Bilargo Translator — Privacy Policy

Effective date: June 15, 2026

This Privacy Policy explains how Bilargo — Michał Lipski, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in Poland, with registered address at Aleja Partyzantów 51A, 24-100 Puławy, Poland, NIP 7161515351, REGON 061686949 (“Bilargo”, “we”, “us” or “our”), handles information when you use the Bilargo Translator macOS application (the “App”) and related support materials.

Bilargo is a trade name of the sole proprietorship operated by the natural person Michał Lipski. For the purposes of the EU General Data Protection Regulation (“GDPR”), Bilargo / Michał Lipski is the data controller for personal data we process.

1. Summary

Bilargo Translator is designed to process translations locally on your Mac.

As currently offered:

by default, translation content is processed locally on your Mac; we operate no inference servers and never receive your source text, translated text, or translation history;
two optional engines do send your text off your Mac, and only after you configure and confirm them yourself: a translation server on your own local network (section 4b), and a third-party cloud provider you connect with your own API key (section 4a). Neither is enabled out of the box, both are labeled in the App, and offline mode prevents starting cloud/LAN requests but allows loopback servers on this Mac;
translation history is stored locally on your Mac;
we do not require user accounts;
the App includes a locally managed 7-day free trial;
the only paid product is a Lifetime unlock handled through Apple’s In-App Purchase system;
the principal network activity is the optional, user-initiated download of model files from a third-party host such as Hugging Face;
standard Apple / App Store flows (purchase, restore, updates) and voluntary support communications may involve network activity outside our control.

For details about the AI models used by the App, see the AI & Model Notice.

Processing location and local storage

On-device engines and a loopback server on this Mac process text on this Mac. A server on another LAN computer receives text off this Mac; an API provider receives text at its service. The destination’s software and policies govern any logs and onward connections. Offline mode prevents starting app-managed model downloads and cloud/LAN translation; it allows loopback servers on this Mac. It does not guarantee cancellation of requests already running, and does not control system-managed Apple language packs, StoreKit traffic or other apps.

History and glossaries are encrypted on disk with AES-GCM using the same Keychain-held key. Legacy glossary JSON is replaced only after the encrypted file has been written and verified; a failed migration keeps the original and displays an error. This does not encrypt exports, clipboard copies, or older backups.

2. Information processed locally

The App may process and store locally on your Mac:

source text;
translated text;
translation history;
local settings and preferences;
model selection and prompt settings;
downloaded models;
local trial state.

This local information remains on your device unless you choose to copy, export, back up, sync, delete or otherwise move it outside the App.

3. Trial and purchase information

To manage the 7-day trial, the App may store limited local trial state, such as whether the trial has started, the trial start date, the trial end date, and whether the App is in trial mode, Free mode, or lifetime-unFree mode.

If you purchase or restore Lifetime access, Apple processes the transaction. We do not receive your full payment card details. We may receive or process limited entitlement information from Apple, such as whether Lifetime access is active on the Apple Account used for the purchase. Apple’s processing is governed by Apple’s own terms and privacy policy.

4. Model downloads and third-party network metadata

If you choose to install an optional AI model, the App may connect to a third-party model hosting service, such as Hugging Face, to download model files to your device.

This may involve standard network metadata required for the download request, such as:

your IP address;
general request metadata;
the requested model repository;
timestamps and technical logs handled by the third-party host.

We do not send your text to a cloud AI service on our own initiative; you can select your own API provider (section 4a). After a model download completes, translation is intended to run locally on your device.

Third-party model hosts process data under their own privacy policies and terms. We do not control their data practices.

For more information about the models available in the App, see the AI & Model Notice.

4a. Optional user-configured cloud providers (Bring Your Own Key)

The App optionally lets you connect your own API key for a third-party AI provider (for example OpenAI, Anthropic, Mistral, Google, or OpenRouter). This feature is off by default and only active for a backend you explicitly configure.

If you select such a cloud backend:

the text you submit for translation is sent to that provider, under your own account and API key, at your own cost;
the App marks cloud backends with a visible “CLOUD” label and shows a one-time notice before first use;
cloud backends are blocked while the App’s offline mode is enabled;
your API keys are stored only in the macOS Keychain on your device; we never receive or store them;
the provider processes your text under its own privacy policy and terms. We are not a party to that processing and do not receive your text.

If you never configure a cloud backend, no translation content is sent to any cloud service.

4b. Optional translation server on your own network

The App can also send your text to an OpenAI-compatible translation server that you run yourself — for example Ollama or LM Studio, on the same Mac or on another machine on your local network. This feature is off by default.

