Privacy Policy

Effective 28 October 2026

Guardpup exists to keep your private information private, so it is built to see as little as possible. Everything you send to an AI is checked on your own device and never comes to us. The free versions have no account: the free extension never connects to us at all, and the Mac and Windows apps and the developer tool only ask for the newest version number, about once a day, with nothing sent along. Pro and Team need an account; the only thing the apps then ask our server for is a "pass" that says your plan is active. (If your company turns on its team report, your apps also send your company weekly totals, never content: see "Team report" below.)

Who We Are

Guardpup is made by Donmac, a sole proprietorship registered in the Republic of Korea ("we", "us"). Contact: hello@guardpup.io, or the contact form.

What Never Leaves Your Device

On every plan: the messages, files and screenshots Guardpup checks, what it found in them, the real values behind the stand-ins, and the things you asked it to protect (kept as one-way salted fingerprints, never as the values). None of it is ever sent to us, and our server has no way to receive it.

The Browser Extension

What it reads. On the AI chat sites it supports, it reads what you paste, type, drop or attach in the message box, at the moment you paste or send, to check it for passwords, keys, card numbers, ID numbers and contact details. Screenshots are read with a text-recognition engine, and PDF and Office documents with a document reader, both bundled with the extension and running on your device.

What leaves your device. When you choose to mask, the AI site receives realistic stand-ins instead of the real values. When you choose to send anyway, the site receives what you wrote, as it would without Guardpup. Without an account, the extension makes no requests of its own, unless you turn on anonymous usage counts or ask it to check your AI history (both below). If you connect a Guardpup account, it asks guardpup.io for your pass every few minutes while the browser runs, so a purchase, cancellation or refund shows within minutes, and that request carries only this browser's device key.

Check my AI history (only when you ask). When you ask, Guardpup reads your past chats from ChatGPT or Claude, right in your browser, the same way the site shows them to you. Nothing goes to Guardpup, and the report stays on your computer. When you click "Check now" for ChatGPT or Claude, the extension asks that site, in your signed-in tab and with that site's own sign-in, for your list of chats and then each chat, the way the site's own pages do. It reads only what you sent, never the AI's replies, and checks it on your device. The report (the kind of each thing found, the chat's title and date, and at most the first and last four characters of each value) is shown on the page and gone when you close it. All it keeps is the "Replaced" ticks you set, as one-way fingerprints. Dropping an export instead reads the file on your device and connects to nothing.

Anonymous usage counts (off unless you turn them on). If you turn on "Share anonymous usage counts" in the extension, it sends guardpup.io one report a week with totals for the week that just ended: how many pastes, sends, files and screenshots it checked; on which supported AI sites (by name; any other site is counted as "other"); which kinds of thing it caught, by Guardpup's own rule names, and for each how many were sent anyway; what you chose (mask, remove, send anyway, cancel) and a few other choices; your extension version, browser, plan and three settings; and two rough ranges: how long ago it was installed, and in how many of the last four weeks it was used. A report never contains what you typed, pasted or attached, any value it found, the address of any page, or any account, device or install ID, so reports can't be linked to each other or to you. Our server stores each report with the day it arrived, and not your network address. The extension's settings page shows the exact report before it is sent. Turn it off there or in the extension's menu at any time; nothing more is sent.

What it keeps, only in your browser (Chrome's local extension storage, never synced): your settings; the things you asked it to protect (as fingerprints, or watched words as you typed them); a short history for the popup (the kind of thing caught, the site, what you chose and when, never the secret itself, kept for 90 days and at most 1,000 entries, clearable from the popup); weekly totals for the usage counts above (kept for six weeks, sent only if you turn them on); how often you sent a value as is (as fingerprints, so it can offer "Stop asking"); and, if you connected an account, its device key and pass.

Company settings. If your employer manages your browser, or you join your company's team with a link, Guardpup follows the company's rules. It reports nothing back to your employer or to us, with one exception the company has to turn on.

Team report (only if your company turns it on). With a company plan, if your company turns on its team report, Guardpup also sends your company weekly totals from this device: how many things were checked and stopped, by kind and AI site, and how many were sent anyway. No names and no content: never what you typed, pasted or attached, any value it found, your name or email, or any account, device or install ID. A random number made fresh each week lets the company's total count this device once, without following it from week to week. Our server keeps only each week's sums for the company, and shows a week only once at least 3 devices reported. When it's on, Guardpup tells you (when you join, and on its settings page, menu or guardpup usage), and shows the exact report. All three apps do the same.

Uninstalling. Chrome opens a short page on this site asking why. Answering is optional, and the page receives nothing from the extension except its version number.

The Mac App

It runs in Apple's App Sandbox, and everything is checked on your Mac. It reads the clipboard only while a supported AI app is in front. When you paste something it caught into that app, it asks first: masked (a screenshot with its secrets covered), or the original.

Images you drop. To check an image you drop on an AI app, Guardpup may read your Desktop, Documents and Downloads folders, read-only, and macOS asks you first for each one. It reads only the images you drop, on your Mac. Images from any other folder are checked once you allow that folder.

The Accessibility permission (optional). If you allow it in macOS's Privacy & Security settings, Guardpup notices ⌘V in AI apps, so it can ask before the paste and then paste what you chose, and it notices files dropped onto an AI app's window. It looks at those keys and drops only. It never reads your screen or what's in other apps' windows. Without the permission Guardpup still works: you press ⌘V yourself after choosing.

