MTF Explorer for macOS — Privacy Policy (v1.1)

What this app does
- MTF Explorer processes files locally on your Mac. No file contents leave your Mac unless you explicitly copy or move them to a cloud provider or remote server you have configured.
- Supported connectors (only when you enable them): AWS S3, Azure Blob Storage, Google Drive, FTP/FTPS and SFTP. Transfers use TLS/SSH where the protocol and provider support it.
- MTF Explorer is sandboxed. It can only read folders you grant it access to through the standard macOS open panel; those grants are remembered using Apple's security-scoped bookmarks.

Data we handle
- File metadata: When you trigger a remote action, folder and file names and paths are sent only to the provider you selected, in order to complete your request.
- Credentials and tokens (passwords, access tokens, and connection strings for FTP/SFTP, S3, Azure and Google Drive): stored locally in the macOS Keychain, the OS-managed credential store. You can view or remove them at any time using the Keychain Access app. Removing a connection inside MTF Explorer also removes its stored credentials.
- Diagnostics: crash and diagnostic reports are collected through Apple's MetricKit and written to the app's Application Support folder inside its sandbox container. They are not uploaded by the app. Logs can be opened from within the app (they are written under ~/Library/Logs/MTFExplorer).
- No telemetry, analytics or advertising: MTF Explorer does not collect usage analytics and does not show ads. If this ever changes, the policy version will be updated and you will be asked to accept the change.

Semantic search and content indexing
- Semantic search runs entirely on your Mac using NLEmbedding, the language model built into macOS. No model is downloaded, no account or API key is required, and no query or file data is sent anywhere.
- Filename indexing is enabled by default. It reads file and folder names and stores numerical vectors in a local database inside the app's sandbox container.
- PDF content indexing is also enabled by default. Unlike filename indexing, it reads the text of PDF files in folders you have granted access to, so that you can search inside them. That text and its vectors are stored locally and are never transmitted.
- Both features can be turned off, and the index rebuilt or cleared, in Settings under "AI & Search".

Your controls
- Connectors are opt-in and can be removed at any time in Settings under Connections.
- Folder access can be revoked at any time by removing the saved grant in Settings, or by moving the folder.
- You can turn off filename and PDF indexing and clear the index in Settings under "AI & Search".
- Uninstalling MTF Explorer removes its sandbox container, including the index, diagnostics and settings. Credentials stored in the Keychain are removed when you delete the corresponding connections.

Security
- Connections to cloud providers use HTTPS/TLS. Plain FTP is unencrypted by protocol design; use FTPS or SFTP where possible.
- We do not share your data with third parties beyond the cloud providers and servers you configure yourself.
- You remain responsible for device-level security (account login, FileVault disk encryption, backups).

Children
- MTF Explorer is not directed to children under 13, or under the applicable local minimum age. We do not knowingly collect data from children.

Policy updates
- The in-app policy version matches the Terms versioning model. When this policy changes, the app will ask you to review and accept the updated Terms and Privacy Policy.

Contact
- Questions or requests: https://www.insfactory.ro