Privacy Policy

Strofi is a local-first macOS application that helps you remember, revisit, and connect the files, web pages, and app-based items you use while working.

This Privacy Policy applies to the Strofi macOS app and the services used to distribute and update the app (collectively, the Services). "Personal Data" and "personal information" mean information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual. "Activity Data" means the locally processed activity metadata described in Section 1.A. Activity Data is separate from the Product Analytics described in Section 1.B.

Strofi does not require an account, and the operator does not maintain a Strofi account database or backend store for Activity Data. Strofi stores Activity Data on your Mac, not on Strofi's servers. If you enable Local MCP, software running on your Mac can request the activity information allowed by your sharing settings.

If Share Analytics is enabled, Strofi sends limited product-usage and technical analytics to Google Analytics for Firebase. These analytics are kept separate from your Activity Data and do not include document titles, app or service names from your activity, URLs, file paths, document contents, or your activity history.

The limited Product Analytics and Download and Update Request Data described in this policy may be processed through the third-party services identified below.

Before Activity Data collection begins on first launch, Strofi asks you to agree to the Terms of Use and acknowledge that you have reviewed this Privacy Policy. If you do not complete this step, collection does not begin and you cannot use Strofi. Share Analytics is controlled separately as described in Section 5.

Strofi obtains information in two ways: locally through macOS system APIs and permissions when you use supported items, and automatically through enabled analytics or the infrastructure that serves app downloads and updates. Activity Data obtained through macOS is processed locally and is not sent to Strofi.

A. Activity Data

To create your activity timeline, reopen previously used items, and recommend related items, Strofi may process the following information locally on your Mac:

• App names and bundle identifiers
• File, window, tab, and item titles
• Item types, such as files, web pages, and app-based items
• File paths, file URLs, full web URLs, deep links, and app-specific identifiers used to reopen an item
• Known website or service classifications
• Reopening availability and permission status
• Start time, end time, and duration of an activity
• The item used immediately before another item
• Locally generated identifiers used to distinguish items
• Relationships and recommendations derived from how items are used together

Strofi does not scan or index every file on your Mac. It records only supported items that you actually open or use in the foreground.

Strofi processes only the metadata described above. In particular, it does not access document bodies, screen contents, keyboard input, clipboard contents, or audio.

B. Product Analytics

Share Analytics is enabled by default. You can turn it off at any time in Strofi Settings.

When Share Analytics is enabled, Strofi may send the following information to Google Analytics for Firebase:

• Strofi version, build number, and bundle identifier
• Operating system, device type, language, and region
• Firebase SDK-managed installation and session identifiers
• Automatically collected Google Analytics events
• Approved product-usage events
• Coarse feature states, product-experiment assignments and results, and performance ranges
• Technical network and SDK metadata required to operate the analytics service

Strofi does not include the following information in analytics events, parameters, or user properties:

• Document, file, window, or tab titles
• App names or third-party bundle identifiers
• Website or service names
• URLs, domains, file paths, or reopening information
• Document contents
• Search queries or assistant responses
• Strofi resource identifiers or their hashes
• Exact activity times, relationship scores, or recommendation evidence
• Authentication credentials, tokens, or encryption keys

Strofi does not use advertising identifiers and does not connect Firebase Analytics to Google Ads or AdMob.

Strofi does not sell your information or use it for advertising or cross-context behavioral profiling.

C. Download and Update Request Data

Strofi distributes app downloads and updates through Cloudflare R2 at updates.strofi.app. When you request a download or update, Cloudflare may process basic request information, such as:

• IP address
• Browser or user-agent information
• Requested file or path
• Request date and time
• Response status, traffic-routing, security, and error information

Strofi has not enabled the optional Cloudflare R2 Data Access Logs feature for the download bucket. Cloudflare R2 provides service metrics for up to 31 days. Depending on the query, these metrics may include operation type and status, bucket or object name, response status code, and request time, but do not expose the requester's IP address or user agent through the R2 metrics dataset.

D. Local Preference and Policy Records

Strofi stores app preferences and a local onboarding record showing that you accepted the Terms of Use and acknowledged the Privacy Policy. This record includes an onboarding record version and the completion time, but not separate versions of the two documents. Strofi does not ask for or store your age, date of birth, or identity document.

E. Local MCP

Local MCP is off by default. Once you turn it on, compatible software on the same Mac, including supported AI apps and other apps you configure, can request the activity information allowed by your settings. Strofi does not verify every receiving app, and that app may send the information to its AI provider.

Strofi uses locally processed Activity Data to:

• Build your activity timeline
• Help you return to previously used items
• Identify items that are commonly used together
• Recommend items related to your current work
• Maintain the reliability and security of local app features

When Share Analytics is enabled, Product Analytics is used to:

• Understand whether Strofi features are being used
• Identify broad reliability and performance issues
• Improve navigation and product usability
• Evaluate overall product quality
• Support product planning and development through product experiments

Automated Processing and Recommendations

Strofi automatically analyzes the timing and sequence of Activity Data on your Mac to identify items used together and recommend items related to your current work. This processing occurs locally. These recommendations are assistive only and do not make decisions that produce legal or similarly significant effects concerning you.

