Nothing PersonalDownload for MacDownload for Windows
Version 0.9.3What’s new →

Redact a whole folder.A copy your colleague, or your AI, can still read.

Point it at a folder. You get a copy where every person’s name, email, phone, address, ID and bank number is replaced with a consistent made-up one. Companies, amounts and business dates stay.

Download for MacDownload for Windows

Apple Silicon, macOS 14 or later · About 400 MB
Windows 10 or 11, 64-bit · About 450 MB · First launch on Windows

Original
Lease - Daniel Okafor.docx

…between Ashgrove Property Management LLC (the "Landlord") and Daniel Okafor (the "Tenant").

Social Security Number: 512-48-7730. Email: daniel.okafor86@gmail.com.

Redacted copy
Lease - Ronald Vilakazi.docx

…between Ashgrove Property Management LLC (the "Landlord") and Ronald Vilakazi (the "Tenant").

Social Security Number: 831-85-6095. Email: ronald.vilakazi99@gmail.com.

  • Runs offline, nothing uploaded
  • Original folder never changed
  • Same stand-in in every file
  • Free for 20 documents, Pro from $149/yr

It’s a Mac and Windows app. On your phone? Email yourself the link.

One run. The whole folder.

Word, Excel, PDFs, scans, emails and zips, in folders inside folders. When it finishes, the results screen shows what was replaced in each file and flags the ones to look at.

The Nothing Personal window after a run: Done. 12 files redacted, 1 to look at. Swapped 195 names, 34 email addresses, 10 phone numbers, 40 street addresses and 125 other personal details. It lists each file with what was replaced, flags a zip that was copied unchecked, and notes that 3 scans had areas covered with solid boxes.
Nothing Personal

Done. 12 files redacted, 1 to look at.

Swapped 195 names, 34 email addresses, 10 phone numbers, 40 street addresses and 125 other personal details.

  • 1 file copied unchecked: Evidence photos.zip. Check or remove it before sharing.
  • 3 scans read with text recognition; 20 areas covered with solid boxes.
  • Evidence photos.zipCopied unchecked
  • Invoices 2026-Q3.xlsxNames, addresses, emails +1 more
  • Payroll export 2026-09.csvNames, account numbers +1 more
  • Scan - signed NDA.pdfScan, 9 areas covered
  • Correspondence/Email - re settlement offer.emlNames, emails +1 more
  • ID documents/Passport copy - claimant.jpgScan, 6 areas covered
  • and 6 more files

Read the copy before you share it. On independent test sets it misses about 2–3% of people’s names, and it can’t flag a name it missed. It is built for English-language documents. More in the questions.

Same document. Nothing personal.

People are swapped for made-up people. The business stays readable: who owes what, under which contract, by which date.

Example document
Show
Q3 receivables - Ashgrove Property Management.xlsx

Scroll sideways for all columns →

InvoiceClientContactEmailPhoneBank account (IBAN)Amount
INV-2024-0412Brightline Dental Group PCHelena Marshaccounts@brightlinedental.com(503) 555-0110$4,800.00
INV-2024-0413Daniel OkaforDaniel Okafordaniel.okafor86@gmail.com(503) 555-0182GB88 LOYD 3096 2871 0452 26$1,250.00
INV-2024-0415Kestrel Ridge Holdings Inc.Tomasz Przybylskit.przybylski@kestrelridge.com(360) 555-0197GB14 BARC 2045 1793 0281 64$9,375.50
INV-2024-0418Ingrid HalvorsenIngrid Halvorseningrid.halvorsen@gmx.de+49 30 5557 2841DE40 5001 0517 5820 1947 36$2,100.00
INV-2024-0421Cobalt Harbor Logistics LLCMarcus Delacroix-Webbbilling@cobaltharbor.com(206) 555-0154$15,640.00
Original
Q3 receivables - Ashgrove Property Management.xlsx

