Privacy Policy

This Policy applies to the App as distributed through the Mac App Store, to every extension and interface the App bundles (the Safari extension, the Control Center controls, the Shortcuts and Focus integrations, and the local Model Context Protocol interface described in Section 9), and to the Site, including its privacy, terms and support pages.

The party responsible for the Service, and the "controller" for the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR and comparable legislation, is Abdul Rehman Haider, an individual developer. Contact details are set out in Section 20.

This Policy does not apply to the websites, applications and services that the App opens or routes links to, nor to Apple Inc. ("Apple"), Anthropic, PBC ("Anthropic") or any other third party whose services you may use in connection with the App. Those parties process information under their own terms and privacy policies, which we identify in Section 12 and encourage you to review.

For readers who want the substance without the detail, the following statements are complete and accurate as of the date of this Policy:

• We collect nothing. The App contains no account system, no analytics or crash reporting framework, no advertising framework, no tracking technology and no third party software development kit of any kind.
• We operate no server. There is no backend, no application programming interface and no endpoint of ours that the App contacts. We are technically incapable of seeing your links, your browsing, your rules, your history or your usage.
• Everything the App knows lives on your Mac, inside the sandbox container that macOS assigns to it, or in the macOS Keychain, and you can inspect it and erase it at any time.
• The App reaches the network only in the situations enumerated in Section 6, each of which is either the ordinary act of opening a link or a feature you have explicitly enabled.
• Our App Store privacy label reads "Data Not Collected" in every category, and this Policy is the long form of that label.

We do not collect, receive, store, process, sell, share, rent or otherwise handle any personal data about you through the App. In particular, and without limitation, we do not collect: your name, email address, Apple Account identity or any other identifier; the links you click, the pages you visit or the applications you use; your routing rules, your routing history or your preferences; your device identifiers, IP address, location or diagnostic information; crash reports, performance metrics or usage analytics; or any category of data that Apple's App Privacy questionnaire describes.

The App performs no update checks, no remote configuration fetches, no telemetry pings and no background communication of any kind. It loads no remote code. There is no mechanism by which information could reach us from the App, and we have deliberately built the App so that no such mechanism exists.

We do receive, from Apple, aggregated sales and subscription reports in the ordinary course of distributing software through the Mac App Store. Those reports contain counts, amounts and territories; they contain no names, no email addresses and no payment details. We may also receive, from Apple, machine generated notifications of purchase events (such as a renewal or a refund) that carry transaction and product identifiers assigned by Apple and no identity information. Apple's handling of your purchase data is governed by Apple's privacy policy.

To perform its function the App keeps a small quantity of data on your Mac. None of it leaves your Mac unless you export it yourself or enable the optional iCloud synchronisation described in Section 5. The categories are as follows.

4.1 Routing history. When the App's intelligence features are enabled, the App keeps a local log so that the learning router and the Today in Links digest can operate. Each record contains: the host name of the link (for example github.com), the bundle identifier of the application the link came from, the browser or application it opened in, the routing method (for example rule, picker or automatic) and a timestamp. A representative record is:

{"timestamp":"2026-06-11T09:15:00Z","host":"github.com","sourceApp":"com.apple.mail","browserID":"com.google.Chrome","method":"rule"}

By default the App never writes a full address to this log. Paths, query strings and fragments are discarded before a record is written, so the log records that a link to github.com was opened and not which page. For email addresses, only the recipient's domain is recorded, never the address itself.

4.2 Remember full links and Spotlight. The setting Remember full links, found under Settings, Intelligence, Memory, is off by default. While it is on, the complete address of each link the App routes is kept in the same local file, and those addresses are indexed by Spotlight on the same Mac through Apple's App Intents framework so that you can find a page you opened by searching for it. Email addresses are never kept in full under any setting. Turning the setting off stops the recording of full addresses. The Forget Everything command, available under Settings, Intelligence and in the Recents window, deletes the log and the Spotlight index together and immediately.

4.3 Rules and settings. Your routing rules are stored as a file in the App's sandbox container. Your preferences are stored in the App's sandboxed user defaults. Neither is transmitted anywhere unless you enable the synchronisation described in Section 5.

