Privacy Policy

01The short version

ShipLocal has no server of its own. There is no account, no login, no analytics, no telemetry and no crash reporting. Flowstate Industries never receives your App Store Connect credentials, your AI provider keys, your listing copy, or any record of what you translate.

What the app needs, it keeps on your Mac. What it sends, it sends directly to Apple and to the AI provider whose key you supplied, because translating a listing and writing it back requires exactly that.

02What stays on your Mac

• —Credentials. Your App Store Connect Key ID, Issuer ID and the contents of your .p8 key, plus your Anthropic and OpenAI API keys, are stored in the macOS Keychain. If you use iCloud Keychain they sync between your own devices through Apple’s end-to-end encrypted sync; either way they never reach us. The .p8 file itself is not kept - only its contents are imported.
• —Run history. Which app and version you ran, which languages and fields, token counts, estimated and actual cost, and timestamps are written to a local database inside the app’s sandbox container.
• —Settings. Your preferences - how many languages run at once, decimal places, the model you picked - are stored in standard macOS preferences.

You can remove the credentials at any time in Settings, or with Keychain Access. Deleting the app removes its container and the run history with it.

03What leaves your Mac

Four things, and none of them go to us.

• —App Store Connect. The app calls Apple’s API directly with your key to read your listing and to write back the fields you approved. Apple’s own terms and privacy policy cover that connection.
• —Your AI provider. The metadata fields you chose to translate are sent to Anthropic or OpenAI using your own API key. That request is between you and them, under the agreement you already have with them, and their handling of API data is theirs to describe.
• —The public App Store. The app reads publicly available store listing information to show your apps’ icons and your developer name.
• —Update checks, on the direct download only. The notarized DMG checks a release feed hosted on GitHub so it can update itself. That request reaches GitHub and carries your IP address and the version you are on, as any download does. The Mac App Store build does not check for updates at all - Apple does that.

04Buying ShipLocal

• —On the Mac App Store, Apple is the seller and processes the payment. We never see your payment details. Apple gives us sales reports that do not identify you.
• —Direct, Polar is the merchant of record. They take the payment and hold your email and billing information under their own privacy policy. We receive the licence record and the email address it belongs to, which is what delivers your key and lets us answer a support request about it.

05This website

shiplocal.app is a static site. It sets no cookies, runs no analytics, embeds no trackers and has no forms. Nothing on it is personalised, and nothing you do here is recorded by us.

The host that serves it keeps ordinary web server logs, including IP addresses, as every web server does.

06Email

If you write to support@flowstateindustries.com we keep the message so we can answer it and so we have the thread if you write again. We do not add you to a mailing list; there is no mailing list.

07Children

ShipLocal is a developer tool for publishing App Store listings. It is not directed at children, and it collects nothing from anybody.

08Changes to this policy

If what the app does changes, this page changes in the same release, and the date at the top of it changes with it. The previous wording is in this site’s git history.

ShipLocal is made and sold by Flowstate Industries LLC. The studio’s policy covers everything it sells and applies to ShipLocal in addition to this page — where this one is silent, that one governs.

Questions about this policy?