← Rephraser

Privacy Policy

Last updated: 18 April 2026

TL;DR — Rephraser does not send your text anywhere, ever. All rephrasing runs on your own device via Apple MLX (Mac) or llama.cpp (Windows). This page covers the two narrow exceptions: model downloads and anonymous telemetry.

What we don't collect

What we do collect (when you opt in)

Rephraser can send anonymous usage events to TelemetryDeck, a GDPR-friendly, privacy-focused analytics service. You can toggle this off any time in Settings → Share anonymous usage analytics. It's on by default because the signal helps us prioritise features; it contains no text content.

EventWhenFields sent
appLaunchedApp startsOS, anonymous client hash, session id
rephraseStartedYou press the hotkey+ mode (e.g. "professional")
rephraseAcceptedYou hit Entersame as above
rephraseRejectedYou hit Escapesame as above
modelDownloadedModel fetch completes+ model id (e.g. "qwen2.5-0.5b")
modeChangedYou pick a mode+ new mode

The anonymous client hash is a one-way SHA-256 of a random UUID we generate on first launch. It lets us count returning users without identifying them — we couldn't reverse it to find you even if we wanted to.

Email on download

When you download Rephraser from rephraser.app, we ask for your email. It's stored in a private Google Sheet we use to send the occasional release announcement. Unsubscribe by replying to any email. We don't share it.

Model downloads

The AI model weights live on HuggingFace. When you download a model, a direct connection from your machine to HuggingFace's CDN transfers the file. Rephraser doesn't proxy this — see HuggingFace's own privacy policy for what they log.

Crash reports (Windows only, coming in v0.2)

Windows ships on much more diverse hardware than Mac, so we'll add crash reporting via Sentry in v0.2. Stack traces only — we strip any text content, file paths, or PII before sending. Gated by the same analytics toggle.

Website analytics

The download site uses GoatCounter — a privacy-first page-view counter that doesn't use cookies, doesn't track individuals, and doesn't send data to Google.

GDPR / CCPA

Telemetry is anonymous by design — we can't identify an individual user. For email list removal or any data question, email srivatsan@vatsan.app. We reply within 7 days.

Changes

If this policy materially changes, we'll update the "Last updated" date at the top and note the change in the release notes.