Scroll sideways for all columns →

InvoiceClientContactEmailPhoneBank account (IBAN)Amount
INV-2024-0412Brightline Dental Group PCGerarda Carlinaccounts@brightlinedental.com(503) 555-0110$4,800.00
INV-2024-0413Ronald VilakaziRonald Vilakazironald.vilakazi99@gmail.com(458) 841-8398GB94 LOYD 4759 0278 3553 91$1,250.00
INV-2024-0415Kestrel Ridge Holdings Inc.Anatol Wawrzyniaka.wawrzyniak@kestrelridge.com(564) 531-4236GB14 BARC 2045 1793 0281 64$9,375.50
INV-2024-0418Sibylle GulbrandsenSibylle Gulbrandsensibylle.gulbrandsen@gmx.de+49 36 6817 0933DE50 9674 1312 7567 9977 97$2,100.00
INV-2024-0421Cobalt Harbor Logistics LLCCurtis Ridgewell-Prattbilling@cobaltharbor.com(206) 555-0154$15,640.00
Redacted copy

People are replaced and company clients are kept. Daniel Okafor is Ronald Vilakazi, with the same email, phone and IBAN as in the lease, and the new IBAN still passes its check digits. Invoice numbers, amounts and the accounts@ and billing@ mailboxes are untouched.

Real output from the app on invented documents. Highlights added for this page: orange is the original, green the stand-in.

Okafor v. Ashgrove - documents for Friday.eml
Original
Vilakazi v. Ashgrove - documents for Friday.eml
Redacted copy

Names change in the headers, greeting, body and signature, and the case becomes “Vilakazi v. Ashgrove”. Both law firms, their office address, the docket@ mailbox and the deposition date stay. Partial numbers like “ending 5226” can stay as written: see the questions.

Real output from the app on invented documents. Highlights added for this page: orange is the original, green the stand-in. Dashed: left as written, worth a look.

Deposit letter - D. Okafor (scan).pdf
Original scanned letter with no text layer, with the sender's address, phone, email, IBAN and a handwritten signature.
Original
Deposit letter - R. Vilakazi (scan).pdf
Redacted scan: solid black boxes cover the sender's details, the recipient's name and address, the IBAN, the wife's name and phone, and the signature.
Redacted copy

A scan with no text layer, signed by hand. The page is read on your computer and personal details, including the signature, get solid boxes burned into the pixels. On scans it errs toward covering, so the landlord’s office address was boxed too.

Real output from the app on an invented scan. The black boxes are the app’s own.

Matter 24-0117
  • Matter 24-0117
  • Accounts
  • Q3 receivables - Ashgrove Property Management.xlsx
  • Correspondence
  • Okafor v. Ashgrove - documents for Friday.eml
  • Tenants
  • Daniel Okafor
  • Deposit letter - D. Okafor (scan).pdf
  • Lease - Daniel Okafor.docx
Original
Matter 24-0117 (redacted)
  • Matter 24-0117 (redacted)
  • Accounts
  • Q3 receivables - Ashgrove Property Management.xlsx
  • Correspondence
  • Vilakazi v. Ashgrove - documents for Friday.eml
  • Tenants
  • Ronald Vilakazi
  • Deposit letter - R. Vilakazi (scan).pdf
  • Lease - Ronald Vilakazi.docx
Redacted copy

Folder and file names change with the documents, and the copy is saved as Matter 24-0117 (redacted) next to the original.

Real output from the app on invented documents. Highlights added for this page: orange is the original, green the stand-in.

Lease - Daniel Okafor.docx

RESIDENTIAL LEASE AGREEMENT

This Residential Lease Agreement (the "Lease") is made on March 1, 2024 between Ashgrove Property Management LLC, 900 SW Fifth Avenue, Suite 1400, Portland, OR 97204 (the "Landlord"), and Daniel Okafor (the "Tenant").

1. Premises. The Landlord leases to the Tenant the apartment at 2217 NE Alder Crest Avenue, Apt 4B, Portland, OR 97212.

2. Tenant details. Date of birth: 14 March 1986. Social Security Number: 512-48-7730. Mobile: (503) 555-0182. Email: daniel.okafor86@gmail.com.

3. Rent. Monthly rent of $2,150.00 is due on the 1st of each month by direct debit from the Tenant's account IBAN GB88 LOYD 3096 2871 0452 26. Late payments incur a fee of $75.00.

