Effective date: 22 October 2026. Applies to the Terraphim Proxy macOS
application (cloud.terraphim.desktop), distributed via the Mac App
Store and direct download.
The short version
Terraphim Proxy collects no data whatsoever. There is no account system, no telemetry, no analytics, no crash reporting, and no third-party tracking SDK. Your credentials never leave your Mac except inside the requests you deliberately send to the LLM providers you configured.
What stays on your device
- API keys and OAuth tokens are stored exclusively in the macOS Keychain — never in configuration files, never transmitted to Terraphim Proxy or any third party.
- Settings (provider choices, route pins, keyword remaps and synonyms) are stored as a plain file inside the app's sandbox container on your Mac.
- Prompts and completions pass through the embedded proxy in memory and are forwarded only to the upstream providers you configured. Terraphim Proxy does not log, persist or transmit them elsewhere.
- Metrics shown in the operator dashboard are computed in-process
and served only on loopback (
127.0.0.1) listeners bound to your machine.
What leaves your device
Only the requests you send through the proxy, to the LLM providers you chose — over TLS, bearing the credentials those providers issued to you. Their handling of that traffic is governed by their own privacy policies (z.ai, OpenRouter, Groq, Cerebras, Kimi, MiniMax, DeepSeek, OpenAI, xAI, or any other provider you configure).
Purchases
The app is a one-time purchase processed entirely by Apple's App Store. Apple — not Terraphim Proxy — receives and processes your payment information. The app contains no in-app purchases, no subscription checks and no licence servers.
Permissions the app requests
| Entitlement | Why |
|---|---|
app-sandbox | The app runs sandboxed. |
files.user-selected.read-write | Only files you explicitly choose (e.g. settings export). |
network.client | Outbound calls to your configured LLM providers. |
network.server | Loopback-only listeners for the local proxy endpoint and the dashboard's metrics feed. |
Contact
Questions, corrections or requests: open an issue on GitHub or write to the maintainers via the repository.
If this policy changes, the updated version is published at this URL before the change ships.