Privacy Policy and Legal Notice

This document governs use of the ToolTip AI desktop software — one application with contextual behaviours: translate, explain, read aloud and system context — the website tooltip-ai.com and related services (the “Product”). By installing, accessing or using the Product you accept these terms.

1. Controller and notices

• Controller / Product owner: Dixi3 Lqbs (commercially ToolTip AI / Dixi3 Labs).
• Official contact: contact@tooltip-ai.com
• For personal security and anti-impersonation reasons, no postal home address is published. Formal notices go to the email above and, if applicable, the Microsoft Store / PayPal publisher account.

2. Purpose

The Product is a Windows utility that accelerates work with real-time information: it interprets UI elements, screen crops and copied text to explain, translate or read them aloud when you need them. It is not cloud storage, a keylogger or permanent surveillance. Capture and AI sending happen only when you start them.

3. Data that leaves your device

• Screen crops (Ctrl+Shift+A), full capture or clipboard analysis when you request it.
• UI text and Windows UI Automation metadata.
• HUD follow-up chat questions if you use them.
• Text to translate (password fields are blocked).

This travels over HTTPS to the destination that matches the action you started: the AI API you configured, with your key, or the free translation engine (see below — it is the only send that does not depend on your settings). Dixi3 Lqbs does not receive copies of those images on its own servers, and the third party that receives the data applies its privacy policy and retention terms. You are responsible for what you choose to analyse.

The destinations, one by one

• Analysis and explanation (your key, only when you start it). Depending on the provider chosen in Settings: generativelanguage.googleapis.com (Google Gemini), api.openai.com (OpenAI), openrouter.ai (OpenRouter), api.anthropic.com (Anthropic) or the Azure OpenAI address you type in; only https is accepted and addresses with an embedded user and password are rejected. The crop, the extracted text and your question leave the device. With OpenRouter an HTTP-Referer header carrying this website's address is also sent to identify the application; it contains none of your data.
• Translation (no key, no tick box: this is the default path). When you press Ctrl+Shift+T and the text is not in the local dictionary, that text is sent to translate.googleapis.com (Google's public translator endpoint, with no API key and no contract of yours with Google). If Google does not answer, the same text is tried against api.mymemory.translated.net (MyMemory, by Translated). Your BYOK key does not control this send; it exists so translation answers in milliseconds without you contracting anything. If your screen shows content that must not leave the device, do not translate it with this feature; password fields are excluded before the send phase.
• What never leaves the device. Read-aloud speech is generated on your PC by the Windows voice synthesizers; text recognition of the capture uses Windows.Media.Ocr, which is local; and until you press an action the app opens no connection to any third party. The low-level keyboard hook is not permanent either: it is installed only if Windows refused one of the four shortcuts, or if you switch the dwell radar on. With the radar off and the combinations registered, the app observes no keystroke at all. While the hook is active it reads only the four product shortcuts and the signal that you are typing; pressed text is never stored or sent.

4. Data that stays on your device

• API key: Windows DPAPI (user scope) in %APPDATA%\ToolTipAI\config.json.
• Preferences and local log %APPDATA%\ToolTipAI\run.log (you can delete it).
• Translation and repeated-context cache in %APPDATA%\ToolTipAI\semantic_cache.json. It stores text recognised on your screen together with the analysis obtained, so it can contain screen content. Each entry expires after 24 hours, and opening the app rewrites the file without anything expired, so it does not accumulate text from earlier days.
• Erasure with a button. Settings contain “Delete local data”, which removes the log, the cache and the configuration files from that folder. It deliberately keeps the downloaded OCR models (they contain none of your data), the licence and the trial anchor: deleting the latter two would restart the 24-hour trial every time someone pressed the button.

Real shortcuts: Ctrl+Shift+A crop · Ctrl+Shift+D radar · Ctrl+Shift+C settings · Ctrl+Shift+T translate what is under the cursor.

5. Website, measurement and payments

• Website measurement, only if you allow it. The home page (tooltip-ai.com/) can load two third-party services: Google Analytics 4 (measurement ID G-WSGPY3DK4Z, controller Google Ireland Limited) and Microsoft Clarity (project ID yx9lgph0yh, controller Microsoft Ireland Operations Limited). A discreet notice appears when you open the page. Until you press “Allow measurement” neither script is downloaded, no measurement cookie is set and there is no behaviour observation. Your choice is stored in your browser's local storage (this site has no user accounts) and can be changed at any time from the page footer with “Choose measurement again”.
• What they record if you allow it. Google Analytics: pages visited, order and approximate duration of the visit, device type, browser, operating system, language and country derived from a truncated IP address, which Google does not link to other data of yours. Microsoft Clarity additionally observes interaction on this page: mouse movement and clicks, scrolling, window size and document structure. This page has no forms or text fields, so there is nothing you typed that could be captured, and password fields are excluded by Clarity's own configuration. Retention and deletion are administered by Google and Microsoft in their consoles; see the Google privacy policy and Microsoft Clarity.
• Application diagnostics (off by default, and pointed at a destination that accepts nothing). The code can send failure notices to Microsoft Application Insights, but two conditions must be met at once: you tick “Report failures” in the app's settings, and an ingestion file (telemetry.json with the destination address) sits next to the executable. The package in distribution since 20 October 2026 — version 1.1.12.0 — does include that file. It slipped in through an error in the packaging script, which mounted it as soon as a local configuration file existed; that is now fixed and later builds will not carry it. The second condition still fails: the box arrives unticked on a fresh install. And even if you tick it, the address written in that file points at a disabled Azure subscription whose endpoint rejects the instrumentation key with Invalid instrumentation key. Checked against the service itself on 20 October 2026: it holds zero events across its entire retention period. In other words: today no failure notice leaves your device, not even with the box ticked, and no notice is stored in the resource. If it is ever switched on, a notice would contain only the error type and its technical trace, the app version and the Windows version; folder paths, your user name and traces of screen content are stripped before the message leaves the device, the text is cut at 1024 characters, the full stack is not sent, and copied text, window titles and third-party process names are never sent. You can untick the box at any time.
• Payments: download, price and licence are handled by Microsoft Store, which processes the charge, the tax and the refund. This website serves no installers and takes no payment data.
• The app is obtained and installed from Microsoft Store, which handles licence and updates. No installers are served from this website.

6. Third parties and transfers

AI providers (Google, OpenAI/Microsoft, OpenRouter, Anthropic), public translation services when you use quick translation (Google and MyMemory/Translated), measurement of this site when you allow it (Google Analytics, Microsoft Clarity), optional app diagnostics (Microsoft Application Insights, whose destination is not reachable today — see section 5), Microsoft Store as seller and payout, and hosting (GitHub Pages) may process data outside the EEA (e.g. the United States). With BYOK you contract with the AI provider of your choice; review their transfer, retention and training terms. Azure OpenAI in your own tenant uses your organisation’s safeguards.

7. Legal basis and retention

• Contract / service delivery; legitimate interest (security, abuse prevention, defence).
• User decision/consent for sending: every crop, every analysis and every translation starts from a key press by you; you also set the AI key, provider and model. There is no batch or background send.
• Legal obligation for billing/tax where applicable.

Local data: until you delete or uninstall. AI content: per provider. Purchase data: per law and store rules.

8. Your rights

Access, rectification, erasure, objection, restriction, portability and withdrawal of consent: write to contact@tooltip-ai.com. We reply within the legal deadline (generally one month). You may complain to the Spanish Data Protection Agency (AEPD) or your local authority.

9. Minors

Not directed at children under 14. If such data is processed without a proper basis, it will be erased without undue delay.