This Privacy Policy explains how Brandaid LLC ("we," "us," or "our") collects, uses, and protects information when you use Bwocks, the Bwocks website (https://bwocks.com), and the Bwocks desktop application (collectively, the "Service").
Bwocks is designed to be local-first and privacy-respecting. Most of your data never leaves your device.
1. Overview: How Bwocks Handles Data
At a high level:
- Your spreadsheets, prompts, and AI outputs are stored only on your device
- Your AI API keys are stored locally and are never sent to Bwocks
- AI requests go directly from your device to your chosen provider
- We collect minimal, anonymous analytics, which you can fully opt out of
2. Information We Collect
2.1 Information You Provide Directly
We may collect:
- Email address (if provided during purchase via our payment provider)
- License key (used for validation only)
We do not require account creation to use Bwocks.
2.2 Information Collected Automatically (Analytics & Errors)
We use PostHog for privacy-conscious analytics and error tracking.
Data sent to PostHog includes:
User Identification
- License key prefix (first 8 characters only)
- Email address (if provided via purchase)
Events
- session_start (referrer)
- app_launched (desktop indicator)
- settings_saved (AI provider type only)
- ai_call (provider, model, operation, success/failure, duration)
- feature_used (feature name and action)
- error (error message, truncated stack trace, source)
Persistent Properties
- App version
- Operating system (Windows / macOS / Linux)
Explicitly NOT collected
- Spreadsheet contents
- Cell values
- AI prompts or responses
- API keys
- Uploaded documents or images
3. Third-Party Services
Bwocks relies on the following third parties:
3.1 Analytics
PostHog
Used for anonymous analytics and error tracking
Endpoint: us.i.posthog.com
3.2 Licensing & Payments
Lemon Squeezy
Used for payment processing and license validation
Endpoint: api.lemonsqueezy.com
Data sent to Lemon Squeezy:
- Full license key
- Instance ID (random UUID generated locally)
- Instance name (generic device type only)
3.3 AI Providers (User-Initiated Only)
When you run AI features, data is sent directly from your device to your chosen provider:
- OpenAI (api.openai.com)
- Anthropic (api.anthropic.com)
- Local or self-hosted LLMs (user-configured endpoints)
Important:
- Bwocks does not proxy, intercept, or store AI requests or responses
- Your API keys are stored only on your device
- AI providers process data under their own privacy policies
4. Data Stored Locally on Your Device
Bwocks stores data locally using browser or app storage mechanisms.
This includes:
- License information and validation timestamp
- API keys (OpenAI, Anthropic, local LLMs)
- Spreadsheet data and workbooks
- Context blocks and context towers
- AI model preferences and generation settings
- Analytics opt-out preference
This data is never uploaded to Bwocks servers.
5. What We Do NOT Collect
We do not collect or store:
- Spreadsheet contents
- Cell values
- AI prompts or AI responses
- Uploaded files or images
- API keys
- Personal documents
- Usage tracking based on content
Bwocks does not perform server-side content processing.
6. Analytics Opt-Out
You can fully disable analytics at any time via:
Settings → Privacy → Disable Analytics
When disabled:
- No events are sent to PostHog
- Only essential license validation requests remain active
7. License Validation
Bwocks periodically validates licenses to:
- Confirm license authenticity
- Enforce per-device licensing
Validation includes:
- License key
- Instance ID
- Device type
We do not analyze or track how you use the software beyond validation.
8. Data Retention
- Analytics data is retained only as long as necessary for product improvement and stability
- License validation data is retained for compliance and fraud prevention
- Local data remains on your device until you delete it or uninstall the app
9. Legal Bases for Processing (GDPR)
For users in the EU, we process data based on:
- Contractual necessity (license validation)
- Legitimate interests (stability, security, improvement)
- Consent (analytics, which can be withdrawn at any time)
10. Your Rights
Depending on your location, you may have rights to:
- Access your personal data
- Request deletion or correction
- Withdraw consent for analytics
- Lodge a complaint with a data protection authority
To exercise these rights, contact us at:
privacy@bwocks.com
11. Data Security
We use reasonable technical and organizational measures to protect information. However, no system is 100% secure, and you use Bwocks at your own risk.
12. Children's Privacy
Bwocks is not intended for children under 13, and we do not knowingly collect data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of Bwocks after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
Brandaid LLC
Email: privacy@bwocks.com
Website: https://bwocks.com