Effective Date: January 5, 2026
Last Updated: April 21, 2026
App Version: 1.5+ (Export + Stability Update)
Platform: macOS 14.0 (Sonoma) or later

1. Introduction

Welcome to ClariRec (“App”, “we”, “us”, or “our”). ClariRec is a macOS application that provides optical character recognition (OCR) and optional translation functionality. This Privacy Policy explains how we handle information when you use our App.

Our Core Privacy Principle: ClariRec is designed with privacy at its foundation. By default, OCR processing occurs entirely on your device. We do not collect, transmit, or store your content on ClariRec-operated servers (we do not operate servers to receive your content). If you enable optional cloud features (BYOK OCR or Cloud Translation), the content you choose to process is sent directly from your device to the third-party provider you configure.

2. Information We Do NOT Collect

ClariRec operates fully offline by default. We explicitly do not collect:

Personal identification information (name, email, phone number)
Device identifiers or unique IDs
Location data
Usage analytics or behavioral data
Screenshots or images you process
OCR recognition results
Text you choose to translate and translation results
Keyboard inputs or clipboard contents (beyond what you explicitly trigger)
Any content transmitted to ClariRec-operated servers (we do not operate servers to receive your content)

If you enable optional cloud features (BYOK OCR or Cloud Translation), your screenshots and/or text may be transmitted to third-party providers. This transmission is directly from your device to the provider endpoints you configure, and we do not receive or store that content.

3. Information Processed Locally

The following information is processed and stored exclusively on your device:

3.1 User Preferences

Setting	Storage	Purpose
Appearance mode (Light/Dark/System)	UserDefaults	UI customization
Display mode (Popup/HUD/Silent)	UserDefaults	Result display preference
Language preference	UserDefaults	Interface localization
Preferred OCR provider (default engine)	UserDefaults	Choose default OCR provider
Preferred translation provider	UserDefaults	Choose the preferred translation engine
Enabled remote providers (BYOK)	UserDefaults	Enable/disable specific BYOK providers
Translation target language	UserDefaults	Target language for translation
Auto Translate	UserDefaults	Automatically translate OCR results

3.2 Temporary Processing Data

Screenshots captured for OCR are processed in memory and immediately discarded after recognition
Clipboard images are read only when you explicitly trigger clipboard OCR (⌥V)
No temporary files are created on disk during normal operation
Current App Store release does not store OCR history - Recognition results exist only in memory until you close the result window
Translations are generated only when you click Translate or enable Auto Translate, and exist only in memory until you close the result window
If you choose Export, the file is written only to the location you explicitly select via the macOS save panel

4. System Permissions

ClariRec requires certain macOS permissions to function. We are transparent about why each permission is needed:

Permission	Purpose	When Used	What We Access
Screen Recording	Capture screen regions for OCR	Only when you trigger screenshot OCR (⌥S)	Only the specific region you select
File Access	Open image files you select	Only when you browse/drag files	Only files you explicitly choose
Network Access	Connect to third-party provider APIs (BYOK OCR / Cloud Translation)	Only when you configure and use a third-party provider (e.g., BYOK OCR, Translate, Auto Translate)	Only the screenshots (for OCR) and/or text (for translation) you explicitly choose to process, sent directly to the API endpoints you configure

Important Notes:

Screen Recording permission does not mean we record your screen continuously
Global hotkeys (⌥S and ⌥V) are registered using macOS Carbon framework, which does not require Accessibility permission
File access is limited to user-selected files only (sandboxed)
Network access (BYOK OCR / Cloud Translation): When you configure a third-party provider, ClariRec may send (a) screenshot images for OCR, and/or (b) recognized text for cloud translation, depending on the feature you use. Your API keys are stored securely in macOS Keychain and never transmitted to us. See Section 6.1 for details.
Auto Translate: If you enable Auto Translate and have a supported provider configured, translation requests may be triggered automatically when a new OCR result appears.
System Translation (Apple): If no third-party translation provider is configured, ClariRec may invoke macOS built-in Translation features to translate text. In that case, your text is handled by Apple system services; ClariRec does not receive the text.

