1. Data controller
Repluma is developed and operated by the person below, who is responsible for the processing described here.
Processing is based, as applicable, on providing the service you request or purchase, legitimate interests in operating, securing, and improving Repluma, compliance with legal obligations, and your consent where it is specifically requested. The purposes are described below.
- Legal name
- Jérôme Marquis
- Country
- Switzerland
- Contact email
- contact@repluma.app
2. In short
- Your personal data is never sold and is not used for advertising or cross-service tracking.
- Direct purchases require a Repluma account identified by your email address. Store purchases remain linked to the applicable Store identity.
- Text is sent only to the AI provider you choose. Apple Intelligence and a local LM Studio server can process it on your device.
- This website uses a developer-operated Matomo instance to measure visits.
3. The Repluma application
3.1 Data stored on your device
Settings, actions, shortcuts, and local licence state are stored on your computer. API keys and sensitive licence material are stored through macOS Keychain or Windows Credential Manager when available. Clipboard contents are used only to capture and replace the text you select.
3.2 Diagnostics and feedback
Repluma sends technical statistics to JMHub, a service operated by the developer in Switzerland: a random installation identifier, app version, platform, device and system information, language, region, time zone, lifecycle events, action type, execution mode, and sanitized crash details. If an installation is connected to a Repluma account, service records can be associated with that account to operate access and prevent abuse. These data are not used for advertising. If you send feedback, the title, message, category, technical context, and any email address you provide are processed so the developer can investigate and reply.
3.3 AI providers and selected text
Processing depends on the provider you select. Apple Intelligence runs locally on a compatible Mac. LM Studio sends text to the endpoint you configure, which may be local or remote. With your own OpenAI key, Repluma sends text directly to OpenAI. With Repluma Cloud, text passes through Repluma's service and is then sent to OpenAI with provider-side storage disabled. The privacy terms of a provider you choose also apply.
3.4 Repluma Cloud and purchases
Repluma Cloud stores an installation identifier and token, a protected Repluma account email address, a keyed non-reversible email lookup value, Store or Stripe customer and transaction identifiers, entitlement or subscription status, quota and cost records, token counts, model, duration, timestamps, and technical failure codes. Passwordless sign-in links are single-use and expire. The selected text and instructions are not stored in the database; only a keyed, non-reversible fingerprint is kept to prevent duplicate billing. A generated response is encrypted and retained for at most 15 minutes so an interrupted request can be replayed, then it is deleted. Apple, Microsoft, or Stripe processes payments. Repluma receives purchase status and billing identifiers but never receives your complete payment-card details.
4. This website
This website uses Matomo, an analytics service operated by the developer, to measure visits and improve the site. Matomo receives the visited page, referrer, technical browser and device information, and the visitor’s IP address through an encrypted connection.
Matomo uses first-party analytics cookies; the site sets no advertising cookies.
5. Hosting and recipients
The website, Repluma Cloud, and JMHub are operated on infrastructure managed in Switzerland. Depending on the features you choose, data may also be processed by Apple, Microsoft, Stripe, the transactional email provider, OpenAI, or the operator of the LM Studio endpoint you configure. Those providers process data under their own terms and may process it in other countries.
- Infrastructure provider
- Infomaniak Network SA
- Main processing country or region
- Switzerland
6. Retention
Temporary Cloud responses are deleted after at most 15 minutes. Diagnostics, crash reports, usage sessions, and voluntary feedback in JMHub are kept for no more than 12 months. Purchase, entitlement, quota, and accounting records are kept for as long as needed to provide the service, prevent fraud, meet legal obligations, and handle disputes. Security logs are kept only as long as operationally necessary.
7. Your rights
Under the Swiss Federal Act on Data Protection, and the GDPR where applicable, you may request access to, correction of, or deletion of your personal data and object to certain processing. You may also contact the Swiss Federal Data Protection and Information Commissioner.
8. Security
Network communication uses TLS. Sensitive local values use the system credential store, Cloud tokens are stored as hashes on the server, and temporary Cloud outputs are encrypted. No system can be guaranteed completely secure, but access and retention are deliberately limited.
9. Changes and contact
This policy may change when Repluma or legal requirements evolve. The date above identifies the current version. Send privacy questions and requests to: