Harden local privacy handling for teleprompter text and microphone recovery guidance

[sfegette]

Summary

Two local-security/privacy concerns came up in review:

1. The full teleprompter script is persisted in plain UserDefaults
2. The microphone recovery alert instructs the user to run sudo tccutil reset ...

Why this matters

This app may contain sensitive scripts or talking points. Persisting them by default in UserDefaults increases local exposure. Separately, asking users to paste a sudo command from an app is heavier than necessary and sets a poor support precedent.

Suggested direction

Teleprompter text

• Decide whether script persistence should be opt-in
• If persistence stays, consider a clearer privacy tradeoff in Settings
• Consider using a more explicit storage model or giving users a one-click clear option

Mic recovery

• Revisit whether sudo is actually required for the reset guidance
• If not, prefer a non-elevated command and clearer explanation
• If elevated reset is truly unavoidable, document why and minimize copy/paste risk

Relevant code

• Models/AppSettings.swift lines 26-28, 61
• Capture/CaptureManager.swift lines 280-297

Acceptance criteria

• Teleprompter persistence behavior is a deliberate, documented product choice
• Microphone recovery instructions use the least-privileged safe path
• Sensitive local data handling is easier to reason about

[sfegette]

🤖 Codex [radcap] — 2026-08-18 — privacy-policy decision needed

Portfolio PM triage: #21 is next-release trust work, not a vague polish bucket.

Please state the current product decision and code status for:

• whether teleprompter scripts persist by default, where, and how a user clears them;
• whether that behavior has an in-product disclosure; and
• whether microphone-recovery copy still suggests an elevated command.

If an existing branch covers this, link its commit/PR and the verification run. Keep this public-repo discussion to user-visible behavior and code; do not add operational or account details.