Privacy policy

Last updated 21 October 2026

Whittle is a Mac app that you run on your own computer. This page explains what the Whittle account service, run by Sunnatillo ("we"), keeps about you, and what stays on your Mac.

What stays on your Mac

• Your projects, models, reference photos, prompts and the conversations with Claude. We never receive them.
• Photo-to-3D: with "This Mac", photos are processed on your Mac and never leave it. If you point Whittle at your own server instead, photos go only to that server.
• Claude Code runs on your Mac under your own Anthropic account. Anthropic's terms and privacy policy apply to that use. We do not see your Claude login.

What our account service keeps

• Your email address, to identify your account and send your sign-in codes.
• Your plan (for example Free or Pro) and, once paid plans exist, the status of your subscription.
• Sign-in sessions: a secret token (stored only as a hash), the name of the device you signed in from (for example "Sam's MacBook"), and when it was created and last used. You can end a session by signing out.
• Sign-in codes, stored only as a hash and deleted after ten minutes or one use.
• If you sign in with Google or Apple: the identifier that provider gives us for you and your email address. We do not keep their access tokens and do not receive your contacts or other data.
• Technical logs: our web server keeps standard access logs (IP address, time, the address requested, browser or app name) for 14 days to keep the service secure and working. We use your IP address in memory to limit abuse; we do not store it in your account.

Who else handles data

• Resend delivers our sign-in emails, so it receives your email address and the message.
• Google or Apple, only if you choose to sign in with them.
• Dodo Payments will process payments if and when paid plans start. They act as the seller of record; we receive your plan status, not your card details.

We do not sell your data, show ads, or use analytics or tracking in the app or on this site.

How long we keep it

We keep your account until you ask us to delete it. Deleting it removes your email, plan, sessions and linked sign-in identities. Backups of the account database are kept for up to 14 days and then replaced.

Your choices

You can ask to see, correct or delete what we hold about you, or end all your sessions, by writing to the contact address that will be published here before the public launch. Whittle also works without internet for up to two weeks after your last online check; deleting your account does not delete anything on your Mac.

Changes

If this policy changes in a way that matters, the app will show you before it applies.