Privacy Policy

Winbro runs on your PC and has no accounts. This page lists what this website collects and everything the app sends over the internet, who receives it and when.

Last updated

Who is responsible

Mateja Vasojevikj, an individual based in Ohrid, North Macedonia, is responsible for the personal data described here. In this policy, "we" and "us" mean Mateja Vasojevikj. You can reach us at contact@vasojevich.com.

Creem, the merchant of record that sells Winbro, is a separate company. It is responsible for the data it collects when you buy.

This website

This site, winbro.net, is hosted on Cloudflare. Like any web host, Cloudflare receives your IP address and basic details of each request, such as the page, the time and your browser type, and it keeps standard server logs. Its privacy policy applies to that data.

We also use Cloudflare Web Analytics to count visits. It works without cookies and reports aggregate numbers, such as page views, referring sites, countries and browser types. We use it to see which pages people read.

The site sets no cookies and has no advertising or other tracking scripts. The interactive demo on the home page keeps its own settings in your browser's local storage on this site. That is not a cookie and it is not sent anywhere. You can clear it at any time in your browser's settings. Fonts and images are served from this site.

When you buy Winbro

You buy from Creem, not from us. Creem collects your payment details, billing address and email address under its Privacy Notice, and we never see your card or bank details. Creem passes on the details we need to deliver Winbro and answer your emails, such as your email address, name and order number. It emails you the license key and the download link, and keeps them in its customer portal.

What the Winbro app sends

Winbro keeps your notes, tasks, clipboard history, agent chats, the files you recently opened in Notes, what it remembers about you, a log of how much each AI model was used, your settings, license key and downloaded engines on your PC, in %LOCALAPPDATA%\Winbro. API keys you add are encrypted with Windows. The app has no account and no analytics, and the only thing it sends to us is the license check below. Everything else it sends goes to the service behind a feature you use, and most of it only when you use that feature. As with any internet connection, whoever receives a request also sees your PC's IP address.

License check

When you enter your key, about a minute after Winbro starts, and then about every 6 hours while it runs and your PC is online, Winbro sends your license key and a one-way code for your PC to our activation server. The server runs on Cloudflare at winbro-activation.winbro.workers.dev. The PC code is a hash of your Windows machine ID and your system drive's serial number, and nothing readable can be recovered from it. The same details are sent when you deactivate a PC. The server answers with a pass that works on that PC for 30 days. A PC that is locked only because it couldn't reach the server tries again every 5 minutes.

The server stores a one-way hash of your key (never the key itself), the PC codes and when each last checked in, when the license moved between PCs, and the Creem order ID, so that a refund withdraws the right key. It does not store your name, your email address or your IP address. The first time the server sees a key, it asks Creem whether the key is genuine.

Weather

Nothing is sent until you enter a city in Preferences. Winbro finds the city on your computer, in a list of places that comes with it, and sends only its coordinates, rounded to about a kilometre, to the forecast service of MET Norway (the Norwegian Meteorological Institute) at api.met.no to show the weather. Winbro asks again only when that forecast expires, and never within ten minutes.

Speed test

Only when you start a speed test, Winbro downloads and uploads about 12 MB of synthetic test data to Cloudflare at speed.cloudflare.com. None of your data is in it. The download stops after 10 seconds at most, and if the first connection fails before any data moves, Winbro tries once more.

AI features

AI is optional. Switch off "AI assistant" in Preferences and nothing is sent to an AI service. If you add a key or sign in, Winbro sends your requests straight to the providers you set up, using your own key: OpenAI (api.openai.com), Anthropic (api.anthropic.com), Google Gemini (generativelanguage.googleapis.com), Groq (api.groq.com), OpenRouter (openrouter.ai), DeepSeek (api.deepseek.com), xAI (api.x.ai), Mistral (api.mistral.ai), Cerebras (api.cerebras.ai), Together (api.together.xyz) or OpenCode Zen (opencode.ai). If a provider can't answer, Winbro tries the next provider in the order you chose. When you open the model list, Winbro asks each provider you connected which models it offers, using your key. An address you enter yourself counts as a provider, and requests go wherever it points. Winbro's own agent talks to the provider you pick directly. If you pick your ChatGPT plan, quick requests and agent tasks run through the Codex tool on your PC, and if you pick Claude for the agent, it runs through Claude Code. Both talk to OpenAI or Anthropic with your own account.

Winbro's offline model, and Ollama or LM Studio running on your PC, send nothing off your PC. To offer an offline model that fits, Winbro reads how much memory and graphics memory your PC has. That check happens on your PC and is not sent anywhere.

A request contains what you typed, said or dictated, your last few requests and their results, and what is needed to carry it out, such as the names and text of controls in the windows involved. The text you wrote in Preferences > Memory > "Your instructions" goes with every AI request, whether or not "Learn from what I say" is on. If that setting is on, facts you have shared with Winbro go too. When you select text on screen and ask about it, the selected screen text goes with your question. For an agent task, each request also carries the chat so far, the agent's plan and what each step returned: text it read from windows on screen, files it opened and the output of commands it ran. A screenshot goes along only when a task needs Winbro to see the screen, and only to a model that can see images. "Let agents see the screen" in Agents turns screenshots off.