4. Occupants. The Premises will be occupied only by the Tenant and Amara Okafor.

5. Emergency contact. Grace Whitfield, (971) 555-0136, grace.whitfield@outlook.com.

6. Notices. Notices to the Landlord go to leasing@ashgroveproperty.com, attention Rebecca Thornbury, Property Manager.

Original
Lease - Ronald Vilakazi.docx

RESIDENTIAL LEASE AGREEMENT

This Residential Lease Agreement (the "Lease") is made on March 1, 2024 between Ashgrove Property Management LLC, 900 SW Fifth Avenue, Suite 1400, Portland, OR 97204 (the "Landlord"), and Ronald Vilakazi (the "Tenant").

1. Premises. The Landlord leases to the Tenant the apartment at 2217 SE Tulipfield Maughan Avenue, Apt 2A, Eugene, OR 97697.

2. Tenant details. Date of birth: 14 April 1988. Social Security Number: 831-85-6095. Mobile: (458) 841-8398. Email: ronald.vilakazi99@gmail.com.

3. Rent. Monthly rent of $2,150.00 is due on the 1st of each month by direct debit from the Tenant's account IBAN GB94 LOYD 4759 0278 3553 91. Late payments incur a fee of $75.00.

4. Occupants. The Premises will be occupied only by the Tenant and Aretha Vilakazi.

5. Emergency contact. Brenda Prenger, (503) 560-0334, brenda.prenger@outlook.com.

6. Notices. Notices to the Landlord go to leasing@ashgroveproperty.com, attention Lacey Alzahrani, Property Manager.

Redacted copy

His wife Amara becomes Aretha Vilakazi, so they still share a surname. The street, city and ZIP are replaced; the house number stays. The date of birth is shifted. The landlord, its office address, the leasing@ mailbox, the rent and the lease dates are unchanged.

Real output from the app on invented documents. Highlights added for this page: orange is the original, green the stand-in.

Works with Wi-Fi off

Turn off Wi-Fi, or block the app in Little Snitch or Windows Firewall, and redaction works exactly the same. Every Mac build is tested that way.

  • Nothing is uploaded.

    Detection, text recognition and replacement all happen on your computer. The language model ships inside the app.

  • The internet is only for the app itself.

    The app goes online only to activate and check your licence and, on a Mac, to check for updates. It never sends your documents or anything in them.

  • Stand-ins can’t be reversed from the copy.

    They come from a secret key kept on your computer, and the key is never written into the copy.

  • Feedback goes through your own mail app.

    “Request a feature” opens an email you can read before sending. Nothing is sent in the background.

Read the privacy policy

For people who handle other people’s files

  • Lawyers and paralegals

    Give a matter folder to an expert, co-counsel or an AI for a chronology.

    Names and numbers are replaced; companies, facts and ordinary dates stay, so the timeline still works. For internal work, not for production.

  • Accountants and auditors

    Send a client’s bank exports to an AI, or ledgers to an outside bookkeeper.

    People get stand-ins, with valid-looking IBANs and card numbers. Companies, invoice numbers, amounts and formulas stay, so the numbers add up.

  • HR, compliance and DPOs

    Hand personnel files to an investigator, or a data sample to a vendor.

    Names, home addresses, dates of birth, National Insurance numbers and SSNs are replaced, and the facts of the case stay readable.

  • Anyone using ChatGPT or Claude

    Ask an AI about client documents without naming the client’s people.

    Paste from the redacted copy. When the answer mentions “Ronald Vilakazi”, Put the real names back Pro turns him into Daniel Okafor again.

What find-and-replace would miss

28 rules that keep a redacted copy consistent and still useful. The examples are the app’s real output on invented documents.

  • One person, one stand-in, everywhere.MR. OKAFORbecomesMR. VILAKAZI“Daniel Okafor”, “Okafor, Daniel” and “D. Okafor” become the same invented person in every file, on every run.
  • IBANs keep valid check digits.GB88 LOYD 3096…becomesGB94 LOYD 4759…The bank code stays, and a UK sort code and account number stay consistent with it.
  • Companies are kept.Ashgrove Property Management LLCbecomeskept as writtenWith banks, agencies, company tax and registration numbers, office addresses, switchboard numbers and websites.
  • Word’s hidden corners are covered.Comment by Daniel OkaforbecomesComment by Ronald VilakaziComment authors, tracked deletions, document properties, headers, footers, hyperlinks, alt text and thumbnails get the same stand-ins.
  • PDF text is removed, not covered.Tenant: Daniel OkaforbecomesTenant: Ronald VilakaziNo black box over text that can still be copied out: the old text is taken out of the file and the replacement goes in the same font, size and place. Metadata, form fields, annotations, attachments and earlier revisions are cleaned.
  • File and folder names are redacted.Lease - Daniel Okafor.docxbecomesLease - Ronald Vilakazi.docxExtensions are kept.

