f
loati

loatiPrivacy

Your data stays with you.

Floati is built so your information lives on your device, not on a server. You never need an account to use a product, there are no trackers or ad networks, and the AI runs on your own machine. Here is the whole truth, product by product, in plain words.

Last updated November 2026. Written and operated by Floati, South Africa.

If you read nothing else

Four promises the rest of this page keeps.

Everything below simply shows, product by product, exactly how each of those stays true, then hands you the tools to verify it.

The whole map

Where your data actually goes.

Five products, one principle. Here is the short version of each, before the detail: almost everything stays on your device, and the little that reaches a server is small and, wherever possible, something you choose.

Product
Stays with you
Reaches the server
Desktop app
Everything you track, in one local file
Nothing at all
CV Builder
Your resume and the on-device AI
Nothing from your draft; a review only if you post one
Learn course
Your code, progress and on-device tutor
Lesson counts unless you switch them off; a certificate or review if you make one; your progress, encrypted, only if you turn on Save across devices
Floati Browser
Everything you browse, encrypted at rest
An update check; stats only if you opt in
Forum
Your email, remembered on your device if you choose
What you post, under your forum name; a locked address only if you turn on reply emails

The full detail

Every product, line by line.

The complete accounting: what stays on your device, and the short list that ever touches a server.

Floati Desktop App

Windows (Microsoft Store) and macOS (Mac App Store)

Floati collects, stores, transmits and shares no personal data. In normal use it makes no network requests at all.

Stays on your device everything

  • Expenses, budgets, subscriptions, debts, savings and net worth
  • Habits, birthdays, notes, reminders and receipts
  • All of it in a single local database file on your machine
  • Optional encrypted backups, unlocked by a passphrase only you hold
  • Export anytime as JSON, PDF, Excel or CSV; delete the file to erase everything

Leaves your device to anyone

Nothing.

  • No accounts, logins, sync, telemetry or crash reports
  • No location, device identifiers or cookies
  • Both store listings declare “Data Not Collected” in every category

Check it: watch the app with any network monitor and you will see no outbound connections.

CV Builder

The free resume tool at floati.life/cv

No account. Your draft is saved in your own browser, never on the server. The AI runs on your own device, and your resume is never sent to any AI company. The one time it reaches the server is to make your PDF, and it is gone the moment the file is sent back.

Stays in your browser your work

  • Your full resume content: experience, education, skills, auto-saved to this browser’s local storage only (not to any server, not to any account)
  • The AI improver, which runs in your browser
  • An optional, compressed profile photo if you add one

Reaches the server minimal

  • Nothing from your draft is stored. Three things send your resume to the server and get an answer back without keeping anything: the PDF download (thrown away as soon as the file is sent back), the ATS score, and the content suggestions. Nothing of your content is kept
  • If, and only if, you post a review: your display name, rating and comment (shown publicly), plus a random id, never your IP address

The AI improver downloads its model once, then runs entirely in your browser; your resume is never sent anywhere. Remove everything anytime with “Remove all saved data” in the builder, or by clearing your cookies. Questions: my@floati.life.

Learn: Python + AI course

The free in-browser course at learn.floati.life

No account. Your lesson code runs in a sandbox in your browser, the AI tutor runs on your device, and your progress is saved on your own machine, unless you turn on Save across devices for a course.

Stays in your browser your work

  • Lesson code runs in a sandbox in your browser with no internet access; it is never run or stored on the server
  • The optional AI tutor and “review my code” helper run on your device
  • Your progress, streak and XP live in your browser’s local storage; export them to a JSON file you control

Reaches the server opt-in only

  • A certificate, only if you mint one: the name you type, the course, your score and the date, made publicly verifiable, plus a random id and the country it was issued from (your IP address is not kept, and the country is never shown on the certificate)
  • A public review, only if you post one: display name, rating and comment, with the same random id
  • Save across devices, only if you turn it on, and only for that one course: the course’s progress, your code drafts, your review cards and your certificate links, encrypted on the server so you can open them on another device. Your email is not stored on the server: it is only used to send you a short sign-in code. The company that delivers the code email sees your address when it is sent. Your own browser remembers it, so the forum can offer it if you join. A save nobody opens for 12 months is deleted, and “Delete my saved progress” on the course page removes it at once and signs out every device. Any blog posts you star are saved with it, and deleted with your last saved course. Simple counts (how many saves, from which country, and which prompt led to it) are kept for two years and lead back to nobody.

