This policy covers the paid Rondell app for Windows, its free trial and the Rondell website.
In this policy, a “pill” is one of the items in your ring. A pill runs actions, such as AI, file search or opening a link.
The short version
You don’t need an account.
Rondell has no tracking and no analytics. It talks to our website only for a daily update check, and sends a crash report only if you say yes to it.
Rondell sends no user or device ID. The one exception is license activation: after you enter a license key, Rondell sends that key and this PC’s name to Lemon Squeezy.
Your settings, answers, notes and search index stay on your PC.
Your text only leaves your PC when you run an action that sends it or press the key of a ring with a “Jev says yes to” rule. It then goes straight to the service you chose, never through us.
The 14-day trial is counted on your PC. Nothing is sent.
Apart from the daily update check, the only calls that aren’t your choice are the license checks, and only after you enter a license key.
What stays on your PC
Rondell stores these on your PC and doesn’t send them to us:
Your settings and pills.
Your answers and their history.
Your notes.
The file search index. It’s built on your PC from the folders you choose.
Your API keys. They’re encrypted so only your Windows user account can read them. They’re never shared, and they’re left out when you export settings.
A small trial marker. It holds the date your trial started and a value taken from your PC, not your name or any of your content. Nothing is sent. Uninstalling Rondell leaves the marker, so reinstalling doesn’t restart the trial. To have it removed, write to support@rondell.app.
Logs on your PC never hold your prompts, your selections or your keys.
AI: built-in models
Built-in models run on your PC and send nothing anywhere. Voice input also runs on your PC after you download it.
AI: your own API key
If you add your own key, Rondell sends what you ask the AI action to use straight to that provider. This can be the prompt you wrote, the text you selected, screenshots or images you attach, or files you send.
The request goes from your PC to the provider. It doesn’t pass through any server of ours. The provider handles it under its own privacy terms, and we don’t control those terms. Your key is sent only to the provider it belongs to.
Rondell can send requests to these providers: Anthropic (Claude), Google (Gemini), OpenAI, TypeSafe (Jev, at api.typesafe.ai), OpenRouter, DeepSeek, Mistral, xAI, Groq, Moonshot, MiniMax, Z.ai, Together AI, Fireworks AI, Hugging Face Inference (router.huggingface.co), Vercel AI Gateway and NVIDIA.
Anthropic: when Claude’s code execution creates files during a chat turn, Rondell fetches those files from Anthropic using your key.
Jev (TypeSafe): Rondell sends data to Jev only when Jev is the model you chose. Actions that can use it include Ask AI and Find on screen. Find on screen sends a screenshot. Other actions can send text or pictures.
Ring rule “Jev says yes to”: if you set up a ring with this rule, Rondell sends your selection to TypeSafe when you press the ring’s key, before any pill runs.
Local servers (Ollama, LM Studio): these always run on your own PC. Rondell refuses any address that isn’t on this PC.
AI: key checks and model lists
When you enter or test a key, or open a model list in Settings, Rondell contacts the provider directly. It sends only your key, to the provider it belongs to. This includes OpenRouter and Hugging Face, whose keys Rondell checks with them.
Downloads
When you install a built-in model, voice input or the program that runs built-in models, Rondell downloads it from Hugging Face (models) or GitHub (the program, and voice input with its program), and from their content networks. The request carries no content of yours. Like any web request, it shows your IP address to those services. Rondell checks each file before it uses it.
The answer page
The answer page can make these requests:
Source icons. When an answer shows a list of sources, Rondell loads the small icon next to each source from Google’s favicon service (www.google.com/s2/favicons). Only the site’s address is sent, to fetch its icon. Like any web request, it also shows your IP address to Google. To turn this off, open Settings, then Chat panel, and switch off Source icons. It’s on by default. Each source then shows the site’s first letter instead.
Images and videos. If an AI answer contains an image or video, the page loads it from the site that hosts it only when you click it. Nothing loads from the web before you click. That site then sees your IP address. The AI answer decides which sites these are.
Vimeo. If an answer contains a Vimeo link, the page embeds the Vimeo player (player.vimeo.com, with Do Not Track on) only when you click it. Vimeo then sees your IP address.
Links you click in an answer open in your default browser.
Actions that go where the pill says
API call action. Sends a request to whatever address the pill sets. The request can include your selection. Pills you get from other people can set any address. Check a pill before you run it.
Open action. Opens a link in your default browser. The link can contain your selection, for example in a search or translate address. The website you open then receives it.
Run a program action. Starts a program on your PC. What that program does on the network is outside Rondell.
If WebView2 is missing
Rondell’s windows need Microsoft WebView2. If it’s missing, Rondell links to Microsoft’s download page (go.microsoft.com). Rondell sends nothing itself.
The 14-day trial
The free trial includes every paid feature for 14 days, with no card and no account. It doesn’t charge you automatically. The trial starts the first time you run Rondell. Rondell counts the days on your PC from the trial marker (see “What stays on your PC”) and sends nothing. There’s one trial per PC. It stops casual repeats, not a determined user.
