Your data, with care.

Mac Utility operates Mac Utility Kit from Wayanad, Kerala, India. Contact [email protected]. The full postal business address and final commercial policy details are being confirmed before paid launch.

Firebase Authentication processes your email, account identifier, sign-in provider, verification state and profile name/photo where your sign-in provider supplies them. Password authentication is handled by Firebase; the store does not keep readable passwords.

When you use billing or coupons, we keep your account ID, name/email, chosen app, billing country, subscription and access dates, payment references, invoice/refund/dispute records and coupon redemption history. API keys are shown once; the store keeps hashes and status, not recoverable full keys.

Lark Mail processes support messages, your email address and attachments so we can answer you. Only send information relevant to your request.

We keep operational records to run the service, investigate failures and misuse, reconcile payments and resolve support requests. Audit entries include the action, time, actor/account ID and role, app, provider and affected record ID. They cover billing changes, key creation/revocation, coupons and background-job outcomes.

Health checks and the billing worker record service availability, job status and heartbeat/error information. Cloudflare, our VPS host, Firebase and mail providers may process connection/security information such as IP addresses, browser details and request timestamps. Authorized administrators can inspect account, payment and audit records. This is operational monitoring; it does not mean someone watches every action or that we guarantee to detect every incident.

This storefront does not receive your photo library or a feed of processes running on your Mac. Image Manager's advertised AI analysis runs on your Mac. Harbor connects to accounts or services you choose; those services process the information you send to them. App activation sends the app identifier and API key over HTTPS to validate access.

Firebase uses browser storage for authentication, and the site stores your selected billing country. The local simulator also stores its test session. The current storefront has no integrated advertising tracker or session-replay SDK. We do not use support messages or storefront account records to train an AI model.

The website loads fonts from Google Fonts, which receives a browser request including connection information. Cloudflare provides DNS, routing and security; our VPS runs the website; Google Firebase provides authentication and database storage; Lark provides support email. GitHub hosts source/CI and will serve public installer releases. Following a release link also sends a request to GitHub.

When payments open, Razorpay will handle India checkout and Dodo Payments supported international checkout. Their hosted flows handle card or mandate details; this store does not store full card numbers. Providers may process data in other countries under their own terms and applicable safeguards. The Firestore database is configured in London; that does not mean all authentication, routing, support or provider data stays in that region. Final transfer and merchant details must be confirmed before commercial launch.

We use account and billing information to provide access and perform the service you request; operational/security records to maintain reliability and prevent abuse; support correspondence to answer you; and required financial records to meet applicable legal obligations. Where consent is legally required, it must be obtained for that processing and can be withdrawn without changing the lawfulness of earlier processing.

We retain records while needed for the account, support, financial/legal obligations or a dispute. Revoking a key or cancelling/archiving a subscription does not erase invoices or audit history. There is currently no automatic purge schedule for account, audit and support records; requests are reviewed manually, and category-specific retention periods are a remaining launch requirement. Provider logs, mail and backups can have separate retention rules.

We restrict administrative access and protect service credentials. No online service or transmission can be guaranteed completely secure.

Email [email protected] to request access, correction, deletion, or other privacy rights available where you live. We may verify ownership and retain information required for financial, security or legal reasons; we will explain applicable limits. You may contact the relevant privacy authority where that right applies. Deleting information and cancelling renewal are separate requests.

We will update this notice when processing changes and provide additional notice where required. The current service is in testing; merchant identity, full postal address, retention and applicable transfer requirements remain subject to final confirmation.