Privacy Policy
Last updated 16 October 2026
Crisply runs on your own device, and your writing never comes to us: it goes from your device to the model provider you choose. What we do hold is an account, so that a free trial and a purchase belong to someone. This page says exactly what that account keeps, what the app stores on your device, and who else is involved when you use it.
Who this is from
Crisply is published by WORKLOOM SOLUTIONS PRIVATE LIMITED, Cowrks, D5, RMZ Centennial, Mahadevapura, Bengaluru, Karnataka 560048, India. In this policy “we” means WORKLOOM SOLUTIONS PRIVATE LIMITED and “the app” means the Crisply applications for Mac and Android. Questions about anything here go to support@workloom.dev.
What we keep
- To use Crisply you sign in with Google, or on the Mac with Apple. We get your email address, or the relay address Apple gives us if you hide yours, and on Android also the name and profile photo link Google shares, and keep them in Firebase Authentication.
- For each account we keep when its trial started and ends on each platform.
- When the app asks what your account can use, it sends a one-way hash of the device’s id. We keep that hash only when the device starts a trial: with the trial’s dates, linked to no account, so that each device gets one trial.
- For each purchase we keep the store, the date, and the store’s own reference for it, which for Google Play includes the region. For Mac purchases we also keep the email address it was paid with, the amount, how it was paid, and the payment ID. When you start a Mac purchase, we keep your account’s email with it, so the payment page can show it.
- The app asks our server what your account can use once a day, and also when you sign in and after you buy. While it’s locked, it also asks each time it’s opened or you try a rewrite, and on Android just before you buy, so a purchase made on your other device shows up straight away. The Mac app’s update check sends no id.
- The text you rewrite and your API keys never reach us.
- Deleting your account removes it and its trials. Purchase records stay, without the account, for as long as tax law requires. Device trial records stay, since they name no one.
- Razorpay processes Mac payments. Google processes Google Play payments and Google sign-in, and Apple processes Sign in with Apple. Cloudflare runs our server, which every request from the app passes through, and holds these records.
We use these records to decide what your account can use, and to answer you when you write to us. We do not sell them or share them for advertising. Deleting your account can be done in the app or by email.
What the app stores on your Mac
Everything the app remembers stays in your own account on your own computer, in your Library folder, and goes away when you delete the app and that folder.
- Settings and profiles: which provider answers, which model, and the facts you have told it about how you work. Stored as a plain file.
- Prompt library: the prompts you save by hand, with their tags. Stored as a plain file.
- Refinement history: the text you refined, the result you accepted, and which provider it was sent to. Only refinements you accept or copy are recorded, never ones you cancel. Recording can be switched off entirely, and the history can be cleared at any time.
- API keys: held in the macOS Keychain, one entry per provider, never in any settings file. Another application needs your permission to read them.
- Your sign-in: the session is held in the macOS Keychain, and our server’s last answer about what your account can use is kept with the settings. That answer is signed by our server, so editing it changes nothing.
The settings, library and history files are not encrypted. They sit inside your user account and are protected by your Mac’s own account security and whatever disk encryption you have turned on. Anyone with access to your unlocked Mac can read them, and so can anything you have given full disk access to. If that matters for your work, switch history recording off.
What leaves your Mac, and when
Your text is sent to one place: the model provider you chose in the app’s settings. It is sent at the moment you press Crisp it, Polish, or their keyboard shortcut, and at no other time. Nothing is sent while you type.
- If you chose a model running on your own machine, such as Ollama or LM Studio, your text never leaves the machine at all.
- If you chose a coding tool already installed on your Mac, such as Claude Code or Codex, the app runs that tool locally and the tool contacts its own service under your existing account with them.
- If you chose an API provider, such as Anthropic, OpenAI or OpenRouter, your text goes directly from your Mac to that provider using your own key.
In every case the request goes from your computer to that provider. It does not pass through us, and we have no way to see it. What the provider then does with your text is governed by their privacy policy and your agreement with them, not by this one. We would encourage you to read theirs, particularly on whether they train on submitted content.
Apart from your text, the app talks to our server about your account, as described under “What we keep”, and to Google or Apple when you sign in.
What the app reads on your Mac
To replace text where you are typing, the app needs macOS Accessibility permission. You grant that yourself in System Settings and can withdraw it at any time, and the app explains what it is for before asking.
- It reads the contents of the one text field that has your cursor, at the moment you press a button, and not at any other time.
- It reads the name of the application in front, so it knows whether you are writing a prompt or an email and which of your profiles applies.
- Password managers and Keychain Access are permanently blocked and cannot be re-enabled. Terminal applications are blocked until you allow them one at a time.
- Apps you list yourself are ignored completely.
What the app stores on your phone
On Android, everything the app remembers is kept in its own private storage on the phone. Other apps can’t read it, it isn’t backed up to your Google account, and uninstalling the app removes all of it. When you move to a new phone, Android’s own transfer can copy it across.
- Settings, profiles, the prompt library and your refinement history, which you can clear at any time.
- Your API key, which is only ever sent to the provider it belongs to.
- Your sign-in: the session, and our server’s last answer about what your account can use.
What the app reads on your phone
To rewrite text where you’re typing, the Android app uses Android’s Accessibility service. You turn it on yourself in Settings, after the app has explained what it reads, and you can turn it off at any time.
- It notes which text field has focus, so it knows where you are typing. It doesn’t read the field’s text then, and it never records keystrokes or anything else on screen.
- When you tap the Crisply pill, it reads the text in that one field, and when you accept a rewrite, it writes the result back.
- It notes which app the field belongs to, so the right profile applies.
- That text goes only to the model provider you chose, straight from your phone with your own key, exactly as on the Mac.
- The floating pill uses the permission to display over other apps. It draws the pill and nothing else.
This website
This site sets no cookies of its own, runs no analytics and embeds no third-party trackers. Our hosting provider records ordinary server logs, which include IP addresses and are kept only for security and reliability. We do not link them to anything else and do not use them to build a profile of you.
The checkout page is the one place another company’s code runs. When you press Pay there, it loads Razorpay’s payment form, which collects your card, UPI or bank details itself, under Razorpay’s own privacy policy. Those details go to Razorpay, not to us.
Your rights
You can delete your account at any time, in the app or by email, and the account deletion page says how and what is kept. To ask for a copy of what we hold about you, or to have it corrected, write to support@workloom.dev and we will answer.
What the app stores on your device is already in your hands. On the Mac it can export everything it stores to a single file, and clearing the history or library removes it immediately and permanently.
Children
Crisply is not directed at children, and we do not knowingly keep an account for a child. The app is intended for people old enough to hold a Google account or an Apple Account, and an account with whichever model provider they choose.
Changes
If this policy changes, the date at the top of this page changes with it, and a change that affects what the app does with your text will be described in the release notes of the version that makes it. We will not make a change of that kind quietly.
Contact
WORKLOOM SOLUTIONS PRIVATE LIMITED, Cowrks, D5, RMZ Centennial, Mahadevapura, Bengaluru, Karnataka 560048, India. Email support@workloom.dev. This policy is governed by the law of India.