3 Sources
3 Sources
[1]
OpenAI Codex Chronicle captures your Mac screen to build AI context, with cloud processing and no encryption
Summary: OpenAI's Codex for Mac has added Chronicle, a research preview feature that periodically captures screenshots, sends them to OpenAI's servers for processing, and stores text summaries as local unencrypted Markdown files to give the AI assistant passive context about user activity. The feature is unavailable in the EU, UK, and Switzerland, requires a $100+/month Pro subscription and Apple Silicon, and represents OpenAI's first implementation of ambient screen-aware AI on desktop, choosing cloud processing and utility over the local-first privacy architecture adopted by competitors like Screenpipe and the now-defunct Rewind AI. OpenAI's Codex desktop app for Mac has gained a feature called Chronicle that periodically captures your screen, processes the content into text summaries, and stores those summaries as local memory files that give the AI assistant context about what you have been working on. The feature, released as a research preview, means Codex can now understand your recent activity without you having to explain it. It also means OpenAI is sending screenshots of your desktop to its servers for processing, a design choice that puts Chronicle in direct tension with the privacy-first direction that much of the industry has been moving toward. Chronicle is part of a broader update that transformed Codex from a coding assistant into a general-purpose AI workspace. The 16 April release, titled "Codex for (almost) everything," added computer use capabilities that allow Codex to operate Mac apps with its own cursor, an in-app browser, image generation, persistent memory, and more than 90 plugins. Over one million developers have used Codex, and usage doubled following the launch of the GPT-5.2-Codex model in December. Chronicle runs background agents that periodically capture screenshots of your display. Those screenshots are sent to OpenAI's servers, where they are processed using OCR and visual analysis to generate text summaries. The summaries are saved as Markdown files in a local directory at . When you subsequently prompt Codex, those memory files are included in its context window, allowing it to understand what applications you were using, what documents you were reading, what code you were writing, and what conversations you were having, all without you restating any of it. The raw screen captures are stored temporarily under a system temp directory and automatically deleted after six hours. OpenAI states that screenshots are not stored on its servers after processing and are not used for training. The generated memories, however, persist indefinitely as unencrypted plain text files on your machine. Greg Brockman, OpenAI's president, described the feature as "an experimental feature giving Codex the ability to see and have recent memory over what you see, automatically giving it full context on what you're doing. Feels surprisingly magical to use." Chronicle requires macOS Screen Recording and Accessibility permissions. It is available only on Apple Silicon Macs running macOS 14 or later, and only to ChatGPT Pro subscribers paying $100 or more per month. It is not available in the EU, UK, or Switzerland, a geographic restriction that strongly suggests OpenAI recognises the feature's incompatibility with GDPR's requirements around data minimisation and purpose limitation. The comparison with Microsoft Recall is instructive. Recall, which launched on Windows Copilot+ PCs, takes screenshots every few seconds and stores them in an encrypted local database, with all processing handled by a neural processing unit on the device. No screenshot data leaves the machine. Chronicle takes the opposite approach: processing happens in the cloud, but only text summaries are retained locally. Recall encrypts its database and requires biometric authentication via Windows Hello. Chronicle stores its memories as unencrypted Markdown files accessible to any process running on the computer. OpenAI's own documentation acknowledges the risks explicitly. Chronicle "increases risk of prompt injection" because malicious content on a website you visit could be captured in a screenshot and interpreted as instructions by the AI. The memories directory "might contain sensitive information." And the feature "uses rate limits quickly," meaning Pro subscribers may find their Codex usage constrained by Chronicle's background activity. OpenAI recommends pausing Chronicle before meetings or when viewing sensitive content. Users can pause and resume via the Codex menu bar icon. The recommendation is itself revealing: it acknowledges that the feature will capture things it should not, and shifts the burden of managing that risk to the user. Screen-aware AI assistants have had a turbulent history. Rewind AI, the most prominent early entrant, rebranded to Limitless before being acquired by Meta in December 2025. The Mac app was shut down and screen capture disabled. Microsoft's Copilot has lost 39% of its subscribers in six months, partly due to trust issues that extend to Recall. A security researcher demonstrated in early 2026 that Recall's encrypted database could still be exploited, reinforcing concerns that had dogged the feature since its announcement. The open-source alternative Screenpipe offers a local-first approach: continuous screen and audio capture processed entirely on-device, with a $400 lifetime licence and no recurring cloud dependency. Perplexity's Personal Computer software takes yet another approach, turning a Mac mini into a persistent AI agent with access to local files and apps, though it too relies on cloud processing for its core intelligence. The pattern across the category is consistent: the more useful a screen-aware AI becomes, the more data it needs to