Privacy — Grafit Pro

In short: Grafit Pro does not collect, store, transmit or share any personal data. There is no account, no analytics and no telemetry. Everything runs on your Mac; the network features send data only to the machines and servers you choose, and only after you set them up.

1. Introduction

This policy describes how Grafit Pro (“the App”), a native macOS application developed and published by SIA SPACE, a company registered in Latvia, VAT LV40203141856, “Padambji”, Vārpu ciems, Baldones pag., Ķekavas nov., LV-2125 (“we”, “us”), handles your information. SIA SPACE is the data controller within the meaning of the EU General Data Protection Regulation (GDPR).

2. Information we collect

None. Grafit Pro collects no personal information, usage data, analytics, diagnostics, crash reports or telemetry of any kind. There are no user accounts, no login and no registration.

3. Local data

Everything you create in Grafit Pro — projects, graphs, recordings, exports and settings — is stored on your Mac, in places you choose. It never leaves your device unless you copy, export, share or send it yourself.

Project files are saved where you choose on your file system.
Recordings (video, audio, EEG) are written as files to folders you specify.
Preferences are kept in the standard macOS user defaults. Secrets you enter — network tokens, the Link Key — are kept in the macOS Keychain of your Mac, never inside a project file.

We have no access to any of this data.

4. Camera, microphone, faces and machine learning

Grafit Pro can use your Mac's camera and microphone to drive real-time work. That processing happens entirely on your device:

Camera — body, hand and face tracking, segmentation and depth run on-device with Apple's Vision framework and Core ML. Images are analysed in memory, frame by frame, and are never recorded, stored or transmitted unless you yourself cable them into a recorder or a network sender.
Face data — face landmarks are used only to generate live visuals. They are never used to identify, recognise, authenticate or profile anyone, never used for advertising, and never leave your device.
Microphone — audio is captured and analysed on your device. It is not recorded or transmitted unless you cable it into a recorder or a network sender.
Machine learning — Pitch Detection, Audio Beat Detection, Depth Estimation, Transcription and Diffusion run entirely on your Mac via Core ML and Apple's on-device speech recognition. No audio, image, feature or result is sent to any cloud AI service.
Virtual Camera — Grafit can publish its output as a system camera (“Grafit Camera”). Frames flow directly to the apps you choose, on your device. We never see them.

You can grant or revoke camera and microphone access at any time in macOS System Settings → Privacy & Security.

5. Network features

All network features are off until you add and configure them in a project. None of them connects to us.

Audio Link and Video Link — send sound and pictures between Grafit instances on your local network. Grafit announces and finds streams with Bonjour (_grafit-link._tcp), so macOS asks once for Local Network access. Nothing is encoded or sent while nobody listens. With a Link Key set and Protect on, a stream is shown only to machines with the same key and is encrypted (AES-GCM). Media stays on your local network.
WebSocket, Remote Control and Sync — WebSocket Client connects only to the addresses you type in; WebSocket Server and Remote Control answer only on this Mac until you turn on “Allow other devices”, and then only on your network, optionally behind a token; a server can be announced to other Grafits on the local network with Bonjour (_grafit-ws._tcp). Sync Trigger and Sync Time travel through the WebSocket connection you set up.
Web Data — fetches the web address you type, at the interval you set, with any header or token you add (the token stays in your Keychain). The server you ask sees an ordinary web request from your Mac; nothing is fetched until you enter an address.
EEG Stream — sends EEG samples only to the relay server whose address you enter, under a stream name you choose. EEG is sensitive data: send it only through a server you trust, and only with the consent of the person it comes from.
Network Diagnostics — reads this Mac's network settings locally. Only when you press “Check from the internet” (or cable its Refresh input) does it send one small STUN request each to stun.cloudflare.com and stun.l.google.com, which see your public IP address in order to report it back. Nothing else is sent, and never on its own.
OSC, Art-Net DMX, TCP, MIDI, serial, Lab Streaming Layer — talk to the devices, hosts and ports you configure; Lab Streaming Layer discovers streams on the local network with multicast.

All of this is communication between your Mac and the machines, devices and servers you choose. No data is sent to SIA SPACE.

6. Third-party services

Grafit Pro contains no advertising networks, no analytics providers, no crash reporters and no cloud AI. It never contacts a third-party service on its own. The one exception you can trigger yourself is Network Diagnostics' check from the internet, which asks the two public STUN servers named above. The App is built on Apple frameworks (Metal, SwiftUI, AppKit, Foundation, Vision, AVFoundation, Core Media, Core Audio, CoreMIDI, Core ML, Accelerate, Network).

A few open-source libraries are compiled into the App — a 2D GPU renderer for the node canvas, the Lab Streaming Layer library, a geometry library, a Core ML diffusion pipeline without any download code, and on-device models. None of them contains telemetry or phones home. Each is listed with its licence on the About page and in the App under Settings → About → Open Source Acknowledgments.

7. Children's privacy

Since Grafit Pro collects no data from anyone, it collects none from children under 13 or any other age, and is compliant with COPPA and equivalent regulations.

8. Changes to this policy

If our privacy practices ever change, this page will be updated with a new “Last updated” date. As the App collects no data, we cannot notify you directly — please check this page from time to time.

9. Contact

Questions about this policy: SIA SPACE · work@siaspace.eu · siaspace.eu