Your layout stays on your Mac.

01What Workflo stores — and where

Workflo records window positions, sizes, and the apps they belong to, plus the desks, scenes, and rules you create. All of it is written as plain, human-readable JSON to ~/Library/Application Support/Workflo/ on your Mac. You can open it, back it up, or delete it at any time; deleting the folder removes everything Workflo knows.

Workflo never reads the contents of your windows — it works with their frames (position and size), titles used for matching, and owning apps. It does not capture your screen.

02What we don't collect

• No accounts. There is nothing to sign up for and no identity attached to your use of the app.
• No window contents, ever. Analytics events never include window contents, titles, layouts, scenes, rules, or calendar events.
• No ad SDKs, no data brokers. The only third-party SDKs that touch the network are Sparkle for updates and Mixpanel for the anonymous analytics in section 05. We do not sell or share your data for advertising.
• No sale or sharing of your data. Your layouts, scenes, and rules never leave your Mac, so there is nothing here to sell or share.

03Permissions, and why they're asked

Accessibility is required — it is the macOS API that allows one app to move and resize another app's windows, which is Workflo's entire job. It is requested once during onboarding and can be revoked in System Settings → Privacy & Security.

Calendar access is requested only if you create a calendar trigger (applying a scene before an event with a video link). Workflo reads upcoming events locally to time the trigger; event data never leaves your Mac. If you never add a calendar trigger, access is never requested.

04When Workflo uses the network

Workflo checks for updates using Sparkle, the standard open-source macOS update framework. That check fetches a small feed file (the appcast) from Lucid Labs' content delivery network. Like any web request, it exposes your IP address and a user-agent string to the CDN in transit; Workflo attaches no identifier, and Lucid Labs does not log or analyze these requests. Updates themselves are EdDSA-signed and verified on your Mac before installing.

You can disable automatic update checks in Settings and check manually whenever you choose.

Licence activation. If you buy Workflo and enter your key, the app sends that key to Polar, our payment provider, to activate it and re-checks it about once a week so a refunded or revoked key stops working. Nothing about your windows or your Mac's contents is involved.

The free trial. While you are on the trial and have not entered a licence key, Workflo asks Lucid Labs once every few hours how many days you have left. It sends a single value: a one-way hash derived from your Mac's hardware identifiers and a secret built into the app. The raw identifiers never leave your Mac and the hash cannot be reversed back into them. We store that hash and the date we first saw it — nothing else, no account, no email, no IP log. This exists so that reinstalling the app doesn't hand out a fresh trial; it is not used to profile or track you, and it stops entirely once you enter a licence key. If the check fails or you are offline, Workflo simply carries on with the dates it already has.

05Usage analytics, and how to turn them off

Workflo sends anonymous usage analytics through Mixpanel: events like "app opened" and "windows restored", with coarse details such as how many windows were put back, the app version, and the macOS version. Identity is a random install identifier, or the licence activation ID once you activate — never your name or email, which we do not have. Mixpanel processes this on our behalf and not for its own purposes. Turn it off any time in Settings → General → Privacy; nothing is sent from then on.

06This website

getworkflo.app uses Google Analytics and Microsoft Clarity to understand how visitors use the site; Clarity may record anonymized interactions such as clicks and scrolls. These run on the website only — the app contains neither.

07Your data, your call

Email us to ask what we hold or to have it deleted. Honestly, it is very little: the trial hash (kept as long as the trial system exists, because deleting it would hand out fresh trials) and anonymous analytics events that cannot be traced back to you.

08Changes to this policy

If the policy changes, the effective date above changes with it, and material changes will be called out in the release notes of the version that ships them. The current version always lives at this page.

09Contact

Questions about privacy? Email Lucid Labs at contact@getworkflo.app.