5. Data Security

5.1 Technical Safeguards

No Persistent OCR Storage By Default: OCR results are not saved to disk unless you explicitly export them
Memory-Only Processing: All data exists only in memory during use
App Sandboxing: App runs in macOS sandbox, limiting access to system resources
No Network Transmission (Default OCR): When using the default System OCR, the App makes zero network requests. Network access only occurs when you explicitly configure and use a BYOK provider for OCR and/or cloud translation.

5.2 Security Architecture

Default Mode (System OCR - Fully Offline):

┌─────────────────────────────────────────────────────┐
│                    Your Device                       │
│  ┌───────────────────────────────────────────────┐  │
│  │              ClariRec (Sandboxed)              │  │
│  │  ┌─────────────┐    ┌─────────────────────┐   │  │
│  │  │ OCR Engine  │    │  User Preferences   │   │  │
│  │  │  (Vision)   │    │   (UserDefaults)    │   │  │
│  │  └─────────────┘    └─────────────────────┘   │  │
│  │         │                                     │  │
│  │         ▼                                     │  │
│  │  ┌─────────────┐                              │  │
│  │  │   Memory    │  ← OCR results (temporary)   │  │
│  │  │ (discarded) │                              │  │
│  │  └─────────────┘                              │  │
│  └───────────────────────────────────────────────┘  │
│                                                      │
│  ❌ No data leaves your device                       │
│  ❌ No persistent OCR data storage                   │
└─────────────────────────────────────────────────────┘

BYOK Mode (Optional - User-Configured Third-Party APIs):

┌─────────────────────────────────────────────────────┐
│                    Your Device                       │
│  ┌───────────────────────────────────────────────┐  │
│  │              ClariRec (Sandboxed)              │  │
│  │  ┌─────────────┐    ┌─────────────────────┐   │  │
│  │  │ API Keys    │    │  User Preferences   │   │  │
│  │  │ (Keychain)  │    │   (UserDefaults)    │   │  │
│  │  └─────────────┘    └─────────────────────┘   │  │
│  │         │                                     │  │
│  │         ▼                                     │  │
│  │  ┌─────────────┐         ┌────────────────┐   │  │
│  │  │ Screenshot  │ ──────▶ │ Third-Party    │   │  │
│  │  │   Image     │  HTTPS  │ API (BYOK)     │   │  │
│  │  └─────────────┘         │ (Configured)   │   │  │
│  │         │                └────────────────┘   │  │
│  │         ▼                        │            │  │
│  │  ┌─────────────┐                 │            │  │
│  │  │ OCR Result  │ ◀───────────────┘            │  │
│  │  │  (Memory)   │                              │  │
│  │  └─────────────┘                              │  │
│  └───────────────────────────────────────────────┘  │
│                                                      │
│  ✅ API keys stored securely in macOS Keychain       │
│  ✅ Direct HTTPS connection to provider APIs         │
│  ❌ No data sent to ClariRec developers              │
└─────────────────────────────────────────────────────┘

6. Third-Party Services

6.1 BYOK (Bring Your Own Key) - Optional Third-Party OCR & Cloud Translation Providers

ClariRec offers an optional BYOK feature that allows you to use third-party services for OCR and cloud translation. This feature is entirely optional and disabled by default.

6.1.1 API Key Storage

When you configure a third-party provider, your credentials (API keys and any required secret keys) are stored as follows:

Item	Storage Location	Security	Retention
API Keys	macOS Keychain	AES-256 encrypted by macOS	Until you delete them
Secret Keys (if required)	macOS Keychain	AES-256 encrypted by macOS	Until you delete them
Custom Endpoints	UserDefaults	Local only	Until you delete them

Security Details:

API keys and secret keys are stored in macOS Keychain, Apple’s secure credential storage system
Keychain data is encrypted using AES-256-GCM and protected by your macOS login password
Credentials are never transmitted to ClariRec developers or any third party other than the configured provider
Credentials are accessed only when making API requests to the configured provider

6.1.2 Data Sent to Third-Party Providers

Depending on the features you use, ClariRec may send different data to third-party providers directly from your device:

A) OCR (BYOK OCR Providers):

Data sent: screenshot images you capture or select for recognition.