If you configure such a server:

the App connects only to the address and port you entered, and only after you confirm that address;
your text goes to your own machine or to a machine on your own network — it does not pass through us, and we receive nothing;
what happens to the text there is governed by the software you run and by your own setup, not by this Policy;
the App marks these engines as local-network engines and prevents starting LAN requests in offline mode; loopback servers on this Mac remain available;
an address outside your own infrastructure is your decision and your responsibility; the App shows what it is about to connect to before it does so.

5. Support communications

If you contact us for support or privacy requests, we may process the information you provide, such as your name or email address, the content of your message, device/app details you choose to include, and attachments or logs you voluntarily send.

Please do not send sensitive personal data unless it is necessary for your request.

Launch notifications. If you write asking to be told when the App is released, we keep your email address for that single purpose and delete it within three months of launch. The legal basis is your own request (Art. 6(1)(a) GDPR); reply to us at any time to be taken off the list.

6. Data we do not intentionally collect

As of the effective date of this Policy, we do not collect your source text, translated text, or translation history on our own servers — not for inference, not for analytics or profiling, not for advertising, and not for resale. We operate no inference servers at all. If you choose a cloud provider (section 4a) or your own server (section 4b), the text goes to that destination directly from your Mac and never through us.

We do not sell personal information and we do not use the App for advertising tracking.

7. Purposes and legal bases for processing

Where GDPR applies, we rely on the following legal bases:

Purpose	Data involved	Legal basis
Providing local translation, history, settings, model management and App functionality	Information processed locally on your Mac	Performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in operating the App (Art. 6(1)(f) GDPR)
Managing trial and Lifetime access	Local trial state and Apple entitlement information	Performance of a contract (Art. 6(1)(b) GDPR); legitimate interest in preventing abuse of the trial and licensing features (Art. 6(1)(f) GDPR)
Downloading optional AI models at your request	Network metadata sent to the model host	Performance of a contract / steps requested by you (Art. 6(1)(b) GDPR); where required for transfers, your explicit consent to the download (Art. 6(1)(a) GDPR)
Sending your text to a cloud provider you connected with your own API key (section 4a)	The text you submit, plus request metadata, sent by your Mac directly to that provider	Steps taken at your request (Art. 6(1)(b) GDPR) and your explicit confirmation before first use (Art. 6(1)(a) GDPR); the provider is an independent controller for what it does with the text
Sending your text to a translation server on your own network (section 4b)	The text you submit, sent by your Mac to the address you entered	Steps taken at your request (Art. 6(1)(b) GDPR); processing on your own infrastructure is outside our control
Handling support and privacy requests	Contact details and message contents you provide	Performance of a contract (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR), and legitimate interest in customer support (Art. 6(1)(f) GDPR)
Compliance, legal claims and App Store obligations	Records necessary to comply with law or defend claims	Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f) GDPR)

We do not sell your personal data.

Relevant third parties may include:

Apple, for App Store distribution, billing, purchase restoration and App Store operations;
model hosting providers, such as Hugging Face, if you choose to download optional models;
AI providers you connect yourself (section 4a) — your Mac talks to them directly, under your account; we are not in that path and do not receive the text;
email or support providers, if you contact us by email or through a support channel;
professional advisers or public authorities, where required by law or necessary to protect legal rights.

We never send your translation content to a third-party AI inference API on our own initiative. It leaves your Mac only when you have configured and confirmed one of the optional engines described in sections 4a and 4b.

9. International data transfers

Some third parties involved in App distribution, support or optional model downloads may be located outside the European Economic Area, including in the United States.

When you choose to download an AI model, your device may connect to a third-party hosting service such as Hugging Face, Inc. in the United States. This connection may involve the transfer of network metadata (such as your IP address and requested model repository) outside the EEA.

Where such transfers occur, they are made using an applicable transfer mechanism, which may include:

an adequacy decision such as the EU-U.S. Data Privacy Framework, where the recipient is certified;
Standard Contractual Clauses approved by the European Commission;
or, where you explicitly choose to initiate a specific model download and no other mechanism is available, your explicit consent to that transfer for the requested download.

If you connect a cloud provider with your own API key (section 4a), your Mac sends the text directly to that provider, which may be outside the EEA. That transfer happens under your own contract with the provider, on your instruction; we are not a party to it and cannot provide a transfer mechanism for it. Check the provider’s terms before sending content you are not free to share.

