Privacy, and the privacy policy

What Wysp can see, and what it can't send.

Wysp reads what you're typing. It has to. It can't finish your sentence without seeing the start of it. A tool like this should be held to a higher bar than a toggle and a wall of legal text, so here is the whole arrangement, plainly.

There is no server

The AI model is inside the app, running on your Mac's own chip. Your keystrokes, your clipboard, the pages you visit: none of it is sent anywhere, because there is nowhere to send it. Wysp works with Wi-Fi switched off. Try it. Wysp can't leak what it never sends.

Some things are never read at all

Password fields are skipped at the system level — their contents are never read. Password managers, banking and health apps, known banking and checkout sites, and login pages are filtered before Wysp uses what you type: it never reaches the model, and nothing from them is written to disk. Copies from password managers are detected and ignored. (For anything outside a true password field, this filtering is Wysp's own, done on-device before the text is used — not an absolute guarantee that a stray sensitive character is never briefly held in memory.)

What's kept, and for how long

To make suggestions fit what you're doing, Wysp keeps a short local note of what you're working on: the app you're in, and — in your browser — the page title and address, plus a brief summary of what's on screen when you switch screen context on. It stays on your Mac, fades within hours, and you can pause or wipe it any time from the app. Anything you copy or select is held in memory only and is never written to disk.

Wysp also builds a small personal dictionary on your Mac — the words, names and phrases you use most — so common completions appear instantly. It is stored locally, never leaves your machine, excludes anything typed in password or secure fields, and you can clear it any time.

The switches are real switches

Clipboard reading and screen reading are off until you turn them on. The activity context that grounds suggestions ships on, and turning it off genuinely stops the capture, not just the display. Off means off.

No account, and no tracking on this site

Wysp never asks you to sign in. It sends nothing you type home by default — the only content that ever leaves your Mac is what you choose to share through the opt-in switch described below, or the feedback you write. A few small automatic requests do happen on launch: Wysp checks wysp.co.uk for a new version (standard app updates), reads a tiny beta-status file, and sends a one-line heartbeat so we can count how many people are using Wysp. That heartbeat carries only a random install ID (created on your device, tied to no name or email) and the app version — nothing you've typed, and we don't store your IP address with it. It lets us see totals like "installs" and "active users", never who you are. We do this on the basis of our legitimate interest in understanding how many people use Wysp and keeping it working; the records are kept only as long as they're useful for that, and you can ask us to delete the records tied to your install ID at any time. This website carries no advertising, analytics, or tracking cookies, and no third-party fonts — the typefaces are served from our own site, so simply reading these pages is reported to nobody.

The only cookies you may receive are strictly necessary ones, set solely when they are needed to deliver something you asked for: if you open the donation page, Stripe sets fraud-prevention cookies so your payment can be processed securely, and our host Cloudflare may set a security cookie to keep the site online. These are not used to track you across the web or build a profile, carry no advertising, and — being strictly necessary for a service you requested — need no consent banner under UK/EU rules. If you never open the donation page, you receive no Stripe cookies at all.

Beta data sharing, and what it means to opt in

Wysp is in beta. Inside the app there is a switch called "Help improve Wysp". It is off by default. Nothing in this section happens unless you turn it on.

When it is on, Wysp may send, over an encrypted connection, a sample of how its predictions performed: whether you accepted, ignored or dismissed a suggestion, the app category (for example "email", not which account), the model, and how fast it ran. The actual text, the words before your cursor and the suggestion, is included only when you accept a suggestion; predictions you ignore or dismiss send no text at all. Each sample is tied only to a random ID created on your device, never your name or email. It is used solely to make the predictions better.

Wysp never sends: your passwords, anything from a password manager or banking site, full documents, or anything caught by the sensitive-content filter described above. Those are removed before a sample is ever queued, not just before it is sent.

Feedback you write (through "Send feedback" in the app) is sent with your message and the app version. Include an email only if you want a reply.

Shared data is stored on infrastructure we control, kept only as long as the beta needs it, and deleted at the end of the beta. You can turn the switch off at any time to stop all sharing, and you can ask us to delete what's linked to your random ID by sending it to us. As a thank you, beta testers who share feedback receive version 1 Premium at no cost.

Wysp is made by TwinPine Digital, a UK sole trader (trading as Wysp), which is responsible for, and the data controller for, any data you choose to share. "We" and "us" on this page mean TwinPine Digital. To ask a privacy question or request deletion, email [email protected] or use the Send feedback option in the app.

The promise

If any of this ever changes, it changes loudly, in the app and on this page, and never backwards. The core of Wysp is free and private, and it stays that way.