Privacy Policy

1. Introduction

MacFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our desktop application handles your information.

2. Data Storage and Local Processing

MacFlow is a local-first desktop application. Your environment data, snapshots, configurations, and personal settings stay on your device. Local files, source code, and credentials are never sent to our servers.

On-demand vulnerability checks send only package name, version, and ecosystem to the MacFlow API (forwarded to OSV.dev); local audits contact package registries (such as npm, PyPI, and Homebrew) directly, or run local audit tools (such as Homebrew audit). We do not upload your environment data or configurations to our servers.

3. Data We Collect

The MacFlow desktop application collects minimal application usage events via Aptabase to monitor reliability and performance. These events include app startup, scan start and completion metrics (workspace counts, duration, security score, and aggregate vulnerability counts), drift detection counts, package installation events (which include the package name and package manager), and workspace selection events (which include the workspace name and category). Events are not linked to your name, email address, or MacFlow account, and contain no source code or credentials. The open-source macflow-check CLI contains no telemetry. Its only network call sends lockfile package names, versions and ecosystems to OSV.dev, and --offline skips it.

4. Third-Party Services

We use third-party services for specific functions: Aptabase for anonymous desktop application reliability metrics, and standard providers for payment processing and website analytics. For vulnerability lookups, package metadata (name, version, and ecosystem) is queried through the MacFlow API against OSV.dev, while local audits query package registries (such as npm and PyPI) directly or run local package tools (Homebrew). These services operate under their own privacy policies.

5. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@macflow.ai.