Privacy Policy

AI features are off by default and work with your own OpenAI API key. When you enable them, the content needed for the feature you use — for example a capture's text for titles and tags, or a voice recording for transcription — is sent directly from your device to OpenAI under your own account and OpenAI's privacy terms. It never passes through our servers.

Your API key is stored in your device's Keychain. On iPhone, you can also choose on-device transcription, which processes voice notes entirely on your device and sends nothing anywhere.

To help us improve Resurf, the Mac app collects anonymous usage analytics via PostHog. This is optional and can be disabled at any time in Settings. The iOS app contains no analytics of any kind.

When enabled, we collect:

• •Anonymous device identifier
• •App version, operating system, and system architecture
• •Aggregate counts: captures, spaces, sessions, and usage (e.g. widget opens, spotlight opens, captures created)
• •Usage event names (e.g. "search opened", "capture saved") with minimal, non-personal properties only (e.g. capture type or error category). No content, URLs, or identifiers beyond the anonymous device id.

The Mac app uses Sentry to collect crash reports and error data. This helps us identify and fix bugs to improve app stability. The iOS app includes no third-party crash reporting. Crash reports include:

• •Error messages and stack traces
• •App version and environment
• •Device type and OS version
• •Session replay on errors (UI interactions only, no personal data)

Crash reports never include your captures, notes, images, or any personal content.

The Resurf Chrome extension lets you capture web content directly to your local Resurf library via right-click. When you choose to capture something, the extension reads:

• •The URL and title of the current tab
• •Selected text, link URLs, or media URLs (image, video, audio), only what you explicitly right-clicked on

This data is passed directly to the Resurf app on your Mac via a local protocol. It is never sent to our servers, never stored by the extension, and never shared with any third party. The extension only acts on explicit user gestures. It does not run in the background, monitor your browsing, or access pages you haven't interacted with.

Resurf is operated from Canada. If you are accessing the app from the European Union or another region with data protection laws, the following applies:

• •Your personal content is never collected. It stays on your device. GDPR obligations around personal data access, portability, and deletion do not apply to content we never see.
• •The only data we hold is an anonymous device identifier used for analytics (if enabled) and your email address if you signed up for download or purchased a license.
• •Captures synced via iCloud live in your personal iCloud account and are processed by Apple, not by us. We have no access to them.
• •You may request deletion of your email or any associated data at any time by contacting support@resurf.so.
• •If you prefer analytics not be collected, disable it in Settings → General → Analytics before first use.