Privacy Policy
Effective Date: September 27, 2026
1. Overview & Privacy Principles
Klarytea (“we”, “our”, or “us”) builds desktop software engineered with a local-first architecture. We believe software should process your data on your device rather than our servers whenever possible. This Privacy Policy details the exact identifiers, analytics, and billing records processed when using our macOS application and associated sync infrastructure.
2. Information We Collect
Hardware & Device Identifiers
To prevent unauthorized key sharing, preserve free credit quotas, and bind lifetime licenses to individual workstations, the app queries your device's unique hardware identifier (IOPlatformUUID) or an isolated Keychain fallback identifier. This string is salted/hashed and used strictly for metering and device authorization.
License & Transaction Data
When you purchase a Pro subscription or Lifetime License, our merchant of record (Polar.sh) processes payment information. We do not store or transmit raw credit card details on our infrastructure. We retain only your customer email address, plan tier (free, monthly, or lifetime), order reference ID, and generated license key.
Quota & Ledger Records
For free-tier accounts, our edge worker maintains an audit ledger (mac_credit_ledger) recording monthly query balances, reset cycles, and consumption deductions. For unlimited accounts, query usage metrics are counted locally on your disk via standard app preferences and are not reported to our servers.
3. Local-First Processing Guarantee
Your workflow contents, documents, generated text, script transcripts, and clipboard items processed inside Klarytea remain entirely on your local machine. We do not inspect, log, train machine learning models on, or transmit your working files across our network.
4. Third-Party Services
We partner with trusted service providers to run secure identity and billing operations:
- Polar.sh: Acts as our merchant of record for payment transactions, subscription lifecycle events, and cryptographic license generation.
- Cloudflare Workers & D1: Provides edge API proxying, encrypted ledger verification, and serverless authentication without third-party tracking cookies.
5. Data Retention & Revocation
Hardware binding records and license rows remain in our encrypted D1 database for the active lifetime of your license. If an order is refunded, cancelled, or revoked, our worker automatically decouples your hardware identifier and returns the account tier to default base access.
6. Your Rights & Data Deletion
You have the right to request deletion of your purchase email and associated device binding IDs from our license registry at any time. Because working files are never retained in our cloud, deleting your database record permanently wipes all metadata linking your hardware to our backend.
7. Contact Us
If you have any questions or data requests regarding this policy, please reach out directly:
Email: support@klarytea.com