Data handling

Licence requests

Activation sends a licence key, random install ID and app version to the licence service. Refresh sends a signed entitlement token. Deactivation sends the signed token and install ID. These requests do not include session transcripts, ledger content or Claude credentials.

Service providers

Paddle handles payments as merchant of record. Cloudflare hosts the licence service. Resend sends your licence email from ramulus@mail.altimany.com.

Licence data

The licence service stores Paddle customer, subscription and transaction IDs and licence/subscription status, a hashed licence key, hashed installation identifiers, and activation, last-seen and revocation timestamps. It also keeps webhook event identifiers and delivery status to handle repeated notifications.

The buyer email is obtained from Paddle to send the key through Resend. It is used transiently for delivery rather than stored in the licence database. In the Worker, a hashed form of the IP address is used only for rate-limit keys, not stored as a licence field.

Usage sharing and remote views

App telemetry is off by default and is sent only when you enable usage sharing. In this version the Settings switch for it is unavailable. Its accepted fields are appVersion, osVersion, telemetryId, managedSessions, features and errors. See telemetry for their meanings and permitted values. Optional remote phone views carry the requested content to your device; that content is separate from licence and telemetry requests.

For questions, email kit@altimany.com. See the privacy policy.