Privacy policy

The apps

Our apps store their data locally, in the container macOS gives them on your own machine. None of them has an account, a login or a sync service, and none of them sends what it records to us or to anybody else.

We therefore hold no personal data from the apps at all. There is nothing for us to export, correct or delete on your behalf, because there is nothing here. Deleting the app and its data from your Mac removes everything.

Tracktiv

Tracktiv is not built with the network permission macOS requires, so the system would refuse to let it reach the internet even if it tried. It records which application is in front of you and for how long, and the activities you track. It stores that on your Mac in order to draw your day. It does not read the contents of any document, and it does not use the Accessibility permission that would let it see what you type.

Triggers need one more permission: Screen Recording. macOS asks for it before any app may read the titles of other apps' windows. Tracktiv asks for it when you set up triggers, and uses it only to check window titles against the triggers you wrote. A title stays in memory only while it is needed, and it is never written to disk. You can take the permission back at any time in System Settings, under Privacy & Security.

A trigger can also read a title bar as pixels. Tracktiv then takes a picture of the window, keeps only a strip at the top, about the height of a title bar, and reads the text in it. This happens on your Mac, and neither the picture nor the text is kept.

AssetScout

AssetScout reads the folders you point it at, and remembers which folders those were — in a security-scoped bookmark — so it can open them again after a restart. It reads the metadata stored in your files: the date a photograph was taken, the camera, the location if the file carries one. That reading happens on your Mac and the result stays there.

The map in the inspector comes from Apple Maps. To draw it, macOS downloads the map of the area shown from Apple, so Apple sees which area was requested. AssetScout does not send the file or its name, and nothing of it reaches us.

Purchases

Where an app of ours, or an upgrade inside it, is sold, it is sold through the Mac App Store. Apple handles the payment and the receipt. We never see your card details, your address or your Apple Account. What we do see is Apple's own sales reporting: how many copies sold, in which country, on which day. It names nobody.

Crash reports and the beta

Apple can pass two more things on to us. Neither of them comes from our apps directly.

• Crash reports. If you allowed your Mac to share analytics with app developers, Apple sends us the report when one of our apps crashes. A report shows where in our code the crash happened, with your Mac model and macOS version. It does not name you. You can turn this off in System Settings, under Privacy & Security, then Analytics & Improvements.
• TestFlight. If you test a beta, TestFlight shows us the feedback and screenshots you send, crash reports from the beta, and how often you installed and opened it. If we invited you by email, it also shows the name and email address the invitation went to. We use all of this only to fix the app.

This website

devnest.sk is a set of static files. It sets no cookies and runs no analytics. The fonts, the images and the scripts are all served from devnest.sk itself, so the page loads nothing from anybody else. The appearance you choose with the sun and moon button is kept in your browser's local storage and never leaves it.

One third party sees your visit, because it delivers the page to you. Cloudflare serves the site, so like any web host it sees your IP address and your browser. Cloudflare is based in the United States, so this may be processed there. It is certified under the EU–US Data Privacy Framework, which the European Commission accepts as adequate protection for personal data.

Email

When you write to support@devnest.sk we keep your message for as long as it is useful — long enough to answer you, and to recognise the same bug when somebody else reports it. We do not add you to any mailing list, and there is none to add you to.

The legal basis

The GDPR requires every use of personal data to rest on a legal ground. Ours is our legitimate interest (Article 6(1)(f)) in each of these:

• delivering this website to you, through Cloudflare;
• answering your email, and remembering a bug once it has been reported;
• fixing the apps with crash reports and beta feedback.

We make no automated decisions about you, and we build no profile of anybody.

Your rights

Most people have no personal data with us at all. The little we can hold is:

• your email, if you have written to us;
• your name, email address and feedback, if you tested a beta of ours.

For that data, the GDPR gives you the right to ask us to:

• tell you what we hold about you, and give you a copy;
• correct it, or erase it;
• limit what we do with it, for example while you dispute it;
• give it to you in a machine-readable form, so you can take it elsewhere.

You may also object to any of the uses above, because each one rests on our legitimate interest. We then stop, unless the law gives us a strong reason to go on.

Write to contact@devnest.sk and we will answer within one month. If we hold nothing about you, that will be the answer.

If you think we handle your data wrongly, you can complain to the Slovak data protection authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. You can also complain in the EU country where you live.

Who we are

The controller of the data described here is DevNest s. r. o., Spojovacia 1007/5, 930 05 Gabčíkovo, Slovakia, IČO 55 697 020. Write to contact@devnest.sk with any question about privacy. The full company details are on the company page.

Changes

If this policy changes, the date at the top changes with it.