Privacy & Security

┌─────────────────────────────────────┐
│         Your Device                 │
│                                     │
│  Screen + Audio  →  Local SQLite    │
│                                     │
│  - OCR text                         │
│  - Audio transcriptions             │
│  - Screenshots (JPEG)               │
│  - Video chunks (MP4)               │
│  - Metadata                         │
│                                     │
│  ✗ No cloud uploads                 │
│  ✗ No external servers              │
│  ✗ No data leaving your machine     │
└─────────────────────────────────────┘

-- Database schema (simplified)

CREATE TABLE frames (
  id INTEGER PRIMARY KEY,
  timestamp DATETIME,
  app_name TEXT,
  window_name TEXT,
  browser_url TEXT,
  device_name TEXT,
  file_path TEXT,  -- Path to screenshot JPEG
  
  -- Cloud sync fields (NULL by default)
  sync_id TEXT,
  machine_id TEXT,
  synced_at DATETIME
);

CREATE TABLE ocr_text (
  id INTEGER PRIMARY KEY,
  frame_id INTEGER,  -- Foreign key to frames
  text TEXT,
  confidence REAL,
  
  -- Full-text search index
  FOREIGN KEY (frame_id) REFERENCES frames(id)
);

CREATE VIRTUAL TABLE ocr_text_fts USING fts5(
  text,
  content='ocr_text'
);

CREATE TABLE audio_chunks (
  id INTEGER PRIMARY KEY,
  start_time DATETIME,
  end_time DATETIME,
  transcription TEXT,
  speaker_id TEXT,
  device_name TEXT
);

~/.screenpipe/
├── db.sqlite              # Main database
├── db.sqlite-wal          # Write-ahead log
├── db.sqlite-shm          # Shared memory
├── frames/                # Screenshot JPEGs
│   ├── 2026-03-08/
│   │   ├── monitor_21/
│   │   │   ├── frame_1234567890.jpg
│   │   │   └── ...
│   │   └── monitor_22/
│   └── ...
├── videos/                # Video chunks (MP4)
│   ├── 2026-03-08/
│   │   ├── chunk_001.mp4
│   │   └── ...
│   └── ...
├── pipes/                 # AI pipe configurations
│   ├── obsidian-sync/
│   │   ├── pipe.md
│   │   └── config.json
│   └── ...
└── logs/                  # Application logs
    ├── screenpipe.2026-03-08.log
    └── ...

# Enable database encryption
screenpipe config --encrypt-db --password "your-password"

# Performance impact: ~5-10% slower queries

use chacha20poly1305::ChaCha20Poly1305;
use argon2::Argon2;

// Derive key from password
let key = Argon2::default()
    .hash_password(password, salt)?
    .hash;

// Encrypt data
let cipher = ChaCha20Poly1305::new(&key);
let ciphertext = cipher.encrypt(&nonce, plaintext)?;

# Only capture these apps
allow_apps:
  - "Chrome"
  - "VS Code"
  - "Slack"

# Never capture these apps
deny_apps:
  - "1Password"
  - "Signal"
  - "Banking*"  # Wildcard

# Never capture windows with these titles
deny_windows:
  - "*password*"
  - "*incognito*"
  - "*private*"

# Block specific sites
deny_urls:
  - "*facebook.com*"
  - "*gmail.com*"
  - "*bank.com*"

# Only capture during work hours
schedule:
  days: ["Mon", "Tue", "Wed", "Thu", "Fri"]
  hours: "09:00-18:00"

# Redact patterns from OCR text
redact_patterns:
  - regex: "\b\d{3}-\d{2}-\d{4}\b"  # SSN
    replacement: "[REDACTED-SSN]"
  
  - regex: "\b\d{16}\b"  # Credit card
    replacement: "[REDACTED-CC]"
  
  - regex: "password\\s*[:=]\\s*\\S+"  # Passwords
    replacement: "password: [REDACTED]"

retention:
  max_age_days: 90  # Delete data older than 90 days
  max_size_gb: 100  # Delete oldest data when over 100 GB

---
name: my-pipe

# Only access Slack and Zoom
allow-apps:
  - "Slack"
  - "Zoom"

# Never access password managers
deny-apps:
  - "1Password"
  - "Bitwarden"

# Only audio transcriptions (no screenshots)
allow-content-types:
  - "audio"

# Only work hours
time-range: "09:00-18:00"
days: ["Mon", "Tue", "Wed", "Thu", "Fri"]

# Block sensitive endpoints
allow-raw-sql: false
allow-frames: false
---

# Install Ollama
curl -fsSL https://ollama.ai/install.sh | sh

# Pull a model
ollama pull llama3.2

# Configure screenpipe
screenpipe config --ai-provider ollama --model llama3.2

# View database access log
screenpipe logs --type access

# Example output
2026-03-08 10:15:32 | QUERY | pipe:obsidian-sync | SELECT text FROM ocr_text WHERE timestamp > ...
2026-03-08 10:16:45 | EXPORT | user:manual | Exported 1000 frames to export.json
2026-03-08 10:20:12 | DELETE | user:manual | Deleted all data older than 2026-01-01

# Export everything to JSON
screenpipe export --format json --output backup.json

# Export specific time range
screenpipe export --from 2026-03-01 --to 2026-03-08 --output march.json

# Export only text (no screenshots)
screenpipe export --text-only --output text-backup.json

# Export specific apps
screenpipe export --apps "Chrome,Slack" --output work.json

# Export search results
screenpipe search "project deadline" --export --output deadline.json

# Stop screenpipe first
screenpipe stop

# Copy database files
cp ~/.screenpipe/db.sqlite ~/backup/
cp -r ~/.screenpipe/frames ~/backup/
cp -r ~/.screenpipe/videos ~/backup/

# Restart screenpipe
screenpipe start

# Delete old data
screenpipe delete --older-than 90d

# Delete specific apps
screenpipe delete --apps "Chrome,Slack"

# Delete by date range
screenpipe delete --from 2026-03-01 --to 2026-03-08

# Delete all data from a specific window
screenpipe delete --window "*password*"

# Delete everything (requires confirmation)
screenpipe wipe

# Or manually:
screenpipe stop
rm -rf ~/.screenpipe/