B) Translation (Translate / Auto Translate):

Data sent: text you choose to translate (typically OCR results), your selected target language, and a translation instruction prompt.
If no third-party translation provider is configured, ClariRec may use macOS System Translation (when available) as a fallback.

Your responsibility: Review and comply with the terms of service and privacy policies of any third-party provider you configure.

Important BYOK Privacy Notes:

Your provider credentials (API keys / secret keys) are stored in macOS Keychain (encrypted, never transmitted to us)
Image data (OCR) and/or text data (translation) is sent directly from your device to the third-party API over HTTPS
We do not proxy, log, or store any data sent to third-party services
If you enable Auto Translate, translation requests may be triggered automatically when a new OCR result appears
You are responsible for reviewing each provider’s privacy policy
You can remove API keys at any time in Settings → Providers → [Provider] → Remove

6.1.3 How to Delete Your API Keys

You have full control over your stored API keys:

Action	Method
Remove individual API key	Settings → Providers → [Provider] → Remove
Remove all API keys	Uninstall the app (Keychain items are removed)
View stored keys	Settings → Providers → [Provider] → Show API Key

6.2 Services We Do NOT Integrate

ClariRec does not integrate:

❌ No analytics SDKs (no Google Analytics, Mixpanel, etc.)
❌ No advertising networks
❌ No crash reporting services
❌ No cloud storage services
❌ No social media integrations
❌ No telemetry or usage tracking

Default Mode (System OCR): When using the default macOS Vision OCR, the App operates entirely offline and does not communicate with any external servers.

7. Data Retention and Deletion

7.1 Data Storage

Data Type	Storage Location	Retention Period
OCR Results	Memory only	Until result window closed
Translated Text	Memory only	Until result window closed
Exported Files	User-selected save location	Until you delete them
User Preferences	UserDefaults	Until app uninstall
API Keys (BYOK)	macOS Keychain	Until you delete them
Custom Endpoints (BYOK)	UserDefaults	Until you delete them

Summary:

No persistent OCR or translation content data: Recognition results and translations are not stored on disk
Session-only: Results exist only until you close the result window
User-triggered export only: If you export text, the file is saved only where you choose
User preferences: Settings (appearance, display mode, language) are saved locally
BYOK credentials: API keys are stored in macOS Keychain until you explicitly remove them

7.2 User-Controlled Deletion

You can delete your data at any time:

Action	Method	Result
Reset preferences	Delete app preferences in Settings	All preferences reset to default
Complete removal	Uninstall the app	All app data removed from device

8. Children’s Privacy

ClariRec is not directed at children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect any information from children.

Since ClariRec does not collect any personal information from any user, there is no risk of children’s data being collected or processed.

9. International Users

ClariRec is available in 174 markets where Apple provides App Store services.

In default mode, OCR processing occurs locally on your device and no content leaves your device.

If you enable optional cloud features (BYOK OCR or Cloud Translation), your screenshots and/or text are sent directly from your device to the third-party provider you configure. Depending on the provider and your configured endpoint, this may involve cross-border data transfers.

For users in specific regions, please see the Region-Specific Addenda below for additional rights and information.

10. Your Rights

Since ClariRec does not store any personal data or OCR results, your privacy rights are automatically protected:

Right	How to Exercise
Access	View your preferences in Settings
Deletion	Uninstall the app to remove all data
Portability	Copy or export OCR results directly from the result window
Objection	Not applicable (no data collection)
Restriction	Not applicable (no data processing)

11. Changes to This Policy

We may update this Privacy Policy to reflect:

New features that affect data handling
Legal or regulatory requirements
Clarifications based on user feedback

How we notify you:

Material changes will be announced in App Store release notes
The “Last Updated” date at the top will be revised
Continued use after changes constitutes acceptance

12. Contact Us

For privacy-related questions, concerns, or requests:

Email: [email protected]

We aim to respond to all privacy inquiries within 30 days.

Region-Specific Addenda

The following addenda provide additional information required by specific jurisdictions. These addenda supplement (and do not replace) the main Privacy Policy above.

