Privacy Policy

Curlex is made by Nilanchala Panigrahy, an independent developer trading as Spannable Labs (spannable.com). This policy explains what happens to your information when you use the Curlex desktop app on macOS or Windows.

We don't collect any personal information. Curlex has no sign-up and no cloud account. It doesn't send usage statistics, crash reports, feature analytics or any other data to us.

• Collections, environments, workspaces and settings, in the app's local database.
• Passwords, tokens and Vault secrets, in your operating system's secure keychain (macOS Keychain or Windows Credential Manager).
• Large response bodies, in a temporary folder managed by the app.
• Console output, in memory only. It is cleared when you restart the app.

The requests you send go directly from your computer to the API servers you configure. Curlex is not a proxy and does not intercept, inspect or log your traffic anywhere outside the app.

GitHub Sync is optional. If you turn it on, your collections and environments are pushed to the repository you choose, under your GitHub account and GitHub's terms. Secret variable values are replaced with placeholders before anything is written to Git, so credentials are not exposed even in a private repository.

Curlex checks for new versions in the background. That check contains no personal data or usage information. Updates are cryptographically signed, and Curlex verifies the signature before installing one.

Delete collections, environments or workspaces inside the app at any time. Uninstalling Curlex and removing its data folder deletes everything it stored; keychain entries can be removed from your operating system's keychain manager.

If this policy changes, the updated version will be posted on this page with a new date and noted in the release notes.