Privacy Policy
Last updated: September 19, 2026
Summary
The Transfo Mac app does not collect, store, or share any personal data. There are no analytics or tracking in the app and no account is required. The only network calls the app makes are (a) transformations sent directly to the AI provider you configured with your own key, and (b) license activation/validation with our payment provider, Lemon Squeezy. Some optional features on transfo.dev (an account, the web Skill Creator, remote MCP, the contact form) do process data on our servers; each is described below.
What Transfo does with your data
- Clipboard text: When you explicitly trigger a transformation, the current clipboard text is sent directly from your Mac to the AI provider you configured (OpenAI, Anthropic Claude, Google Gemini, or OpenRouter) using your own API key. Transfo never sees this text — there is no intermediary server. The text is subject to the privacy policy of the provider you chose.
- API keys: Stored locally in the macOS Keychain on your device. They are only ever sent to the corresponding provider to authenticate your requests.
- Settings and usage state: Recipe preferences and app settings are stored locally on your device (UserDefaults). They never leave your Mac.
- Apple Intelligence: If you use on-device models, text is processed entirely on your Mac by Apple's frameworks.
License validation
Transfo Pro is sold as a one-time license through Lemon Squeezy, our merchant of record. When you activate or validate a license, the app sends your license key and an instance label (your Mac's device name) to the Lemon Squeezy API over HTTPS. Nothing else is transmitted — no clipboard content, no usage data. Payment details are handled entirely by Lemon Squeezy; we never see your card information. See Lemon Squeezy's privacy policy: https://www.lemonsqueezy.com/privacy
Optional account
You can create a free account on transfo.dev to see your license key, manage which Macs it is activated on and reach your invoices. Accounts are optional — the app never requires one. If you create one we store your email address, your license metadata (key, status, activation count) and the names of activated Macs in Supabase (EU region). We never store clipboard content or transformation results. You can ask us to delete your account at any time from the account page; your license keeps working without it.
If you tick “Email me launch news & recipe tips” when creating an account, we record that choice and may send you occasional product emails. You can unsubscribe from any of them with one click.
Skill Creator and remote MCP (optional, account required)
If you use the Skill Creator on transfo.dev, the skills you save are stored with your account so they can sync to your Macs. When you draft or try a skill using Transfo Credits, the text you enter is sent through our server to Anthropic to generate the result; we do not store that text, only a daily count of credits used.
If you set up remote MCP, the AI provider keys you add are stored encrypted in our database vault and are used only to run your own requests. MCP access tokens are stored as one-way hashes. You can revoke tokens and delete keys at any time from the account page.
Contact form
Messages you send through the contact form are delivered to our support inbox by email via Resend. We use your email address only to reply; the message is not stored in our database.
Website analytics
Our website (transfo.dev) uses PostHog (EU region) in a cookieless configuration to measure anonymous page views and clicks. No cookies are set, no cross-site tracking occurs, and the app itself contains no analytics.
If you sign in to an account, events on the website are linked to an opaque account identifier so we can understand how account features are used. Your email address is never sent to PostHog.
What Transfo does not do
- No analytics or telemetry of any kind in the app.
- No advertising, no tracking, no fingerprinting.
- The app does not require an account.
- The app never sends your clipboard or transformations to servers operated by Transfo.
Third-party providers
When you bring your own API key, your transformed text is processed by the provider you selected:
- OpenAI — https://openai.com/policies/privacy-policy
- Anthropic Claude — https://www.anthropic.com/legal/privacy
- Google Gemini — https://policies.google.com/privacy
- OpenRouter — https://openrouter.ai/privacy
Changes
If this policy changes, the updated version will be posted at this URL with a new "Last updated" date.
Contact
Questions? Reach us at our contact page