put·here Privacy Policy

Effective date: 2026-10-22. Operator: Peter Li, contact: peterli_lhc@outlook.com.

The English version is the authoritative one. If the Chinese and English versions differ, the English version prevails.

In one sentence: your cards and files live on your Mac. Content leaves it only when you use a feature that needs it: AI, publishing a canvas, or connecting your iPhone. No ads, no data sales, no training on your content, and no analytics inside the app.

On your Mac. Canvases, cards, notes, images, web snapshots, AI suggestions and what became of them are kept in the folder you chose and in ~/Library/Application Support/LaterSpace/. We cannot see them.

What leaves, and when. Nothing, by default.

  • AI features. Only the card text a feature needs is sent, within stated limits. Files, file paths and web logins are never sent.
    • With put·here AI (the default), requests pass through our server on Cloudflare:
      • chat, tidying and grouping go to OpenRouter, routed only to zero-data-retention providers;
      • research goes to Anthropic, which runs the web search;
      • during research your Mac also searches Hacker News and OpenAlex directly and opens the pages it finds; the search terms come from your question and cards. If you add a TinyFish key, web searches and pages this Mac cannot reach go through TinyFish too;
      • when the app reads web pages on its own, it follows each site's robots.txt and any "no AI" declaration; pages a site refuses, or that ask for a human check, are not read and never worked around, and you are offered to open them yourself in the built-in browser;
      • web content given to AI is treated as material only: instructions written in a page are not followed, and nothing in a page can make the AI take an action for you;
      • finding related cards turns text into vectors on Cloudflare Workers AI, and the vectors are stored back on your Mac.
    • Our server relays content; it does not store or log it.
    • With your own API key or a local model, content goes straight from your Mac to the provider you chose, under their terms.
  • Device registration for put·here AI. The first time AI is used, the app registers an anonymous device ID to count monthly use. There is no account, email or other personal information.
    • Apple DeviceCheck stops reinstalls from claiming a new free allowance. Apple stores two bits and a month per device.
    • Our server stores only how much AI usage the device spent this month (one number), when its first-week Plus preview ends, onboarding gifts claimed, and, once Plus is on sale, subscription status and purchase time; which days in its first five weeks after registering it used AI (dates only); and which feature-experiment group it is in. All of this comes from requests the server already receives: the app sends nothing extra for it, and no card content, URLs, IP address or location is kept. Once Plus is on sale, it also stores the customer number Paddle gives you, to match your subscription to this device; your name, email and payment details stay with Paddle.
  • Publishing a canvas. Only when you press Publish. The bundle contains card content and images, not local paths. It expires when you set it to, and you can withdraw it at any time.
  • Syncing with iPhone. Only after you pair.
    • Cards sync between this Mac and the iPhones paired with it. Content is sealed on the device that sends it; only your paired devices can open it, and our server cannot read it.
    • All the server can see is how many devices there are, when each last connected, when each sync happened and how big it was, and the usage totals and Plus status described next.
    • To apply sync allowances, the sync server keeps a monthly total of how much sealed data each pairing sent, including photos and files (numbers only, not per device), for 13 months, and whether the pairing is on Plus and until when. To show that, your Mac asks put·here AI for a signed note that names only the pairing and an end date and passes it to the sync server; put·here AI sees which pairing the note is for when it signs it and keeps only an unreadable mark of it for the month, to limit how many pairings one Plus can cover.
    • Sealed copies are deleted 30 days after every device has them; a device that hasn't connected for 90 days is no longer waited for.
    • When you disconnect on the Mac, anything not yet received is fetched first, then the sealed copies on the server are cleared at once; cards already on a phone stay there.
  • Web cards and link previews are fetched directly from the site, as a browser would. Previews can be turned off.
  • Pages opened out of sight. To make a cover picture for a link that has none, and when research or an AI summary needs a page whose text only appears in a browser, the app may load the page in a hidden window that keeps no data. This also happens for links that arrive from your iPhone or are added to your canvas folders by other apps, but only once you look at the card (open it, select it, or mark it seen). The site sees your IP address and its own scripts run (including any analytics it uses), but none of your logins are sent. Cover pictures are on by default and can be turned off in Settings › Appearance › Links; they do not run when link previews are turned off.
  • HTML cards stay offline by default. When one wants to reach a site, it asks you first; once you allow it, that site sees your IP address and when you opened the card, and the card's scripts may send its content there. Thumbnails and search never go online.
  • Update checks. At most once a day the app asks puthere.space whether there is a new version, sending only the app name and version. This can be turned off.
  • Feature switches. When AI is used, at most every 6 hours, the app asks our server which AI features are temporarily switched off. The request carries no device information and no content.
  • Crash reports are never sent automatically. You send one yourself by email.

put·here on iPhone

No account. No sign-up, no email. The code you scan to pair is the key, and it stays on your devices. Don't share it: anyone who gets it can sync with your Mac and read your cards. If it gets out, choose Disconnect… on the Mac and pair again.

Your things stay on the phone. Words, photos, recordings, files and shared web pages are kept in put·here's own space on this iPhone. They are included in your iPhone's own backup, and in iCloud Backup if you use it.

Speech to text happens on the phone, with the iPhone's on-device recognition. If your phone can't do it on-device, nothing is transcribed; recordings are never sent to a speech service.

Tidying, reminders and Today are worked out on the phone, from what is on it, and nothing is sent.

When you open a link, your phone fetches that page and its small icon so you can read it offline; for a YouTube link it asks YouTube for the title. The website sees an ordinary visit, as in a browser.

This version uses no AI on the phone, and your content is not sent to any AI service.

Syncing with a Mac happens only after you pair; see "Syncing with iPhone" above.

We don't track you, show ads or sell data. The app has no analytics or tracking components.

Deleting. Deleting the app deletes everything on the phone (copies in iCloud Backup follow your backup settings). Sealed copies on the server are deleted by the rule above, or at once when you disconnect on the Mac.

We do not train models on your content or let our relays do so, sell or share data for advertising, embed analytics or tracking SDKs in the app, or read your browser's passwords, cookies or history.

Processors: Cloudflare (server, storage, the vector model for related cards, and the phone sync relay), OpenRouter (and its zero-data-retention providers), Anthropic, Apple (DeviceCheck), and Paddle once Plus is on sale. The websites your Mac searches directly during research are Hacker News and OpenAlex, and TinyFish if you add a key. Paddle is merchant of record, and we never see card numbers.

Retention. Device usage records are kept until the registration is deleted. Published canvases are kept until they expire or you withdraw them. Synced copies are kept, sealed, until 30 days after every device has them (a device unseen for 90 days is no longer waited for), and are cleared at once when you disconnect on the Mac. Monthly sync usage totals are kept for 13 months and deleted when you disconnect. Relayed AI content is not kept on our side.

Your rights. You can clear your keys and device secret in Settings at any time. To delete a device's usage record or a published canvas, email peterli_lhc@outlook.com. Because there are no accounts, please include the device number shown in Settings › AI (it is not a key). Where local law (such as GDPR, CCPA or PIPL) grants more rights, we honour them.

Children. Not directed at children under 13 (under 16 in the EU).

Website. puthere.space uses Vercel Analytics to count page visits (which pages, and the country and browser type they come from). The counting itself sets no cookies and does not track you across sites. It runs only on the website, not in the app, and is unrelated to your content, your AI use or your device number.

The website sets one cookie, puthere-lang, with the value zh or en. It remembers the language you chose for one year and is used only to show that language, never for analytics or tracking. Your light or dark choice is kept in your browser's local storage and is not sent to us.

Changes. Material changes are announced in the release notes or on the website.