of liability

To the fullest extent the law allows:

• We are not liable for what EyeSpeak does at your instruction. That includes deleted, moved, overwritten or corrupted files; messages sent or not sent; purchases, bookings or transactions made; changes to connected accounts; and any consequence of a misrecognised or misinterpreted Command.
• We are not liable for indirect loss. That includes lost profits, revenue, data, goodwill or business opportunity, cost of substitute services, and any indirect, incidental, special, consequential, exemplary or punitive damages, however caused and under any theory of liability, even if we were told they were possible.
• Our total liability is capped. Our aggregate liability to you for all claims arising out of or relating to the Service or these Terms will not exceed the greater of (a) the amount you paid us for the Service in the twelve months before the event giving rise to the claim, and (b) US $50. During the beta, (a) is zero.

What this does not limit. Nothing in these Terms excludes or limits liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, for wilful misconduct, or for anything else that cannot be excluded or limited under the law that applies to you. If you are a consumer in the EEA or the United Kingdom, you have statutory rights that these Terms do not affect, and the limitations above apply only to the extent permitted by the consumer law of your country of residence.

18Indemnity

If you use the Service in a way that breaches §7.3, §9 or §10, or in breach of the law, and a third party brings a claim against us because of it, you agree to defend us and to indemnify us against the resulting losses, costs and reasonable legal fees. We will notify you promptly of any such claim and give you reasonable control of the defence, provided you do not settle it in a way that admits fault on our part without our consent. This clause does not apply to you to the extent that consumer law in your country prohibits it.

19Governing law and disputes

Talk to us first. If you have a dispute with us, email legal@eyespeak.ai with a description of the problem and what you would like us to do. We will try to resolve it informally within 30 days. Neither of us will begin formal proceedings before that period has ended, except to seek urgent injunctive relief or where a limitation period is about to expire.

Governing law. These Terms, and any dispute arising out of or relating to them or the Service, are governed by the laws of [GOVERNING LAW JURISDICTION], without regard to its conflict-of-laws rules.

Venue. Subject to the paragraph below, the courts of [VENUE] have exclusive jurisdiction.

Consumers. If you are a consumer in the EEA or the United Kingdom, you may also bring proceedings in the courts of your country of residence, and you keep the benefit of the mandatory consumer-protection law of that country. The European Commission’s online dispute-resolution platform is at ec.europa.eu/consumers/odr; we are not obliged to, and do not, participate in alternative dispute resolution unless the law requires it.

20Changes to these Terms

We will post any change here with a new effective date. For material changes we will notify signed-in users in the App or by email to the address on the account at least 14 days before the change takes effect, unless the change is required by law or is needed to address a security or abuse problem, in which case it may take effect immediately. Continuing to use the Service after the effective date means you accept the changed Terms. If you do not accept them, stop using the Service and, if you wish, close your account (§15).

21General

• Entire agreement. These Terms and the Privacy Policy are the whole agreement between you and us about the Service and replace any earlier agreement. Separate terms will apply to any paid plan (§14) and will say so.
• Severability. If a clause is found unenforceable, it will be enforced to the maximum extent permitted and the rest of the Terms remain in force.
• No waiver. Our not enforcing a clause is not a waiver of it.
• Assignment. You may not transfer these Terms or your account. We may assign them to a successor in a merger, acquisition or sale of assets, and will notify you if we do.
• Export. You will comply with export-control and sanctions laws that apply to your use of the Service.
• Force majeure. We are not liable for delay or failure caused by events outside our reasonable control, including outages at the providers named in the Privacy Policy §7.
• Notices. We may notify you in the App or by email to the address on your account. Notices to us go to the addresses in §22.
• Language. These Terms are written in English. A translation is for convenience only; the English text governs.
• No third-party beneficiaries. Except as stated in §18, nobody other than you and us has rights under these Terms.

22Contact

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Legal: legal@eyespeak.ai
Privacy: privacy@eyespeak.ai
Security: security@eyespeak.ai