Privacy Policy

1. What stays on your Mac

• Your clipboard history, file tray contents, notes, screenshots, automation rules, and system statistics are stored locally. They are not sent to Apertura's services unless you invoke an AI workflow that includes them.
• Screen content is processed when you invoke an AI screen workflow or ask the AI agent a question for which it automatically uses the read-only screen tool. With on-device AI enabled, prompts and tool results remain on your Mac.
• The website sets no advertising or analytics cookies. Your language preference is stored locally in your browser.

2. What we collect

When you activate or use a license, the app sends our license service:

• your license key,
• a one-way hashed device fingerprint (we cannot reverse it into your hardware identifiers),
• a device label (e.g. "MacBook Pro"), the app version, and the macOS version.

The app periodically re-confirms your entitlement (heartbeat) using the same data. When its update channel is available, a release build also fetches the release feed and may download and automatically install updates — including immediate security fixes — as described in the Terms of Use §4. Update checks transmit the app version being run. The download page identifies the status of the currently offered build.

3. Other feature network requests

• When Weather is enabled, Apertura requests forecasts and air-quality data from Open-Meteo. If macOS location is unavailable, it first requests approximate location from ipapi.co. These services receive ordinary connection metadata and the location/query parameters needed for the forecast.
• When the System Stats network panel runs, Apertura requests your public IP from api.ipify.org and refreshes it periodically. The service necessarily sees the requesting public IP.
• When currency rates are missing or stale, the converter downloads a rates table from open.er-api.com.
• AI web search and fetch tools contact DuckDuckGo and the public pages requested by the tool only when that tool is invoked. Those sites receive ordinary connection metadata and the submitted search query or URL.
• If you configure Guardian alerts, Apertura sends the alert reason, time, whether a photo exists, and the Mac's device name to your chosen webhook or private ntfy topic. It does not upload the photo itself.
• Fleet monitoring opens SSH connections only to machines you configure. Fleet credentials and collected metrics remain stored locally.

4. AI requests

When you use AI features in the backend-routed mode, the text you submit and any results gathered for that request — which may include clipboard text, screen text, system status, calendar events, or current context — are sent over an authenticated, encrypted connection to our backend to generate your response. Read-only tools may run automatically in response to an AI request; actions that change your Mac require approval. This content is not sold, used for advertising, or used to build profiles about you.

With on-device mode enabled, prompts and tool results are processed locally. The first use downloads the selected model weights from Hugging Face; Hugging Face receives ordinary connection metadata for that download, but not your prompts.

5. Payments

Purchases are handled by our merchant of record. We never see or store your card details; we receive order metadata (order id, tier purchased, and the license key to unlock) necessary to activate your purchase.

6. Data retention and security

License records are retained for as long as your license is active, plus the period required for accounting and fraud prevention. For backend-routed AI requests, our usage log records the device fingerprint, license identifier, model, tier, prompt-token count, completion-token count, and timestamp. The current service has no automatic deletion period for these usage records; you may request deletion as described below. All traffic between the app and our services is encrypted in transit, and entitlements are cryptographically signed.

7. Your rights

You may request a copy or deletion of the license data associated with your key at any time by contacting us. Deleting license data deactivates the license.

8. Children

Apertura is not directed at children under 13 and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time; the "Last updated" date above reflects the current version. Material changes will be announced on this page.

10. Contact

Planned contact for privacy questions and requests: support@notch-os.com. Mailbox delivery has not yet been verified; sales remain closed until this channel is operational.