Tiramisu — Privacy

✓ The promise

Tiramisu does not collect telemetry, analytics, crash reports, or "anonymous usage data." There is no analytics SDK linked into the app. There is no server we phone home to.

What runs locally

By default — everything except the cloud Replicate backend.

Layered editing, masks, transforms, exports — entirely on your Mac.
Background removal — Apple's VNGenerateForegroundInstanceMaskRequest, runs on the Neural Engine. Never leaves the machine.
Local FLUX-Fill generative fill — runs via mflux on Apple Silicon. The model weights download once from Hugging Face on first setup; after that, no network traffic.
Recents, file bookmarks, settings — UserDefaults / your filesystem. Not synced.

What touches the network

Three things, only when you opt in:

1. Cloud Replicate backend (opt-in)

If you pick AI → Generative Fill Settings → Replicate and enter an API key, your image (cropped to the fill region) is sent to replicate.com for inference. Their privacy policy applies. We don't proxy or cache anything.

2. Hugging Face download (one-time)

If you choose Local FLUX-Fill, the bootstrap script downloads the model weights (~24 GB) from huggingface.co using your Hugging Face token. After the download, no further network calls.

3. Auto-update check (planned, opt-in)

When Sparkle auto-updates land in v0.2+, the app will check for new releases on a schedule. This is a single GET to a static appcast.xml on tiramisu.hanley.world — no body, no telemetry, just "is there a newer version." Opt-out from Settings → Updates.

What we'd never do

Train a model on your images.
Sell, share, or aggregate any user data.
Add a "free with ads" tier later.
Add a tracking pixel to this website (you can View Source — there isn't one).

The website

This site (tiramisu.hanley.world) is static HTML / CSS / SVG. No analytics, no fonts loaded from Google or Adobe, no third-party JS. Web server logs (timestamps, IPs, user-agents) exist for the few minutes nginx keeps them; they're not aggregated or shared.

Reach us

Privacy questions: open an issue on GitHub or email privacy@hanley.world.

Last updated 2026-05-07 · This is the canonical statement. If anything changes, we'll update this page and note it in the release notes.

No telemetry. No tracking.No surprises.