process, and the harder it becomes to reconcile that data appetite with user privacy. Chronicle opts for utility over privacy architecture, betting that OpenAI's promise not to store or train on the data, combined with the six-hour deletion window, is sufficient to earn user trust. Whether that bet pays off depends entirely on whether users believe the promise and whether OpenAI can maintain it as the feature scales. Chronicle arrives as the industry converges on the idea that AI assistants should understand your context without being told. Apple is testing AI smart glasses designed as ambient input channels for Apple Intelligence. Slack's recent AI overhaul turned Slackbot into a desktop agent with deep context about your work communications. OpenAI itself is developing a screenless hardware device with Jony Ive that is explicitly positioned for an "ambient AI" era. Gartner predicts more than 40% of large enterprises will deploy ambient intelligence pilots by 2026. The thesis is that AI becomes dramatically more useful when it has passive, continuous access to what you are doing rather than requiring you to articulate your needs from scratch each time. Chronicle is OpenAI's first implementation of that thesis on desktop, and it works: by Brockman's account and the feature's design, eliminating the need to re-explain context to an AI assistant is a genuine productivity gain. But the thesis has a cost. Privacy-first alternatives like Proton's AI tools demonstrate that useful AI can run on open-source models locally without sending user data to anyone's servers. The question Chronicle poses is not whether screen-aware AI is useful. It plainly is. The question is whether the cloud-processed, trust-dependent model that OpenAI has chosen will survive contact with the regulatory environment that has already excluded it from three jurisdictions, and with users who have watched enough AI companies promise data privacy only to quietly revise their terms when the economics demanded it.
[2]
Codex for Mac gains Chronicle for enhancing context using recent screen content - 9to5Mac
Last week, OpenAI released an all-new version of Codex for Mac that includes the best example of AI-driven computer use yet. Today, Codex for Mac is taking its recently gained memory feature further with a feature OpenAI calls Chronicle. Codex is OpenAI's desktop "superapp" in the making. For now, Codex is especially made for agentic coding. ChatGPT is the more general AI chatbot app. Going forward, OpenAI is developing Codex into a more capable tool for builders beyond software engineers. Chronicle is one step toward that goal. The purpose of Chronicle is to make Codex more aware of context without repeating details or being super specific with each prompt. It builds on memory, which lets Codex learn from conversation history for context. Chronicle goes further by using recent screen context. OpenAI explains how it works: With Chronicle, Codex can better understand what you mean by "this" or "that." Like an error on screen, a doc you have open, or that "thing" you were working on two weeks ago. Over time, it helps Codex learn how you work: the tools you use, the projects you return to, and the workflows you rely on. Chronicle runs background agents to build memories from screen captures. It uses rate limits quickly. Screen captures are stored temporarily on device to generate memories -- also stored on device. You can inspect and edit memories. Be aware that other apps may access these files. Chronicle in Codex is available for Pro subscribers on the Mac starting today as a research preview feature. In addition to enhancing the Codex desktop app, OpenAI recently introduced a subscription designed for Codex users.
[3]
What is Chronicle, OpenAI Codex's new screen-reading memory feature?
Chronicle by OpenAI remembers your workflow so Codex doesn't forget If you've ever spent the first five minutes of an AI coding session re-explaining what you were working on, Chronicle is OpenAI's attempt to fix that. Instead of needing to describe what you're doing before every Codex session, Chronicle records your actions behind-the-scenes so Codex has a general understanding when you return to work again. For instance, if you make a pull request or look up some documentation while using other tools, Chronicle creates the necessary context automatically in its memory so you don't have to describe what you were doing. Also read: OpenAI releases Chronicle in Codex: What is it and how to use Chronicle operates within Codex's memory system. When using Codex with Chronicle enabled, it can use the screen-based memories that have recently been generated to determine what you're referring to, find the appropriate file/source, and leverage any tools or workflows you use, which may eliminate the need for you to articulate what's being requested at the beginning of the interaction with Codex each time. Chronicle acts as a sandboxed background agent on macOS machines. The app periodically takes pictures from your screen using your macOS machine, and it saves these pictures as lightweight markdown memory files saved on the user's local machine. The screen captures themselves are deleted after six hours of their creation, but the memories they create are saved until the user deletes them. Also read: 5 things John Ternus needs to fix at Apple after taking over as CEO from Tim Cook There are some real caveats worth knowing upfront. First, Chronicle is currently only available as an opt-in research preview and only for ChatGPT Pro subscribers who have macOS. Also, OpenAI has been very transparent about how quickly it consumes rate limits, Chronicle creates continuous background processes as part of the app's efforts to create memory files from screen captures, which rapidly uses up rate limits, causing additional wait time for the user. The bigger concern is security. Chronicle increases your exposure to prompt injection attacks because it's reading whatever is on your screen, including websites. If you visit a page with malicious instructions embedded in it, there's a chance Codex follows them. OpenAI recommends pausing Chronicle before meetings or when viewing anything sensitive, and the pause option lives in the macOS menu bar. Memories are stored as unencrypted markdown files, meaning other programs on your computer can access them too. Chronicle is clearly early-stage, and OpenAI isn't hiding that. But the basic idea is simple - the less time you spend re-establishing context with an AI tool, the more useful that tool actually becomes.
