Fortrolighedspolitik

Who we are

“OpenAppBox”, “we” and “us” refer to the publisher of the OpenAppBox apps and operator of openappbox.com. We are responsible for the limited personal data described in this policy. You can reach us at support@openappbox.com.

This policy covers our apps, this website, our public source code repositories and the messages you send us. It explains what we process, why, for how long, and the choices you have.

Our apps

OpenAppBox apps are designed to work locally. They don’t include analytics, telemetry, crash-reporting services, advertising frameworks or advertising identifiers. Files, settings, host lists and any other content you work with stay on your device and are never sent to us.

When an app connects to something on your behalf, such as Multiplex connecting to a server you set up, that connection goes directly from your device to that destination, never through OpenAppBox. If an app ever needs to send data off your device for a feature to work, we’ll explain it clearly in the app and in this policy before that feature ships. We don’t ask for an account unless a feature genuinely needs one, and we’ll update this policy before any such feature is released. Because our apps are open source, you can check their behavior in the code.

PureMac

• No network access. PureMac has no network code at all. It works entirely offline and never sends file names, your app list or anything else off your Mac. Subscriptions are handled by the App Store.
• What it reads. To map your storage, PureMac reads file and folder names, sizes and dates. It doesn’t read what’s inside your files, except to compare files when you look for duplicates, which happens on your Mac.
• What it keeps. Scan results and your cleanup history are stored on your Mac, inside PureMac’s own app storage, so you can see past cleanups and put items back. You can delete them at any time in PureMac’s Settings, under Privacy & Data, or by removing the app.
• Sandboxed. PureMac runs in Apple’s App Sandbox and can only read the folders you grant it access to. Full Disk Access is optional.
• Data Not Collected. PureMac’s App Store privacy label is “Data Not Collected”.

PathDiff

PathDiff has no network access. It runs in Apple’s App Sandbox and can only see the folders you choose to compare. To make later comparisons faster, it remembers comparison results on your Mac. Nothing is uploaded.

Multiplex

Multiplex connects only to the servers you add, including any jump hosts you set up between them. Passwords and key passphrases are stored only in your macOS Keychain, and your host list is encrypted on your Mac. Session logs, if you turn them on, stay on your Mac. We never receive your hosts, credentials or session content.

PathDiff and Multiplex are still in development. We’ll confirm their details here before each one is released.

Information Apple may share with us

If you’ve chosen in your Apple device settings to share analytics with app developers, Apple may provide us with crash reports and aggregated usage statistics through App Store Connect. Apple controls this sharing, and you can turn it off at any time in your device’s privacy settings. We use this information only to fix problems and improve the apps, and it doesn’t identify you to us.

Purchases and subscriptions

Subscriptions are purchased, renewed and managed through Apple’s App Store. Apple processes your payment and account information under its own privacy policy. We never receive your card details, and Apple’s sales reports to us don’t identify you by name. Inside our apps, Apple’s StoreKit tells the app whether a subscription is active, so it can unlock the right features. macOS checks this using the purchase record it keeps on your Mac, and the app doesn’t send any purchase information to us. If you share a subscription through Family Sharing, Apple manages that sharing; we don’t learn who your family members are.

Source code on GitHub

Our source code is published on GitHub. Browsing a repository, downloading code, or opening an issue or pull request happens on GitHub, under GitHub’s own privacy statement. Issues, comments and pull requests are public, so please don’t include personal information in them. To report a security problem privately, email us instead.

This website

openappbox.com doesn’t use analytics, advertising trackers, tracking pixels, session recording or fingerprinting, and it doesn’t set cookies to identify or follow you. Fonts and images are served from our own domain, so visiting the site doesn’t send requests to third-party services.

Preferences stored on your device

• Language. If you choose a language that differs from your browser’s, a first-party cookie named NEXT_LOCALE remembers that choice for up to one year, so we can show the right language on your next visit. It contains only a language code, such as tr.
• Theme. If you choose a light or dark theme, the choice is saved in your browser’s local storage. It’s never sent to us.

We pick a starting language from your browser’s standard language setting. We don’t use your IP address or location for this. You can clear both preferences at any time by clearing this site’s data in your browser.

Hosting and infrastructure

Like every website, ours runs on servers that receive standard technical information with each request, such as your IP address, browser type, the page requested and the time of the request. Our hosting provider, Hostinger, and its content delivery network process this information to deliver pages, keep the service secure and prevent abuse, and keep it in server logs for a limited time under their own policies. We don’t use these logs to build profiles of visitors.

When you contact us

When you email us, for example to report a bug, request a feature or suggest an app, we use your email address and message only to read, reply and follow up, and to improve our apps. Feature requests and app ideas may be discussed without identifying you. We keep conversations only as long as needed for that purpose and then delete them, unless we need to keep them longer to meet a legal obligation.

Why we process data (legal bases)

Where laws such as the EU and UK GDPR or Türkiye’s KVKK apply, we rely on these legal bases:

• Delivering and protecting the website (server logs): our legitimate interest in running a reliable, secure site.
• Remembering your language (the NEXT_LOCALE cookie): it is strictly necessary to provide the language you asked for.
• Answering your messages: taking the steps you asked for, and our legitimate interest in supporting our users and improving our apps.
• Meeting legal obligations, for example tax or consumer protection rules.

How long we keep data

• Server logs: kept by our hosting provider for a limited period, then deleted under its policies.
• Emails: kept only as long as needed to help you, then deleted.
• Data inside our apps: on your device only, under your control. Removing an app removes its data.

Where data is processed

Our hosting provider and email provider may process data in data centers outside your country. Where the law requires it, such transfers are protected by appropriate safeguards, such as the European Commission’s standard contractual clauses.

Security

We keep the data we process to a minimum, serve this website only over encrypted connections (HTTPS), and limit access to the few systems that hold it. Our apps keep secrets in the macOS Keychain and run in Apple’s App Sandbox where possible.

What we don’t do

• We don’t sell, rent or trade personal data.
• We don’t use personal data for advertising or build behavioral profiles.
• We don’t combine data from different sources to identify you.
• We don’t make decisions about you based solely on automated processing.

Your rights

Depending on where you live, laws such as the EU and UK GDPR, Türkiye’s KVKK or US state privacy laws give you the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, and receive a copy of it. Because we hold very little personal data, most requests can be handled simply: contact us at support@openappbox.com, and we’ll respond within the time required by law. For data processed by Apple, GitHub or Hostinger, you can also contact them directly.

If you believe we haven’t handled your data properly, please tell us first so we can put it right. You also have the right to complain to your local data protection authority, such as the Personal Data Protection Authority (KVKK) in Türkiye or the supervisory authority in your EU country.

Children

Our apps and website are not directed at children, and we don’t knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we’ll delete it.

Changes to this policy

If we change how we handle data, we’ll update this page and the date above. Significant changes will be explained clearly, not buried, and will be made before the change takes effect. Previous versions are available on request.

Questions? See Support or contact us at support@openappbox.com.