Security: drawings never leave the computer
Balloonify is a local desktop ballooning engine. Inspection drawings are opened, ballooned and exported on the machine where you run the app.
What stays on the PC
- Source PDFs
- Ballooned PDFs
- Excel workbooks (Ballooning, Form 3 Rev C, PPAP Dimensional Results)
- Review sidecar files (
.balloonify.json) - Screenshots taken by the built-in smoke tools
The extraction engine and the Excel writer have no upload path. There is no “send drawing to cloud” API.
What the license service sees
If you sign in, the license service receives:
- the account email you type
- a hashed device fingerprint and a display name
- activation / transfer / deactivation events
It does not receive drawing files, callout tables, or screenshots.
The fingerprint is a salted SHA-256 of an identifier the operating system owns — the platform UUID on macOS, MachineGuid on Windows, the systemd machine id on Linux. The raw identifier never leaves the machine, and the hash is not reversible into it. If none can be read (a locked-down registry, a container with no machine id), the app falls back to a random identifier it stores in your own settings.
Offline use
A signed receipt keeps a licensed seat working for 14 days without contacting the service. After that the app needs a network check to renew the receipt. A device with a connection renews it daily, so the limit is only reached by a machine kept offline. The seat can be moved to another device once every 30 days. Drawings still never leave the machine.
Windows / macOS trust
- macOS: signed/notarized builds when Apple credentials are configured
- Windows: the installer is the recommended download; unsigned builds are labelled
-unsigneduntil Authenticode is configured - See windows-installer.md
Refunds
30-day refund if you remove the software. Details: EULA.md and purchase.md.