Privacy policy
Last updated: May 22, 2026
TL;DR: Refyl is local-first. Your AI API keys, prompts, and usage data never leave your Mac. We don't sell, share, or analyze your data. Stripe handles payments. Google Analytics tracks anonymous site visits.
What we collect
On the website (refyl.dev)
- Google Analytics 4 — page views, source, country, device type. IP anonymized.
- Stripe — when you pre-order, Stripe receives your name, email, payment details, and IP address (their normal flow). We use this only to fulfill your order and send the receipt.
In the macOS app (after launch)
- Nothing leaves your Mac by default. API keys live in macOS Keychain. Usage data and forecasts are computed and stored locally.
- Optional crash reporting via Apple's standard mechanism — you can opt out in your system settings. No prompts, no tokens, no usage details are transmitted.
- Optional account sync (if you enable it in a future version) — encrypted backup of your local config, opt-in only.
What we don't collect
- Your AI prompts or responses
- Your API tokens (they stay in Keychain)
- Your conversations with Claude, ChatGPT, or Cursor
- Personal information beyond the email used at purchase
- Behavioral data inside the app
How we use what we collect
- Email — to deliver receipts, send the app when it ships, and respond to support requests. Nothing else.
- Site analytics — aggregate stats to know what's working (e.g., which marketing post drives traffic). Never tied to individuals.
Who has access
I'm a solo indie developer based in Switzerland. I'm the only person with access to your data. No team, no contractors, no third-party processors except Stripe (payments), Google Analytics (anonymous traffic), and Vercel (hosting infrastructure).
Your rights
You can request deletion of any data we hold about you at any time. Email david@refyl.dev with "delete my data" — I'll confirm within 48 hours and process within 7 days. GDPR-compliant by default since we collect almost nothing.
Cookies
Google Analytics sets cookies for session identification. No tracking cookies, no ad targeting, no remarketing pixels. You can block them via your browser settings without breaking the site.
Changes
If the policy changes meaningfully (e.g., we add a new data processor), I'll update this page and notify pre-order customers by email at least 14 days in advance.
Contact
Privacy questions, deletion requests, or just curious about how things work: david@refyl.dev.