Documentation
Cannoli is a Mac app. Everything about transcription happens on your computer; this site exists for accounts, billing and the optional AI relay.
Modes
| Mode | Who runs the AI | What leaves your Mac | Best for |
|---|---|---|---|
| Managed | Cannoli's relay to Anthropic | Transcript text and your typed notes, once per meeting, when you ask for enhanced notes | Most teams. Covered by our DPA; Anthropic deletes within 30 days and may not train. |
| Bring your own key | Your Anthropic account | Transcript text, straight to Anthropic under your agreement | Companies with their own Anthropic contract, including zero data retention. |
| Local-only | Nobody | Nothing (an optional plan check carries no content) | Privileged or regulated conversations. Transcript and speaker labels only. |
Permissions the app asks for
- Microphone: your side of the conversation.
- Screen & System Audio Recording: the other participants. macOS groups system-audio capture under this name; Cannoli reads audio only and never captures the screen.
- Speech Recognition: Apple's on-device engine.
Cannoli never asks for Accessibility, Full Disk Access, keyboard input monitoring or screen video.
Signing in from the app
- Cannoli → Account… → Sign in. The app shows a code like
ABCD-2345and openscannoli.ai/activate. - Enter your email, click the link we send, and confirm the code. The app is signed in; the browser can be closed.
- Signing a device out, from the app or from your account page, immediately stops its access to paid features. Transcription keeps working.
Where your data is
~/Library/Application Support/Cannoli/ holds config.json, one folder per meeting (transcript.md, notes.md, a wiki/ folder) and server.log. Deleting a meeting moves it to trash/ next to the meetings folder. Back it up like any other folder; Cannoli has no copy.