PRIVATE BY DESIGN
Your documents stay on your Mac.
Privacy policy · Updated October 21, 2026.
Reading, editing, text recognition, redaction, signing and form filling all run on your Mac. Preparing a custom template is a separate cloud-assisted step, and the app connects to Fyllyo for a few things that never include your documents. Here is what happens to your information in each case.
Filling a form
Client PDFs, scans, photos, Word files and typed notes are processed by a model running on your own computer. Client documents are not uploaded or sent to a cloud AI provider. Filled PDFs and your edits are saved locally. Filling needs a Fyllyo account, for the trial or a licence, but no API key.
The local model downloads once from Hugging Face, about 5 GB, plus about 1 GB if your documents include scans or photos. After setup, filling works offline; Fyllyo Paid checks your licence online about once a month.
Adding a new form
If you add your own form, the blank fillable PDF and your setup instructions are sent to Fyllyo’s cloud service to prepare the template. No API key is required. Client source documents are not included. Use a blank form without client details, and keep personal client information out of your instructions.
Template setup uses a cloud AI provider. That provider receives the blank form and setup instructions needed to prepare the template. The finished template is saved to your Fyllyo account, so it’s there on your other Macs. Subsequent filling uses the template locally. You can optionally configure your own provider API key; that provider’s terms, privacy policy and usage charges then apply to your setup requests.
What else the app connects to
None of these include your documents: checking for and downloading updates, and whether your version is still supported; signing in and renewing your licence; downloading built-in forms; downloading the AI model; and, for Chinese, Japanese and Korean PDFs that need one, downloading a font the first time.
Crash reports and usage counts
From version 0.6.2, the Mac app tells Fyllyo’s cloud service when it breaks and, once a day, that it was opened. A daily count includes a random ID the app creates for itself (not linked to your account or licence), the app version, your macOS version and whether you use Free, the trial or Paid. A crash report adds what went wrong in Fyllyo’s code.
Before anything is sent, the app removes folder paths, file names, quoted text, email addresses and long numbers. Your documents, their names and their contents are never included. This is on by default. Turn it off in Settings, under “Send crash reports and usage counts”. We use these reports to fix problems and to count how many people use each version.
What stays on your Mac
Copies of the documents you fill from, the filled PDFs, your client profiles, your saved signatures and initials (encrypted), the location of your last certificate (never its password), and where you were in long PDFs. Delete runs and profiles in the app; remove a signature in the Signatures panel.
Website feedback and waitlist requests
When you submit feedback or join the document workflows waitlist, your message and any email address you provide are sent through Resend to the Fyllyo team’s support inbox. This website submission is separate from local document processing. Do not include client documents or personal client information.
We use feedback to respond to requests and improve Fyllyo. If you join the waitlist, we use your email to contact you about the upcoming document workflows product. Waitlist requests are managed by our team; they are not purchases. Contact arun@fyllyo.com to unsubscribe or request deletion of your inquiry. See Resend’s privacy policy for its processing practices.
This website
The website is separate from local form filling. It uses Ahrefs Analytics for website usage measurement. That service receives website interaction and technical information. When you download the Mac app, we count the download along with where your visit came from: the campaign tags in the link you followed and the name of the website that sent you. To do that, the website keeps a small cookie with just that information for 90 days. The website does not accept client documents.
Read the Ahrefs privacy policy for its practices. The videos and screenshots on this website use test client data.
Questions?
You manage and delete source documents and filled PDFs on your computer. Deleting a website inquiry does not delete those local files.
Email arun@fyllyo.com.