Last updated: 2026-11-04 · Kerr & Company LLC, Grand Rapids, MI
Changed 2026-11-04: the model download line now says which tiers come from Outlier's own Hugging Face repositories and which from public mlx-community repositories, instead of saying every tier comes from Outlier-Ai.
Changed 2026-11-04: the price check now says it asks whether the sale is on, and a paragraph about checkout payment options that do not apply at these prices is gone.
Changed 2026-11-04: the sale banner script loads on every page, not only the home page; the list of scripts below now says so. The assistant widget is the one script that is home-page only.
Changed 2026-11-02: removed Sled, the affiliate-attribution script, and the cookie it could set.
Changed 2026-10-31: added how agent commands behave when web is off (they ask before reaching the internet).
2026-09-29: the list of what leaves your Mac was incomplete. Added three things the app already did: the price check when you open an upgrade window, the daily license re-check, and the services you connect yourself (an MCP server, a Google Custom Search key, a Gist import). None of them is new.
Outlier is a Mac-native local AI app. The privacy story is short because the design choice is to keep things on your Mac unless you opt in.
~/.outlier/license.json with 0600 perms.~/.outlier/bug_reports/ locally. You decide whether to email them.kerr-subscribe.kerrco.workers.dev: not a marketing SaaS, because
dropping one of those onto a site that sells “nothing leaves your machine” would make the claim false in
order to collect an email address. No IP address, no user agent, no referer, no fingerprint. That
is a statement about the code: the insert binds the address and the source and nothing else, and the worker reads no
client header beyond the ones a browser needs to make the request at all. Consent is per site, not per page: every form on outlier.host records the same source, so subscribing
from two of our pages is one entry and one email, while the same
address given on another of our products is a separate row, and leaving one does not leave the other.
Every email carries a one-click unsubscribe. The desktop app never sends this; there is no mailing-list code in the
app at all.kerr-lead-agent.kerrco.workers.dev whether the sale is on, so it can show the right price. The request names the site and nothing else: no license key, no device id, nothing you typed. It is never sent on a timer.live.dodopayments.com for keys bought now, or api.polar.sh for keys bought before 23 August 2026. The app decides from the key itself and sends it to one vendor only, along with a device name so the seat can be counted against your three activations. After that the app re-checks the key with the same vendor at startup and once a day; if the vendor can't be reached, Pro keeps working.The in-app Privacy Ledger (Settings → Privacy → Privacy ledger) lists the app’s built-in destinations, the license check and the upgrade-window price check included (from version 1.11.866). It is kept by hand from the app’s own network calls, and a test checks it against the hosts the app’s code actually contacts.
kc-founding-dismissed) that you closed it; and, on the home page only, our own assistant widget, from the same worker, which sends only the messages you type into it. None of them are in the app. _fbp
cookie on every visit, however you arrived, and that identifier is what lets Meta connect
this visit to your activity on their platforms. It is not requested by the desktop app,
and the shipping bundle contains no reference to its host.kc_aff) for 30 days and is attached to the checkout link if you buy, so the
partner who referred you is credited. This is first-party: it is stored only by this
site, is not a cookie, is not sent to any third party by this site, and is not read by
any other site. Dodo Payments, the checkout, receives the code as order metadata only
when you buy. Clearing your browser's site data removes it.fonts.googleapis.com, fonts.gstatic.com)
and Fontshare (api.fontshare.com), which meant simply opening this page
exposed your IP address to three servers we do not control. It no longer does: the font
files are in this site's own repository and are downloaded from the same host as the page.
The desktop app never requested them either, the shipping bundle contains no reference to
any of those hosts.~/.outlier/crashes/. You decide whether to email them via the Bug Report flow.Paid tiers (Pro, the Outlier Lifetime Licence $49) are processed by Dodo Payments, which handles payment, licence issuance and the customer portal. Purchases made before 23 August 2026 were processed by Polar and those licences remain valid. We never see your card details.
Outlier is not directed at children under 13.
If we change this policy materially, we will note the change at the top of this page and bump the "Last updated" date. We won't make a change that suddenly enables cloud telemetry on existing installs.
Questions: matt@outlier.host
This policy is plain English. If a lawyer reading it tells you something is missing, email and I'll add it.
Free: Nano + Lite. Pro: $49 once; Black Friday price, all of November: $24.50 once, until 30 November. macOS 15+. Refund window: 30 days, no questions asked.
Download free (276 MB) Buy ProOn your phone?
Made by Kerr & Company