Your files stay yours.

Clementine converts, edits, compresses, transcribes and reads text from files on your Mac. Those files are not sent to us or anyone else. Clementine has no account, no advertising and no tracking. Settings stay on your Mac; passwords and keys are kept in your Mac’s Keychain.

Transcription uses Apple’s on-device speech recognition; recognizing text in images uses Apple’s Vision framework on your Mac. Audio and images are not uploaded.

The first App Store release of Clementine does not connect to the internet. The sections below describe share links, the browser dashboard and Google Drive, which are coming in a future update; they apply only once those features are released and you choose to use them.

Only when you choose Copy Share Link is the file you picked uploaded, so the people you send the link to can open it. We store:

• the file and its name, type and size, and the link settings you choose (expiry, password, download limit, view-only, ask for email);
• a random identifier for your Mac (no name or email), so your Mac can manage its own links;
• for each visit to a link: the time, whether it was a view, a download or a link preview, the approximate country and city, the device type and browser, and the website the visitor came from. IP addresses are not stored. To limit abuse, the number of new Macs per network per day is counted using an IP fingerprint that changes every day and cannot be traced back;
• if you turn on “Ask for email”, the email address (and optional name) a visitor enters — they are told it will be shared with you.

Files are deleted when a link expires or you turn it off or delete it. Visit records are kept for up to 180 days. Files reported as abusive may be taken down.

When you open the dashboard from the app, a one-time code signs your browser in for 30 days. It can show your links and their statistics and turn links off; it cannot upload files. Signing out ends the session.

If you connect Google Drive, Clementine uses Google’s drive.file permission, which only allows access to files Clementine itself uploads. Your sign-in token stays in your Mac’s Keychain. Google’s privacy policy applies to files stored in your Drive.

Once released, share links will run on Cloudflare (storage and delivery). Cloudflare processes requests to deliver them and provides the approximate location of visits.

Once share links are released, you can turn off or delete any link at any time from the app or the dashboard, which deletes the file. To ask us to delete everything linked to your Mac’s identifier, or with any question, write to support@getclementine.app.

Clementine is not directed to children under 13.

If this policy changes, we’ll update this page and the date above.