Files you drop. Guardpup can check an image you drop onto an AI app only if it's in a folder you allowed, once, in a folder dialog. That access is read-only, and Guardpup can't open anything else on your Mac. Other kinds of file go in unchecked, after Guardpup says so.

What you type (off unless you turn it on). With "Also check what I type before it's sent", Guardpup keeps what you type into an AI app in memory until you send the message, and warns you before a secret goes. It's never saved, and it's cleared when you send or leave the app.

It connects to one place: guardpup.io, every few minutes while it runs, for your pass, with this Mac's device key and nothing else. The answer also says the newest version of the app, so Guardpup can tell you when an update is out. A Mac without an account (the free version, or a company's licence) asks only for that version number, and the request carries nothing about you or your Mac. When you choose "Quit and Update", it downloads the new version from guardpup.io (the list of versions, then the app), with nothing about you or your Mac, checks it's signed by Guardpup, and installs it.

Anonymous usage counts (off unless you turn them on). With "Share anonymous usage counts" in its menu, it sends guardpup.io one report a week for the week that just ended: how many pastes, typed messages, files and screenshots it checked; in which of the AI apps it knows by name (apps you added yourself count as "other"); which kinds it caught, by Guardpup's rule names, and how often each was used as is; your version, plan and three settings; and the same two rough ranges as the extension. Never what you copy, paste or type, file names, or this Mac's device key or any other ID. "See what's sent…" in the menu shows the exact report.

The Windows App

It checks what you paste into AI desktop apps on your PC, on your PC. It connects to one place: guardpup.io, about once a day, for the newest version number, with nothing sent along.

The Developer Tool

It checks what a coding agent reads, writes and runs on your computer and keeps a local log of its decisions in your project folder: file paths and short fingerprints of findings, never secret values. Without an account it sends nothing anywhere, unless you turn on anonymous usage counts. About once a day, when you run a guardpup command yourself (never while it checks your agent), it asks guardpup.io for the newest version number, with nothing sent along; GUARDPUP_NO_UPDATE_CHECK=1 turns that off. If you run guardpup login, it asks guardpup.io for your pass every few minutes while you use it (never making your agent wait), with this computer's device key only.

Anonymous usage counts (off unless you turn them on). With guardpup usage on, it sends guardpup.io one report a week, made from its local log, for the week that just ended: how many prompts, commands, file reads and writes it checked; which of its rules caught something and how often each was let through anyway; how many were blocked, asked about or approved; your version and plan; and the same two rough ranges as the extension. Never a command, file path, project, prompt or tool name, and no account, device or install ID. guardpup usage shows the exact report; guardpup usage off stops it.

Your Guardpup Account (Pro and Team)

When you create an account at guardpup.io/account we keep:

• Your email address, and how you signed in. With an email code, we send you a six-digit code and keep only a scrambled copy of it for 10 minutes. With Google, Google tells us your email address and name.
• Your plan: trial dates, and from our payment provider the subscription's status, renewal or end date, and a link to manage it. If you used a tester code, that you did, when, and the name of the group it was for.
• Your connected apps: a name like "Chrome on Mac", when it was connected and when it last checked in, and a scrambled copy of its device key.

Like any website, our server also sees the IP address and browser details of each request, to deliver it and keep it secure. We use them for nothing else.

You can remove a connected app, or delete your whole account, from guardpup.io/account at any time. Deleting it erases everything above from our database straight away (a paid subscription is cancelled first, from Manage subscription).

Who Helps Us

• Google Firebase hosts this site and runs our account server and database (United States).
• Resend sends our emails: sign-in codes, Team licences, the launch list's confirmation, and contact form messages on to our inbox.
• Lemon Squeezy sells Pro and Team as the merchant of record: it processes your payment and billing details under its own privacy policy. We receive your email, plan and subscription status, never your card number.

They process data only to provide their service to us. Some are outside your country; where the law requires, transfers rely on standard contractual clauses.

This Website and Email

• We use no analytics and no advertising. The account page keeps you signed in with Firebase's own sign-in storage; nothing else is stored in your browser.
• If you email us or use the contact form, we receive your address and what you write, and use them only to reply. The form sends your message on to our inbox by email; our server keeps nothing of it, only a count of messages in the last hour to stop floods. On the page shown after you remove the extension, a reason you tap is sent the same way, with the extension's version and no address.
• The launch list. If you leave your email address on this site to hear when Guardpup opens, we store that address, when you left it and which button you used. We send a confirmation right away, then one email when Guardpup opens to everyone, and then delete your address from the list. Nothing else is sent. The link in the confirmation removes you at once; so does emailing us.
• If you sign up to test Guardpup, we keep the details you give only for that purpose, and delete them on request.

What We Never Do

• We never see the messages, files or screenshots you check with Guardpup.
• We never sell, rent or share personal information, and never use it for advertising.
• We never use your data to train AI models.

Your Rights

Wherever you live, including under the EU and UK GDPR, Korea's Personal Information Protection Act and California law, you can ask what we hold about you, and ask us to correct or delete it. Without an account, the answer is nothing. With one, it's the account details above, which you can also see and delete yourself at guardpup.io/account. Write to hello@guardpup.io or use the contact form.

Children

Guardpup is not directed at children under 14 and we do not knowingly collect their information.

Changes

If this policy changes, we will update this page and its date. If a change affects what leaves your device, we will say so in the apps before it takes effect.