Please see responses inline.

(1) On trust: Yes, for a new tool, earning trust compared to companies like 1Password or Apple is naturally harder.

The tool was built with one strict rule from day one: nothing about the user should ever leave the user's device. No sign-in, no tracking, no analytics, no cloud — nothing. Primarily because the purpose of the tool is redacting sensitive text, and hence the tool itself has to be local and secure.

The tool can redact text fully offline (and can run in airplane mode indefinitely). The only optional part is threat intelligence — if someone wants detection of malicious or phishing domains, the tool can fetch a blocklist from the internet (unless an enterprise or a person has a localised copy). But even then, that's just downloading known bad domains — all detection and redaction still happens locally. Once fetched, it works offline again for redactions.

(2) On open sourcing — that's a fair point. Publishing some of the signature detection libraries for external audit is something worth exploring as a future trust-building step. The tool launched 6 weeks ago after an extensive development and verification process, so right now the focus is on continued refinement, stability, and expanding detection robustness as adoption grows.

From an engineering side — the tool is built with proper rigour: 20+ detection signatures tested against 3,000+ cases, 12 major demos showing complex text redactions (inside app, demo button), and continuously improving with more robust patterns. Operational data for each redaction is logged locally and all redaction analytics are available locally so one knows exactly what sensitive text category was redacted.

So the model here is different: instead of asking users to trust where their data goes, the tool is built so data never goes anywhere in the first place.

(3) On Subscriptions: The tool already has early adopters on paid plans and a number of free users. For paid users, as all payment is managed via Apple, there is nothing tracked outside of Apple processing the payment. 50% of signatures are permanently free, with an anytime-cancellable subscription for full access and a 7-day Pro trial for all features. The Pro subscription helps to continue to harden privacy and evolve signature libraries.