And 22 more

People 7
  • Named once, caught everywhere. Someone named in full in one file is found by surname alone in a bank export next to it.TRANSFER FROM OKAFOR becomes TRANSFER FROM VILAKAZI
  • Gender kept. Women get women’s names and men get men’s names.Amara becomes Aretha
  • Stand-ins usually match the original’s style. Marcus Delacroix-Webb became Curtis Ridgewell-Pratt.Tomasz Przybylski becomes Anatol Wawrzyniak
  • Shared surnames stay shared. A husband and wife keep one surname between them.Amara Okafor becomes Aretha Vilakazi
  • Short names follow the full name. A nickname gets a short form of the same stand-in.Thomas / Tom becomes Andrew / Andre
  • Initials follow. Including in file names.D. Okafor becomes R. Vilakazi
  • Signatures. A typed name after “Regards” is replaced. On a scan, a handwritten signature by a “Signature” or “Sincerely” label is covered.Best regards, Sofia Brennan becomes Merry Howarth
Contacts, IDs and money 6
  • Emails stay readable. The stand-in’s name, at the same domain.daniel.okafor86@gmail.com becomes ronald.vilakazi99@gmail.com
  • Role mailboxes are left alone. So are over a hundred more at company domains.info@ billing@ becomes kept
  • Phones keep their shape. Country code, punctuation and length stay. US numbers get a real area code.+44 20 7946 0958 becomes +44 26 0227 3558
  • Card numbers stay valid. Same length and card network, and the checksum passes.4111 1111 1111 1111 becomes 4109 6825 5460 6480
  • ID numbers keep their format. SSNs stay in valid ranges; passport and licence numbers keep their pattern.512-48-7730 becomes 831-85-6095
  • Birthdays move; business dates don’t. A date of birth moves to another date within about ten years, never into the future. Invoice, contract and deadline dates stay.DOB 14 March 1986 becomes 14 April 1988
Companies, tables, Word, PDF 3
  • Letterhead is not a home address. In Word and PDF text, a firm’s address in the header stays and a client’s home address is replaced. On scans it errs toward covering.
  • Column headers count. Values under “Payee”, “Cardholder”, “DOB” or “Beneficiary” are judged as that kind of data, in CSV, Excel, PDF and scanned tables.
  • Excel stays a working spreadsheet. Sheet names are redacted and every formula, chart and named range pointing to them is updated. Macros survive.
Scans, folders, emails and zips 6
  • Scans get solid boxes in the pixels. Read with text recognition (two engines on a Mac), with rotated pages, faxes and passport machine-readable lines handled.
  • Pictures inside documents are checked too. An image in a PDF or Word file is read and boxed like a scan.
  • Photo metadata is cleaned. GPS location, camera serial number and author are removed.
  • Emails and their attachments. .eml, .mbox and Outlook .msg, each attachment redacted according to its own file type.
  • Zips are opened. Every file inside gets the same stand-ins, zips inside zips work, and zip bombs are refused.
  • Mislabelled files are read by their content. A renamed PDF or a .dat export is recognised and redacted.

Pro

For people who redact every week: your own rules and style, a report for the file, and the real names back when the work is done.

Your own rules

Up to 500 rules per project, applied in every format, scans and file names included.

Replace
Project Kestrel → Project A
Never touch
Eleanor Marsh stays as written
Always hide
Client no. 4471-B, as an ID number

Choose what to hide, and how

Switch off any of names, contacts, addresses, ID numbers, and bank and card numbers. Then pick a style:

Realistic
Daniel Okafor → Ronald Vilakazi
Labels
Daniel Okafor → [PERSON_1]
Black bars
Daniel Okafor → Daniel Okafor

Scans always get solid boxes, whatever you choose.

Settings, Rules: Replace Project Kestrel with Project A, Never touch Eleanor Marsh, Always hide Client no. 4471-B as an ID number, Always hide Tad as a name, Replace Harlan Freight with the Defendant. What to hide: all five categories switched on. How to hide it: Realistic stand-ins selected.

