Your writing stays on your Mac.
Zdraft stores your sessions, messages, attached screenshots and extracted reference text, archive history, preferences, writing memory, recovery snapshots, and aggregate app usage statistics locally. Attachments are kept with their messages in Archive History. Your account does not synchronize these files to the server or to another device.
The app stores its data under ~/Library/Application Support/zdraft. Local databases are protected by filesystem permissions; they do not have application-level encryption.
AI features send the text they need.
- Polish sends the current message and your explicit writing preferences to the Zdraft service.
- Translation sends the current message, target language, selected style, and requested number of alternatives.
- Inline completion is included with Free and Plus and is enabled by default. Typing can send limited text immediately before and after the cursor in supported text fields. You can turn it off in the Mac app’s Settings. A separate setting, off by default, lets supported external fields include up to three short visible text excerpts near the input in the same window (1,024 bytes total).
Add Context takes a screenshot of the selected external window with macOS Screen Recording permission. The image is saved with the current message; Accessibility or local OCR extracts its text. Ordinary typing does not take screenshots. With a supporting service, Completion in that message can send up to four reference excerpts (1,024 bytes each, 4,096 bytes total), even when nearby window text is off. Attached references are not used by Polish, Translate, other messages, or completion in external apps.
The service uses model providers to process these requests. Other messages, archive history, writing memory, and learned terms are not included. Screenshots and capture metadata, such as app/window labels, identifiers, and timestamps, are not uploaded. Reference excerpts may include names, dates, and URLs from the captured text. You can view or remove an attachment in its message.
The service does not log writing content or account session tokens. Model providers process the text under their own policies; routing restrictions are not a guarantee of zero retention. Cancelling a request may not stop work that has already reached a provider.
For a suggestion in another app, macOS Accessibility permission lets Zdraft inspect the supported text field and insert text you accept. Secure input, password fields, and excluded applications are not eligible.
A small amount of account data.
The service stores an account identifier, email address, sign-in challenges, sessions, plan information, and usage counts. This supports sign-in, access checks, rate limits, and your current allowance. Usage counts do not contain draft text.
Sign-in codes are sent to your email. They are not returned in website responses or shown inline.
Waffo hosts card checkout and its billing portal. Zdraft sends your account identifier and email to associate checkout with your account. We store billing identifiers, subscription and payment status, and records needed to confirm access and resolve billing issues. Card details are entered with Waffo; Zdraft does not receive your full card number or security code. Drafts and AI request text are not sent to the payment provider.
Your website session.
The website uses a same-origin, HttpOnly session cookie so browser JavaScript does not handle the session secret. We do not store authentication tokens in localStorage. Your Mac app stores its separate account session in macOS Keychain.
This website hosts its own fonts, images, styles, and application scripts. The hosting server receives ordinary connection information needed to serve requests.
When website analytics is enabled, you can choose whether to allow Google Analytics. Until you allow it, we do not load Google's analytics script or send analytics requests. If you allow it, Google receives page visits, referral and campaign information, download clicks, and browser and device information. Analytics cookies distinguish visits and last up to 90 days, renewed with activity. Your choice is saved in this browser's local storage.
We do not send drafts, email addresses, account identifiers, sign-in codes, or payment details to Google Analytics. Advertising features and automatic form tracking are disabled. Use Analytics preferences in the footer to change your choice; declining stops further collection and removes this site's analytics cookies. See Google's privacy policy for how Google processes analytics data. Website analytics does not add analytics to the Mac app.
You stay in control.
Sign out from the website to end its session. Delete your account from Account to remove the server-side account, sessions, and membership. Both actions leave documents on your Mac untouched.
After account deletion, pseudonymous usage counters are retained for about 100 days and rate-limit records for about two days to prevent repeated account creation from resetting allowances.
Deleting an account cancels future subscription renewals and does not request a refund. Deletion waits if cancellation cannot be confirmed. Minimum billing records may be retained to reconcile payments, prevent repeat processing, and resolve billing issues. Waffo handles the payment data it receives under its own policies.
In Settings → Privacy & data, Delete history & recovery data removes writing memory, learned terms, and recovery snapshots. Reset usage data separately clears aggregate statistics. These actions preserve sessions, messages, archive history, captured images, and preferences. Removing the app’s Application Support directory removes its local working data. It does not remove Keychain credentials.
For account or app help, see the help page.