Progress counting. To see how far people get through a course, the course page sends the lessons you reach and how many lessons and exercises you have finished, under a random ID made in your browser, along with the country you are in. Your name, email, code and answers are never sent. Your devices may be counted as one learner, for example if you use Save across devices, or if a scrambled code of your network suggests it is you on a new browser. Anything not updated for 25 months is deleted. To stop it, choose “Don’t count my progress” under Your progress on any course page; this also deletes what the server holds.

Like the CV Builder, the tutor downloads its model once, then runs entirely in your browser; the code you write and the answers you give are never sent anywhere. No account and no analytics on your code or answers, ever, and no email unless you choose Save across devices.

Floati Browser

A privacy-first desktop browser, in development. Live build numbers at floati.life/browser

Not downloadable yet; this covers the builds that exist today and will be kept current when it ships. By default it has no account, no telemetry and no cloud: it sends nothing.

Stays on your device everything you do

  • History, bookmarks, downloads, sessions and settings, encrypted on your device
  • The memory features (Rewind, Time Capsule, Ask your reading): pages you read are indexed and answered on-device only, with an off switch and a per-site “never remember” list that also erases what was already saved
  • Passwords in a vault released only after Touch ID / Windows Hello
  • Ad, tracker and phishing protection evaluated locally against bundled lists; the browser never sends a URL anywhere to check it

Reaches the server two, both narrow

  • An update check: a plain request for the latest version number, carrying no identifier and no browsing data. Like any web request it shows the server an IP address; the logs keep only a scrambled version
  • Shared stats, off by default. If you opt in, exactly this: a random install id, the app version, your OS name, and five counters (tabs opened, tabs suspended, trackers blocked, estimated memory saved, research-project count). Never URLs, searches, history, or anything typed. The aggregate is public at floati.life/browser

The sites you visit connect to their own servers, as in any browser, and the system web engine (from Apple or Microsoft) may make its own system connections outside Floati’s control. Turn shared stats off anytime in Settings; delete the browser’s data and everything is gone. Because your data never leaves your device, Floati cannot read it, and cannot recover it either: keep your own backups.

Forum

The public discussion at floati.life/forum

Anyone can read it. To post you check your email with a one-time code, and you get a generated name, which you can change once. There is no password.

Never kept by the website

  • Your email is locked in your browser before it is sent, so the website cannot read it. If reply emails are off, the server does not keep it. The company that delivers the code email sees your address when it is sent
  • Your browser remembers your email on that device so you do not have to type it again, unless you untick the box. It goes when you sign out or choose a different email
  • Your IP address is not stored with your posts, and visits to the forum are not logged. Each thread shows a read count, which is only a number: nothing records who read what. Your browser remembers which threads it has counted, so you count once
  • GIFs in posts are shown from this site, so your browser does not contact the GIF site. The server fetches the GIF once and keeps a copy
  • What you chose in a poll. The server keeps only a marker that a vote was cast, so nobody can vote twice. Your browser keeps your choice on that device so you can change it, until you delete your account or clear your browser

Kept on the server only what the forum needs

  • A code made from your email that cannot be turned back into it, so you stay the same person when you return
  • Your forum name, and what you post, which is public
  • Reply emails, only if you turn them on: your address, locked. Only the separate mail service can open it, and it is destroyed after 90 days away

The Profile button on the forum lets you download everything held about you. Delete your account there and it goes straight away, and from backups within 8 days. If you were banned, the code stays so the ban still works, a marker stays on any poll you voted in so nobody can vote twice, and if your name was changed, a note of that stays so it stays a one-time change. To stop strangers locking you out, the server remembers a scrambled code of the networks you sign in from for 90 days, and that goes when you delete your account. Other people see only your forum name, but you are not fully anonymous: if the law requires it, what the server holds could be handed over. You must be 13 or older.

Trust, but verify

Prefer to check? Watch this page audit itself.

A privacy policy is a promise; this part is an instrument. Your own browser lists every request this page makes, proves that whatever you type stays put, and lets you try to make it leak, on purpose, and watch it fail.

Live · outbound network monitor
0First-party
requests
0Trackers
reached
0Your content
transmitted
requests, newest first
Your browser is the witness. With JavaScript on, every request this page makes appears here, marked first-party (stays on floati.life) or third-party. On this page the third-party column stays at zero.
What the page ever sends
{
  "p": "/privacy/",   // page path
  "r": "",           // referring site
  "w": 1280,         // window width
  "l": "en"          // language
}
The single first-party analytics ping. The server keeps a visitor id that does not show who you are, never your real IP address, and your content is never sent.
Don’t take the panel’s word for it either: open DevTools → Network and compare. On this page, every domain is floati.life.
01 · Type a secret
On your device 0 bytes Transmitted to Floati 0 bytes

Measured live: your browser has made 0 outbound requests so far, and your text appeared in 0 of them. The transmitted figure is a real tally, not a promise.

