FlosForge Toolbox — privacy policy

FlosForge Toolbox has no tracking, no telemetry, no analytics, no accounts and no crash reporting. Nothing you do is reported anywhere. There is no FlosForge server: an AI call goes from this Mac straight to the provider you chose, under your own key, and the App Store privacy manifest declares no tracking and no collected data.

What FlosForge Toolbox collects about you

Nothing. There is no account, no telemetry, no analytics, no crash reporting and no identifier of any kind. The app has no server of its own to send anything to, and it does not phone home to check for updates — the Mac App Store delivers those.

What it stores, and where

Workspaces, tools, folders, presets, preferences and run history: In the app’s own database on this Mac.
Provider and API keys: In the macOS Keychain, scoped per workspace. They are never written to run history, are stripped from workspace exports, and a saved key is never shown back in the Settings field.
Fields marked secret: Redacted before a run is saved, before a preset is saved and before a detailed-log line is written.
The app-lock PIN: Only as a salted hash in the app’s own preferences, never in plain text.
Detailed logs: Off by default, behind two separate switches: that a call happened, and — separately, still off — what was typed and what came back. Retention is yours to set, and each day’s folder can be opened or deleted from Settings.

Everything it can connect to

Each of these is a connection you cause — by adding something, enabling something, or pressing a button — and none of them is made on a schedule you did not set.

The host you typed: Fourteen of the twenty networked tools contact only the address you gave them, and only when you run them.
A DNS-over-HTTPS resolver you pick: DNS Lookup and Reverse DNS send the name or address you look up to Cloudflare, Google, AdGuard or NextDNS — whichever you chose. DNS Propagation Check asks all four at once.
rdap.org, and the registry it redirects to: WHOIS / RDAP Lookup sends the domain or IP address you look up.
api.ipify.org and ipwho.is: Public IP Address learns this Mac’s public address from api.ipify.org, which is the answer it sends back. IP Geolocation & ASN sends the address you look up to ipwho.is.
An AI provider you enabled: Apple Intelligence and Ollama run on this Mac, or on another Mac you point Ollama at. Google Gemini is the only provider that sends anything off this Mac, and only under your own key.

What never leaves your Mac

The app never opens a connection of its own accord. Every connection is one a tool you ran asked for, or one you configured.
Exactly six tools contact a service the app chose. Each says so in its own interface before it runs, and Settings › Privacy lists them — generated from the tool catalogue rather than typed by hand.
A workspace can switch network access off entirely, at which point networked tools refuse to run rather than fail silently.
No prompt text is stored in the AI usage ledger, and no run you did not start reaches a hosted provider without asking first.

AI

Two acknowledgements before anything runs — one for on-device AI, one for remote providers — each of which can be withdrawn at any time, stopping everything of that kind immediately.
A run you did not start asks first before it can use a hosted provider, or is limited to on-device AI by a setting. As-you-type runs never reach a hosted provider at all.
Token limits per hour, day, week or month, on all hosted providers together or one alone. On-device models are never counted against them.
Every AI call is recorded in a ledger kept apart from run history: time, workspace, provider, model and token counts, but never the prompt.

Safeguards

Sandboxed, with three entitlements: The sandbox itself, outbound network through Apple’s networking APIs, and read-write access to files you pick in an open panel. No raw sockets, no listening servers, no process spawning.
Local Network permission: macOS gates connections to other machines on your LAN behind a per-app permission. The app cannot read that permission, so when a probe to a private address fails it tells you where in System Settings to look.
App lock: An optional PIN with Touch ID unlock where the Mac supports it, re-locking when the app goes to the background. A convenience lock, and described as one.

Your rights, and who to ask

Because the app holds nothing about you, there is nothing for the controller to access, correct or erase on your behalf: everything it knows is in files on your own Mac, under your own control. Removing the app and its container removes all of it — your history, your snippets and anything it saved. The keychain items go with it. For anything else, write to hello@flosforge.eu. The site-wide privacy policy covers this website, your rights under the GDPR, and the supervisory authority you can complain to.

Changes

This statement is checked against each release. If a version changes what the app stores or what it can connect to, the version and date at the top change with it.