Privacy Policy

Whittle ("we", "us") builds small, local-first utilities for macOS. This policy explains what we collect on whittle.tools and in our apps, such as Morph and Vellum. The short version: your files never leave your Mac, and we collect as little as possible.

Your files stay on your Mac

All file conversion happens locally on your device using macOS's ImageIO and bundled ffmpeg. Your files, their contents, and their names are never uploaded to us or anyone else. Conversion works completely offline.

AI features and your API key

Some apps include an optional AI feature that uses an AI provider you choose and set up with your own API key. When you use it, your selected text and prompt are sent directly from your Mac to that provider — we never proxy, see, store, or log these requests.

Your API key is stored in the macOS Keychain on your device and is never transmitted to us.

Crash reports and analytics

Our apps can send anonymous crash reports and basic, anonymous usage analytics (for example, that a module was opened) to help us fix bugs and prioritise work. These contain no file contents, no personal data, and no account — just a random, per-install identifier.

This is opt-out: you can turn it off in the app's settings at any time. When it is off, nothing is sent — including crash reports.

What we collect

• Email address — when you join the launch waitlist or buy a license, so we can deliver your download and license key, send essential product messages, and help with support.
• Purchase details — payments are processed by a third-party payment provider. We receive a confirmation and your license information; we never receive or store your full card number.
• Aggregate website data — we keep website analytics to a minimum, use no advertising trackers, and never sell data. Any product analytics we add are anonymous and can be opted out of.

How we use it

• To deliver your license and downloads.
• To respond to support requests.
• To send occasional, relevant product updates — you can unsubscribe at any time.

Sharing

We share data only with the service providers we need to run the business — for example, payment processing and email delivery — and only as much as required. We do not sell your personal data.

Your choices

You can unsubscribe from emails at any time, and you can ask us to delete your information by emailing [email protected].

Security

We take reasonable measures to protect the limited data we hold. No method of storage or transmission is perfectly secure, but we keep our footprint small on purpose.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy? Email [email protected].