When the trial ends without a license key, the ring and your pills stop. Settings still opens, and nothing you made is deleted.
License checks
Rondell is a one-time purchase with a license key. Only after you enter a license key, Rondell contacts Lemon Squeezy’s License API. It sends your license key and this PC’s name.
Rondell activates the key on this PC, then checks it again in the background. A key works on up to 3 PCs. Rondell works offline between checks and keeps the result on your PC, encrypted so only your Windows user account can read it. To free a slot, open Settings and choose Deactivate this PC. A refunded or disabled key stops the app at the next check. No account is needed. If you never enter a key, Rondell never makes these calls.
Payments
You buy Rondell on our website, on Lemon Squeezy’s checkout page, which opens in your browser.
Lemon Squeezy is the merchant of record. It’s the controller for your payment data and handles tax and VAT.
Rondell never sees your card details. Neither does the website.
In Lemon Squeezy’s dashboard we can see: your name and email address; your city, region and country; your order (price, tax, refunds); and your license key with the names of the PCs it’s activated on. We don’t see your street address, card details or IP address.
Updates and crash reports
Rondell has no telemetry and no analytics.
Update check: once a day, Rondell asks our website (rondell.app, hosted on Cloudflare) whether there is a new version. The check carries no ID and none of your content. It’s our only count of users. Like any web request, it shows your IP address. Before installing an update, Rondell checks that it’s signed by us.
Crash reports: after a crash, Rondell shows you the report and asks before sending it, every time. It sends the report only if you say yes. Reports go to Sentry, our processor, in its EU data region, and never include your prompts, your selections or your keys.
Legal bases (GDPR)
License checks and purchase records: performing the contract with you (Article 6(1)(b)).
Bookkeeping records: a legal obligation (Article 6(1)(c)). Swedish bookkeeping law (Bokföringslagen, 7 kap. 2 §) requires us to keep our accounting records until the end of the seventh year after the year they belong to. Because Lemon Squeezy is the seller, our records are mainly its payout reports. A buyer’s details are in them only where a refund or dispute needed handling.
Requests you start (AI, downloads, links): performing the service you asked for (Article 6(1)(b)). The data goes to the provider you chose. That provider is responsible for it under its own terms.
Update check: our legitimate interest in keeping Rondell up to date and secure, and in counting users (Article 6(1)(f)).
Crash reports: consent (Article 6(1)(a)), asked each time.
Support email: our legitimate interest in answering you (Article 6(1)(f)).
The website: our legitimate interest in running a working, secure website (Article 6(1)(f)).
Data that stays on your PC: we don’t process it.
Your rights
If we hold personal data about you, you can ask us to: tell you what we hold and give you a copy (access); correct it; delete it (erasure); restrict its use; object to its use; move it to another service (portability).
Where we rely on consent, you can withdraw it at any time.
To use a right, write to support@rondell.app. We may ask you to confirm who you are, for example by showing the email used for your purchase. You can also complain to IMY (Integritetsskyddsmyndigheten, www.imy.se) or to the data protection authority where you live.
You delete data that stays on your PC yourself: delete the Rondell folder you installed, and the Rondell folder in your Local AppData folder. To have the trial marker removed, write to support@rondell.app. For data you sent to an AI provider, contact that provider. For payment data, contact Lemon Squeezy.
Retention
Order and license records (in Lemon Squeezy’s dashboard): as long as the license can be used, so we can help with lost keys and refunds, and at most until the bookkeeping period below ends.
Support email: 2 years after our last message, then deleted.
Bookkeeping records: the period the law requires (see Legal bases).
We keep no other copies or backups of buyer data.
International transfers
Lemon Squeezy (Link, LLC, formerly Lemon Squeezy LLC) is in the US. It handles your purchase as its own controller under its privacy policy. The order details we can see stay on its systems, under its data processing agreement with us. Cloudflare, which hosts our website, may process visitors’ requests outside the EU/EEA under its data processing agreement. Sentry is a US company. Crash reports are stored in its EU data region, and any access from outside the EU/EEA is covered by its data processing agreement (Standard Contractual Clauses). AI providers and other services you choose may also process data outside the EU/EEA. That’s your choice and under their terms.
Children
Rondell isn’t meant for children under 16. We don’t knowingly collect data from them.
The website
The Rondell website sets no cookies and has no tracking and no analytics. It’s hosted on Cloudflare Pages. To deliver the site and protect it from attacks, Cloudflare processes each visitor’s IP address and request details as our processor (Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/). We don’t download or keep visitor logs.
The site remembers your display preferences, such as reduced motion and contrast, in your browser’s local storage, only after you change them, and never sends them anywhere.
After 1.0
Accounts, sync and Rondell AI aren’t part of 1.0. We’ll add them to this policy before they ship.
Changes
If we change this policy, we post the new version here and change the effective date. We update this policy in the same release as any new network call in the app.