The provider's own terms and privacy policy apply to what it receives, and we receive none of it.

Voice

Speech is recognised on your PC by default. If you add a Groq key and the AI assistant is on, the default Automatic voice setting sends the audio of what you say to Winbro, commands and dictation, to Groq's speech-to-text service at api.groq.com instead. If "Learn from what I say" is on, up to 30 names Winbro has picked up from your commands, such as app names, go along so they are spelled correctly. Choose "On this PC only" in the voice settings, or switch "AI assistant" off, and voice stays on your PC. Dictation, including the microphone in agent chats, is cleaned up on your PC. If you also turn on "AI polish for dictation", the dictated text, not the audio, goes to your AI provider to be tidied before Winbro types it. Listening for the wake word always happens on your PC. Once it hears "Hey Winbro", the phrase and what you say after it follow the same rules as any other speech. With Groq in use, that means the audio of "Hey Winbro" goes to Groq along with your request.

Updates and downloads

Winbro looks for a new version only when you press "Check for updates", or once a day if you turn on daily checks. The check and the download go to GitHub (github.com), which hosts our releases. Updates are signed, and Winbro installs one only when you ask.

The installer, and Setup inside Winbro, download optional parts when you or the installer ask for them: the voice engine's models from Hugging Face (huggingface.co), the offline AI model (Qwen 3.5, sized to your PC) from Hugging Face and its llama.cpp runtime from GitHub, and Microsoft's WebView2 component from Microsoft (go.microsoft.com) if your PC doesn't have it.

Notes downloads programming tools only when you choose Install for a language. Compilers and runtimes come through Microsoft's winget, which fetches each package from its publisher. Language servers come from each language's own source: Python packages from PyPI through pip, Node packages from npm, .NET tools from NuGet, Go tools through Google's Go module proxy, rust-analyzer through rustup, and Eclipse's Java language server from download.eclipse.org. Those services see the request, as with any download. Winbro sends them nothing else.

Everything else

Your notes, tasks, chats, clipboard history and settings stay on your PC, except for what you ask an AI feature or an agent to work with. That goes to the provider, as described above. For example:

  • The Notes AI sends the whole note, up to 12,000 characters, when you ask it to rewrite the text or answer a question about it, even if you selected only part of it. The part you selected goes along too. In a longer note, only the selected part is sent.
  • A request that mentions a note sends your note titles, up to 40, so Winbro can find the right one.
  • While the Notes window is open, the title of the note on show goes with each command you give the assistant, so Winbro knows which note you mean.
  • Agents can read your notes and tasks and the windows on screen, read and change files in the project folder you give them, and run commands there. What they read, and the output of those commands, goes to their provider.
  • Code you run from Notes, and the programming tools you install there, run on your PC. Anything they send over the internet is up to them, not Winbro.

When you ask Winbro to search or open a website, it opens your own browser, and that traffic is between your browser and the site.

When you write to us

If you email us, we receive your email address and whatever you write. We use it to answer you.

What we use data for

Where the law asks us to name a legal basis, these are ours:

  • Contract: delivering and licensing Winbro, which includes activation and license checks, and giving you support. We need the data to do what you bought.
  • Legitimate interests: keeping the activation server secure, and counting visits to this website so we know which pages people read.
  • Legal obligation: keeping records of purchases and refunds, which tax and accounting law require.

We don't sell your data and we don't use it for advertising.

Who else receives data

Data goes to the companies named above, each for the purpose described: Cloudflare for hosting, analytics, the activation server and speed tests, Creem for your purchase, GitHub, Hugging Face and Microsoft for downloads, MET Norway for weather, the sources of the programming tools you install in Notes, the AI providers you set up for the features you use, and the email provider behind our support address for your emails. Some of them are based outside North Macedonia and the EU, for example in the United States, so your data may be processed there under their own safeguards.

How long data is kept

  • Activation records stay while your license exists. If you ask, we remove the PC codes and move history linked to your key. We keep the one-way record that a key was refunded so that it can't be used again.
  • The activation server keeps the Creem order ID linked to your key's hash for as long as the license exists.
  • Creem holds your purchase records under its own policy.
  • Emails you send us stay in our mailbox for as long as they help us support you, and we delete them if you ask.
  • Cloudflare, Creem and the other companies above keep data under their own policies.
  • Data on your PC stays until you delete it. Uninstalling Winbro keeps your notes, settings and license in %LOCALAPPDATA%\Winbro. Delete that folder to remove them. A note or agent chat you delete, and the earlier text of a note that Winbro edits or replaces for you, moves to the Trash folder inside it and stays there until you delete that folder. A chat's name and folder are kept inside the chat's own file.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email contact@vasojevich.com. If you bought Winbro, write from the address you bought with so we can find your records. Depending on where you live, you may also have the right to object to or restrict how your data is used, to receive it in a portable form, and to complain to your local data protection authority.

For data held by Creem, Cloudflare or an AI provider, contact them directly under their own policies.

Changes to this policy

We change the date at the top when we update this page. If a new version of Winbro sends data somewhere new, this page will list it.

Contact

Mateja Vasojevikj, Ohrid, North Macedonia. Email contact@vasojevich.com. The Terms of Service and the Refund Policy cover the rest.