Privacy Policy

01Our guiding principle

Prompto is a local-first app. Your prompt library, your tags, your usage patterns, and your settings all live on your Mac — in a folder you own, in a file format you can read. We cannot see them because we don't operate a server that receives them.

This isn't a policy decision that could change tomorrow; it's how the software is architected. There is nowhere for your prompts to go except the disk they were typed on.

02Data we do not collect

To be unambiguous, Prompto does not collect any of the following:

• The content of your prompts, titles, descriptions, or tags.
• Your search queries or which prompts you use most.
• How often you open Prompto or which shortcuts you use.
• Your prompt vault path, hardware serial number, or location.
• Any list of other apps installed on your Mac.

We do not have accounts. You do not sign in. We never ask for your email to run the app.

03Where your data lives

Your prompts are stored as plain Markdown files in a vault folder on your Mac. The default location depends on how you installed Prompto:

• Mac App Store:the vault lives inside Prompto's sandbox container, a private folder only Prompto can read. You can switch to a folder you control (Documents, iCloud Drive, a Git repository) at any time through Settings — you pick the folder yourself with the macOS file picker, and the sandbox grants Prompto access only to that folder.
• Direct download: the vault defaults to ~/Documents/Proxima Prompt Vault. You can move it anywhere you like through Settings.

In both cases, app preferences (your shortcut, vault display path, settings choices) live in the standard macOS preferences location under Prompto. Files inherit the protection of the folder they are in: if your disk is encrypted with FileVault, your vault is encrypted at rest. If you choose to place your vault in iCloud Drive or Dropbox, it is then subject to the privacy and security of that service. Prompto itself still does not transmit it anywhere.

04Network activity

Prompto's network behavior depends on how you installed it.

Mac App Store version. The App Store build ships without the network entitlement. macOS blocks any outbound or inbound connection at the kernel level — there is no update check, no license server, no analytics endpoint, no remote asset to fetch. Updates are delivered by the Mac App Store itself, not by code inside Prompto.

Direct-download version. The build downloaded from our website may make two kinds of product network requests:

• Update checks. Once a day, if enabled, Prompto asks our server whether a newer version exists. The request contains update metadata such as the current app version. We do not send prompt contents, search queries, tags, or vault paths. You can disable update checks in Settings.
• License activation.When you enter your license key, Prompto sends the activation information needed to verify the key and issue a signed offline certificate: the license key, an app-generated device hash, this Mac's display name, and the app version. It does not send prompt contents, prompt titles, search queries, tags, vault paths, or clipboard contents.

That's everything. In neither version does Prompto load remote content, download additional assets, or ping a usage endpoint.

05Mac App Store version

The Mac App Store version of Prompto answers Apple's App Privacy questionnaire as “No, we do not collect data from this app.” Concretely:

• No identifiers are tied to you. The app does not generate or store a user ID, an install ID, or a device fingerprint.
• No data is transmitted off your device. The build runs sandboxed and is not signed for outbound or inbound network access.
• No third-party SDKs collect data on our behalf. The only third party linked into the App Store build is Apple's own KeyboardShortcuts package, which stores the launcher shortcut locally in UserDefaults and is covered by our privacy manifest.

Prompto ships a Privacy Manifest (PrivacyInfo.xcprivacy) inside the app bundle that you can audit yourself. See our Security page for the full declaration and reasoning.

For the App Store version, payments and refunds are handled exclusively by Apple under your App Store account; the section below on Direct purchases does not apply.

06Payments

Mac App Store. If you bought Prompto through the Mac App Store, Apple is the Merchant of Record. Apple handles your billing, your receipt, and any refund requests under their own terms. We do not see your payment information and do not receive your name, billing address, or card details from Apple.

Direct purchase. If you bought Prompto from our website, purchases are handled by Lemon Squeezy, acting as the Merchant of Record. When you buy Prompto, Lemon Squeezy receives your name, email, billing address, and payment details in order to process the transaction, calculate taxes, and issue a receipt.

For direct purchases, we may receive a minimal order record from Lemon Squeezy: your email, the license key issued to you, order identifiers, and transaction dates. We use this to support activation, refunds, and license recovery. We do not see or store your payment card details at any point.

07Support conversations

If you email support, we store the thread in our helpdesk for as long as needed to resolve your issue. You may ask us to delete it at any time.

If you voluntarily attach diagnostic information — a screenshot, a log file, a copy of your library — please redact anything you consider sensitive first. We will only use what you share to help with your specific issue.

For license support, do not send a full license key, full certificate, raw device identifier, prompt library, or vault folder. We normally need only the order ID, checkout email, app version, macOS version, visible error state, and the last four characters of the license key.

08Analytics & crash reports

Prompto ships with no third-party analytics SDK. There is no Google Analytics, no Mixpanel, no PostHog, no Sentry. Crashes are reported only through Apple's built-in CrashReporter, and only if you have enabled that sharing in your Mac's own privacy settings. We receive these reports anonymously, through Apple, the same way any Mac developer does.

09Children

Prompto is a productivity tool for general audiences and is not directed at children under 13. We do not knowingly collect any information from children.

10Changes to this policy

If we ever change this policy, the new version replaces this one at the same URL and the “Effective” date at the top is updated. Material changes will be announced in the app's release notes and on the Prompto website.

We cannot retroactively change what older versions of the app did; we can only change how future versions behave. The core principle — no collection, no servers, no telemetry — is not something we intend to walk back.

11Contact us

Questions about privacy are welcome. Write to privacy@jnjambrino.com and a human will respond.

See also our Security, Terms of Service, and Help Center.