SaffronSuite

Privacy policy

Last updated 11 October 2026

Upcastr Pty Ltd (ABN 68 663 389 795, Sydney, Australia) builds the Saffron Suite apps. This policy explains what we collect, which is very little, and what we do with it. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

The apps

The Saffron apps — Saffron SPICE and Saffron SSH — have no accounts and no sign-up. They do not include analytics, advertising or crash-tracking SDKs, and they do not send us your usage.

  • Your connections stay yours. The apps connect directly from your device to the servers you configure. Nothing is relayed through us, and we never see your screen, terminal, keystrokes or files.
  • Server details stay on your device. Host names and ports are stored locally; passwords, private keys and key passphrases are stored in the iOS Keychain.
  • iCloud sync (Saffron SSH Pro). When you turn sync on, your hosts, keys and settings travel between your devices through your own iCloud Keychain, end-to-end encrypted by Apple. We operate no servers for this data and cannot read it.
  • AI assistant (Saffron SSH, optional add-on). When you ask the AI for a command or an explanation, the text you type into the AI panel is sent to our backend and passed to an AI model to generate the answer. It is used only to answer that request, is not stored by us, and is not linked to any identity — there are no accounts. Your subscription is verified with Apple using your App Store transaction, and we apply a daily request limit per subscription. Nothing else from your terminal is ever sent.
  • Microphone (Saffron SPICE). Microphone forwarding is off by default. When you turn it on for a connection, audio is sent to that server and nowhere else. We receive none of it.
  • Crash reports. If you opt in to sharing diagnostics with Apple, Apple may pass us crash logs. Those come from Apple, not from the apps.

Saffron Maison

Saffron Maison is a Mac app you download from this website rather than the App Store. It has no account and no sign-up, and it includes no analytics or telemetry. Its AI features use Claude, made by Anthropic, through your own Claude API key, which is stored in the macOS keychain. Without a key, the app sends nothing to Anthropic.

  • On your Mac. Indexing, text recognition (OCR), duplicate detection and meeting transcription run on your Mac. Transcription uses Apple’s speech models on the Mac. The library database stays on your Mac.
  • Search. When Claude helps with a search, it first receives your request with today’s date, your time zone and your region, so that “last week” means something. To rank results, it then receives a line for each of about 30 likely matches: the file’s name, type, size, dates, folder, where it was downloaded from, and an excerpt of its text of up to 280 characters. It never receives whole files. Each step can be turned off in Settings (“Use Claude to understand searches” and “Let Claude rank results using short excerpts”).
  • Meetings and Ask Maison. Meeting transcripts and notes are sent to Claude only to write up notes, to give live answers during a call, or when you use Ask Maison:
    • To write up notes, Claude receives the meeting’s title, date, your notes and the transcript.
    • For a live answer, it receives the question heard on the call and a few passages from your files and past meetings, each of at most 900 characters, with the name of the file or meeting it came from.
    • When you use Ask Maison, it receives your question and what Maison looks up to answer it: passages from your files, notes and transcripts of at most 900 characters each; the names, folders, types, sizes, dates and download sources of matching files; and, when a question is about a particular meeting, that meeting’s notes and transcript.
    Once you have added a key, notes are written up automatically when a meeting ends and live answers are on. You can turn either off in Settings.
  • Straight to Anthropic. These requests go directly from your Mac to Anthropic under your own API key. They are not relayed through us, and we never see your files, searches, recordings, transcripts or notes. Anthropic’s own terms and privacy policy govern what it does with API requests.
  • Updates. Maison checks for updates with Sparkle, by downloading an update feed from downloads.saffronsuite.com. The check sends nothing about you or your files. Automatic checks can be turned off in Settings.
  • Permissions. macOS asks you to allow access to your Desktop, Documents and Downloads folders, the microphone, and system audio recording (the first time you record). Maison uses them to build your library and to record meetings; what it reads stays on your Mac except as described above.

This website

This website counts visits, anonymously. Only the website: the apps never do. We use Plausible Analytics, open-source analytics that we run on servers we operate ourselves, so the numbers never reach an analytics company. It sets no cookies and keeps nothing that identifies you:

  • The pages you view, the site that sent you, your browser, operating system, device type and country, how far down a page you scroll and how long it stays open, and which links you follow off the site, such as the App Store badges.
  • Your IP address is used only in passing, to work out your country and to count unique visitors for the day. Plausible never saves it: it scrambles it with a random key that changes every day, and old keys are deleted, so your visits cannot be linked from one day to the next.

We never sell, share or advertise with any of it. Like every request to this site, page views also pass through Cloudflare, which hosts the site and keeps short-lived request logs for security and troubleshooting.

When you send us a support request, we collect what you type into the form:

  • Your name, email address, subject and message
  • Optionally, the app version and device you mention
  • Your browser's user-agent string and the country your request came from, which help us reproduce problems

We use this only to answer you and to fix what you reported. We do not sell it, rent it, or use it for marketing. Support requests are stored in a Cloudflare D1 database hosted in the Oceania region. The site itself runs on Cloudflare Workers, and Cloudflare processes requests on our behalf, including standard security and abuse logging.

How long we keep it

We keep support correspondence while it is useful for supporting you and for our records. You can ask us to delete your request at any time and we will, unless we are required to keep it by law.

Access, correction and complaints

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing info@saffronsuite.com. If you are unhappy with how we have handled your information, tell us first and we will try to sort it out. If you are still unsatisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be called out on this page.

26 September 2026: this website now counts visits anonymously with Plausible, as described under “This website”. Nothing changed in the apps.

11 October 2026: added Saffron Maison under “The apps”, including exactly what it sends to Anthropic and when. Nothing changed for the other apps or this website.

Contact

Upcastr Pty Ltd, ABN 68 663 389 795. info@saffronsuite.com