Privacy Policy

Winbro runs on your PC and has no accounts. This page lists what this website collects and everything the app sends over the internet, who receives it and when.

Last updated

Who is responsible

Mateja Vasojevikj, an individual based in Ohrid, North Macedonia, is responsible for the personal data described here. In this policy, "we" and "us" mean Mateja Vasojevikj. You can reach us at contact@vasojevich.com.

Creem, the merchant of record that sells Winbro, is a separate company. It is responsible for the data it collects when you buy.

This website

This site is hosted on Cloudflare. Like any web host, Cloudflare receives your IP address and basic details of each request, such as the page, the time and your browser type, and it keeps standard server logs. Its privacy policy applies to that data.

We also use Cloudflare Web Analytics to count visits. It works without cookies and reports aggregate numbers, such as page views, referring sites, countries and browser types. We use it to see which pages people read.

The site sets no cookies and has no advertising or other tracking scripts. The interactive demo on the home page keeps its own settings in your browser's local storage on this site. That is not a cookie and it is not sent anywhere. You can clear it at any time in your browser's settings. Fonts and images are served from this site.

When you buy Winbro

You buy from Creem, not from us. Creem collects your payment details, billing address and email address under its Privacy Notice, and we never see your card or bank details. Creem passes on the details we need to deliver Winbro and answer your emails, such as your email address, name and order number. It emails you the license key and the download link, and keeps them in its customer portal.

What the Winbro app sends

Winbro keeps your notes, tasks, chats, settings, license key and downloaded engines on your PC, in %LOCALAPPDATA%\Winbro. API keys you add are encrypted with Windows. The app has no account and no analytics, and the only thing it sends to us is the license check below. Everything else it sends goes to the service behind a feature you use, and most of it only when you use that feature. As with any internet connection, whoever receives a request also sees your PC's IP address.

License check

When you enter your key, about a minute after Winbro starts, and then about every 6 hours while it runs and your PC is online, Winbro sends your license key and a one-way code for your PC to our activation server. The server runs on Cloudflare at winbro-activation.winbro.workers.dev. The PC code is a hash of your Windows machine ID and your system drive's serial number, and nothing readable can be recovered from it. The same details are sent when you deactivate a PC. The server answers with a pass that works on that PC for 30 days. A PC that is locked only because it couldn't reach the server tries again every 5 minutes.

The server stores a one-way hash of your key (never the key itself), the PC codes and when each last checked in, when the license moved between PCs, and the Creem order ID, so that a refund withdraws the right key. It does not store your name, your email address or your IP address. The first time the server sees a key, it asks Creem whether the key is genuine.

Weather

Nothing is sent until you enter a city in Preferences. Then Winbro sends the city name to Open-Meteo's geocoding service at geocoding-api.open-meteo.com, and the coordinates that come back to its forecast service at api.open-meteo.com, to show the weather. Results are kept for ten minutes before Winbro asks again.

Speed test

Only when you start a speed test, Winbro downloads and uploads about 12 MB of synthetic test data to Cloudflare at speed.cloudflare.com. None of your data is in it.

AI features

AI is optional. Switch off "AI assistant" in Preferences and nothing is sent to an AI service. If you add a key or sign in, Winbro sends your requests to the providers you set up: Groq (api.groq.com), Google Gemini (generativelanguage.googleapis.com) or Anthropic (api.anthropic.com), or OpenAI through the Codex tool on your PC. If a provider can't answer, Winbro tries the next provider in the order you chose. A local model that you install runs on your PC and sends nothing, but an endpoint address you enter yourself counts as a provider, and requests go wherever that address points. Agents run through Claude Code or Codex on your PC, which talk to Anthropic or OpenAI with your own account.

A request contains what you typed, said or dictated, your last few requests and their results, and what is needed to carry it out, such as the names and text of controls in the windows involved. The text you wrote in Preferences > Memory > "Your instructions" goes with every AI request, whether or not "Learn from what I say" is on. If that setting is on, facts you have shared with Winbro go too. When you select text on screen and ask about it, the selected screen text goes with your question. A screenshot goes along only when a task needs Winbro to see the screen, and "Let agents see the screen" in Agents turns that off.

