WillisMD Pro Privacy Policy | Lacy Digital Labs

Effective Date: October 25, 2026

The Short Version

WillisMD Pro is a local-first markdown editor. We do not collect, store, transmit, or sell any personal data, usage data, or telemetry. There are no accounts and no servers we operate. Your files and content are processed entirely on your device. Optional sync, if you set it up, uses your own git remote, iCloud Drive, or a folder you choose — never our servers. See “Optional Git & Cloud Sync” below. Optional AI assistant access (MCP), off until you turn it on, lets an assistant on your own computer work with your documents; see Section 4.

One exception applies to the Linux version. If you buy it directly from our store, our Merchant of Record (Lemon Squeezy) and payment processor (Stripe) collect your name, billing address, and email to complete the sale, and Lacy Digital Labs keeps only your email address — used solely to tell you about updates to the app you bought, never for marketing, and never sold. See “Purchases & Payment Processing” below.

1. Information We Collect

None. WillisMD Pro does not collect any personal information, usage statistics, crash reports, or analytics of any kind. The application has no backend server of ours and, unless you set up optional sync (see Section 3), operates entirely offline and locally on your device.

2. Local Data Processing

WillisMD Pro reads and writes files solely on your local file system at locations you choose. Your documents, preferences, and settings remain on your device at all times. Specifically:

All markdown files are read from and saved to directories you select.
Application preferences are stored locally on your device.
No data is uploaded to, processed by, or stored on any server we operate.
Aside from the optional sync you may set up (see Section 3), the application initiates no network connections.
Exports (PDF, Word, HTML, ePub) are written to local files you choose.

3. Optional Git & Cloud Sync

WillisMD Pro does not operate a sync service of its own and never sends your documents to any server we run. If you want your notes on more than one device, or version history for your vault, you can set up sync yourself and choose where your files go:

Built-in git (all platforms) — you can clone a repository and commit, pull, push, and sync from the Source Control panel. WillisMD Pro connects only to the HTTPS remote you specify, such as GitHub or GitLab, and that provider’s privacy policy governs the data you push there. Your access token is stored in your operating system’s secure credential store — the macOS and iPadOS Keychain, Windows Credential Manager, or the Linux secret service — never on our servers and never in plain text in the app.
iCloud Drive and the Files app (Mac, iPad) — you can open any folder as a vault, including one in iCloud Drive. Those files are stored in and transmitted through your personal iCloud account and are governed by Apple’s privacy policy. We have no access to them.
Any synced folder (all platforms) — you can simply keep your vault in a Dropbox, OneDrive, Google Drive, or network folder. The third-party service you choose syncs those files, and that service’s privacy policy governs how they are stored and transmitted.

In every case, your files travel only to the git remote, iCloud account, or folder you choose — never to Lacy Digital Labs. Sync is entirely optional and off by default. If you do not set it up, your documents never leave your device.

4. Optional AI Assistant Access (MCP)

On Mac, Windows, and Linux, WillisMD Pro includes a built-in Model Context Protocol (MCP) server, which lets an AI assistant you run on your own computer — such as Claude Desktop, ChatGPT, Gemini, or a model running locally through Ollama — read and work with the documents in your vault. It is not part of the mobile versions, and on desktop it is off by default. No assistant can reach your data through WillisMD Pro unless you turn this on, and Settings let you control what a connected assistant is allowed to do.

Local connections only. The MCP server is for AI clients running on your own device. WillisMD Pro does not expose it to the internet, and Lacy Digital Labs is not in the path — nothing passes through any server of ours.
What an assistant receives. When an assistant you have connected makes a request, WillisMD Pro gives it the documents and vault content that the request asks for, within the limits you have set.
Where it goes next depends on the assistant. Many AI assistants, including Claude Desktop, ChatGPT, and Gemini, send what they read to their provider’s cloud service to produce a response. Once WillisMD Pro hands data to an assistant, that assistant and its provider’s privacy policy govern it — not this policy. If you want your data to stay entirely on your device, use a model that runs locally, such as one through Ollama.
Your choice, reversible. Turn AI assistant access off in Settings at any time, and assistants can no longer reach your data through WillisMD Pro.

5. Telemetry and Analytics

WillisMD Pro does not include any telemetry, analytics, or crash-reporting frameworks. We do not track how you use the application, which features you access, how often you use it, or any other behavioral data.

6. Tracking and Advertising

WillisMD Pro does not use cookies, tracking pixels, advertising identifiers, fingerprinting, or any other tracking technologies. We do not display advertisements and we do not participate in any advertising networks.

7. Purchases & Payment Processing

If you purchase WillisMD Pro through the Apple App Store, Microsoft Store, or any other distribution platform, that platform may collect transaction and account information as part of the purchase process. This data is collected and managed by the respective platform, not by us. Please refer to the applicable platform's privacy policy for details:

We do not receive, store, or have access to your payment information, Apple ID, Microsoft account, or any other account credentials.

Direct purchases of the Linux version. The Linux edition of WillisMD Pro is sold directly from our own online store rather than through a platform app store. When you buy it this way, a few commerce partners are involved and a limited amount of information is handled off your device:

Merchant of Record — Lemon Squeezy. Our store is operated by Lemon Squeezy, which acts as the Merchant of Record for the sale. To meet tax and Know-Your-Customer (KYC) requirements, Lemon Squeezy collects your name, billing address, and email address during checkout.
Payment processing — Stripe. The financial transaction is processed by Stripe, which handles your payment-card details. We never see or store your card information.
What we keep. From this process Lacy Digital Labs receives and retains only your email address. We use it solely to reach you about the app you purchased — for example, to let you know when a new version, patch, or feature is available. We do not use it for marketing, and we will never sell or rent it to any third party.

You can ask us to delete your email address at any time (see “Your Data Rights” below). For how these partners handle your information, see the Lemon Squeezy Privacy Policy and the Stripe Privacy Policy.

8. Third-Party Services

WillisMD Pro does not integrate with, send data to, or receive data from any third-party services, APIs, or cloud platforms operated by us, and it embeds no third-party SDKs. The only third-party interactions are the optional sync described in Section 3 — a git remote, Apple iCloud, or a cloud-folder provider you choose — and any AI assistant you connect through MCP (Section 4). Both are initiated by you and handled through your own account, folder, or assistant.

9. Children's Privacy

Because WillisMD Pro does not collect any data from any user, it does not knowingly or unknowingly collect information from children under the age of 13 (or any other age). The application is safe for users of all ages.

10. Your Data Rights

Because WillisMD Pro does not collect, process, or store any personal data, there is no personal data to access, correct, delete, or transfer. Your files exist only on your device — and, if you set up sync, in the git remote or folder you chose — under your full control.

The one piece of personal data we may hold is the email address collected when you buy the Linux version directly from our store (see “Purchases & Payment Processing” above). You may ask us to access or delete that email address at any time by contacting our support center; we will delete it promptly, after which you will no longer receive our update notices for the app.

If you have any questions about your data, please contact us using the information below.

11. Data Security

Since WillisMD Pro does not collect or transmit data to us, there is no risk of your data being intercepted, breached, or exposed through our application. Your files are protected by your operating system's built-in security mechanisms and any encryption you apply at the device level. If you set up git or cloud sync, transfers use HTTPS and the security of your data in transit and at rest is governed by the git host, Apple iCloud, or the cloud-folder provider you choose; your access token is held in your system's secure credential store. If you turn on AI assistant access, any assistant you connect can read the documents you allow it; keep it off if you do not need it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated effective date, and we encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Lacy Digital Labs LLC
Contact us through our support center