Your work is yours.

1. What stays on your Mac

These never leave your Mac unless you share or export them yourself:

• Your projects, saved wherever you choose.
• Your library, notes and sticky notes, your local profile draft, achievements, and local copies of images you upload. These are kept in ~/Library/Application Support/GuiForge/ (GuiForge was the app's working name).
• Preferences, such as your theme, console history, recently used asset ids, your age answer (a simple yes or no, never a birthday) and your block list.
• Your Roblox Open Cloud API key, if you add one. It's stored in your Mac's Keychain and only ever sent to Roblox (see section 5).
• A device key, a private signing key kept in your Keychain and never sent anywhere. Only its public half is shared with our server, and only if you use credits or the shop (see section 3).

Deleting your account (section 8) doesn't delete files on your Mac. You can delete them yourself at any time, or by removing the app and the folder above.

2. iCloud (Apple CloudKit)

Community features use Apple's iCloud. They're stored in GuiOut Luau's public iCloud database, so anything you publish there can be seen by other GuiOut Luau users. Apple runs iCloud under Apple's privacy policy. Through iCloud we get a random, app-specific id for your iCloud account. We never get your Apple ID email or password.

Your profile's display name starts as your Mac's account name. Change it before you save if you'd rather not use your real name. Content you publish can't include email addresses or phone numbers; the app checks for them and blocks them.

3. The GuiOut Luau server

We run a small server at api.florida-brand.com, hosted by Cloudflare. Here's what it does:

• Always (everyone): the app asks the server which features are switched on. It also sends an anonymous count each time a library item is inserted, which is how the public library can sort by “most used” and “most popular”. That count is just the item id and a time, with no user or device attached.
• If you sign in with Apple (needed for credits and the shop): Apple gives us a random account id that's unique to our app. Apple may offer to share your name and email; we don't store either. The server stores that id, your device's public key and when you joined.
• If credits are on: a history of credits earned and spent (for example “daily bonus” or “export”), the badges you've claimed, and whether you said you're under 13.
• If ads are on: which clip you watched and for how long, so the credit can be checked.
• If the members' shop is on: your listings, what they contain and their review results, your purchases, the ratings you give, and any reports you file. If you sell, it also holds your seller standing, including any warnings or strikes and the reasons for them.

Logs and IP addresses. The server notes each request's type, path, result and timing, plus the first few characters of the device id. It doesn't log your IP address, your account id or what you sent. Your IP address is used for a moment to stop request floods and is never saved by our server. Cloudflare, as our host, handles network traffic under Cloudflare's privacy policy.

4. Ads and credits (not switched on yet)

When this launches, you'll earn credits by choosing to watch short clips; you'll never be forced to watch one. There are no third-party ad networks, no advertising identifiers and no tracking across apps or websites. Clips stream from the address listed for each clip, so that host sees your IP address the way any video host would. People under 13 never see clips. Credits can't be bought with money.

5. Roblox

If you upload an image to Roblox, the app sends it straight from your Mac to Roblox's Open Cloud API (apis.roblox.com) using your own API key. It sends the image, its name and description, and which Roblox user or group it's for. When you add an asset id, the app asks Roblox's public APIs about that asset to check that it exists and is the right kind. Roblox handles that data under Roblox's privacy policy. GuiOut Luau isn't made or endorsed by Roblox.

6. AI assistants

Your own AI (optional, off by default). If you turn on Settings → AI Assistant, GuiOut Luau opens a connection that only works on your Mac, protected by a private token. AI apps you connect, such as Claude Desktop, Claude Code or Codex, can then read and change your open project, library and notes, export, run Luau, and upload images to Roblox with your key. They also see your iCloud account's app-specific id and the file path of your open project. Whatever you or the app give your AI assistant goes to that AI's provider under their terms; we don't receive it.

Moderation. Our moderators may use AI tools to help review and fix up submissions to the public library and the shop. The submission, including its author name, may be processed by that AI provider for the review.

7. What we don't do

• No analytics, crash-reporting or ad SDKs.
• No selling or renting your data, and no sharing it for advertising.
• No cookies or trackers in the app, or on this website.
• No reading your projects unless you publish or submit them.

8. Deleting your account

In Settings → Account → Delete Account, GuiOut Luau removes your profile, showcase and pending submissions from iCloud, and your account, devices and keys from our server. A few things are kept, with your identity removed:

• Your GUIs. Shop items and private-library items you haven't deleted are donated to the free public library, credited to “GuiOut Luau Community” with your name removed. Items that were never approved go through review first. Delete anything you want to keep private before deleting your account; the app lists them for you.
• Copies people bought. Buyers keep them, with your name removed.
• Records we're required to keep. Credit history, reports and moderation records are kept without your identity, so we can prevent fraud and abuse. If you were banned from selling, we keep a one-way scrambled form of your account id (a hash), so the ban can't be dodged by signing up again.
• Items you already published to the public library stay available, under the author name you published them with.

Signing out removes only that Mac's device key from our server.

9. How long we keep things

• Request signatures and sign-in nonces (one-time codes that stop a request being replayed) are deleted within a day.
• Seller strikes expire after 90 days; strikes for severe harmful content don't expire.
• Everything else is kept while your account exists and handled as described in section 8 when you delete it.
• Ask us, and we'll delete what we can sooner.

10. Children

GuiOut Luau isn't made for children under 13. The app asks once whether you're 13 or older (just a yes or no) before you sign in, before you publish a profile or showcase, and when credits are on. Members under 13 can't publish a profile or showcase; theirs stays on their Mac. They also never see ads and earn credits other ways. If you believe a child under 13 has given us personal information, email us and we'll delete it.

11. Your choices and rights

• Use the app without publishing anything; publishing is always your choice.
• Edit or hide your profile, remove showcase items, or delete your account at any time.
• Leave the AI connection, credits and Roblox uploads off.
• Ask us for a copy of your data, to correct it or to delete it at tom@florida-brand.com. Depending on where you live (for example in the EU, UK or California), the law gives you these rights. We'll answer within 30 days.

12. Where data is processed

We're based in the United States. Apple (iCloud) and Cloudflare (our server) may process data in the US and other countries, with their own safeguards.

13. Changes

If we change this policy, we'll update the date at the top. If a change matters, for example when credits or the shop switch on, the app will tell you before it takes effect.

14. Contact

Florida Brand · tom@florida-brand.com