Your layout stays on your Mac.
Effective July 11, 2026Workflo has no accounts, no analytics, no tracking, and no servers of its own. Everything it knows about your windows lives in a folder on your Mac. The only network request it ever makes is checking for updates.
01What Workflo stores — and where
Workflo records window positions, sizes, and the apps they belong to, plus the desks, scenes, and rules you create. All of it is written as plain, human-readable JSON to ~/Library/Application Support/Workflo/ on your Mac. You can open it, back it up, or delete it at any time; deleting the folder removes everything Workflo knows.
Workflo never reads the contents of your windows — it works with their frames (position and size), titles used for matching, and owning apps. It does not capture your screen.
02What we don't collect
- No accounts. There is nothing to sign up for and no identity attached to your use of the app.
- No analytics or telemetry. Workflo does not phone home about usage, crashes, or anything else.
- No third-party SDKs for ads, tracking, or measurement — none are embedded.
- No sale or sharing of data. We hold no user data, so there is nothing to sell, share, or lose.
03Permissions, and why they're asked
Accessibility is required — it is the macOS API that allows one app to move and resize another app's windows, which is Workflo's entire job. It is requested once during onboarding and can be revoked in System Settings → Privacy & Security.
Calendar access is requested only if you create a calendar trigger (applying a scene before an event with a video link). Workflo reads upcoming events locally to time the trigger; event data never leaves your Mac. If you never add a calendar trigger, access is never requested.
04The one network request
Workflo checks for updates using Sparkle, the standard open-source macOS update framework. That check fetches a small feed file (the appcast) from our content delivery network. Like any web request, it exposes your IP address and a user-agent string to the CDN in transit; Workflo attaches no identifier, and we do not log or analyze these requests. Updates themselves are EdDSA-signed and verified on your Mac before installing.
You can disable automatic update checks in Settings and check manually whenever you choose.
05Changes to this policy
If the policy changes, the effective date above changes with it, and material changes will be called out in the release notes of the version that ships them. The current version always lives at this page.
06Contact
Questions about privacy? Open an issue on the project repository — it's the fastest way to reach us.