The provider's own terms and privacy policy apply to what it receives, and we receive none of it.

Voice

Speech is recognised on your PC by default. If you add a Groq key and the AI assistant is on, the default Automatic voice setting sends the audio of what you say to Winbro, commands and dictation, to Groq's speech-to-text service at api.groq.com instead. If "Learn from what I say" is on, up to 30 names Winbro has picked up from your commands, such as app names, go along so they are spelled correctly. Choose "On this PC only" in the voice settings, or switch "AI assistant" off, and voice stays on your PC. Listening for the wake word always happens on your PC. Once it hears "Hey Winbro", the phrase and what you say after it follow the same rules as any other speech. With Groq in use, that means the audio of "Hey Winbro" goes to Groq along with your request.

Updates and downloads

Winbro looks for a new version only when you press "Check for updates", or once a day if you turn on daily checks. The check and the download go to GitHub (github.com), which hosts our releases. Updates are signed, and Winbro installs one only when you ask.

The installer, and Setup inside Winbro, download optional parts when you or the installer ask for them: the voice engine's models from Hugging Face (huggingface.co), the offline AI model from Hugging Face and its runtime from GitHub, and Microsoft's WebView2 component from Microsoft (go.microsoft.com) if your PC doesn't have it.

Everything else

Your notes, tasks, chats, clipboard history and settings stay on your PC, except for what you ask an AI feature or an agent to work with. That goes to the provider, as described above. For example:

  • The Notes AI sends the whole note, up to 12,000 characters, when you ask it to rewrite the text or answer a question about it, even if you selected only part of it. The part you selected goes along too. In a longer note, only the selected part is sent.
  • A request that mentions a note sends your note titles, up to 40, so Winbro can find the right one.
  • While the Notes window is open, the title of the note on show goes with each command you give the assistant, so Winbro knows which note you mean.
  • Agents can read your notes and tasks, and the files in the project folder you give them, and what they read goes to their provider.

When you ask Winbro to search or open a website, it opens your own browser, and that traffic is between your browser and the site.

When you write to us

If you email us, we receive your email address and whatever you write. We use it to answer you.

What we use data for

Where the law asks us to name a legal basis, these are ours:

  • Contract: delivering and licensing Winbro, which includes activation and license checks, and giving you support. We need the data to do what you bought.
  • Legitimate interests: keeping the activation server secure, and counting visits to this website so we know which pages people read.
  • Legal obligation: keeping records of purchases and refunds, which tax and accounting law require.

We don't sell your data and we don't use it for advertising.

Who else receives data

Data goes to the companies named above, each for the purpose described: Cloudflare for hosting, analytics, the activation server and speed tests, Creem for your purchase, GitHub, Hugging Face and Microsoft for downloads, Open-Meteo for weather, the AI providers you set up for the features you use, and the email provider behind our support address for your emails. Some of them are based outside North Macedonia and the EU, for example in the United States, so your data may be processed there under their own safeguards.

How long data is kept

  • Activation records stay while your license exists. If you ask, we remove the PC codes and move history linked to your key. We keep the one-way record that a key was refunded so that it can't be used again.
  • The activation server keeps the Creem order ID linked to your key's hash for as long as the license exists.
  • Creem holds your purchase records under its own policy.
  • Emails you send us stay in our mailbox for as long as they help us support you, and we delete them if you ask.
  • Cloudflare, Creem and the other companies above keep data under their own policies.
  • Data on your PC stays until you delete it. Uninstalling Winbro keeps your notes, settings and license in %LOCALAPPDATA%\Winbro. Delete that folder to remove them.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email contact@vasojevich.com. If you bought Winbro, write from the address you bought with so we can find your records. Depending on where you live, you may also have the right to object to or restrict how your data is used, to receive it in a portable form, and to complain to your local data protection authority.

For data held by Creem, Cloudflare or an AI provider, contact them directly under their own policies.

Changes to this policy

We change the date at the top when we update this page. If a new version of Winbro sends data somewhere new, this page will list it.

Contact

Mateja Vasojevikj, Ohrid, North Macedonia. Email contact@vasojevich.com. The Terms of Service and the Refund Policy cover the rest.