Privacy Policy

Nothing. SlideFlow is a native macOS and iPadOS app distributed through the App Store. There is no SlideFlow account, no telemetry pipeline, and no central database of your decks.

• Your decks, slides, conversations, and edit history are stored locally using SQLite, with optional iCloud sync via Apple's CloudKit.
• API keys for third-party AI providers (Anthropic, OpenAI, Google Gemini, Groq) are stored in the macOS or iPadOS Keychain — encrypted at rest by the operating system.
• Apple Intelligence runs entirely on-device. No prompt or content ever leaves your hardware when you select that provider.

When you chat with a cloud AI provider through SlideFlow, your prompt and the relevant slide HTML are sent directly from your device to the provider's API endpoint (for example, api.anthropic.com). The traffic does not pass through SlideFlow infrastructure.

Each provider's privacy policy applies to how they handle that data:

• Anthropic
• OpenAI
• Google (Gemini)
• Groq

SlideFlow can connect to third-party AI services to author slides on your behalf, using API keys you supply. SlideFlow does not sell, monetize, or share users' personal data with third parties for advertising, profiling, or any other purposes.

The four supported third-party AI providers are:

When you connect one of these services, SlideFlow sends the following data directly from your device to the provider's API: (a) the messages in your current conversation, (b) the system instructions describing SlideFlow's slide-authoring tools, (c) the HTML body of any slide the model is editing. SlideFlow does not run any intermediate server — requests go straight from your Mac or iPad to the provider's API. Your API key is stored in the Apple Keychain on your device.

Each provider acts solely as a data processoron SlideFlow's behalf — they process the data we send them to provide the slide-authoring service you requested, and that processing is governed by each provider's own terms. SlideFlow does not control the third party's practices, but we disclose below what each provider's published terms say about training:

• Anthropic (Commercial Terms § B): Anthropic does not train its models on data sent through the API.
• Google (Gemini API terms): Google does not train its models on data sent through the paid Gemini API (any Cloud project with billing enabled). The freetier may be used for product improvement; review Google's terms before connecting a free-tier key.
• Groq(privacy policy): Groq processes API data as a data processor on its customers' behalf. Groq's published terms do not explicitly commit to excluding API data from model training; review the Groq Services Agreement for the most current position.
• OpenAI (API data usage policy, effective March 1, 2023): OpenAI does not use API data to train its models by default.

Each third-party provider has published terms that, in our reading, provide protection of user data comparable to the protections in this privacy policy. We do not share or sell data to third-party AI providers beyond the direct-to-API flow described above.

Your Permission

SlideFlow requires your explicit, per-provider permission before sending any data to a third-party AI service. The first time you save an API key or send a message to any of the four cloud providers above, SlideFlow presents a consent sheet identifying the provider, the data being sent, the destination host, and the provider's role. You may tap "Don't allow" to cancel the action with no data leaving your device, or "Continue with AI" to grant consent for that provider. Consent is stored locally on your device and can be revoked at any time in Settings → Providers → [Provider] → Revoke consent.

Local-Only Paths

SlideFlow also supports modes that do not transmit data to any third party:

• Apple Foundation Models runs entirely on your device.
• On-device MLX loads model weights from Hugging Face on first use and runs inference locally; no inference-time network calls.
• Claude Code CLI is a separate Anthropic command-line tool invoked as a subprocess. SlideFlow does not hold your Claude Code credentials or send data via that tool. (Claude Code itself transmits data to Anthropic per its own terms — that relationship is between you and Anthropic, not mediated by SlideFlow.)

These paths do not trigger the consent flow because no SlideFlow-mediated transmission to a third party occurs.

Apple manages your subscription, payment information, and any data tied to your Apple ID. SlideFlow receives only the receipt confirmation that the OS exposes via StoreKit — never your payment method or full Apple ID. Apple's privacy policy applies: apple.com/legal/privacy.

If you enable iCloud sync, your decks and slide instances are synced through your iCloud account using CloudKit. We do not have access to this data — it is stored under Apple's terms and bound to your Apple ID. Disabling iCloud sync in the app keeps every deck local.

This website does not use cookies, analytics, fingerprinting, or third-party tracking pixels. Server logs may capture standard request metadata for security purposes (IP address, user agent, request path) and are rotated regularly.

SlideFlow is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have, please contact us so we can address it.

Because we do not collect or store your data on our servers, there is nothing for us to export, correct, or delete on your behalf. To remove local data, uninstall the app or use the app's built-in "Delete Deck" action. To remove iCloud-synced data, disable iCloud sync in the app and remove the app from your iCloud Drive in System Settings.

Questions or concerns about this policy? Open a discussion on our support repository.

We may update this policy when the app evolves. The "last updated" date at the top reflects the most recent change. Material changes will be highlighted in the app's release notes.