10. Local storage and retention

Because the App is local-first:

translation history remains on your device until you delete it or remove the App’s local data;
downloaded models remain on your device until you delete them;
settings remain on your device until changed, reset or deleted;
trial state may remain locally so the trial is not trivially reset on the same environment;
support messages are retained only as long as necessary to handle your request and maintain reasonable business/legal records.

If you uninstall the App or remove local data, some or all local information may be deleted, subject to macOS behavior, backups, iCloud/device backups you control, and other system-level storage.

11. Clipboard, export and other apps

If you copy, export, or otherwise move content out of the App, that information may then be handled by other apps, services, clipboards, backups or destinations outside our control.

12. Security

We use a local-first architecture to reduce unnecessary data transfer, but no software environment can be guaranteed to be perfectly secure. You are responsible for securing your Mac, your Apple Account, your exported files and any third-party storage you choose to use.

13. Your choices

You may be able to:

delete local history;
delete downloaded models;
change local App settings;
turn on offline mode, which prevents starting app-managed model downloads and cloud/LAN requests; loopback servers on this Mac remain available;
disconnect a cloud provider at any time by removing its API key from the App, and revoke that key with the provider;
remove the App and its local data;
restore Lifetime purchases through Apple;
contact us about privacy questions at privacy@bilargo.com.

If you are in the EU/EEA or GDPR otherwise applies, you have the right to:

access personal data we hold about you (Art. 15 GDPR);
rectify inaccurate personal data (Art. 16 GDPR);
erase personal data (“right to be forgotten”) (Art. 17 GDPR);
restrict processing (Art. 18 GDPR);
data portability (Art. 20 GDPR);
object to processing based on legitimate interests (Art. 21 GDPR);
withdraw consent at any time where processing is based on consent (Art. 7(3) GDPR), without affecting processing before withdrawal;
lodge a complaint with a supervisory authority.

For Poland, the supervisory authority is:

Prezes Urzędu Ochrony Danych Osobowych (PUODO)
ul. Stawki 2, 00-193 Warszawa, Poland
https://uodo.gov.pl

To exercise your rights, contact us at privacy@bilargo.com. Because most App data is stored only on your device and not on our servers, we may not be able to access or delete local data for you; you can delete it directly on your device.

15. Children

The App is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data through a support or privacy request, contact us at privacy@bilargo.com.

16. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects within the meaning of Art. 22 GDPR.

17. This website

This policy is about the App. The website you are reading it on processes one more thing, and it is worth stating plainly: our hosting provider, Cloudflare, collects standard server logs — IP addresses, request timestamps, and browser user-agent strings — when serving these pages. An IP address is personal data, so here is the full picture. We process it for the security and performance of the site; the legal basis is our legitimate interest, Art. 6(1)(f) GDPR. Cloudflare processes these logs for us, as our processor and on our instructions. On the plan we use, raw request logs are not available to us at all — exporting them is an Enterprise-only feature — and the request-level data we can see, which includes IP addresses, covers the previous seven days and nothing older. We keep no separate copies, and what Cloudflare retains for its own purposes is set out in its own privacy policy. Cloudflare runs a global network: requests are served from its edge servers, while the metadata about those requests is processed in its data centers in the United States and in Europe. Transfers outside the EEA rely on the European Commission’s standard contractual clauses in their controller-to-processor module; those clauses form part of Cloudflare’s data processing addendum. Cloudflare’s Privacy Policy describes its own practices.

This site sets no cookies, runs no analytics, and has no contact forms. Your rights, described above, cover this processing too.

18. Changes

We may update this Privacy Policy from time to time. If we do, we will update the effective date above and publish the current version at https://translate.bilargo.com/privacy. Where required by law, we will provide appropriate notice.

19. Contact

If you have privacy questions, contact:

Bilargo — Michał Lipski
Aleja Partyzantów 51A, 24-100 Puławy, Poland
NIP: 7161515351
REGON: 061686949
privacy@bilargo.com
support@bilargo.com
https://translate.bilargo.com

20. Language versions

We keep both language versions — Polish and English — in substantive alignment. For consumers in Poland the Polish version is the binding one.

Local usage and project state — 10 September 2026

Free remains available after the optional seven-day Pro trial. A separate local authenticated usage record stores material/job/project identifiers, local periods, reservations/completions and scoped entitlement grants, without translation source/output or API keys. It enforces the shared daily allowance, not analytics. Normal projects store encrypted content and work state; private sessions do not persist content. Exports, clipboard copies and external source files are outside that encrypted store. Existing results remain readable/copyable/exportable after the trial or allowance ends. No direct-sale channel is offered by the current release.