Privacy Policy

Last updated: April 25, 2026

Watchflows is a local-first macOS application. Your workflows, payloads, and execution history live on your Mac. We do not run a backend that ingests your data. This page explains what data does leave your Mac, when, and why.

What stays on your Mac

We never see this data. There is no telemetry, analytics, or "phone home" reporting in the app.

What leaves your Mac (and why)

Update checks (Sparkle)

Watchflows uses the open-source Sparkle framework to check for new versions. By default it queries our update feed once per launch. Each request includes the standard Sparkle User-Agent, your current app version, and macOS version. We use this only to decide which release to serve. Logs are retained for short-term debugging.

License activation

When you activate a license, the app verifies the embedded Ed25519 signature locally. Verification does not contact any server. The "Recover license" form on this site sends only the email address you provide to our license-recovery endpoint, which looks up your purchase in Stripe and re-emails the license key.

AI nodes (only when you configure them)

If you add an AI node and configure it with a third-party provider (OpenAI, Anthropic, Ollama, LM Studio, etc.), the prompts and content you send through that node go directly from your Mac to the provider you chose. We do not proxy AI traffic. Local providers (Ollama, LM Studio) keep everything on your machine. The privacy policy of the provider you select governs the data handed to them.

Workflow-initiated network calls

Workflows can include nodes that make HTTP requests, send email, post to webhooks, or otherwise reach external services. Those calls go to the destinations you configure. We never see, route, or store that traffic.

Payment

Purchases are processed by Stripe. Stripe collects the payment information required to complete the transaction. We receive your email address and a customer ID so we can issue and re-issue your license. Stripe's privacy policy applies to the data they hold.

Email (Resend)

License delivery and support email are sent through Resend. Resend processes the email address and message body required to deliver the email.

What we collect on watchflows.app

The marketing site at watchflows.app uses Google Analytics 4 to measure how visitors find and use the site. This is separate from the app, which remains analytics-free as described above.

What Google Analytics records on our behalf:

We have configured Google Analytics with anonymize_ip enabled and Google Signals (cross-device tracking and demographic inference) disabled. We do not send Google your name, email, license key, or any other personally identifying information. Google's handling of the data they receive is governed by their privacy policy.

No accounts, no profiles

Watchflows has no user accounts. There is nothing to "log in" to and no profile to delete. Removing the app and the entry from your Keychain wipes everything related to your installation.

Children

Watchflows is intended for general use and is not directed at children under 13. We do not knowingly collect data from anyone in that age range.

Changes to this policy

We may update this policy as the product evolves (for example, when we add a feature that involves new data flow). Material changes will be noted in the app's release notes and reflected in the "Last updated" date above.

Contact

Questions about privacy: support@watchflows.app.