Fullpoint

Privacy

What Fullpoint keeps, and what it sends.

This page says, in plain words, what Fullpoint does with your writing and when anything leaves your Mac. It describes the app as it works today.

The short version

  • Your documents, versions, drafts and comments are files on your Mac. Today there’s no account and nothing is stored online. Accounts with cloud backup and sync are coming; this page will say exactly what they store, and where, before they arrive.
  • Your writing leaves your Mac only when you ask the assistant for an edit. Then it goes to Anthropic, and nowhere else.
  • You use your own Claude key, and Anthropic bills you directly.
  • The app checks for new versions by asking Fullpoint’s downloads site, without sending anything about you or your writing.
  • Problem reports are saved on your Mac, and are only sent if you send them yourself.
  • There are no analytics or trackers, in the app or on this website.

What stays on your Mac

Your writing. Documents are ordinary text files in a folder you choose (at first, a Fullpoint folder in your Documents folder). Their versions, drafts and comments are kept in hidden files inside that same folder. None of it is uploaded anywhere: Fullpoint doesn’t have cloud backup or sync yet.

Your settings. Preferences, the words you add to the dictionary, your comment name and a record of what the assistant has cost you are kept in Fullpoint’s own folder in your Mac’s Library.

The tools. Spelling, the copy-editing checks, house style, word counts, Word and PDF import and export, and Read aloud all run on your Mac. The natural voice for Read aloud runs on your Mac too, so your text is never sent anywhere to be spoken.

Nothing loads from the internet into the window. The app won’t fetch pictures, fonts or scripts from the web while you write. Links you click open in your own browser.

When you use the assistant: Anthropic

The assistant is Claude, made by Anthropic. Fullpoint talks to Anthropic directly from your Mac, using your own key. There is no Fullpoint server in between.

Nothing is sent until you ask for an edit. When you do, the request contains:

  • the passage you selected (or the whole document, if nothing was selected);
  • what you asked for, such as “Tighten this”;
  • the whole document you’re working in, and its title, so the edit fits its context;
  • your house style rules, if you have set any.

If you have set a monthly spending limit, the same request is first sent to Anthropic’s token-counting service, so Fullpoint can estimate the cost before going ahead. Nothing else is sent: not your other documents, your comments, your versions or your drafts (unless the draft is the text you’re asking about).

When you add your key, Fullpoint checks it with Anthropic. That check contains no writing. The key is then stored encrypted with your Mac’s keychain, is never shown in the window, and is sent only to Anthropic, with your requests.

What Anthropic does with requests is governed by Anthropic’s own terms and privacy policy, which you agree to when you create your key. See Anthropic’s privacy policy and commercial terms.

Your key, your bill

You use your own Claude key (an Anthropic API key), and Anthropic bills you directly for what the assistant uses. Fullpoint doesn’t see your bill or your payment details, and doesn’t charge you for the assistant. The app keeps its own record of each request’s cost on your Mac, to show your monthly spending and keep to any limit you set.

The update check: downloads.fullpoint.ai

When Fullpoint starts, every six hours while it’s open, and when you choose Check for Updates…, it asks Fullpoint’s downloads site (downloads.fullpoint.ai, run by Cloudflare) for one small file, latest.json, which names the newest version. That request carries nothing about you or your writing: no identifier, no document, no settings. The app keeps no copy of the answer, so it never sends back anything the server gave it last time, and no cookies are involved.

It’s an ordinary web request. Besides the file’s address, it sends exactly these:

  • User-Agent, naming the app and the versions it’s built on, for example Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Fullpoint/0.1.0 Chrome/156.0.8078.80 Electron/45.2.2 Safari/537.36. Every Mac sends the same “Intel Mac OS X 10_15_7”, whatever its chip or macOS version.
  • Accept-Language: your Mac’s preferred language, such as en-GB.
  • Accept (application/json), Accept-Encoding (the kinds of compression the app understands), and Sec-Fetch-Site, Sec-Fetch-Mode and Sec-Fetch-Dest, which say the request didn’t come from a web page.

Like any request on the internet, it also shows your IP address to Cloudflare, which serves the file; Cloudflare’s privacy policy applies. The check can’t be turned off today.

If there is a newer version, an Update button appears. Nothing downloads or installs on its own: choosing Download opens the download for your Mac in your browser.

The natural voice: Hugging Face

Read aloud works with your Mac’s own voices straight away. If you choose to download the natural voice (about 97 MB), Fullpoint fetches the voice files once from Hugging Face (huggingface.co), where the open voice model is published. That download contains none of your writing, and afterwards the voice works offline. It’s the only request the natural voice ever makes.

Problem reports

Fullpoint keeps a log of its own errors and warnings on your Mac, and if it ever crashes, the Mac’s crash report is written to your Mac only. Neither is ever sent anywhere automatically.

If something goes wrong, Help › Save a Problem Report… makes a single zip file on your Mac. You choose whether to send it to us, for example by email. It contains:

  • the app’s recent log;
  • recent crash reports, if there are any;
  • a short system summary: the app and macOS versions, memory, and your settings, with anything secret removed;
  • your description of what happened, if you write one.

No documents, drafts, comments or versions are put in it. Before anything goes into the log or the report, API keys and other keys, passwords and tokens are removed; your name and email in settings are reduced to “(set)”; your home folder’s name is replaced by ~; and error messages that quote a file’s contents lose the quote. The report does show the path of your writing folder (with your home folder hidden), but nothing in it is read.

One caution: a crash report is a snapshot of the app’s memory at the moment it crashed, so it could contain fragments of whatever was open. If you’d rather not share that, delete the crashes folder from the zip before you send it.

No analytics

The app contains no analytics, tracking or advertising code, and today it doesn’t need an account. We don’t know who uses it, how often, or what they write.

This website sets no cookies and runs no analytics or third-party scripts or fonts. It’s hosted by Cloudflare, which handles the requests your browser makes to load the pages and downloads.

If this changes

If Fullpoint starts sending anything new, this page will say so before that version is released, and the change will be listed in the changelog. Questions are welcome: see Support.