Privacy Policy

Last updated: 25 October 2026 · Applies to FloatPill 3.1.2

The app runs entirely on your Mac. It has no account, no usage analytics, no crash reporting and no tracking of any kind. Nothing you drop into the notch, copy, record, say or schedule is ever sent to us, because there is no server of ours for it to be sent to. This website is a separate thing, and is covered at the end of this page.

The app makes three kinds of network request: activating and checking your licence with Lemon Squeezy, downloading album artwork from Apple’s public iTunes Search API, and asking this site once a day whether a newer version exists. That last one fetches a small file and compares a version number; the site counts these checks, as described under This website, and on the first check after a free trial starts the app adds ?primo=1, so that we know how many trials begin. No identifier and nothing about how you use the app is sent. Three more happen only when you ask for them: the answer you pick under “Why not?” when the trial ends, described under This website, a transcription, described under Voice memos, and “Watch in the notch”, where the video plays in YouTube’s own player and so loads from YouTube.

What the app asks permission for

Microphone — to record voice memos, and to dictate a reminder instead of typing it. Recordings are written to the app’s own folder on your disk and stay there.
Speech recognition — only when you ask for a memo or a dictated reminder to be turned into text. See below.
Camera — only for Mirror mode. The video is shown and never recorded, saved or transmitted; the capture session is stopped as soon as you leave that module or close the notch.
Calendar and Reminders — to show today’s events under the notch and to create reminders from it. They are read from, and written to, the Calendar and Reminders apps already on your Mac.
Apple Events — to ask Spotify and Apple Music what is playing and to control playback. Only the title, artist and artwork of the current track are read, live, and they are never stored. When you press “Watch in the notch”, the app also asks your browser which tab holds the YouTube video and how far it had got; macOS asks for your permission the first time.
Files — the ones you drop into the tray or capture as a screenshot. They are copied into the app’s own container, never moved or altered where they were.

Voice memos and transcription

Recording is local. Transcription is not, unless you ask it to be: by default the app uses macOS speech recognition in its normal mode, which means the audio of that memo is processed by Apple’s servers under Apple’s own privacy terms. We never see it, but it does leave your Mac.

In Settings you can turn on on-device recognition, and then nothing leaves the machine at all. It is off by default for one honest reason: the offline model is noticeably worse outside English, and a transcription you cannot use protects nobody. The choice is yours, and it is one switch.

Clipboard history

The last 50 pieces of text you copied are kept only in the app’s memory, on your Mac. They are never written to disk, never uploaded and never leave the machine, so the history is cleared when you quit the app or restart the Mac.

Passwords are deliberately excluded. A copy is skipped when the system marks it as concealed, and also when the app in front is a known password manager — Passwords, Keychain Access, 1Password, Bitwarden, LastPass and Proton Pass — because macOS does not always mark those copies. You can add other apps to that list in Settings. You can clear the whole history at any time from the Clipboard module.

Claude and ChatGPT usage

To show how much of your Claude or ChatGPT limits you have used, the app reads two things that are already on your Mac, and only reads them:

From Claude Desktop, the usage figures its own Usage panel downloaded, which it keeps in its web cache. The app looks at the address of each cached item and opens only that one.
From the ChatGPT app, the lines that record your Codex limits in its session files. Those files also hold your Codex conversations: the app reads only the end of the most recent ones and uses nothing but the limit lines.

No password, token or sign-in is used and nothing is sent anywhere. The only thing saved is which of the two apps you used last. You can turn all of this off in Settings.

If you turn on the “done” and “waiting” alerts, Claude Code or Codex run a small command on your Mac that tells FloatPill the app’s name, the event and the name of the project folder. That never leaves your Mac either.

Payment and licence

Purchases are handled by Lemon Squeezy, our Merchant of Record. We never see or store your card details. When you activate a licence, your Mac generates an anonymous instance identifier so the licence can be tied to a number of machines; that identifier and your licence key are stored on your Mac and sent to Lemon Squeezy when the licence is verified.

If the app cannot reach the licence server it keeps working for seven days and tries again later, so a connection problem never locks you out of software you have paid for.

This website

Everything above describes the app. This site is served by Cloudflare Pages, so Cloudflare processes the requests your browser makes for it — the address you asked for, your IP address, your browser’s user agent and the page that referred you — as part of delivering and protecting the site, under Cloudflare’s own privacy terms.

To know how many people reach the site and whether its pages load quickly, we use Cloudflare Web Analytics. It records the page visited, the site that referred you, your country, your browser and screen size, and how long the page took to render. It sets no cookies and stores nothing on your device, so there is no cookie banner to dismiss; it does not fingerprint your browser, does not identify you, and cannot follow you to other websites. We see totals, never individuals.

The home page shows a Product Hunt badge with the current number of upvotes. That image is loaded from Product Hunt’s servers, so Product Hunt receives the request for it (your IP address, your browser’s user agent and the page it was shown on) under its own privacy terms. Nothing else on the site is loaded from a third party.

When you download the app, a counter on the site adds one to the day’s total. It stores the time and the file name, nothing else. So that a retried or repeated download is not counted twice, it also keeps a one-way hash of your IP address and browser, mixed with a secret key, for 24 hours, and then deletes it. It sets no cookies either.

If you open the download page on a phone, it offers to send the link to your Mac. The site counts, in the same way, how often that page is shown, which of its buttons is pressed and how often the link is then opened on a Mac: the link carries ?da=telefono for that. Only the time and the name of the step are stored, with the same 24-hour hash to avoid counting a repeated tap twice.

When the free trial ends, the app’s licence panel has a “Why not?” link with four answers (too expensive, I don’t use it enough, a feature is missing, it gave me problems). Only if you pick one, the app sends that answer’s name to this site, which stores it the same way: the time and the name, nothing else, with the same 24-hour hash.

Once a day each copy of the app asks this site for a small file to see whether an update exists. The site counts those checks to know how many copies are in use: it stores the time, the app’s build number (which the request carries anyway) and whether it is the first check after a trial started, nothing else. The same 24-hour hash keeps a repeated check from being counted twice.

There is no advertising pixel and no other analytics provider. The interactive demo on the home page runs entirely in your browser: the file you drag into it never leaves your Mac and is never uploaded anywhere. Clicking Buy takes you to Lemon Squeezy, a different company on a different domain, with its own privacy policy and its own cookies.

Contact

Questions about this policy: dynamicnotchapp@gmail.com.