Activity Data

Activity Data is stored locally on your Mac.

Sensitive metadata, including titles, file paths, full URLs, and app-specific reopening information, is encrypted using AES-GCM. Strofi uses keyed HMAC-SHA256 identifiers when calculating relationships so that the original values do not need to be used directly.

Activity Data remains on your Mac until you select Delete Activity History or Uninstall Strofi. Delete Activity History permanently deletes the locally stored activity events, work sessions, and resource metadata. Relationships and recommendations derived from those deleted records are no longer available. It does not delete app settings, the local record of your Terms of Use agreement and Privacy Policy acknowledgement, the favicon cache, metadata encryption keys, or Product Analytics previously sent to Google.

Uninstall Strofi first verifies that the app is an official Strofi installation in an allowed Applications folder and moves the app to the Trash. If the app cannot be moved to the Trash, Strofi does not begin local data cleanup. After a successful move, Strofi stops its local services and attempts to delete the Activity Data and its local database files, the favicon cache, login item, metadata encryption keys, Firebase Analytics data stored locally on the Mac, app settings, and local policy records. If any required cleanup step fails, Strofi reports that some local data could not be removed. Deleted local data cannot be recovered.

Neither action deletes Product Analytics previously sent to Google, Download and Update Request Data processed by the applicable provider, or activity information already provided through Local MCP. The receiving software and, if applicable, its AI provider determine how they use and retain that information.

Local Preference and Policy Records

These records remain locally on your Mac for as long as needed to apply your choices and retain your onboarding acknowledgement record. They are deleted when you select Uninstall Strofi.

Product Analytics

Strofi's Google Analytics property is configured to retain event-level analytics data for up to 14 months. The retention period for user-level identifier data resets with each new activity and expires 14 months after the user's most recent activity.

Strofi may also export approved analytics events to Google BigQuery in the Seoul region. Raw exported event tables are configured to expire after 14 months.

Google notes that its Analytics retention setting applies to user-level and event-level data and may not apply in the same way to standard aggregated reports. See Google Analytics data retention.

Download and Update Logs

Cloudflare R2 service metrics are retained for up to 31 days. Strofi has not enabled optional R2 Data Access Logs. Cloudflare may retain other request, network, and security information for as long as necessary to provide its services, comply with legal obligations, and fulfill the other purposes described in its privacy policy and data processing terms.

Strofi uses the following third-party services:

Software receiving activity information through Local MCP is separate from the analytics and app-distribution providers listed above.

Google describes its Firebase data practices in Privacy and Security in Firebase. Google's handling of personal information is also governed by the Google Privacy Policy, applicable Google Ads Data Processing Terms, and Firebase Data Processing and Security Terms.

Cloudflare's processing of download and update request information is governed by the Cloudflare Privacy Policy and the applicable Cloudflare Data Processing Addendum.

Strofi uses macOS permissions and system APIs to detect supported foreground activity. This local use does not create a Strofi cloud account or send your Activity Data to Apple.

Strofi does not maintain server-side user profiles or a backend store of Activity Data. Each third-party service processes only the categories described in this policy for its stated purpose.

During initial onboarding, you must agree to the Terms of Use and acknowledge that you have reviewed this Privacy Policy before Strofi begins collecting Activity Data. If you do not complete this step, collection does not begin and Strofi cannot be used. Strofi records your acceptance and acknowledgement, the onboarding record version, and the completion time only on your Mac.

You may:

• Turn off Share Analytics at any time in Strofi Settings
• Turn Local MCP on or off and change its sharing settings in Connections
• Quit Strofi to stop future Activity Data collection
• Revoke Strofi's macOS permissions in System Settings
• Permanently delete locally stored Activity Data by selecting Delete Activity History
• Move the app to the Trash and initiate deletion of the local Strofi data described in Section 3 by selecting Uninstall Strofi

Turning off Share Analytics immediately stops future Product Analytics collection and participation in active product experiments. It remains off when Strofi is reopened. It does not affect Strofi's local timeline, relationship, recommendation, or reopening features.

Your agreement to the Terms of Use and acknowledgement of the Privacy Policy do not override your separate Share Analytics choice.

Because Strofi does not require an account and does not receive your Activity Data, the operator generally cannot access, view, or remotely delete the activity history stored on your Mac.

Depending on your location, Strofi may process information on the following legal bases:

• To provide the app and features you request
• With your consent when Strofi specifically asks for it
• For legitimate interests in maintaining, securing, and improving Strofi, where permitted by law
• To comply with applicable legal obligations
• To establish, exercise, or defend legal claims

Where permitted by applicable law, Strofi relies on legitimate interests to process limited Product Analytics for understanding feature usage, improving reliability and usability, and planning product development. Share Analytics is enabled by default and is not presented through a separate opt-in step. You can turn it off at any time in Strofi Settings.

