Pressto Privacy

Last updated: July 26, 2026

Applies to: Pressto 0.1 beta

Operator: John Wilson, British Columbia, Canada

Contact: [email protected]

Publication note: This accurately describes the app's current data handling. Before offering Pressto outside Canada, confirm whether a postal address or a named representative is required in that jurisdiction, and have the policy reviewed where it will be offered.

Summary

Pressto has no account system, advertising, analytics, developer-operated backend, or transform history. The developer does not receive the text you transform, your presets, or your API keys.

When you choose a cloud provider, Pressto sends the text, preset instructions, selected model identifier, and authentication needed for that request directly from your Mac to that provider. When you choose On Device, the transform stays on the Mac.

Information stored on your Mac

Pressto stores:

  • Preset configuration, including names, instructions, provider choices, model identifiers, and custom endpoint URLs, in the app's local preferences.
  • API keys in the macOS Keychain. Keys are not stored in presets or exported preset packs.
  • A small number of app preferences, such as whether the first-run panel has appeared and the configured keyboard shortcut.

Pressto keeps a successfully read API key in process memory for the remainder of the current app session to avoid repeated Keychain access. That cache is never written to disk.

Pressto does not persist or log the input text or transformed output. Text remains in the panel only for the current interaction and is cleared when the panel closes.

Cloud transforms

For a cloud preset, Pressto makes an HTTPS request directly to the provider selected in that preset:

  • OpenAI
  • Anthropic
  • Google
  • xAI
  • Groq
  • Cerebras
  • A custom OpenAI-compatible endpoint explicitly entered by the user

The request contains the input text, preset instructions, selected model, and the API key or other authentication required by the endpoint. Each provider is an independent third party and handles the request under its own terms and privacy policy. Pressto does not proxy or retain the request.

Custom endpoints use HTTPS except that Pressto permits plain HTTP for localhost and 127.0.0.1, so local model servers can work without a local TLS setup.

On Device transforms

When On Device is selected, Pressto uses Apple's Foundation Models framework. Pressto does not send the transform to a Pressto server or to a third-party model provider.

Pasteboard

Pressto never reads the pasteboard. After a successful transform that changed the text, it writes the result to the general pasteboard so you can paste it elsewhere.

The write is marked as current-host-only to keep it off Universal Clipboard and includes the conventional concealed marker used by many pasteboard managers. Third-party pasteboard software controls whether it honors that marker.

Preset files

Preset packs are written only when you choose to export them and read only when you choose to import them. They contain preset configuration, not API keys. You control where exported files are saved and with whom they are shared.

Diagnostics and updates

Pressto has no analytics or developer-operated crash reporting. Diagnostic logs contain operational metadata, such as provider identifiers, response sizes, and timing, but not transform text, model output, or API keys.

The public build uses Sparkle to check a Pressto-operated HTTPS feed for updates. Automatic checks follow the preference you choose in the app; you can also request a check manually. Pressto disables Sparkle's system-profile submission. The update host can receive ordinary connection information such as an IP address and request headers, but Pressto does not attach transform text, presets, API keys, or a system profile to an update request.

Retention and deletion

  • Panel text is cleared when the panel closes.
  • Presets remain until you edit or delete them, or remove Pressto's local preferences.
  • API keys remain in the macOS Keychain until you remove them in Pressto or Keychain Access. Keychain items can remain after the app itself is deleted.
  • Exported preset packs remain wherever you saved them until you delete them.

Because Pressto has no account or developer-operated backend, there is no server-side Pressto profile or transform history to access or delete.

Children

Pressto is a general-purpose writing utility and is not directed to children. It does not knowingly collect personal information from children.

Changes

This document will be updated when Pressto's data handling changes. Material changes should be disclosed with the release that introduces them.

Contact

Privacy questions and requests: [email protected].

Pressto is operated by John Wilson in British Columbia, Canada. Because Pressto has no account system and no developer-operated backend, a request to access or delete personal data held by the developer will find nothing to return: the data described above stays on your Mac. Requests about data held by a model provider must go to that provider.