Your photo workflow is local by default. Publishing and Shared Library sync are optional. Downloading Proof does not subscribe you to email.
The Mac App
Proof reads the folders you choose for browsing, culling, and developing. Ratings, flags, and adjustments are stored in your local catalog. Developing does not overwrite originals; file operations such as rename, move, Trash, or HIF extension normalization happen through the relevant workflow.
If you enable the Shared Library beta, encrypted library changes and snapshots are stored in the folder or compatible service you select; a cloud-synced folder may transfer that data through its provider. The app checks GitHub for updates and downloads updates when requested. Optional publishing connects to the services you authorize and uploads the photographs you select. Those services handle data under their own privacy policies. The app does not include advertising or usage-tracking SDKs.
Optional Product Emails
If you sign up, we collect your email address to send feature releases and occasional beta surveys. You must confirm your address before receiving these emails. We store the signup and confirmation times and the wording you agreed to. Resend delivers the emails; Cloudflare D1 stores the subscription and consent records.
Each product email includes an unsubscribe link. Unsubscribing stops both feature updates and survey invitations. We do not automatically add people who download Proof, contact support, or submit feedback to this list.
Website Measurement and Abuse Prevention
We count download requests by day and release, and confirmed signups by day. A request is not proof of a completed download, installation, or unique user. We do not associate download requests with email addresses or use tracking cookies, fingerprinting, or email-open tracking.
To limit signup abuse, the server uses a short-lived, keyed hash derived from the request IP address and hour. We do not store the raw IP address in the signup database. Hosting and delivery providers necessarily process connection information and may maintain operational or security logs under their own policies. Downloads are hosted by GitHub.
Retention and Your Choices
Confirmation links expire after 24 hours. Unconfirmed signups are removed after seven days during database maintenance; expired rate-limit records are also removed. Active subscription records are kept while you remain subscribed. We retain an unsubscribed record to prevent accidental re-enrolment, unless you request deletion. Aggregate counts contain no email addresses and are retained for product planning.
Use the support form to request access, correction, or deletion of your subscription information. No account is required to unsubscribe.
Support and Feedback Forms
These forms send the information you enter to the Proof team through Resend. This may include your name, email, app and macOS versions, computer model, workflow notes, and bug details. We use it to respond, review feedback, and improve Proof. Do not include passwords or other sensitive information.
Security and Providers
Read the Security & Trust page for app verification details. Provider privacy information: Cloudflare, Resend, and GitHub.