Privacy policy

What we collect, and what we never see.

Last updated [date of publication].

Draft for review. Plain-language draft written for the founder to check, complete and have reviewed before launch. Text in square brackets is still to be filled in.

Who is responsible

REPLACE, REPLACE. Contact: REPLACE.

When you buy

Dodo Payments runs the checkout as our merchant of record. They collect your payment details and billing address under their own privacy policy; we never see your card number. From each order we keep your email address, the payment reference, the amount, the currency and which licence key you received, so we can deliver the key, answer support requests and handle refunds.

If email is set up, we send your key through Resend, our email provider, which processes your address to deliver it.

When you activate

Crowny sends our licence server your key and a one-way hash of your Mac’s hardware ID. We store that hash to keep the key on one Mac. The hardware ID itself never leaves your Mac. The server also keeps a short log of activation attempts, with hashed IP addresses, to stop abuse.

Inside the app

Crowny is local-first. Your tasks, notes, agent sessions, usage and dictated audio stay on your Mac. API keys and tokens are kept in an encrypted vault protected by the macOS keychain. We run no analytics or tracking in the app, and it sends no crash reports.

When you connect a service, Crowny talks to it directly from your Mac with your own account: Anthropic (the text of voice requests and mail you choose to triage), Google (Gmail and Calendar), GitHub, YouTube and your Home Assistant hub. Their privacy policies apply to that data. None of it passes through us.

This website

The site sets no advertising or analytics cookies. Our host, Vercel, keeps standard server logs (such as IP address and pages requested) for security and operations.

We use Vercel Web Analytics and Speed Insights to count visits and measure how fast pages load. They set no cookies and do not follow you across sites; they record the page, the referring site, your browser, device type and country, and page-speed measurements. The address of the page shown after a purchase is recorded without its payment details.

If you join the early-access list, we store your email address, where you signed up, any code you arrived with, and the note and price you chose to add. We use it to email you once, when Crowny launches, and to read your feedback. It is never sold or shared. Ask us and we delete it.

To keep bots off our forms we may use Cloudflare Turnstile, which checks your browser without a puzzle. Cloudflare processes technical signals from your browser for that check only. Our rate limits keep only one-way hashes of IP addresses, for two days.

How long we keep it

Order and licence records are kept for as long as your licence exists, and as long as tax and accounting law requires after that. [Founder to confirm retention periods.]

Your rights

You can ask to see, correct or delete the personal data we hold about you, and object to how we use it. Write to REPLACE. Some records we must keep by law. You can also complain to your local data protection authority.