Privacy Policy

AI features are off by default and work with your own OpenAI API key. The app asks for your permission before anything is sent: turning AI on shows exactly what will be shared and with whom, and lets you decline. Until you agree, nothing leaves your device.

When enabled, the content needed for the feature you use is sent directly from your device to OpenAI under your own account. Depending on the feature, that can include a capture's text, text recognized on-device in an image, a supported image or a smaller JPEG derived from it for image-aware AI, selected image crops used by annotation assistance, or a voice recording you choose to transcribe with OpenAI. These requests never pass through our servers, and Resurf does not store a copy. OpenAI processes this data under its API data protections and privacy policy, which provide that API data is not used to train OpenAI's models by default.

Your API key is stored in your device's Keychain. On iPhone, you can also choose on-device transcription, which processes voice notes entirely on your device and sends nothing anywhere.

To help us improve Resurf, the Mac and iPhone/iPad apps collect anonymous product analytics via PostHog. This is optional and can be turned off at any time in Settings on either platform.

Analytics are anonymous by design. We do not create user profiles, we never link events to your name, email, or license, and screen recording and session replay are switched off. Automatic crash and error reporting and automatic event capture are disabled too, so the app only ever sends the specific events listed below.

When enabled, we collect:

• •An anonymous device identifier, not tied to any account
• •App version, operating system, and device type
• •A fixed, short list of usage events: app opened, onboarding step viewed and completed, capture created, capture failed to save, search performed, search result opened, free limit reached, license activated, and analytics turned off
• •Minimal, non-personal properties on those events only: the type and source of a capture, an error category, and whether a search returned any results

We never send the content of a capture, a note body, a title, a URL, a file name, or the text you typed into search — the number of results is recorded, never the query.

The Resurf Chrome extension lets you capture web content directly to your local Resurf library via right-click. When you choose to capture something, the extension reads:

• •The URL and title of the current tab
• •Selected text, link URLs, or media URLs (image, video, audio), only what you explicitly right-clicked on

This data is passed directly to the Resurf app on your Mac via a local protocol. It is never sent to our servers, never stored by the extension, and never shared with any third party. The extension only acts on explicit user gestures. It does not run in the background, monitor your browsing, or access pages you haven't interacted with.

Resurf is operated from Canada. If you are accessing the app from the European Union or another region with data protection laws, the following applies:

• •Your personal content is never collected. It stays on your device. GDPR obligations around personal data access, portability, and deletion do not apply to content we never see.
• •The only data we hold is an anonymous device identifier used for analytics (if enabled) and your email address if you signed up for download or purchased a license.
• •Captures synced via iCloud live in your personal iCloud account and are processed by Apple, not by us. We have no access to them.
• •You may request deletion of your email or any associated data at any time by contacting support@resurf.so.
• •If you prefer analytics not be collected, turn it off in Settings before first use — on Mac under General → Analytics, and on iPhone or iPad under Share anonymous usage analytics.