PRIVACY.md: 1.56, the release day, and background sync's switch without a pairing

[JasonYeYuhe]

Why

1.56 ships today: the Developer ID build (app-v1.56.0, latest.json, Homebrew) and Companion CLI 1.32.0 are out, and the App Store builds are in review. #649 added 1.56 behaviour to PRIVACY.md (the Codex history recount) but left the header saying Last Updated: October 3, 2026 and It describes CLI Pulse 1.55. A review of the policy against the 1.56 code (fcbbee46..main) found one more sentence that 1.56 made incomplete.

Changes

where	before	after
header	Last Updated: October 3, 2026	October 7, 2026, the release day
lede	It describes CLI Pulse 1.55.	It describes CLI Pulse 1.56.
What this covers › background helper	switched on when you pair this Mac, "and off with Settings › Advanced › "Enable background sync""	"and on or off with Settings › Advanced › "Enable background sync", which since v1.56 is there whether or not you are signed in or this Mac is paired. It uploads only with that pairing (see When uploads happen)."

Evidence for the third row:

• Offer Developer ID updates and Settings › Advanced without a paired account #646 draws Advanced without a paired account. SettingsAccountSections.Advanced is .thisMac for a signed-in account that is not paired and for local mode, and .backgroundSync for a signed-out Mac. showsBackgroundSync is true for every case. Offer Developer ID updates and Settings › Advanced without a paired account #646's PR body says that "a signed-out Mac can turn background sync on, not only off."
• Without a pairing, the helper uploads nothing. LocalScanConsent.helperCycle returns .collectLocally in local mode (after a yes) and for a signed-in account the helper is not paired with. It returns .paused(.signedOut) while signed out. When uploads happen already says this ("uploads with the pairing… only while the app is signed in to that same account… after you sign out it stops reading altogether").

Checked and left as is

• Recount the older Codex days of the usage history under the 1.56 rules, on the Mac and in this Mac's cloud rows #649's text, which was written before A device's day and provider replace their cloud rows, so a renamed model stops counting twice (v0.84, not applied) #648 (v0.84) and Unpaired Macs remove only a dated spelling of a model they send (v0.85, not applied) #655 (v0.85) merged. It still matches the code:
  • The recount uploads through upsert_daily_usage (APIClient.codexHistoryCloud → upsertDailyUsageRows), not through replace_daily_usage.
  • Zero rows go out for models the read no longer reports on a paired Mac, and for older spellings only under the unpaired stand-in (CodexHistoryRebuild.cloudUpload, zeroDroppedModels: !isUnpairedStandIn).
  • Days with no cloud row from this Mac are skipped.
  • A retry comes 24 h later (retryInterval). The recount runs once per Codex rules version, and the cloud part once per account (cloudRulesVersionByAccount). It reads Codex logs only (options.providers = [.codex]), and only after the older-history yes (historyReadAllowed).
• Offer Developer ID updates and Settings › Advanced without a paired account #646: the signed-out updater makes no new kind of request. The policy already says that a request to GitHub to check for updates happens "whatever you answered".
• A device's day and provider replace their cloud rows, so a renamed model stops counting twice (v0.84, not applied) #648 and A paired Mac with a locked keychain uploads its days under its own device, and a saturated Codex cost adds without trapping #654 (routine uploads replace a paired device's rows for each day and provider; with the keychain locked, rows still go under the paired device) and Companion: ask cfprefsd only for the user's own app-group copy, and log which source answered #651 (the Companion's cfprefs source): nothing the policy states changes.
• Stop offering a Gemini sign-in that cannot work, and give the Uninstaller the Companion's version #653 removes a Gemini sign-in that the policy never described.

The hosted page (cli-pulse/cli-pulse docs/privacy.html) gets #649's bullets and these three changes in a companion PR, sentence-identical apart from "this document/this file" → "this page".

🤖 Generated with Claude Code

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.