Put the real names back

Paste an AI’s summary or a colleague’s notes written from a redacted copy, and the real names come back, on your computer.

An AI’s answer, written from the copy

Ronald Vilakazi has paid rent on time since March 2024. Aretha Vilakazi is the only other occupant.

After Put the real names back

Daniel Okafor has paid rent on time since March 2024. Amara Okafor is the only other occupant.

  • Audit report

    redaction-report.csv lists each file, the type of detail, the stand-in and the count, never the real values.

  • Projects

    Each client or matter gets its own key, rules and stand-ins.

Pricing

  • Free

    $0

    Your first 20 documents, once

    Try it on a sample of your own files.

    • Full redaction, standard settings
    • Every file type, scans included
    • Results screen with files to look at
    Download for MacDownload for Windows

  • Pro Annual

    $149

    Per year

    For a year of client work.

    • No document limit
    • Your own rules, categories and styles
    • Audit report, projects, Put the real names back
    Download for MacDownload for Windows

  • Pro LifetimeBest value

    $279

    One-time

    Less than two years of Annual.

    • No document limit
    • Your own rules, categories and styles
    • Audit report, projects, Put the real names back
    Download for MacDownload for Windows

Free to download; Pro is bought inside the app, and one license works on up to 3 of your computers, Mac or Windows. Prices in US dollars. If Pro Annual isn’t renewed, Pro switches off and the free limit applies again. Full refund within 30 days of purchase: see the terms of sale. What counts as a document: see the questions. Buying for a team, or need an invoice? Write to sergey@goodit.works.

Questions

How accurate is it?

It misses about 2–3% of people’s names on independent test sets, so always review the copy. The results screen lists files it couldn’t fully read and scans where it covered areas.

What else should I check in the copy?
  • Facts stay. “Is on sick leave until October 20” keeps its meaning with a stand-in name in front of it, so a reader who knows the case may still recognise who it is about.
  • A company named after a person (“Jane Doe Consulting LLC”) has the name replaced by design, but a firm like “Smith & Grant” may be changed in one file and kept in another. In about 3–5% of company names, part of the name is changed.
  • Scans can be over-covered: text it can’t read with confidence is covered. Handwriting, angled photos and low-resolution scans are read poorly.
  • Partial numbers can stay: “account ending 5226” may be left as written.
Will my corporate client’s name be hidden?

No. Companies are kept, including a corporate client and its counterparties, so the documents still make sense. Add the client as an Always hide rule Pro if it must not appear.

Can a stand-in be mistaken for a real person?

Yes. A realistic stand-in email or phone number may belong to someone real, and a reader may take the copy for the original. For copies leaving your firm, use Labels Pro. Don’t use a redacted copy for production to a court or the other side.

Does it make a copy compliant?

It is a tool, not a compliance guarantee. It helps you prepare documents; whether a copy is fit to share is your decision.

Which languages does it support?

It is built for English-language documents and also recognises names written in Cyrillic. In other scripts, names are caught only on lines that also have a phone number or email. The app itself is in English.

Which file types does it handle?
  • Word, Excel and PowerPoint, including macro-enabled files and templates.
  • PDF, with a text layer or scanned.
  • Images: PNG, JPEG, TIFF (multi-page), BMP, WebP and GIF, and HEIC on a Mac.
  • Email: .eml, .mbox and Outlook .msg, with attachments.
  • Text, CSV, TSV, JSON, XML, HTML, Markdown, vCard and calendar files.
  • RTF and OpenDocument (.odt, .ods, .odp, .odg).
  • Zip archives, including zips inside zips.

Older .doc, .xls and .ppt files are converted to .docx, .xlsx and .pptx, and .msg to .eml. Pages, Numbers and Keynote files are not supported: export them to Word, Excel or PowerPoint first. Any other file is copied unchanged and listed as “not checked”.

Why not Acrobat’s Redact tool, find and replace, or a cloud service?
  • Acrobat works one file at a time, and black bars leave a reader, or an AI, nothing to follow.
  • Find and replace misses “MR. SMITH”, “Smith, John”, the name in a file name, the author in the document properties and the name on a scan.
  • A cloud service means uploading the client’s files. Here they never leave your computer.
Does it use AI or the cloud?