4.4 Trial state. The date on which your free trial began is stored in the macOS Keychain. It consists of a single date and contains nothing about you. It is stored in the Keychain rather than in the App's container so that the trial cannot be reset by deleting and reinstalling the App.

4.5 Your Anthropic API key. If you choose to add an Anthropic API key, it is stored in the macOS Keychain, encrypted by the operating system. It is transmitted only to Anthropic's API, only when you use a feature that requires it, and only over an encrypted connection. It is never transmitted anywhere else, and we never see it.

The setting Sync rules with iCloud, found under Settings, Rules, is off by default. While it is on, your rules list is additionally stored in your own iCloud account through Apple's key value store, so that it reaches your other Macs that are signed in to the same Apple Account. That copy travels between your Mac and Apple under Apple's iCloud terms and Apple's privacy policy. It is not sent to us, and we cannot read it.

Only the rules list is synchronised. Routing history, remembered links, the Spotlight index, your preferences, your trial state and your API key are never synchronised and remain on the Mac on which they were created. Turning the setting off stops synchronisation in both directions and leaves your rules where they are.

The App makes network connections in exactly five situations. Each is described below, and each is either the ordinary consequence of opening a link or a feature that you have enabled.

6.1 Opening links. The App's core function is to hand the links you click to the browser or application you have chosen. That handoff occurs locally through macOS. The site you open then loads in your browser exactly as it otherwise would; the App is not a party to that traffic and does not observe it.

6.2 Link Scan (optional). When you run Link Scan on a link, or when automatic scanning of suspicious links is enabled, the App contacts the link's own servers from your Mac to follow redirects and discover the real destination. This is the same request your browser would make if you opened the link, with the differences described in Section 7. No third party scanning service is involved.

6.3 Claude features (optional, and only with your own key). If you add your own Anthropic API key, certain features may send limited data to Anthropic's API: the text you type into the rules composer, host names being classified, or a link being scanned. That traffic occurs directly between your Mac and Anthropic, under your key and under Anthropic's privacy policy at anthropic.com/legal/privacy. Without a key, these features either run entirely on your Mac using Apple's on device models, which transmit nothing, or remain off.

6.4 The App Store. Purchase, trial and subscription state is verified through Apple's StoreKit framework. That communication occurs between your Mac and Apple under Apple's privacy policy. The App learns only whether a valid purchase exists; it never receives payment details or your Apple Account identity.

6.5 iCloud (optional). When Sync rules with iCloud is enabled, the App stores your rules list in your iCloud account and reads it back through Apple's key value store, as described in Section 5. That traffic occurs between your Mac and Apple.

There is no sixth case. The App has been built so that no other connection is possible, and the App's sandbox entitlements, described in Section 14, permit outbound connections only.

Link Scan is an assistive feature that helps you judge a link before you open it. When it runs, the App resolves the link's redirect chain and retrieves at most the first 16 kilobytes of the destination in order to read its title; it does not render the page, execute its scripts or download its resources. The App refuses to contact addresses on your local network, loopback addresses and link local addresses, both for the initial request and for every redirect, so that the feature cannot be used to probe your own network.

Link Scan reports what it found and, where it could not reach a destination, says so rather than reporting the destination as safe. Its verdicts are heuristic. They are not a security guarantee, and the Terms of Use set out the limits of our responsibility for them.

Several features integrate with macOS and with other applications. Each is optional, each is under your control, and none transmits information to us.

