Privacy Policy

Draft for launch review · 2 August 2026

This is a product-ready policy draft, not legal advice. The business contact details must be completed before public launch.

What the Mac app reads

DiskTidy scans file-system metadata such as paths, file names, sizes, dates, file types, and access status. AI Tool Health also reads aggregate process resource use and system signals exposed by macOS, including available disk space, available memory, thermal state, and disk SMART status when available.

DiskTidy does not upload or display source code, prompt text, session content, configuration-file contents, or process command-line arguments.

Data that stays on your Mac

Scan results, selected folders, cleanup candidates, project reports, and scan history are processed locally. Secure folder bookmarks and preferences are stored by macOS for the app.

License and purchase data

Personal Pro activation sends the license key, a random installation identifier, and the Mac name you have configured to DiskTidy’s license service. The service stores a one-way hash of the license key, the installation identifier, activation timestamps, plan status, and the Paddle transaction identifier. This is used only to fulfill purchases, enforce the three-Mac limit, validate licenses, prevent abuse, and respond to refunds.

Payments are handled by Paddle as Merchant of Record. Paddle processes purchase, billing, tax, fraud-prevention, and receipt information under its own privacy notice.

Website and infrastructure

The website may receive ordinary server logs such as IP address, browser type, requested URL, and timestamp for security and reliability. DiskTidy does not add advertising trackers to the website. Paddle Checkout may set its own strictly necessary and payment-related cookies.

Retention and deletion

License and transaction records are retained while a license is active and as required for accounting, fraud prevention, refunds, and legal obligations. Deactivating a Mac removes its active device record. Purchase records may need to be retained after deactivation.

Contact

The public support email, phone number, legal business name, and address will be inserted here before the website accepts live payments.