Budget and privacy settings

Set a monthly budget

In US dollars, for Claude and Google together:

NATRO_MONTHLY_BUDGET=15

Natro warns you at 80% and asks before using Claude past 100%. The dashboard shows where the money went.

What Natro asks first

Sending email and messages, deleting, calling, sharing files, paying, force-closing an app and changing many things at once all wait for your yes. A request for a device that’s offline waits for it, and asks again before it runs.

What stays private

Requests that touch your email, calendar, files, memory or notifications only go to Claude, never to the optional free Gemini tier. In your browser, Natro only reads on banking and payment sites; add more sites with NATRO_READ_ONLY_SITES. File conversion runs without any AI model.

Where your data lives

Memory, notes, logs and sign-in tokens stay on the machine that runs Natro. They are left out of git.