Privacy Policy

Introduction

WunderPen is a macOS menu bar application that uses AI to correct, improve, and transform your writing directly inside any application. This privacy policy explains how WunderPen handles your data.

Core Principle

WunderPen is designed with privacy as a first-class priority. The app itself has no server, no backend, no analytics, no telemetry, and no user accounts. It is a standalone macOS application.

What Data is Processed

When you trigger a correction, the currently selected text in the active application is read and sent to the configured AI provider for processing. The corrected text is returned and used to replace the original selection. That is the only data WunderPen touches.

Data Flow by AI Provider

Ollama (Local AI)

• •Selected text is sent to the Ollama server running on your own Mac at localhost:11434
• •No data ever leaves your computer
• •No network requests are made to any external server
• •WunderPen does not store, log, or cache the text or the AI response

OpenAI (Cloud AI)

• •Selected text is sent directly from your Mac to OpenAI's API at api.openai.com via HTTPS
• •There is no intermediary server. WunderPen does not relay, proxy, or store the request or response
• •The request is authenticated using your own OpenAI API key
• •The API key is stored in the macOS Keychain — Apple's secure, encrypted credential storage — not in UserDefaults, not in a file, not in plain text
• •OpenAI's own data retention and privacy policies apply to the API request
• •WunderPen does not store, log, or cache the text sent to OpenAI or the response received

What Data is Stored on Your Device

What Data is NOT Collected

• •No analytics or telemetry — WunderPen does not track usage, sessions, feature usage, or any behavioral data
• •No crash reporting — No Sentry, no Firebase, no Crashlytics
• •No user accounts — There is no sign-up, login, or user profile
• •No advertising — No ads, no ad SDKs, no advertising identifiers
• •No tracking — No tracking of any kind
• •No device fingerprinting — WunderPen does not read device identifiers, hardware info, or system configuration
• •No clipboard monitoring — WunderPen only accesses the clipboard during an active correction to save/restore its contents
• •No text logging — Text being corrected is never written to disk, never logged, and never retained in memory after correction

Third-Party Services

WunderPen does not include any other third-party SDKs, frameworks, or services. There are no analytics SDKs, no social media SDKs, no advertising SDKs.

Accessibility Permission

WunderPen requires macOS Accessibility permission to:

1. Read the currently selected text from the focused application
2. Replace the selected text with the corrected version

This is the core mechanism of the app. Without this permission, WunderPen falls back to simulated keyboard shortcuts (Cmd+C to copy, Cmd+V to paste), which is less reliable but still functional.

WunderPen only uses this permission when you explicitly trigger a correction (by pressing the keyboard shortcut or clicking a menu item). It never reads text unprompted or in the background.

Network Connections

No other network connections are made. WunderPen does not phone home, check for updates over the network, or communicate with any other server.

App Sandbox

WunderPen runs inside Apple's App Sandbox with the following entitlements:

• •com.apple.security.app-sandbox — enabled (sandboxed)
• •com.apple.security.network.client — outgoing network connections (required for API calls)

No file system access, no camera, no microphone, no location, no contacts, no calendar.

Children's Privacy

WunderPen is not directed at children under the age of 13. It does not knowingly collect any personal information from children.

Data Retention

WunderPen retains no user-generated content. Text processed during corrections exists only in memory for the duration of the correction and is immediately discarded. Settings and preferences persist on-device in UserDefaults and Keychain until you change them or uninstall the app.

Your Rights

Since WunderPen does not collect or store personal data on any server, there is no user data to access, export, or delete from a remote service. All data is stored locally on your Mac and can be removed by:

1. Deleting the app
2. Removing com.wunderpen.app from ~/Library/Preferences/
3. Removing the Keychain entry for com.wunderpen.app (if OpenAI API key was stored)

Changes to This Policy

If this privacy policy changes, users will be notified through the App Store update notes.

Contact

For privacy questions: [email protected]