Share
Share
Copy Link
OpenAI has introduced Chronicle for Codex on Mac, a feature that periodically captures screenshots and processes them into text summaries to build AI context. The research preview sends screen data to OpenAI's servers for cloud processing and stores memories as unencrypted Markdown files locally, raising privacy concerns among Pro subscribers.
OpenAI has launched Chronicle, a screen-reading memory feature for Codex for Mac that fundamentally changes how the AI coding assistant understands user workflows. Released as a research preview on April 16, Chronicle runs as a background agent that periodically captures screenshots of your display, sends them to OpenAI's servers for processing via OCR and visual analysis, then stores text summaries locally as unencrypted Markdown files
1
. This approach allows OpenAI Codex to maintain passive awareness of what users are working on without requiring them to repeatedly explain context at the start of each session3
.
Source: Digit
The feature addresses a common frustration among developers who spend valuable time re-establishing context with AI tools. When you reference "this error" or "that document," Chronicle enables Codex to understand what you mean by drawing on recent screen context and user activity it has observed
2
. Over time, it learns the tools you use, projects you return to, and user workflows you rely on, creating a more seamless interaction model.Chronicle's architecture diverges sharply from privacy-first approaches adopted by competitors. While the feature captures user screen content locally, it relies on cloud processing rather than on-device analysis. Screenshots are sent to OpenAI's servers where they're processed, though the company states they aren't stored after processing or used for training
1
. Raw screen captures remain temporarily in a system directory and are automatically deleted after six hours.The generated memories, however, persist indefinitely as unencrypted Markdown files in a local directory accessible to any process running on your computer. This unencrypted storage creates security concerns, as other applications could potentially access sensitive information captured in these memory files
3
. The contrast with Microsoft Recall is striking: Recall processes everything locally using neural processing units, stores data in encrypted databases, and requires biometric authentication via Windows Hello1
.Chronicle is available exclusively to ChatGPT Pro subscribers paying $100 or more per month, and requires Apple Silicon Macs running macOS 14 or later
1
. Notably, the feature is unavailable in the EU, UK, and Switzerland—geographic restrictions that suggest OpenAI recognizes potential conflicts with GDPR's data minimization and purpose limitation requirements. Users must grant macOS Screen Recording and Accessibility permissions for Chronicle to function.Related Stories
OpenAI's documentation explicitly acknowledges that Chronicle "increases risk of prompt injection" because malicious content on websites you visit could be captured in screenshots and interpreted as instructions by the AI
1
. This creates a novel attack vector where simply viewing a webpage with embedded malicious instructions could compromise the AI's behavior. The company recommends pausing Chronicle before meetings or when viewing sensitive information, shifting the burden of managing privacy risks to users3
.Another practical limitation involves rate limits. Chronicle's continuous background processes consume usage quotas quickly, meaning Pro subscribers may experience constrained Codex availability due to the feature's activity
2
. Users can pause and resume Chronicle via the Codex menu bar icon and can inspect or edit the memory files it generates.Chronicle arrives as part of a major update that transformed Codex from an AI coding assistant into a general-purpose workspace. The April 16 release added computer use capabilities allowing Codex to operate Mac apps with its own cursor, an in-app browser, image generation, and over 90 plugins
1
. Over one million developers have used Codex, with usage doubling after the GPT-5.2-Codex model launch in December.
Source: The Next Web
Greg Brockman, OpenAI's president, described Chronicle as "an experimental feature giving Codex the ability to see and have recent memory over what you see, automatically giving it full context on what you're doing"
1
. The screen-aware AI assistant category has experienced turbulence, with Rewind AI rebranding to Limitless before Meta acquired it in December 2025, subsequently shutting down the Mac app and disabling screen capture.For developers and builders, Chronicle represents a trade-off between contextual understanding and data privacy. The feature's ability to eliminate repetitive context-setting could significantly improve productivity, but the combination of cloud processing, unencrypted storage, and prompt injection vulnerabilities creates a complex risk profile that users must carefully evaluate based on the sensitivity of their work.
Summarized by
Navi
[1]
[2]
17 Apr 2025•Technology

17 May 2025•Technology

19 Nov 2025•Technology

1
Policy and Regulation

2
Technology

3
Technology
