Your data

Pond keeps its state in a few places. It does not keep task text, prompts or terminal output on disk. There is no account.

On your Mac

Where	What it holds
~/.pond	The Pond folder: your projects, the last 200 agent sessions (ids and branches, no text), settings, the stage layout, update and crash-report choices, the local sockets, the 5-hour usage readings from Claude Code's status line in Pond's sessions (a percentage and a reset time with when each was read), for each session the context size in tokens, the model name and the effort that the same status line reports, which Pond writes and deletes after two days, how each tile is split into panes, and, when Friends is on, the friends files and log. It is private to your user. POND_HOME moves it.
Keychain	The settings seal key (app.pond.settings-seal), and the Friends identity keys if you turned Friends on. They are this-device-only and not synced.
Preferences	A small preferences file for codes.pond.app: your friends name, whether agents show, roaming, the screen-edge strip, keep awake, notifications and the sidebar's size and place.
Browser previews	Each worktree's preview tile has its own WebKit storage (cookies, local storage). Your Safari data is never in it. ~/.pond/browser-stores.json lists which worktree uses which store.
~/.local/bin/pond	A link to the pond command, only if you chose Install pond Command.
Your repos	The git worktrees Pond made for tasks, with branches named pond/.... They are ordinary git worktrees. Pond puts each one in a folder next to the repo, named <repo>-pond/<name>, so the repo's own folder stays clean.
Downloads	Diagnostics zips (Pond-diagnostics-...), only if you saved one. Nothing is sent.
Login item	Open at login, only if you turned it on.
macOS permissions	Accessibility and Screen Recording for Pond Computer, only if you turned computer use on.

Pond also reads, and never changes, your repos and Claude Code's own files under ~/.claude.

On the friends relay

If you turned Friends on, the relay holds your inbox and group records, sealed items waiting for you, and hashes of tokens. It cannot read the items. Records stay until they are deleted or the relay's idle expiry removes them. See Friends and the relay for what the relay sees.

Pond has no "delete all my data" control yet. To remove things, follow Uninstall.

What diagnostics and crash reports strip

Pond sends nothing on its own. Crash reports (when on) and the diagnostics zip you may save both pass through the same filter first. It replaces:

• paths, URLs and email addresses, and quoted text;
• IPv4 and IPv6 addresses (loopback and version numbers stay);
• values after words like token, secret, password, api key, authorization or cookie, and user:password@host in a URL;
• known key shapes (GitHub, GitLab, Slack, AWS, Google, npm, Stripe-style and JWT) and long random-looking runs;
• your user name, your Mac's name, and your project, worktree and branch names. Ordinary branch names such as main or fix stay.

The same filter runs over the names of types and functions in a crash report, and over the summary Friends posts for an agent's last reply. It is a filter, not a guarantee. A secret written as plain prose with no key word around it can get through, so look at the diagnostics list before you share a zip.