• Default browser. macOS itself presents the confirmation dialog when the App is set as your default browser, and you may change the default browser back at any time in System Settings.
• Default email application (optional). If you make the App your default email application, the email addresses you click receive the same picker and rules as links. When you choose a webmail service, the address is handed to that service's compose page in your browser, exactly as the service itself would receive it. Only the recipient's domain is ever kept in the routing history.
• Send this tab (optional). When you press the Send this tab shortcut, the App asks the browser in front for the address of its current page, and nothing else. macOS presents its own Automation permission dialog once per browser. If you decline, the feature simply does nothing for that browser and every other part of the App is unaffected. The browsers the App can ask are fixed at build time and named in the App's entitlements.
• Safari extension (optional). The Send to flick toolbar button reads the address of the active Safari tab, only when you click it, and hands that address to the picker. It reads no page content, injects nothing into any page and retains nothing. Safari lists the extension under Settings, Extensions, where you may disable it.
• Focus filters, Shortcuts and Control Center (optional). These are system features you configure yourself. The App learns only which browser you chose for a Focus, and only while that Focus is active. Shortcuts actions and Control Center controls are doorways into the App's own features and hold no data of their own.
• Notifications (optional). Used only to offer an undo when automatic routing opens a link silently. If you decline notifications, the App continues to work.

The App can act as a local Model Context Protocol ("MCP") server for AI agent tools that you run on your own Mac. This interface operates over local standard input and output only. It opens no network port and accepts no remote connections. Agent tools that use it can read the same local data described in Section 4 (your rules and your host name history) and can route links through your rules. Nothing about this interface involves us, our infrastructure or the internet. You are responsible for the agent tools you choose to run and for what they do with the data this interface exposes to them.

flick Pro is sold exclusively through Apple's in app purchase system. Apple processes the payment, stores your payment details and manages renewals, cancellations and refunds. The 14 day free trial is managed entirely by the App on your Mac and requires no account and no payment information. What we receive from Apple is described in Section 3.

The Site is a collection of static files. It sets no cookies, embeds no advertising and contains no tracking pixels, and nothing on it identifies you. The following are the only ways in which the Site touches information about you:

• Hosting. The Site is served by Netlify, Inc. ("Netlify"), and requests to it pass through the network of Cloudflare, Inc. ("Cloudflare"), which provides the Site's domain name service and delivery network. As the operators of the servers that deliver the Site, Netlify and Cloudflare may record standard server logs, which can include your IP address, the address of the page requested, the time of the request and your browser's user agent string. That processing is carried out by each of them as a service provider under its own privacy policy, at netlify.com/privacy and cloudflare.com/privacypolicy. We do not access, analyse or retain those logs.
• Visit counts. Cloudflare Web Analytics, which Cloudflare runs on the Site's domain, loads a small script from Cloudflare that reports each page view and how quickly the page loaded: the address of the page, the page that linked to it, the type of browser and device, and the country the visit came from, which Cloudflare derives from your IP address. It sets no cookies and stores nothing in your browser. We see only totals, such as how many visits a page received, never an individual visitor. Cloudflare describes this service at cloudflare.com/web-analytics and its handling of data in its privacy policy. The App itself contains no analytics of any kind.
• Fonts and media. The Site's typefaces, images and video are served from the Site itself. No page requests anything from Google, a font service, a video platform or any other third party.
• Browser storage. The Site stores a small amount of data in your own browser's local storage, on your device only: your light or dark theme choice, the rules you create in the interactive demo picker, and whether you have dismissed the introductory card on the home page. This data never leaves your browser, is not transmitted to us or to anyone, and can be cleared through your browser's settings.
• Links. The Site links to the Mac App Store and to a support email address. Following those links takes you to Apple or to your email client, each of which operates under its own terms.

We engage no data processors, because we process no data. The following third parties may nonetheless process information as a consequence of your use of the Service, in each case independently of us and under their own terms:

• Apple Inc. Distribution through the Mac App Store, purchase processing through StoreKit, the optional iCloud key value store, Spotlight indexing on your Mac, and the operating system features the App relies on. Apple's privacy policy is at apple.com/legal/privacy.
• Anthropic, PBC. Only if you add your own API key, and only for the features described in Section 6.3.
• Netlify, Inc. and Cloudflare, Inc. Hosting and delivery of the Site, and Cloudflare's count of visits to it, as described in Section 11.
• The destinations of your links. The websites and applications the App opens for you, and, when Link Scan runs, the servers it contacts on your behalf.

