Download

No. The installer writes strictly to your user profile directory (%LOCALAPPDATA% on Windows, ~/Applications or /Applications on macOS via user drag-and-drop). No UAC elevation prompts or IT administrator passwords are required.

Click 'Sign in' inside the desktop app. It opens your default web browser to our secure authentication endpoint, validates your active organisation session via PKCE loopback, and instantly enrolls the device without typing passwords or copying tokens.

What you type, no — keystroke content and clipboard text are not captured on any plan, and there is no code in the agent that could. Input signals, where your organisation enables them, are event counts only: how often, never what. Your screen is a different answer: screenshots are a capability your organisation can switch on, off by default and never silently. Every capture setting that applies to you is listed on your own data page in the console, which you can open yourself at any time.

ActivityPulse is offline-first. The agent records your activity in a local SQLite outbox in your own user profile — a database file, not separately encrypted, protected by your device's disk encryption and account like any other file you own. Entries are deleted once the server confirms them. When your connection resumes, segments are uploaded idempotently, without duplicate hours or data loss.

The desktop agent automatically checks our trusted Cloudflare distribution pipeline for new releases. Updates are cryptographically signed with Minisign and Microsoft Authenticode / Apple Notarization, and install silently in the background. Platform administrators can recall unhealthy releases instantly via server-authoritative version control.