Exactly what leaves your Mac.
No vague reassurance, no boilerplate. Below is the complete list of what happens locally, the one feature that goes online, and every field our servers keep.
13 August 2026
Written to be checkable. If anything here doesn't match what the app does, tell us and it gets corrected.
What stays on your Mac.
Every core command uses Apple's on-device speech recognition. The audio is processed locally on your Mac and discarded as soon as the phrase is resolved. It is never recorded, never stored and never uploaded — not to us, not to anyone. Wandflow does not keep a history of what you said.
Your setups, saved window layouts, scene settings and preferences live in your own user folder on your Mac, as plain files you can read, back up or delete. Running a core command touches no network at all.
The one thing that goes online: Ask.
Ask is optional and can be switched off in Settings. It runs only when the on-device grammar cannot resolve a phrase you spoke. In that case, that single line of text — the transcript of the phrase, produced on your Mac — is sent to our server and on to Anthropic, which turns it into the same safe actions Wandflow already knows.
Never audio. Never your screen. Never your files. Ask cannot run shell commands and cannot read documents; it can only choose from the actions the app already supports.
What our servers record.
This is the exact and complete list. Nothing else about your use of the app reaches us.
- Per Ask request: a timestamp, an anonymous install ID, your plan, token counts, and the outcome. Not the phrase itself.
- An anonymous install ID generated on your Mac, used to apply free-tier quotas and to anchor your trial period.
- A salted hash of your IP address, used only to stop abuse of the free tier. The raw IP address is not stored.
- If you buy Pro: your email address, your plan, subscription status, renewal date, and Polar's customer and subscription identifiers.
- Which of your Macs have signed in, by install ID, so that the device count on your plan can be applied.
We do not use third-party analytics or advertising trackers, and we do not sell or share personal data. The records above exist to enforce quotas, control cost and run your subscription — nothing more.
Who else processes it.
Four sub-processors, each with a specific job. If this list changes, this page changes with it.
Anthropic
United StatesConverts an Ask phrase into actions. Receives one line of text and nothing else — no audio, no screen contents, no files.
Supabase
Managed cloud hostingStores accounts, quota counters and licence records — the install IDs, plans and Ask request logs described above.
Polar
Merchant of recordPayments, as merchant of record and seller. Polar handles your card details end to end; We never see or store them. They hold your billing email and invoices.
Lovable
Managed cloud hostingHosts this website. Standard web server logs apply to page requests.
Your rights.
You can ask for access to the personal data we hold about you, correction of anything wrong, deletion of your account record, an export of your data, or object to a particular use of it.
The practical route is one email: write to support@wandflow.app from the address on your receipt, say what you want, and it gets done. There is no form and no portal — the request reaches the people who run the service.
Deleting your account removes the account record, including your email, plan and subscription identifiers. Anonymous Ask request logs are not tied to your identity, so they cannot be looked up by name or email; they age out on the schedule below.
Wandflow is made by Luven Technologies LLC, a Florida limited liability company. Questions: support@wandflow.app. Purchases are sold by Polar as merchant of record, and Polar's terms apply to payments, invoicing and tax.
Retention.
Ask request logs are kept only as long as they are needed for quota enforcement and cost control, then deleted.
Account and subscription records are kept while your subscription is active, and afterwards for the period required for tax and accounting purposes. Invoices held by Polar follow their own retention as merchant of record.
Children.
Wandflow is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, email support@wandflow.app and it will be removed.
Changes and contact.
When this policy changes, the date at the top of the page changes and the change is noted in the release notes that ship with the app. If a change materially affects what we collect, account holders get an email before it takes effect.
Questions about any of this go to support@wandflow.app. See also the terms and the FAQ.
The privacy story is the product story.
On-device by default, one optional online feature, and a list you can hold us to. Install it and check.
Free forever · 14-day Pro trial, no card · macOS 14+ · Apple silicon