Legal
Fossick — Privacy Policy
Fossick is built privacy-first. This policy explains the little data we do handle.
What stays on your device (we never see it)
- Your documents and their contents. Indexing, embeddings, and search all run locally on your machine. Document text is never uploaded to us or any third party. The search index is stored only in your app’s local data folder.
What we collect (kept to a minimum)
- Account data: your email address and an encrypted (hashed) password, to authenticate you. Stored via our auth provider, Supabase. If you sign in with Google or Microsoft, we receive your email address from that provider instead of a password.
- Purchase/billing data: handled by our payment processor, Stripe. We do not store your full card details. We keep a record of your licence status and the email it’s tied to.
- Consent record: the date and version of the Terms you accepted at signup.
- Install count: when you first install Fossick, the app lets us know it’s up and running — along with the app version and your operating system — so we can see how many people are using it. That’s the whole of it. It never includes your search terms, your file or folder names, file paths, or anything inside your documents, and it’s tied only to a random ID created on your own device, not to your name, email, or account. If you’d prefer not to send it, just email us and we’ll help.
- Website analytics: our website (not the app) uses Umami, a privacy-friendly analytics tool we run on our own servers — no Google Analytics, no advertising networks, and no tracking cookies. It records aggregate visit data such as page views and which buttons or links are clicked, so we can see what’s helpful. It does not build advertising profiles or follow you across other websites.
What we do not do
- We do not upload, read, or store your documents.
- We do not sell your data or use it for advertising.
- We never see, store, or transmit your search terms.
Third parties
- Supabase — authentication and licence records.
- Stripe — payment processing.
These providers process data on our behalf under their own privacy terms.
Data retention & your rights
We keep account and licence data while your account exists. You can request access to, correction of, or deletion of your account data by contacting us. Deleting your account removes your email and licence record from our systems; your local index is removed when you uninstall the app or delete its data folder.
Security
Passwords are hashed; communication with our servers uses HTTPS. No system is perfectly secure, but because your documents never leave your device, the most sensitive data is never exposed to us.
Changes
Material changes are reflected by a new version date above.
Contact
getfossick@gmail.com — Australia