Applicable to users in EU member states, Iceland, Liechtenstein, and Norway

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process data based on:

Processing Activity	Legal Basis	GDPR Article
Local OCR processing	Legitimate interest (service provision)	Art. 6(1)(f)
User preferences	Contract performance	Art. 6(1)(b)

Note: Because all processing occurs locally on your device and no personal data is transmitted to us, most GDPR obligations regarding data controllers do not apply to ClariRec’s operations.

In addition to the rights listed in the main policy, EEA users have:

Right	Description	How to Exercise
Right to be Informed	Understand how data is processed	This Privacy Policy
Right of Access	Obtain copy of your data	Not applicable (no data stored)
Right to Rectification	Correct inaccurate data	Not applicable
Right to Erasure	Delete your data	Uninstall app
Right to Restrict Processing	Limit how data is used	Not applicable (local only)
Right to Data Portability	Receive data in portable format	Copy text from result window
Right to Object	Object to processing	Not applicable (no collection)
Rights Related to Automated Decision-Making	Not be subject to automated decisions	Not applicable

Data Protection Authority

You have the right to lodge a complaint with your local Data Protection Authority. A list of DPAs is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

Data Transfers

Default Mode (System OCR): ClariRec does not transfer any data outside your device. No international data transfers occur.

BYOK Mode: When you configure and use a third-party provider, image data (OCR) and/or text data (translation) may be sent directly to that provider’s servers. Depending on the provider and endpoint you configure, this may involve international data transfers (e.g., processing in the United States, European Union, China, or other regions).

You are responsible for reviewing each provider’s data processing locations and ensuring compliance with applicable data transfer requirements.

Data Protection Officer

Due to the nature of our processing (no personal data collection), we are not required to appoint a Data Protection Officer. For privacy inquiries, contact: [email protected]

California, USA - CCPA/CPRA

Applicable to California residents

California Consumer Privacy Act (CCPA) & California Privacy Rights Act (CPRA) Disclosure

Categories of Personal Information

Under CCPA/CPRA, we disclose:

Category	Collected	Sold	Shared for Cross-Context Behavioral Advertising
Identifiers	❌ No	❌ No	❌ No
Customer Records	❌ No	❌ No	❌ No
Protected Classifications	❌ No	❌ No	❌ No
Commercial Information	❌ No	❌ No	❌ No
Biometric Information	❌ No	❌ No	❌ No
Internet Activity	❌ No	❌ No	❌ No
Geolocation Data	❌ No	❌ No	❌ No
Sensory Data	❌ No	❌ No	❌ No
Professional Information	❌ No	❌ No	❌ No
Education Information	❌ No	❌ No	❌ No
Inferences	❌ No	❌ No	❌ No
Sensitive Personal Information	❌ No	❌ No	❌ No

We do not sell or share personal information.

Your California Privacy Rights

Right	Description
Right to Know	Request disclosure of personal information collected
Right to Delete	Request deletion of personal information
Right to Correct	Request correction of inaccurate information
Right to Opt-Out of Sale/Sharing	Not applicable (we don’t sell/share)
Right to Limit Use of Sensitive PI	Not applicable (we don’t collect sensitive PI)
Right to Non-Discrimination	Not be discriminated against for exercising rights

ClariRec does not sell or share your personal information. No opt-out is necessary because no sale or sharing occurs.

Financial Incentives

We do not offer financial incentives related to personal information.

Contact for California Requests

California residents may contact us at: [email protected]

Brazil - LGPD

Applicable to users in Brazil / Aplicável a usuários no Brasil

Lei Geral de Proteção de Dados (LGPD) Disclosure

Base Legal para Tratamento / Legal Basis for Processing

Atividade	Base Legal	Artigo LGPD
Processamento local de OCR	Legítimo interesse	Art. 7, IX
Preferências do usuário	Execução de contrato	Art. 7, V

Seus Direitos sob a LGPD / Your Rights under LGPD

Direito	Descrição
Confirmação	Confirmar existência de tratamento
Acesso	Acessar seus dados
Correção	Corrigir dados incompletos ou incorretos
Anonimização	Solicitar anonimização
Portabilidade	Transferir dados para outro fornecedor
Eliminação	Eliminar dados pessoais
Informação	Ser informado sobre compartilhamento
Revogação	Revogar consentimento

