Adduce Privacy Notice
Effective: June 21, 2026
Your evidence stays on your Mac
Adduce processes indexed media, transcripts, embeddings, faces, notes, and searches on your device. Adduce does not operate an analytics or advertising service and does not upload your library to Adduce.
When Adduce touches the network
Network access occurs only when you:
- request a public download,
- install an optional model,
- check for updates,
- activate or re-validate a license,
- use the iOS companion over your local network, or
- enable the optional (off-by-default) entity-enrichment setting, which looks up extracted entity names against the public Wikidata API.
Checkout and payment information is processed by Stripe under its own privacy terms. Subscriptions purchased before the move to Stripe were handled by an earlier provider as merchant of record — Polar, or Lemon Squeezy before it. A licence bought under one of those still re-checks with that provider, which transmits the licence key (and nothing else) to them. License fulfillment uses the purchaser email supplied by the checkout provider.
On-device data handling
The iOS companion stores its server token in the Apple Keychain. Face processing is local and entitlement-aware: the Add Media face option is checked by default for Pro/trial installs and unchecked for free installs. adduce people --forget deletes Adduce's stored face and people records. Removing the app does not automatically remove source media.
Confidentiality and privileged material
Because processing is on-device, Adduce (NeuralLab) never receives, stores, or processes the evidence you index — client files, media, transcripts, indexes, notes, and search queries stay on your machine. Ordinary use of Adduce therefore involves no disclosure of that material to us, and no waiver of attorney-client privilege or work-product protection can arise from our handling of it, because there is no handling. The only data held on our side is the license and purchase record created at checkout, described under “Data processing” below. You remain responsible for securing your own device (for example with FileVault and a screen lock). This notice is not legal advice.
Data processing
Because Adduce processes everything on your device, NeuralLab is not a processor or service provider with respect to the evidence you index. That material is never transmitted to us, so there is nothing for us to store, and no sub-processor of it exists — no vendor of ours ever receives it. We cannot retrieve, disclose, or delete your evidence on request; only you hold it.
One carve-out, so that statement is exact: the off-by-default entity-enrichment setting looks up extracted names (a person or company name only — never a document, transcript, or file) against the public Wikidata API. Enabling it is your choice, Wikidata is not our vendor, and nothing is sent while it stays off. The Privacy Center's network monitor shows you either way.
What we do hold is the purchase and license record created when you subscribe: your email address, the payment provider's customer and subscription identifiers, the license key, the subscription status and current period end, the product and checkout identifiers, and — once you activate — a random per-installation identifier that binds the license to one Mac. That identifier is generated locally, is not derived from your hardware, and reveals nothing about your files.
The vendors involved in that record are Stripe (payment processing and the billing relationship), Cloudflare (hosting the licensing service and the database holding the record above), and Resend (activation email, where enabled) — plus, for a licence bought before the Stripe migration, the earlier merchant of record (Polar, or Lemon Squeezy before it), which still receives that licence key when it re-validates. None of them receives evidence.
The record is retained while your subscription is active and for the period the payment provider requires for its own financial records. To ask what is held, to correct it, or to have it deleted once your subscription has ended, email support — noting that deletion ends the ability to re-activate the license on a new machine. This section describes how Adduce is built; it is not a certification or an audit report, and it does not assert that any particular regulatory framework applies to your use.
Contact
For privacy requests or questions, email support.