Privacy Policy

In one paragraph

Legible OCR has no account, no server of its own, no analytics, no advertising and no crash reporting. It does not collect, store or transmit any information about you, your Mac or your documents, and its App Store privacy label says so: Data Not Collected. The app opens a network connection in exactly one case, to download the OCR model's weights the first time you set it up, and that download carries no information about you beyond what any download carries. Everything else happens on your Mac.

Your documents

The PDFs and images you open stay where they are. Legible reads them inside the Mac App Store's sandbox: it can see only the files you open, drop on it or choose in a dialog, and it writes only to the locations you choose when you export.

What Legible reads from a page is kept in its library, a database inside the app's own container on your Mac: the text of each page, the figure crops, and a full-text index of every page read, so the app can search them. A document that a coding agent adds through the agents server (below) is copied into that library, as the app cannot read a file by a path an agent names. None of this is sent anywhere. Removing a document from the library deletes what the library holds of it; deleting the app deletes the library.

The OCR itself runs on your Mac's GPU. No page, no part of a page and no text derived from a page is transmitted to us or to anyone, ever.

The model download

Legible needs the weights of the OCR model, which are not inside the app. The first time you set it up, and whenever you choose another pack in Settings › Models, the app downloads them from Hugging Face (huggingface.co), where the mlx-community organisation publishes them. The default pack is 3.93 GB; the four packs range from 2.46 to 6.68 GB.

This download is the app's only connection to the internet. It is a plain HTTPS fetch through the system's networking, with no account, no token and no identifier of yours. Like any web request, it reveals your IP address and a standard user-agent string to the server that answers it. Hugging Face's handling of its server logs is governed by Hugging Face's own privacy policy, not by this one. Nothing about your documents is involved: the download happens before any page is read, and the app sends nothing in it but the request for the files.

The files downloaded are model weights and configuration, pinned to a specific published commit and checked against known hashes before they are loaded. Nothing downloaded is executed as code.

Purchases

The 7-day Trial and the Full Version are in-app purchases made through Apple's App Store. Apple handles the payment, your Apple Account and any refund; we never see your name, your address or your payment details. What the app receives from Apple is the record that a purchase belongs to the Apple Account signed in on the Mac, which it uses to lift the free version's page allowance. That record is Apple's; the app keeps nothing else about the purchase and runs no server to check it against. Apple reports sales to us in aggregate, without identifying buyers. Apple's handling of purchase data is described in Apple's privacy policy.

Agents

Settings › Agents can start a small server inside the app so that a coding agent on your Mac, such as Claude Code or Codex, can read your library through the Model Context Protocol. This is off by default. When it is on, the server listens only on your Mac's own loopback address (127.0.0.1), on a port you can change, and requires a token that the pane shows you; it closes the moment you turn Agents off.

Through it, an agent you connect can list your documents, read their text, fetch their figures, search the library, add a document and ask Legible to read it. Legible hands that data to the agent on your Mac and nowhere else. What the agent does with it afterwards, including sending it to the agent's own service, is governed by that agent's privacy policy, not by this one. Connect only agents you trust with your documents.

Background mode and login

Under Settings › Agents › Background, you can ask Legible to keep serving agents from the menu bar when its window is closed, and to start at login. Both are off by default, both are stored as preferences on your Mac, and neither involves any connection. Starting at login registers the app with macOS, which may ask you to approve it in System Settings.

This website

legibleocr.com is a set of static pages. It sets no cookies and runs no analytics, advertising or tracking scripts. The company that hosts it may keep ordinary server logs, which include the IP address and user-agent of each request, for operating the service. If you email us, we keep the email in order to answer it.

Children

Legible collects no personal information from anyone, children included. The app is sold through the Mac App Store under Apple's age rating.

Changes

If a future version of the app changes what it does with a connection, this page will change with it, and the date at the top will show when. The policy that applies is the one published here at the time you use the app.

Contact

Questions about this policy, or about anything the app does: support@legibleocr.com.