No cloud. It uses a language model that ships inside the app and text recognition that runs on your computer, together with detailed hand-written rules. It does not send anything to an AI service.

Will it change my original files?

No. It reads the original and writes a new folder, <folder> (redacted), next to it. An earlier copy is never overwritten: the next one is (redacted 2).

What if a file is damaged, password-protected or hangs?
  • A file or attachment the app can’t read is left out of the copy and listed. It is never copied unredacted.
  • A file that hangs or crashes fails on its own, and the rest of the folder finishes.
  • If the app is interrupted, the copy keeps an INCOMPLETE notice and the next run warns you. If you stop a run yourself, the unfinished copy is removed.
  • Free disk space is checked before anything is written.
What counts as a document for the free 20?

One file in your folder that was redacted successfully. A zip, or an email with its attachments, counts as one. Files that are skipped or fail don’t count. If a folder has more files than you have free, the app asks first: redact the first ones, or get Pro.

What happens if I don’t renew Pro Annual?

Pro switches off and the free-document limit applies again. The redacted copies you already made are ordinary files and stay yours.

Can I get a refund?

Yes, a full refund within 30 days of purchase, no questions asked. Write to sergey@goodit.works. The rest is in the terms of sale.

Can I use one licence on my Mac and my Windows PC?

Yes. Enter the same key in either app. One licence works on up to 3 of your computers, Mac or Windows, in any mix. To free a seat, use Deactivate this Mac or Deactivate this PC in Settings, or the customer portal.

Where are the key and the name list stored?

On a Mac, in ~/Library/Application Support/Nothing Personal/, readable only by your user account. On Windows, in %APPDATA%\Nothing Personal\, inside your own Windows profile. With Pro, each project also keeps a list of real names and their stand-ins there, so you can put the names back. These files are protected by your computer’s own disk encryption (FileVault or BitLocker), not by the app. On a Mac, Time Machine backs them up like other app data. On a company PC with roaming profiles, Windows also copies this folder to your organisation’s profile server. Reset Stand-ins makes a new key and clears the list. Uninstalling the app on Windows leaves this folder; delete it to remove them.

Will a colleague on another computer get the same stand-ins?

No. The key is per computer and user account, so the same person gets different stand-ins on two computers, Mac or Windows. If two people work on one matter, have one of them make the redacted copy and share that.

How fast is it?

Text documents and spreadsheets take seconds, and a scanned page takes about a second. The first run after opening the app takes an extra 15–20 seconds while the models load. Older or low-power PCs take longer.

What do I need?

On a Mac: Apple Silicon (M1 or newer) and macOS 14 Sonoma or later. Open the downloaded zip and move Nothing Personal to Applications; it updates itself from then on. A Mac App Store version is coming later.

On Windows: Windows 10 or 11, 64-bit. The installer needs no administrator rights. To update, download the new installer here and run it: it installs over the old version and keeps your settings, key and licence.

Both downloads are large (about 400 MB on a Mac, about 450 MB on Windows) because the language and text-recognition models are included. The screenshots on this page are from the Mac; the Windows app looks the same inside its window.

Windows says “Windows protected your PC”. Is it safe?

The Windows installer isn’t code-signed yet, so Microsoft SmartScreen doesn’t recognise it. Click More info, then Run anyway. If your browser warns that the file isn’t commonly downloaded, choose Keep. The app is the same one described on this page.

The Windows app opens a blank window. What now?

It needs the Microsoft Edge WebView2 Runtime, which Windows 11 already has and most Windows 10 PCs get with Edge. If it’s missing, the installer offers to open Microsoft’s download page; you can also get it from Microsoft. Install it, then start Nothing Personal again.

Who makes it, and how do I send feedback?

One developer, Sergey Baus. Use Request a feature or Report a problem in the app: each opens an email in your own mail app, and a run summary you attach contains stand-ins only.

Try it on 20 of your own documents.

Start with a small sample, read the copy, then decide. Nothing leaves your computer.

Download for MacDownload for Windows

Mac App Store version coming later. On Windows, the installer isn’t code-signed yet: see the questions.

It’s a Mac and Windows app. On your phone? Email yourself the link.