Privacy Policy

Where your notes are stored

Notes, quick pages, images, files and reminders are stored on your Mac and iPhone with SwiftData. There is no Flyout account, no telemetry and no analytics SDK inside the app. We cannot read your notes because we never receive them.

Reminders are scheduled by your own device, through the notification system in macOS or iOS. They are not sent to a Flyout server.

iCloud sync is optional

Sync stays off until you turn it on in Settings. Once it is on, your notes travel through your own iCloud account — Apple’s CloudKit private database — so your Mac and iPhone show the same library. They pass through Apple, never through us: we run no server that holds notes and have no way to read them. What happens inside iCloud is covered by Apple’s privacy terms.

Locked notes are encrypted on your device before they are stored or synced. The key is derived from your vault password and stays in your device’s Keychain. If you lose both the password and the recovery code, nobody can open those notes — us included.

Optional AI client access

Agent Access is off by default. If you turn it on in Flyout, install a compatible local package and approve an AI client’s connection on your Mac, that client can request only the notes and reminders you permit. Locked notes and notes in the trash stay out of reach. Flyout sends results to the client over an encrypted local connection on your Mac. The package’s helper never opens the notes database itself, and your notes do not pass through our servers.

A connected AI client may send the notes and reminders it reads from Flyout to the AI service it works with. That service’s privacy, retention and training terms apply, and we cannot recall content that has already been sent.

Deleting a note always needs your separate approval in Flyout. You can turn access off or revoke a connection in Flyout at any time; removing the package alone does not revoke it. Connection credentials, permissions and operation receipts stay on your Mac. They are not synced through iCloud or sent to our servers. The helper keeps a device-local identity in Keychain and public pairing details in local files.

Flyout for Chrome

Flyout for Chrome runs only when you click its toolbar button, choose one of its context-menu commands or press a shortcut you assigned. It reads the active page’s title and URL and, when you select text, that selection. If you choose Screenshot, it captures only the visible part of the current tab; if you save an image, it downloads only that image from the site that hosts it, and Chrome first asks for permission when the image is on another site. You choose the destination and review or edit the Markdown before saving.

The extension sends the capture through Chrome Native Messaging directly to Flyout on the same Mac. Captured content is not sent to us or to a third party. The extension has no advertising, analytics, background page monitoring or remote code.

What we store when you buy

When you buy on this site, our payment processor (Stripe) handles the payment and shares your email address and name with us. We store your email, your name, the generated license key and the purchase date so we can deliver the key and re-send it if you lose it.

When you buy inside the iPhone app, Apple handles the payment and does not give us your email address. If you ask us to email you a license key, you type the address yourself and we store it next to the purchase identifier Apple gives us, for the same reason: delivering the key.

We never see or store your card details. Stripe and Apple process them under their own privacy policies.

Device activation

A license key can be activated on five devices. To count them, the app sends an irreversible SHA-256 hash of a device identifier — never the raw identifier — along with the device name you already see in your system settings, such as “Anna’s MacBook Pro”, so the list means something to you. The hash lets us count seats; it cannot be turned back into anything that identifies your machine.

You can release a seat at any time from Settings › License, which deletes that activation record.

Updates

On the Mac, if automatic updates are enabled, the app periodically requests our update feed. That request carries the information any web request carries — your IP address and the app version. We do not build profiles from it.

On iPhone, updates come from the App Store. The app never contacts us about them.

This website

getflyout.app uses cookieless analytics (Fathom) for page views and which buttons you click. It does not set cookies, follow you across other sites, or store your name or email address. That is also why you never see a consent banner here.

Your rights and how to reach us

You can ask us to delete your purchase record at any time. Note that deleting it means we can no longer re-send your license key.

Write to hello@getflyout.app for any privacy question, data export or deletion request.