Portia privacy policy.
Portia keeps writing local by default. Optional intelligence crosses a named boundary only after disclosure, consent, and a request.
Local writing data
Portia stores Markdown documents in locations you select. Settings, writing goals, version snapshots, security bookmarks, and writing preferences remain in Portia's local app data. Displayed user and assistant messages are stored locally as versioned JSON. Hidden prompts, tool payloads, and reasoning are excluded from that store.
Portia does not sell user data. It contains no advertising, cross-app tracking, or developer analytics. Portia does not silently upload a writing repository.
Optional ChatGPT on Mac, iPhone, and iPad
You may sign in with ChatGPT to use your account in Portia. Before use, Portia explains that a submitted request may send your request, complete active document including unsaved text, optional selection, relevant conversation context, writing preferences, skills, and excerpts read from permitted folders to OpenAI for processing under the signed-in account. Portia sends no OpenAI request until you allow the transfer and submit one.
Portia stores ChatGPT access and refresh tokens in the system Keychain. A local account index stores non-secret profile information. Signing out clears local credentials and attempts remote revocation. Portia reports when remote disconnection could not be confirmed; you can manage connected access in ChatGPT settings.
On Mac, the bundled Codex runtime may write temporary local diagnostic state that includes submitted document text, prompts, and responses. Portia directs that SQLite state to a unique, marked directory inside temporary app data and attempts to remove it after the runtime exits. If the app or computer stops, or cleanup cannot finish, Portia removes marked stale runtime directories the next time Codex starts. iPhone and iPad use direct HTTPS requests and do not bundle the Mac runtime.
OpenAI may retain and use account, request, response, and service data according to the applicable ChatGPT plan, OpenAI terms, privacy policy, and data controls. Consumer and business-account practices can differ. Portia does not override those controls.
Recluse Studio requires each service provider that processes Portia data to protect it at least as described in this policy and as Apple requires. If a provider cannot meet that boundary, Portia must stop using that provider for the affected processing.
Optional web research
Web search is off by default. After you enable it and accept the disclosure, an admitted query may be sent when a submitted request needs current sources. ChatGPT research uses OpenAI. Apple fallback research uses DuckDuckGo or Wikipedia. Portia blocks recognizable private writing from queries without specific authorization; this guard cannot recognize every paraphrase. Research does not change a document unless you also request a revision and accept the Apply review.
Apple Intelligence
On supported Mac, iPhone, and iPad devices, Portia capability-checks Apple Intelligence at runtime and offers it as a fallback. Portia does not add those requests or responses to developer analytics. The editor, local files, preview, and export remain available when Apple Intelligence is unavailable. Displayed answers can remain in the local displayed-chat store.
Permissions and network use
Portia asks for files or folders through system selection panels and stores app-scoped security bookmarks to reopen chosen locations. It does not request camera, microphone, contacts, location, health, photo library, or calendar access.
Online requests use HTTPS on all three platforms. Browser sign-in uses a temporary listener bound only to 127.0.0.1 with an exact callback state. Portia closes it on completion, cancellation, or timeout.
App Store data disclosure
Optional OpenAI use may involve linked email address, user identifier, search history, and other user content for app functionality. Local files and local app records are not developer collection unless you submit relevant content to an online feature.
Analytics, advertising, and tracking
Portia contains no developer analytics, advertising, or tracking SDK. Portia disables the bundled Codex app-server's client analytics, feedback upload, and OpenTelemetry export on every launch. Portia's Release logs do not record authentication secrets, document text, prompts, or model responses. OpenAI's service-side processing remains governed by OpenAI's policies as described above.
Retention, deletion, and consent
- Delete documents and versions from their local storage locations.
- Reset Portia settings in the Manage drawer.
- Disable Web Search in AI settings.
- Sign out of ChatGPT in AI settings to withdraw consent for future OpenAI requests from Portia.
- Use OpenAI's account and privacy controls for data held by OpenAI.
Recluse Studio does not operate a Portia account or Portia cloud-data store. Requests concerning information processed by OpenAI must use OpenAI's applicable account and privacy controls. Email support for help identifying the correct control.
Website preference
This page's appearance switch stores one local value in your browser. The value records only the dark or light appearance and is not Portia app data. Read the separate Recluse Studio website privacy notice for hosting and email details.
Contact
Email support@recluse.studio with a Portia privacy question, consent request, or deletion question.