02 · Try to leak it out
Edit the URL to any tracker you like, then make this page try to POST your secret from box 01 to it. Watch it bounce.

This fires a real POST of your secret at the domain above, over fetch and XHR. Both are blocked by this site’s security rules before a byte leaves; the verdict shown is your browser’s own.

Every website can read the signals below the moment you arrive; most quietly bank them to fingerprint you. Floati reads them too, to lay out the page, and then looks away. Computed live in your browser, never sent anywhere (the monitor above is your proof).

Timezoneyour local timezone discarded
Languageyour language discarded
Screenyour screen size discarded
Platformyour platform discarded
CPU threadsyour core count discarded
Themelight / dark discarded

Housekeeping

A few things true of the whole site.

Privacy-preserving analytics

The single first-party ping in the monitor above is nearly the whole story. From it the server keeps: the page path, the referring site, your window width and language, your browser and device type, and a visitor id that does not show who you are, made so your real IP address is not stored. There is no third-party analytics service, no cross-site tracking, and no advertising network anywhere on the site.

On-device AI and content delivery

The CV Builder and the Learn tutor run their AI in your browser. The model is downloaded once from public download services, then runs entirely on your device. You only ever download from them; your resume, your code and your answers are never sent to them or to any AI company. So if you watch DevTools while the AI loads, you will see those content downloads, and nothing of yours going out.

Cookies

The CV Builder sets no cookies: your draft lives in your browser’s local storage, which never leaves your device. (Before October 2026 it used one draft cookie; if your browser still has it, your next visit removes it.) No advertising or cross-site cookies, ever. The desktop app uses none; it is not a website. Learn sets one small cookie per course that lists the lessons you finished, so lessons open in order (see Learn). Stars on the blog stay in your browser. If you use Save across devices, one more small cookie links your stars to it, and it goes when you sign out. The forum sets one small cookie to keep you signed in. Your browser may also remember your email on your device for the forum and Learn.

Children’s privacy

The desktop app collects no data from anyone. The website does not knowingly collect personal data from children under 13. If you are under 18, please get a parent or guardian’s OK where your local law asks for it. If you believe a child has submitted data, email us and it will be removed.

Your data, your responsibility

Floati’s products are free and provided as is, without warranty of any kind. The flip side of everything living on your device is that Floati holds no copy (the one exception is Learn progress you choose to save across devices): Floati cannot read your data, and cannot recover or restore it if your device is lost or wiped. Keep your own backups; the desktop app and the browser both include export and encrypted-backup tools for exactly this.

When data would be disclosed

For the products above there is almost nothing to disclose. The little the website does hold (certificates, reviews, analytics, messages you send, forum data, and encrypted Learn progress if you turned on Save across devices) would only be disclosed if the law requires it, and that has never happened. None of it is sold to anyone or shared with advertisers or data brokers, full stop.

Messages you send

The Feedback, Report a bug and Contact buttons open a small form on the page. When you press Send, your message, the address of the page you sent it from, your country and the time are saved on the server, with the message and your email encrypted, and forwarded to the Floati inbox. Your email is optional and only used to reply to you. Messages are deleted after 12 months; ask and yours will be deleted sooner.

Logs and security

Your IP address is used for a moment to work out your country and keep the site safe. Our logs keep only a scrambled version, not your real address. If you want it removed, contact us and we will delete it.

Your rights

You can ask to see, correct or delete what is held about you, or object to how it is used. Contact us and it will be done. You can also complain to the data protection regulator where you live. In South Africa that is the Information Regulator.

Where your data is

Floati runs from South Africa. The little the website holds is stored on servers in Europe, and may be handled in other countries by the services that run the site, like hosting and email delivery. It is used only to run the products you choose: to do what you asked, or to keep the site working and safe.

Who runs this

Floati, South Africa. Contact my@floati.life. The rules for using Floati are in the Terms of Use.

Changes, and how to reach us

If anything changes, the updated policy is published at this URL with a new “last updated” date. No silent edits, and no weakening of the on-device principle without a clear, dated notice here.

Questions, corrections or deletion requests: send a message or email my@floati.life. Built and operated by Floati in South Africa.

Looking for the Bday Wishes iOS app? It is a separate product with its own privacy policy. Bday Wishes privacy

Free · Private · No account · Verifiable · floati.life