Depending on where you live, you may have rights to:

• Request access to personal information associated with you
• Request correction
• Request deletion where applicable
• Restrict or object to processing
• Request data portability
• Withdraw consent
• File a complaint with a data protection authority

These rights may be limited where Strofi cannot identify the information as belonging to you or where the information exists only on your Mac and is not accessible to us.

For Activity Data stored on your Mac, you can use Delete Activity History or Uninstall Strofi as described in Sections 3 and 5. Because Strofi does not use accounts or an operator-assigned user identifier, the operator may be unable to associate previously transmitted analytics with a particular requester. The operator will nevertheless evaluate verified requests and provide assistance to the extent required by applicable law and technically possible.

The operator will respond to properly submitted and verified requests within the period required by applicable law. You may also file a complaint with the data protection authority or other supervisory authority in the place where you live, work, or believe a violation occurred.

Strofi does not sell personal information and does not share personal information for cross-context behavioral advertising.

Depending on how you use Strofi, the categories of personal information processed during the preceding 12 months may include:

• Technical identifiers, such as Firebase-managed installation or session identifiers
• Device and application information
• Internet or electronic activity information relating to Strofi feature usage

Strofi does not discriminate against users for exercising applicable privacy rights.

Activity Data is stored on your Mac. If you enable Local MCP, software receiving permitted activity information may send it to an AI provider in another country.

Strofi is distributed globally. Third-party services may process information in countries other than the country where you live.

Google Analytics for Firebase

When Share Analytics is enabled, Product Analytics is processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its affiliates and subprocessors. This information may be processed in the United States and other countries where Google or its subprocessors maintain facilities.

Google BigQuery

Strofi uses Google BigQuery under an agreement associated with a South Korean billing address. The listed Google Cloud contracting entity for South Korea is Google Cloud Korea LLC, Gangnam Finance Center, 20th Floor, 152 Teheran-ro, Gangnam-gu, Seoul, Republic of Korea. Google affiliates and subprocessors may also process information as necessary to provide the service.

The BigQuery analytics dataset is configured in the Seoul region, and raw exported event tables expire after 14 months. The dataset location does not prevent some Google service operations from occurring in other countries.

For information about Google's processing and international transfer safeguards, see the Google Ads Data Processing Terms and Firebase Data Processing and Security Terms. For Google Cloud contracting-entity and processing terms, see Google Contracting Entity and the Google Cloud Data Processing Addendum.

App Downloads and Updates

Strofi distributes app downloads and updates through Cloudflare R2, operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The R2 bucket uses Cloudflare's Asia-Pacific location setting. Cloudflare describes this setting as a best-effort location hint rather than a jurisdictional data-residency guarantee. Download and update requests may pass through Cloudflare's global network and be processed in the United States and other countries where Cloudflare or its subprocessors operate.

When you request a download or update, the request information described in Section 1.C is transmitted to Cloudflare over HTTPS for file delivery, caching, performance, security, and abuse prevention. Cloudflare R2 metrics are retained for up to 31 days, and Strofi has not enabled optional R2 Data Access Logs. Other information processed by Cloudflare is retained according to the criteria in Cloudflare's privacy policy and data processing terms.

For more information, see the Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.

Turning off Share Analytics prevents future transfers of Product Analytics and experiment participation information to Google. It does not affect Strofi's local features. If you do not want the app download or update provider to process the request information needed to provide those services, do not request a download or update.

Strofi is intended for users who are at least 16 years old and is not directed to children under 16. Strofi does not require an account and does not ask for or store a user's age or date of birth. As a result, the operator generally cannot determine a user's age unless the user, a legal guardian, or another person provides that information.

Because Strofi has no account system or backend, it cannot identify or block an individual user based on age. A user under 16 should not use Strofi. The user or legal guardian can stop local collection by quitting Strofi or revoking its macOS permissions, use Delete Activity History to remove locally stored Activity Data, or select Uninstall Strofi to move the app to the Trash and initiate deletion of the local Strofi data described in Section 3. If Strofi is offered to younger users in the future, the operator will implement the parental notice, consent, and verification measures required by applicable law before collecting their Personal Data.

Strofi uses technical and organizational measures intended to protect the information it processes. These measures include local processing, encryption of sensitive activity metadata, restricted analytics fields, access controls, and limited retention periods.

No storage or transmission system can be guaranteed to be completely secure.

Strofi may open files, websites, or third-party applications at your request. Once you interact with another application or service, its own privacy policy and terms apply.

The operator may update this Privacy Policy when Strofi's features, data practices, service providers, or legal obligations change.

If a change materially affects how personal information is processed, the operator will provide notice through the app or another appropriate method before the change takes effect where required.

Where required, Strofi may ask you to acknowledge that you have reviewed a materially updated policy before Activity Data collection resumes.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. The "Effective Date" indicates when the current version takes effect.

For privacy questions or requests, contact:

Data Controller and Operator: Jisung Kim
Email: hello@strofi.app