Because we hold nothing, there is nothing for us to retain or delete. The data on your Mac is retained until you remove it, as follows:

• Routing history and remembered links: erase them at any time with Forget Everything under Settings, Intelligence, or in the Recents window. The file is deleted from disk immediately and the Spotlight index is cleared with it. Individual entries can be removed from the Recents window.
• Rules and settings: delete individual rules under Settings, Rules, or remove everything by deleting the App, which removes its sandbox container. A rules list you have synchronised to iCloud can be removed from iCloud by turning synchronisation off and deleting the rules, or through Apple's own iCloud management tools.
• Keychain items: macOS deliberately preserves Keychain items, including the trial date and your optional API key, after an application is deleted, so that they survive a reinstall. If you want them removed, open Keychain Access, search for site.clickflick.flick and delete the items. We state this because most developers do not, and you are entitled to know exactly what remains.
• Site browser storage: clear it through your browser's settings for clickflick.site.

The App runs inside the macOS App Sandbox with the minimum entitlements it requires: outbound network access for the five situations in Section 6, read access to files you explicitly select in an open panel, the iCloud key value store for the optional rules synchronisation, and Apple Events automation restricted to the browsers that Send this tab supports. The App is signed and notarised through Apple, runs with the hardened runtime, loads no remote code and embeds no third party binaries. Secrets are held in the Keychain and encrypted by macOS.

No software is free of defects. If you believe you have found a security or privacy weakness in the App or the Site, please report it to the address in Section 20 so that we can address it.

The App is rated 4+ on the Mac App Store. It collects no information from anyone, which includes children. There are no accounts to create and no information to submit. If you are a parent or guardian and believe that a child has provided us with personal information in some way we have not anticipated, please contact us and we will address it.

Depending on where you live, you may have rights under data protection law, including under the GDPR, the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"), and comparable statutes in other jurisdictions. Those rights typically include the right to access the personal data held about you, to have it corrected or erased, to restrict or object to its processing, to receive a portable copy of it, to withdraw consent, and to lodge a complaint with a supervisory authority.

The Service satisfies those rights by construction. We hold no personal data about you, so there is nothing for us to disclose, correct, erase, restrict, port or stop processing. Every item of data the App has is on your Mac, readable by you and erasable by you using the steps in Section 13. We do not sell or share personal information within the meaning of the CCPA, we do not process sensitive personal information, and we do not engage in profiling or automated decision making that produces legal or similarly significant effects.

If you nonetheless wish to exercise a right, or believe that we hold information about you, contact us using the details in Section 20. We will respond within the period required by the law that applies to you, and in any event within thirty days. We will not discriminate against you for exercising any right. If you are in the European Economic Area or the United Kingdom you also have the right to complain to the supervisory authority of your habitual residence, place of work or place of the alleged infringement.

Because we process no personal data through the Service, no legal basis under Article 6 of the GDPR is engaged by us, and we transfer no personal data across borders. Where Apple, Anthropic, Netlify or Cloudflare process information as described in this Policy, they do so as independent controllers, or as service providers acting on your instruction, under their own legal bases and their own transfer mechanisms, which are described in their respective privacy policies.

Apple requires every application on the Mac App Store to declare the categories of data it collects. Our declaration is "Data Not Collected" in every category. Our privacy manifest declares no tracking, no tracking domains and no collected data types, and lists a single required reason API, the user defaults API, for the App's own preferences. This Policy is intended to be consistent with that declaration in every respect, and if you ever find that it is not, we ask you to tell us.

If the App's data practices ever change, we will update this Policy, change the date at the top of it, and describe the change in the release notes of the App version that introduces it. Where a change would materially reduce your privacy, we will present it prominently in the App before the change takes effect and, where the law requires it, seek your consent. Continued use of the Service after a change takes effect constitutes acceptance of the revised Policy to the extent the law permits.

The 2.0 update added the optional iCloud rules synchronisation, the optional full link memory with Spotlight indexing, email handling, Send this tab and the Safari extension described above. None of them sends anything to us, and the central statement of this Policy is unchanged: no collection, ever.

Questions, requests and complaints concerning this Policy or your privacy may be addressed to Abdul Rehman Haider at [email protected]. We aim to acknowledge every message within five business days.