Security

The architecture removes most of the categories of risk that a product like this normally carries. Here is what is left.

There is no image data to breach

Your photographs are never transmitted, so there is no store of customer images to be exposed, no backup of them to leak, and no employee who could access them. This is not a control we operate. It is a consequence of the software having no server component.

What we do hold

• Licence holder names and email addresses.
• Web server logs, kept 30 days.
• Payment records held by our payment provider, not by us. We never see card details.

How the application is delivered

• Served over HTTPS only.
• Cross-origin isolation enabled, which restricts what other origins can interact with the page.
• All code and assets served from our own origin. No third-party scripts, no analytics, no advertising, no fonts loaded from a CDN.
• The background-removal model is hosted by us rather than fetched from a third party.

Licensing

Licences are signed files verified on your machine against a public key in the application. We are candid about what this is worth: it is tamper-evident, not tamper-proof. Someone determined can edit their own copy of the software. A licence server would not change that, since the application still runs on their computer. It stops casual sharing, which is what it is for.

Reporting a vulnerability

Email us. Please include enough detail to reproduce it, and give us a reasonable opportunity to fix it before disclosing publicly. We will acknowledge within two working days and keep you informed.

We do not currently run a paid bounty programme, and we will not threaten anyone who reports something in good faith.

Verify it yourself

You do not have to take the "no uploads" claim on trust. Open the app, open your browser's network inspector, and process a batch. You will see requests for the app's own files and nothing else. Or disconnect from the internet after loading and watch it keep working.