The short version
Silo Systems collects no data about you. None. There is no Topoform account, no analytics, no telemetry, no crash reporting, no advertising identifier, and no Silo server anywhere in the picture. Your artwork and the models you generate never reach us, because there is nowhere for them to go.
One thing is different about Topoform, and it deserves plain language. Every other Silo app is completely offline. Topoform lets you connect an AI provider — OpenAI, Anthropic, Google Gemini, or a local LM Studio server — using your own account and your own key, so it can suggest a style for your relief. When you do that, the artwork you selected and the prompt describing your printer are sent to that provider, by your Mac, under your agreement with them.
If you connect nothing, Topoform makes no network connections at all. If you connect a local LM Studio server, the traffic never leaves your machine. The geometry is always computed on your Mac either way — no provider ever generates your model.
What we don't have, and therefore never see
Because Topoform has no server-side component, none of the following exists anywhere in our infrastructure (which consists of: nothing): your name, email, phone, or address; your IP address, device identifier, or any hardware fingerprint; your artwork, your generated models, or anything derived from them; session timing, feature usage, or behavioural data; crash reports. The app does not phone home, ever.
Providers you connect, and what reaches them
A provider you add in Settings → Providers receives, at the moment you run a generation with it selected:
- The artwork you chose, as image data, so a vision-capable model can read its composition.
- The composed prompt— your printer's bed size, nozzle, layer height, filament list, and any artistic notes you typed.
That is all. It goes directly from your Mac to the endpoint you configured, authenticated with your key. Silo Systems is not a party to that request, receives no copy, and operates no proxy. What the provider does with the data is governed by their privacy policy and your account with them — read it, particularly the parts about whether prompts are retained or used for training.
Remove every provider and Topoform is fully offline. This is the intended way to use it if you would rather nothing left your machine.
Where your keys live
API keys are stored in the macOS Keychain, in an app-scoped generic-password item. They are never written to preferences, log files, exports, or any file we or anyone else can read, and they are never transmitted to Silo Systems. Deleting a provider deletes its Keychain item.
Other outbound traffic you initiate
- App Store updates. When Apple ships a Topoform update, the App Store delivers it. That traffic is between your device and Apple. Topoform is not involved.
- Links you click. If you click an external link inside the app, your default browser handles the request. Topoform is not involved.
Permissions we request, and why
- Files you choose. Read the artwork you open, and write only the 3MF, contact sheet, height map, and report into the output folder you select, via the system file picker. Nothing else on disk is touched.
- Outgoing network connections. Used solely to reach the model endpoints you configure. With no providers added, this permission goes unused.
Topoform does not request protected resources beyond those listed above. System permission controls remain in effect at all times.
On-device data you create
Your printer profile, filament rack, and provider endpoints live inside the macOS app container at ~/Library/Containers/com.silosystems.topoform/. Generated models and reports are written only to the folder you pick and remain under your control there. Removing the Topoform app bundle may leave its sandbox container in place; use macOS storage controls to clear it. Files in locations you selected remain until you delete them.
Third-party components
- The relief engine — a deterministic geometry pipeline bundled inside the app. Runs locally on-device, has no network access, and sends nothing anywhere.
- Model providers you add— OpenAI, Anthropic, Google Gemini, LM Studio, or any OpenAI-compatible endpoint you point at. These receive data only as described above, only when you configure them, and only under your own account.
Children's privacy
Topoform is rated 4+. Silo Systems collects no personal data from any user, so no special treatment is required for users under 13. Note that connecting a third-party AI provider is an adult decision governed by that provider's own terms and minimum-age rules.
Changes
If we ever materially change how Topoform handles data, we will publish an updated version of this page, announce the change prominently in the release notes, and require explicit consent in-app before any new collection begins. The current policy is: Silo Systems collects nothing, and outbound traffic goes only to providers you configure.
Contact
Questions about this policy: admin@ohmslaw.net