Weird Machines Privacy Policy

Effective October 7, 2026 · Version 4

This policy explains what personal data Breakpoint Technologies Ltd., which does business as Weird Machines (“we”, “us”), collects through the Off the Record app (the “App”) and our website, weirdmachines.ai. The short version: your audio never leaves your Mac, and we collect as little as we can.

Your audio

The App processes your microphone audio, and the sound your Mac plays if you turn on echo cancellation, only on your Mac, in real time. It does not record or store this audio and never sends it to us or anyone else.

What the App sends

• Update checks: about once an hour, the App asks update.weirdmachines.ai whether a new version exists, and downloads it if so. Like any web request, it carries your IP address and basic technical details, such as the App version. The App does not send a system profile, and we do not keep logs of these requests.
• Terms of Use: when it needs them, the App downloads the current Terms of Use from weirdmachines.ai, with the same technical details.
• Feedback: only when you send it from the App. It includes your message, your email address if you give it, and, if you leave the option on, the App version, macOS version and Mac model. We receive it by email, together with your country (worked out from your IP address; the IP address itself is not kept).
• Usage statistics: only if you agree (the App asks; you can change it anytime in Settings › General). Once a day the App sends a short, anonymous summary of the previous day: a random identifier that is replaced every month, the month you installed the App, the App, macOS and chip versions (for example “Apple M4”), roughly how long protection ran (in ranges such as “15–60 minutes”), how many times it started, the strength and settings used most, and how well your Mac kept up (slowdowns, errors and processing speed). It never includes your audio, what you say, device or app names, times of day or anything else that identifies you. We do not store the IP address it arrives from.
• The Off the Record Stick: if you use one, the App talks to it directly over USB or Bluetooth: your protected microphone audio goes to the Stick and your phone call’s audio comes back, encrypted on Bluetooth with a key shared only by your Mac and your Stick. The key is stored in macOS Keychain and on the Stick. Stick firmware is included in the App and installed from your Mac. None of this is sent to us.

The App has optional accounts for paid plans and team access. It has no advertising or tracking, and sends optional usage statistics only if you agree. Billing access checks and allowance totals described below operate separately from optional analytics. Your settings, account/device credentials, cached access certificate, local allowance meter and a record of the Terms of Use you accepted stay on your Mac; credentials and billing state are stored in macOS Keychain.

Accounts, plans and protected-minute allowances

• Access checks: the App registers a random installation identifier and checks billing.weirdmachines.ai for a signed access certificate. It sends its installation credential and the cumulative number of protected seconds used during the current UTC week. We store the installation identifier, a hash of its credential, its notice date and weekly usage totals to administer access. These totals are required for allowance administration and are separate from optional anonymous usage statistics. They do not include audio, speech, application/device names or call timestamps.
• Accounts: if you sign in, we store your email address, an account identifier and hashes of session credentials. We email a short-lived sign-in code. You can link up to five Macs to an account and unlink them in the App.
• Payments: checkout and subscription management open in your browser through Polar (polar.sh), our reseller and merchant of record. We send Polar your account email address, an internal account identifier, the plan you chose and the number of seats. Polar collects your payment and billing details, such as your name, billing address, payment method and tax ID, and processes them under its own privacy policy (polar.sh/legal/privacy), using payment processors such as Stripe. We store subscription identifiers, status, renewal or end date, seat quantity and a link to Polar’s customer portal, to administer paid access. Our App and billing service never receive your card number.
• Teams: team owners can invite people by email and assign or remove seats. We email each invitation from accounts@weirdmachines.ai, with the owner’s email address as the reply-to address and the team’s name and a join code in the message. The owner can see the email addresses of members and pending invitees. We store team ownership, membership, invitee email addresses and hashes of invitation codes.
• Like other online requests, access and sign-in requests carry an IP address and technical headers. Cloudflare processes them for delivery, security and rate limiting. Application logs omit request bodies, email addresses and credentials; sampled operational logs may include request metadata.

What the website collects

• Update sign-ups: if you ask to hear about new products, we store your email address together with technical details of the request: your IP address and the approximate location derived from it (country, region, city and coordinates), your time zone, network provider, browser, operating system, language and the page that referred you. We use this only to send you occasional updates and to understand where interest comes from.
• Pre-orders: if you join the pre-order list for the Off the Record Stick, we store your name and email address with the same technical details as an update sign-up. No payment is taken. We use them only to contact you about your pre-order and the Stick.
• Spam protection: the sign-up and pre-order forms use Google reCAPTCHA to tell people apart from automated abuse. reCAPTCHA collects hardware and software information, such as device and browser data, and sends it to Google for analysis, and it may set cookies. Its use is subject to Google’s Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms).
• Apart from reCAPTCHA, the website uses no cookies, analytics or advertising. It loads fonts from Google Fonts, so Google receives your IP address when you visit.

Who handles the data

We do not sell or rent personal data, and we do not share it except with the providers that run our services: Cloudflare (website, downloads, billing service, transactional email, email routing and storage), Google (email, fonts and spam protection), and Polar and its payment processors (checkout, payments, taxes and subscription management). They may process data outside your country, under their own safeguards. We may also disclose data if the law requires it, or as part of a merger, acquisition or sale of our business.

How long we keep it

Update sign-ups and pre-orders are kept until you ask us to remove them. Feedback emails are kept as long as they are useful for answering you and improving the App. Usage statistics are deleted after two years.

Weekly billing usage older than four weeks and webhook event hashes older than 30 days are deleted by scheduled cleanup. Sign-in codes expire after ten minutes, invitations after seven days and account sessions after 90 days; expired records are cleaned hourly. Account, installation, organization and subscription records remain until an operator handles a deletion request. Payment-provider records are subject to the provider’s retention requirements. Cached paid access can remain valid on an offline Mac for up to seven days after a seat is removed or access changes.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To do any of this, or to stop receiving updates, email hello@weirdmachines.ai. You may also complain to your local data protection authority.

Children

Our App and website are not directed at children under 16, and we do not knowingly collect their data.

Changes

If we change this policy, we will post the new version here with a new effective date. If a change significantly affects how we use data we already have, we will tell you in the App or by email.

Contact

Breakpoint Technologies Ltd. (Weird Machines), Israel: hello@weirdmachines.ai.