Draft: this text has not been reviewed yet and is not legally binding. The owner must approve the legal content before launch.
Privacy policy
1. What we collect
At purchase: your e-mail address, optional name, the order, its amount and status, your country (from your IP address or from Paddle), and the payment references: the Paddle transaction id with the amount and currency Paddle charged, or the description and reference of the bank transfer.
When you ask for a refund of a bank transfer order: the account you send us to receive it (bank, account number, account holder).
When the app starts a trial, activates or refreshes a license: a machine pseudonym (machineHash), the name you give the Mac, the app and macOS versions, and the IP address of the request. The account pages and the admin also log the IP address of sign-ins and changes.
2. The machine pseudonym (machineHash)
machineHash is a one-way hash of your Mac's hardware identifier, computed on your Mac with a fixed salt. We never receive the identifier itself and cannot turn the hash back into it. It is still a pseudonym: the same Mac always produces the same value, so we treat it as personal data.
We use it only to count the Macs a license is active on, to give each Mac one trial, and to stop abuse of the activation limit.
3. Why
To deliver and verify your license, prevent abuse, handle refunds and disputes, and meet tax and accounting duties. We do not sell data and never give your e-mail address, name or license key to advertisers. The website sets the cookies needed to sign in; analytics and advertising cookies only with your consent (see Analytics and advertising on the website).
4. How long we keep it
Orders, payments and invoices (refund details included): 10 years, as accounting law requires.
Licenses and the Macs activated with them (machineHash, name, versions, last seen): as long as the license exists. A Mac you deactivate stays in the history of the license.
Trial records (machineHash and dates): as long as the service runs, so that a Mac cannot restart its trial.
Bug reports and crash reports: 90 days after we receive them, then they are deleted automatically.
IP addresses in security logs: up to 12 months. Sign-in links expire after 15 minutes.
5. Who processes it
Paddle.com (orders paid through Paddle): as Merchant of Record, Paddle collects in its checkout your e-mail address, country and payment details such as card data, and processes them as an independent data controller under Paddle's privacy policy (paddle.com/legal/privacy). Card data stays with Paddle; we never receive or store it. We send Paddle the address you entered at checkout and the order number, and receive the status, amount and country of the transaction.
SEPay (bank transfer confirmation), our e-mail provider (license and sign-in e-mails) and our hosting provider.
6. Analytics and advertising on the website
Only if you consent in the cookie banner, the public pages use Google Tag Manager to run Google Analytics, Google Ads, Meta Pixel, Microsoft Clarity and TikTok Pixel. These tools receive information about page views and how you use the page (Microsoft Clarity records mouse movements, taps and scrolling), your IP address and browser details, and may set cookies. On the thank-you page after a purchase they receive the order id, amount, currency and plan, never your e-mail address, name or license key. Google, Meta, Microsoft and TikTok process this data under their own privacy policies.
Until you answer, or after you reject, Google Tag Manager still loads but the tools set no cookies; Google's tags may send cookieless signals. The account pages and the two payment pages do not load these tools. The list of cookies and how to change your choice: Cookie policy.
7. Data inside the app
The app processes what it shows on your Mac itself: the track that is playing, volume, brightness, battery and Bluetooth devices. None of this is sent to us.
When the track that is playing has no artwork, the app may send the artist and album names to Apple's iTunes search service to find the artwork. You can turn this off in the app's Settings (Look up artwork online).
Weather (off by default, runs only if you turn it on and allow Location): the app sends coordinates rounded to about 1 km to MET Norway (api.met.no), at most every 30 minutes or after you move more than 5 km. Weather data from MET Norway.
When to leave (off by default): for upcoming calendar events with a place, the app sends your rounded starting point and the event's location to Apple Maps to estimate travel time. Calendar contents, Focus state and the audio used for the waveform never leave your Mac.
8. Bug reports and crash reports
The app sends a bug report only when you click Send in its bug report window. After the app crashes, it asks you before it sends the crash report; it sends one on its own only if you turned on the option to always send crash reports (off by default). Before anything is sent, you can see exactly what will be sent.
A report contains the description you write, your e-mail address if you leave one, the app and macOS versions, your Mac model, its chip type and the system language. If you choose, it also contains the app's diagnostic log, the app's settings, and the crash report macOS created (an .ips file). Paths that contain your account name on the Mac are replaced with ~ before sending.
A report contains no license key and no machine pseudonym (machineHash), and it is not linked to your license. To group the reports of one installation, the app sends a random installation id; it is not derived from your hardware and is gone when you delete the app. The server does not store the IP address with a report; the address is used only briefly, to limit how often reports can be sent.
Reports are stored on our license server, are not passed to a third-party bug-reporting service, and are deleted automatically after 90 days. To have one deleted sooner, write to [email protected] with the report id the app shows after sending.
9. Your rights
You can ask for a copy of your data, its correction or its deletion, except where we must keep records by law. For the data Paddle holds about an order paid through Paddle, ask Paddle directly or ask us. Contact: [email protected].