Your work stays under your control.

Video processing

CleanCut does not upload your media.

The video files you select are processed locally by the CleanCut engine bundled inside the Mac or Windows application. Audio extraction, AI transcription, profanity matching, and video conversion happen on your computer. Subtitle generation is currently available in the Mac app.

CleanCut does not send your video, audio, transcript, subtitle text, filenames, or detected words to Envelopes or an AI service.

PolishKey text rewrites

PolishKey rewrites selected text locally by default.

The text you select for a rewrite is sent to the model provider configured in PolishKey. The Apple Silicon Mac build includes the private local runtime. Its Gemma model downloads once into PolishKey's application data and remains on your Mac, so local rewriting does not require a cloud AI account.

If you choose the optional Gemini provider and enter your own API key, selected text is sent to Google's Gemini API for that rewrite. PolishKey does not send selected text, rewritten text, clipboard contents, app names, or surrounding document content to Envelopes for AI processing.

SnapTask tasks and calendar

SnapTask writes to your Google account and nowhere else.

When you connect a Google account, SnapTask asks for three permissions and no more: create and manage your tasks, view and edit events on your calendars, and see the list of calendars you are subscribed to. The calendar list is read only so the app can offer you the calendars you actually have; it is not used to read other people's events.

What SnapTask sends to Google is what you typed: the task title, an optional note, an optional date, and an optional time. It creates the task or event in the list or calendar you chose. It does not read your existing tasks or events, and it does not send any of it to Envelopes. There is no Envelopes account, no server, and no analytics in SnapTask.

Sign-in happens in your own browser using Google's standard OAuth flow. SnapTask never sees or stores your Google password. The token Google returns is kept in the macOS Keychain, or Windows Credential Manager, and never in a settings file. Disconnecting the account in SnapTask revokes that token with Google and deletes the local copy. You can also remove SnapTask's access at any time from your Google account's permissions page.

SnapTask reads your clipboard once, when the capture box opens, so it can offer text you just copied as a starting point. That text stays on your computer unless you choose to save the capture. SnapTask never writes to your clipboard and never clears it. Until an account is connected, captures are written to a local file in SnapTask's own application-data folder rather than sent anywhere.

SnapTask requests no macOS permissions at all: no Accessibility, no Automation, no screen recording, and no simulated keystrokes.

Envelopes budget data

Envelopes does not connect to your bank.

Envelopes stores your budget on your device so you can use the app without creating an account. You enter account balances, envelopes, transactions, goals, and scheduled items manually.

If you sign in for sync, Envelopes stores a cloud copy of your budget through the Envelopes cloud service so your own devices can match. Sync is optional, and you can delete a cloud account from inside the app or through the public account-deletion page.

Envelopes does not collect bank login credentials, does not link to financial institutions, does not use third-party advertising, and does not use third-party analytics inside the app.

Network connections

The app connects for a few narrow purposes.

License activation and validation

When you activate, validate, or remove a paid license, CleanCut or PolishKey contacts Polar's customer license service. The request includes the license key, activation identifier, app/platform labels, and a hashed machine identifier used to enforce the one-computer activation limit.

CleanCut for Mac and Windows both use Polar for paid license activation, validation, and deactivation. Polar processes the purchase and provides the license key through checkout, the receipt, and the customer portal.

Update checks and downloads

Current Mac apps check their public EnvelopesApp GitHub Releases feed to see whether a newer signed version exists. If you choose to update, your browser downloads the notarized installer from GitHub. CleanCut for Windows is currently updated from the public Windows download on the CleanCut website or the Polar customer download.

Optional anonymous CleanCut for Mac usage analytics

CleanCut for Mac sends limited product-usage events to the private Built Useful analytics dashboard unless you turn off Share anonymous usage data in Settings. Events include first launch, app version, operating system and processor architecture, successful video counts, the selected tool combination, free-trial limit events, checkout openings, and whether a license was activated. The current Windows early-access build does not send these usage events.

These events use a random installation ID. They do not include your name, email address, raw IP address, video or audio, filenames or paths, transcripts, subtitle text, detected words, license key, or payment details.

SnapTask Google connection

SnapTask contacts Google to sign in, to refresh its access, and to create the task or event you asked for. Those are the only requests it makes. It does not contact Envelopes, check for updates, or send usage data.

Optional cloud rewrite provider

PolishKey can use Gemini only when you select Gemini in Settings and provide your own Gemini API key. Local rewrite mode remains available without that key.

Envelopes sync and subscription status

Envelopes connects to the Envelopes cloud service when you create an account, sign in, sync your budget, use support/account-deletion tools, or check account status. In-app subscriptions are processed by Apple and RevenueCat so the app can unlock paid access.

If a required service is unavailable, your media or selected text remains local unless you have explicitly chosen a cloud rewrite provider for that action. A temporary network failure does not upload work or hand processing to a remote fallback.

Local settings

Preferences and activation state stay in Application Support.

CleanCut and PolishKey store app preferences, free-trial usage, and license activation state locally. CleanCut for Mac also stores its random analytics installation ID and analytics preference locally. Envelopes stores local budget data and sign-in state on the device where you use it.

To release a computer's activation, use the Remove or Deactivate option in the app's Settings while connected to the internet.

This website

A static site hosted by GitHub Pages.

This website does not contain an Envelopes account system. To understand whether launch posts and ads are working, the site records simple analytics events through a private Built Useful dashboard: page views, paid landing visits, demo plays, download clicks, App Store clicks, checkout clicks, support email clicks, referrer host, campaign parameters, broad device type, browser language, and country.

The website analytics use a temporary session ID stored in your browser's session storage. When you click a Polar checkout button, that session reference and campaign tags may be added to the Polar checkout URL so a completed purchase can be attributed back to the launch channel.

The analytics dashboard also receives signed Polar webhook events for paid and refunded orders. It stores order ID, product, app name, purchase amount, currency, refund status, and campaign/reference metadata. It does not store raw IP addresses, buyer names or emails, video files, selected text, transcripts, license keys, or purchase card details.

GitHub may process standard request information when serving the pages and release downloads. Purchases are completed through Polar, which acts as the online reseller and merchant of record and applies its own buyer and privacy terms.

Opening an email support link uses your email provider. Information you send in a support message is used to respond to the request. Do not send private source videos unless support specifically asks for a sample and you are comfortable sharing it.

Questions

Ask us about your data.

Email Envelopes.app.com@gmail.com with privacy questions or requests relating to information you previously sent to support.

Last updated: July 17, 2026.