Privacy policy

Who we are

Completist is made by Anurag Bhandari, an independent developer in India. In this policy, “we” and “us” mean him. He decides what is collected and how it's used, and you can write to him about any of it at legal@completist.app.

This policy covers the Completist app for Mac and this website.

What stays on your Mac

To suggest your next words, Completist reads the text box you're typing in, through the Accessibility access you allow. In chat apps it also reads the conversation on screen, through Accessibility or, if you allow Screen Recording, from a picture of that window. All of this happens on your Mac.

• What you type and what's on screen are used only for the suggestion in front of you. They're never sent anywhere or saved, and neither is the picture.
• Completist never reads password fields.
• Your settings and the statistics in Settings, such as how many words you've accepted, are stored on your Mac. The statistics are counts, not text.
• AI models are saved on your Mac after their first download.

What the app sends

Completist connects to the internet for three things.

Downloading an AI model

The first time you use a model, Completist downloads it from Hugging Face, where the models are published. Like any download, Hugging Face sees your IP address and which model you asked for. After that the model works offline.

Checking for updates

Once a day, and whenever you choose Check for Updates, Completist asks this website for the list of new versions. The request carries the app's version but no ID, and we don't record who checked. We count update downloads by version only. To stop the daily check, turn off Check for updates automatically in Completist's Settings, under General.

Anonymous usage statistics

Unless you turn it off, Completist sends us a short report once a day about how its suggestions did on the days before. We use it to learn whether Completist is useful, in which apps, and whether it's fast enough on each kind of Mac. A report contains:

• A random install ID, made on your Mac. It isn't linked to your name, email address, Apple Account or hardware.
• The app's version, your macOS version, your Mac's chip (such as Apple M3) and its memory, rounded down (such as 16 GB).
• Completist's settings, such as the model and suggestion length you chose, and whether you've allowed Accessibility and Screen Recording.
• For each day and each app you typed in, named by its bundle ID (such as com.apple.mail): how many suggestions were requested, shown, accepted, dismissed or typed past, and how many words and characters you accepted.
• How long suggestions took to appear, counted in time ranges (such as 100 to 150 milliseconds).

A report never contains what you type, what's on screen, window titles, web addresses, file names, your location, time zone or language.

To see exactly what's sent, open Completist's Settings, then General, and under Privacy click Show beside What's sent. To stop the reports, turn off Share anonymous usage statistics in the same place. That also deletes the counts not yet sent, and the install ID.

What the website collects

The website collects only what you enter in its three forms:

• Download: your email address, to send you a download link that works for 24 hours. We note when the link is first opened, to count downloads, and we'll write to you when Completist 1.0 launches and now and then about Completist.
• Notify me, on the Pricing page: your email address, to write to you once, when Completist 1.0 launches.
• Contact: your name if you give it, your email address, the topic and your message. A copy goes to our inbox so we can reply.

With each form entry we also keep a hash of your IP address: a short code made from it with a secret key. We use it only to limit how often the forms can be used from one place. We never store the address itself.

The site sets no cookies and has no analytics, ads or tracking pixels, and our emails contain no tracking images. Its fonts are served from this site, not from Google. If you pick light or dark with the theme button, your browser remembers the choice, and it's never sent to us.

Like any website, ours receives your IP address and browser details with each request. Netlify, our host, keeps its own logs of these. Our own logs record events such as “download link sent”, without your email or IP address.

How we use it

We use your data only to:

• Send what you asked for: a download link, the launch email or a reply.
• Write to you about Completist, if you gave us your email to download it.
• Make Completist better, from the usage statistics.
• Keep the forms and reports working and stop them being abused.

We don't sell your data, use it for advertising or use it to train AI models.

Where the law asks for a reason: we send what you asked for because you asked. We write about Completist, collect usage statistics and keep IP hashes because we have a legitimate interest in telling people about Completist, improving it and protecting it, and you can say no to the first two at any time.

Who else handles your data

These services run parts of Completist for us. Each handles your data only to do that job, under its own privacy policy.

• Netlify hosts this website and runs its forms, download links, update feed and usage reports. It sees your IP address with every request. Its privacy policy.
• Neon stores the form entries and usage reports in our database. Its privacy policy.
• Resend sends our emails, so it handles your email address and what we write to you. Its privacy policy.
• Cloudflare stores the Completist installer and updates, and serves them when you download. Its privacy policy.
• Hugging Face publishes the AI models. The app downloads them from it directly. Its privacy policy.

Our database is in the United States, and these services may handle data there or in other countries. We share data with anyone else only if the law requires it.

How long we keep it

• Email addresses and messages from the forms: until you ask us to delete them. The IP hash is kept with each entry.
• Usage statistics: 180 days. An install's latest settings and Mac details are deleted 180 days after its last report.
• A record of each usage report, with its install ID, size and time, kept 30 days to enforce limits. Its IP hash is deleted after 2 days.

Your choices and rights

You can ask us at any time to:

• Show you the data we hold about you, or correct it.
• Delete it.
• Stop writing to you. Replying to any email from us is enough.

Write to legal@completist.app from the email address in question. We'll answer within 30 days.

Usage reports carry no name or email, so we can't tell which are yours. To have them deleted, send us the install ID shown under What's sent in Completist's Settings, and we'll delete everything stored under it. Then turn the reports off, or click Reset ID on that sheet, so new reports don't use the old ID.

If you're unhappy with how we've handled your data, you can complain to the data protection authority where you live. We'd welcome the chance to put it right first.

Children

Completist isn't meant for children. If you're under 18, ask a parent or guardian before giving us your email address. If you think a child has given us their data, write to us and we'll delete it.

Security

• Download links are signed, expire after 24 hours and contain no email address.
• The installer is never public. Each download goes through a private link that expires within minutes.
• The database is reached only over an encrypted connection, with credentials that only the website's server and the developer hold.
• Updates are signed, and Completist checks the signature before installing one.

No system is perfectly secure. If a breach affects your data, we'll tell you.

Changes to this policy

When this policy changes, the date at the top changes too. If we start collecting something new or using your data in a new way, we'll say so on this website or in the app before it applies.

Contact

Questions about your privacy? Write to legal@completist.app, or use the contact form.