Autoridade Nacional de Proteção de Dados (ANPD)

Você tem o direito de apresentar reclamação à ANPD: https://www.gov.br/anpd

Japan - APPI

Applicable to users in Japan / 日本のユーザーに適用

個人情報保護法（APPI）に基づく開示

取り扱う個人情報

ClariRecは個人情報を収集・送信しません。すべてのOCR処理はお客様のデバイス上でローカルに実行されます。

利用目的

データ種別	利用目的
ユーザー設定	アプリのカスタマイズのため

第三者提供

ClariRecは第三者に個人情報を提供しません。

お客様の権利

開示請求権
訂正・追加・削除請求権
利用停止・消去請求権

お問い合わせ

個人情報に関するお問い合わせ：[email protected]

South Korea - PIPA

Applicable to users in South Korea / 대한민국 사용자에게 적용

개인정보 보호법(PIPA) 공개

수집하는 개인정보

ClariRec은 개인정보를 수집하거나 전송하지 않습니다. 모든 OCR 처리는 귀하의 기기에서 로컬로 수행됩니다.

개인정보의 처리 목적

데이터 유형	처리 목적
사용자 설정	앱 커스터마이징

개인정보의 보유 및 이용 기간

사용자 설정: 앱 삭제 시 삭제

정보주체의 권리

개인정보 열람 요구권
개인정보 정정·삭제 요구권
개인정보 처리정지 요구권

개인정보 보호책임자

문의: [email protected]

Australia - Privacy Act

Applicable to users in Australia

Australian Privacy Principles (APPs) Disclosure

APP 1 - Open and Transparent Management

This Privacy Policy describes our personal information handling practices.

APP 3 - Collection of Solicited Personal Information

ClariRec does not collect personal information. In default mode, OCR processing occurs locally on your device. If you enable BYOK OCR or Cloud Translation, your content may be transmitted directly to the third-party provider you configure.

APP 5 - Notification of Collection

Not applicable as we do not collect personal information.

APP 6 - Use or Disclosure

No personal information is used or disclosed as none is collected.

APP 8 - Cross-Border Disclosure

Default Mode (System OCR): No cross-border disclosure occurs as no content leaves your device.
BYOK Mode (OCR / Cloud Translation): Your screenshots and/or text may be transmitted directly to the provider you configure, which may involve cross-border disclosure depending on the provider and endpoint.

APP 11 - Security

Local data is protected by macOS App Sandbox.

APP 12 - Access

You can access your preferences directly in the app.

APP 13 - Correction

You can reset preferences; correction is not applicable to OCR output.

Complaints

You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au

Canada - PIPEDA

Applicable to users in Canada (except Quebec, which has its own law)

Personal Information Protection and Electronic Documents Act (PIPEDA) Disclosure

Ten Fair Information Principles Compliance

Principle	ClariRec Compliance
Accountability	We are responsible for personal information under our control
Identifying Purposes	Purposes identified in this policy
Consent	Implied consent through app use; no sensitive data collected
Limiting Collection	No personal information collected
Limiting Use, Disclosure, Retention	Data used only for stated purposes, stored locally
Accuracy	Users can view OCR results in result window
Safeguards	macOS App Sandbox protection
Openness	This policy is publicly available
Individual Access	Users can view preferences in app
Challenging Compliance	Contact us with concerns

Quebec Users (Law 25)

Users in Quebec have additional rights under Quebec’s Law 25. The same principles apply: no personal information is collected or transmitted.

Office of the Privacy Commissioner

You may file a complaint with the OPC: https://www.priv.gc.ca

Applicable to users in the United Kingdom

UK General Data Protection Regulation Disclosure

Post-Brexit, the UK has its own version of GDPR (UK GDPR) alongside the Data Protection Act 2018.

Legal Basis for Processing

Same as EEA GDPR section above.

Your UK GDPR Rights

Same rights as listed in the EEA GDPR section.

