Privacy Policy
Last updated: August 13, 2026 · 简体中文
Overview
Glyphfold is a macOS folder customization application. This policy explains what data we collect, why we collect it, and how it is handled.
What We Collect
Information You Provide
- Email address — when you verify your account, restore Pro access, or initiate a one-time purchase. Stored to identify your account and entitlements.
- Invitation redemption — when you redeem an invitation code, we store the invitation record ID as an entitlement source. The plaintext invitation code is not stored.
- Folder paths — the folders you choose to customize are processed locally on your machine and never transmitted to our servers.
Information Collected Automatically
- Device information — a randomly generated device ID and your Mac's display name are used for session authentication and device management. The device ID is stored in macOS Keychain; the server stores only an HMAC hash.
- Session credential — a random credential keeps you signed in. It is stored in macOS Keychain; the server stores only an HMAC hash.
- Downloaded icon cache — previously downloaded professional icon files may be retained for offline use. They are encrypted with a per-device key stored in macOS Keychain and can be cleared from the account panel.
- Analytics events — aggregate product interactions such as app opens, searches performed, icon selections, asset downloads, successful icon applications, and checkout starts. We do not store the text entered into search, account or device identifiers, IP addresses, or precise event timestamps in analytics.
- Purchase outcomes — aggregate purchase and refund counts are calculated from verified Paddle or App Store server records. Payment details are not copied into analytics.
How We Use Your Data
| Data | Purpose | Retention |
|---|
| Email | Pro entitlement verification | Until account deletion |
| Invitation redemption ID | Pro entitlement verification and abuse prevention | Until account deletion |
| Hashed device ID and device name | Session authentication and device management | Verified sessions normally 30 days and renewed while active; anonymous sessions normally 24 hours |
| Hashed session credential | Session authentication | Until expiry, replacement, or device removal |
| Encrypted downloaded icon cache | Offline use of previously acquired material | Until cache clearing or account sign-out |
| Aggregate analytics | Product improvement and conversion measurement | Daily counts for up to 90 days |
Third-Party Services
- Paddle — processes payments for the direct-download edition. We include your account email in checkout metadata to associate the completed purchase with your Glyphfold account.
- Apple — processes App Store purchases. Glyphfold verifies signed transaction and server-notification data to grant, restore, revoke, or refund App Store entitlements.
- OpenAI — optional. If configured, icon titles may be sent to OpenAI for tag suggestions. No user data is shared.
Your Rights
- Access — request a copy of your data
- Correction — update your email or account info
- Deletion — request permanent removal of your data
Contact
Use the Glyphfold Support Center and choose “Privacy or data request” to exercise a privacy right. The public service routes the request to its configured support inbox. The operator's legal name and postal address must still be added before public commercial launch. Until then, this page is a product-compliance draft and must not be represented as lawyer-approved final policy.