Privacy
Pawlish is built so your text stays between you and your AI service. This page covers two things: the app and this website.
Last updated: October 2026.
The Pawlish app
The text you select goes straight to the AI service you choose, or to your local model. It never passes through a server of ours, and its developers don’t supervise it.
What each service does with your text depends on its own terms; read them before using sensitive information. Your API keys are stored only in your Mac’s Keychain.
Pawlish’s only telemetry is error reports. When something fails, the app sends PostHog the type of error, the kind of AI service (OpenAI, Anthropic, local or other) and the Pawlish and macOS versions. They never include your text, your prompts, your API keys or your services’ addresses, and they aren’t linked to any person. There are no usage statistics and no tracking.
The other connections are the update check on GitHub, the license check on Polar, the store that sells Pawlish, and the AI service you choose. The license check sends your license key and a random label for this Mac when you activate it and now and then afterwards, never anything about your text or how you use the app; during the free trial there is none.
The diagnostic log stays on your Mac (Library/Logs), never includes your text, your API keys or your license key, and notes every error report that is sent.
What an error report contains
Reports go to PostHog (US region) only when something fails because of a defect or incompatibility in the app, not because of a wrong API key or no internet connection. Each one holds:
| What | Example |
|---|---|
| Error type and code | AIError.http · HTTP 400 |
| What the app was doing | action, connection-test |
| Kind of AI service | openai, anthropic, local or other (never its address) |
| Versions | Pawlish and macOS |
| A random ID | New at every launch and not linked to you. Pawlish asks PostHog not to store your IP address. |
Never included: the text you process, your prompts, your API keys, addresses, file paths, or the messages that a provider or macOS add to an error.
Every report is also written to the diagnostic log on your Mac, so you can see exactly what was sent.
This website
pawlish.app measures visits and clicks with PostHog (US cloud), to see what people read and what confuses them. It runs in cookieless mode:
- No cookies, and no local or session storage for statistics. Nothing is saved in your browser to recognize you.
- No visitor profiles and no tracking across sites. Visitors are told apart for a single day with an anonymous hash that PostHog’s servers compute and change every day.
- What is recorded: the pages you open, how long you stay and how far you scroll, where you click and move the pointer (as a heatmap), where you came from, and your browser, system, screen size and language. Never text you type: this site has no forms.
- The site honors Do Not Track and Global Privacy Control. If your browser sends either signal, nothing is recorded.
The only things the site keeps in your browser are choices you make yourself, such as light or dark theme, language, or turning statistics off. They stay on your device and are never sent anywhere.
The app itself never contacts PostHog for statistics: its only telemetry is the error reports described above.
Questions
Open an issue on GitHub and we’ll answer there.