Information Commissioner’s Office (ICO)

You may lodge a complaint with the ICO: https://ico.org.uk

International Transfers

No international transfers occur as all data remains on your device.

China - PIPL

Applicable to users in the People’s Republic of China / 适用于中华人民共和国用户

个人信息保护法（PIPL）披露

收集的个人信息

ClariRec 不收集或传输个人信息。所有 OCR 处理在您的设备上本地进行。

处理目的与法律依据

处理活动	法律依据	PIPL 条款
本地 OCR 处理	履行合同所必需	第13条第2款

您的权利

根据《个人信息保护法》，您享有以下权利：

权利	描述
知情权	了解个人信息处理情况
决定权	决定是否同意处理
查阅复制权	查阅、复制个人信息
更正补充权	更正、补充个人信息
删除权	删除个人信息
可携带权	转移个人信息

跨境传输

Default Mode (System OCR): ClariRec 不进行任何跨境数据传输。所有数据保留在您的设备上。

BYOK Mode: 当您配置并使用第三方引擎时，图像数据（OCR）和/或文本数据（翻译）可能会直接发送到该引擎的服务器。根据您选择的引擎与端点，这可能涉及跨境数据传输（例如在美国、欧盟、中国或其他地区处理）。

您有责任查阅每个引擎的数据处理地点，并确保符合适用的数据传输要求。

敏感个人信息

ClariRec 不收集敏感个人信息。

联系方式

如有隐私相关问题：[email protected]

Other Jurisdictions

For users in jurisdictions not specifically listed above:

In default mode, OCR processing occurs locally on your device
If you enable BYOK OCR or Cloud Translation, your screenshots and/or text may be transmitted directly to the third-party provider you configure
No personal information is collected by ClariRec
You maintain full control over your data
Local data protection laws apply to data stored on your device

If you have questions about how this Privacy Policy applies in your jurisdiction, please contact us at [email protected].

Document Version: 1.5.0
Effective Date: January 5, 2026
Last Updated: April 21, 2026

1. Introduction#

2. Information We Do NOT Collect#

3. Information Processed Locally#

3.1 User Preferences#

3.2 Temporary Processing Data#

4. System Permissions#

5. Data Security#

5.1 Technical Safeguards#

5.2 Security Architecture#

6. Third-Party Services#

6.1 BYOK (Bring Your Own Key) - Optional Third-Party OCR & Cloud Translation Providers#

6.1.1 API Key Storage#

6.1.2 Data Sent to Third-Party Providers#

6.1.3 How to Delete Your API Keys#

6.2 Services We Do NOT Integrate#

7. Data Retention and Deletion#

7.1 Data Storage#

7.2 User-Controlled Deletion#

8. Children’s Privacy#

9. International Users#

10. Your Rights#

11. Changes to This Policy#

12. Contact Us#

Region-Specific Addenda#

European Economic Area (EEA) - GDPR#

Legal Basis for Processing#

Your GDPR Rights#

Data Protection Authority#

Data Transfers#

Data Protection Officer#

California, USA - CCPA/CPRA#

California Consumer Privacy Act (CCPA) & California Privacy Rights Act (CPRA) Disclosure#

Your California Privacy Rights#

“Do Not Sell or Share My Personal Information”#

Financial Incentives#

Contact for California Requests#

Brazil - LGPD#

Lei Geral de Proteção de Dados (LGPD) Disclosure#

Seus Direitos sob a LGPD / Your Rights under LGPD#

Autoridade Nacional de Proteção de Dados (ANPD)#

Japan - APPI#

個人情報保護法（APPI）に基づく開示#

South Korea - PIPA#

개인정보 보호법(PIPA) 공개#

Australia - Privacy Act#

Australian Privacy Principles (APPs) Disclosure#

Complaints#

Canada - PIPEDA#

Personal Information Protection and Electronic Documents Act (PIPEDA) Disclosure#

Quebec Users (Law 25)#

Office of the Privacy Commissioner#

United Kingdom - UK GDPR#

UK General Data Protection Regulation Disclosure#

Information Commissioner’s Office (ICO)#

International Transfers#

China - PIPL#

个人信息保护法（PIPL）披露#

Other Jurisdictions#