# Privacy policy

> Keep86 collects as little as it can. The website uses no tracking and no advertising cookies. The app sends only what its licence needs — a licence ID, a device key, a hashed hardware ID, an optional device name and the app version. Your apps and documents never leave your Mac.

## 1. Who is responsible

The controller for your personal data is [LEGAL ENTITY], [LEGAL ADDRESS] (“we”). Contact for privacy questions: the contact form on this website (topic “Privacy and my data”) or hello@keep86.com.

## 2. Visiting keep86.com

- **Server logs.** For each request, our web server records the IP address, date and time, requested address, referrer and browser type, to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Logs are kept for [LOG RETENTION] and then deleted.
- **No tracking.** We use no analytics, no advertising, no social media plugins and no fonts or scripts from third-party servers.
- **Cookies.** Public pages set no cookies. Your account area and checkout use one essential session cookie; see the cookie policy.

## 3. Launch list (“Get notified”)

We store your email address, the language you chose, the consent text you agreed to with its date, and a keyed hash of your IP address (to stop abuse), to send you emails about the Keep86 launch. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link in every email. Addresses that are never confirmed are deleted after 30 days. After you unsubscribe we keep only your address and the opt-out date, so we don’t email you again (Art. 6(1)(f) GDPR).

## 4. Contact form

We use your name (optional), email address and message to answer you. Legal basis: steps taken at your request (Art. 6(1)(b) GDPR) or our legitimate interest in answering questions (Art. 6(1)(f) GDPR). Messages are deleted when the matter is closed, at the latest after 2 years.

## 5. Your account and licence

- **Account:** your email address, chosen language and sign-in codes (stored only as hashes, valid for 10 minutes).
- **Licence and devices:** licence ID, plan and status; for each activated Mac, a device public key, a hashed hardware ID (the raw hardware ID never leaves your Mac), an optional device name you choose, the app version and build, and the times of licence requests. IP addresses are used for rate limiting and fraud prevention and deleted after 30 days.
- **Free trial:** your email address, the device key and the hashed hardware ID, so that each Mac and each email address receives the trial only once.
- **Abuse checks:** for each licence request we derive the country from your IP address with the [IP geolocation database by DB-IP](https://db-ip.com) (licensed under CC BY 4.0) and keep only the country code; the IP address itself is stored only as a keyed hash. Signs of sharing (for example the same licence used from more than two countries within 7 days by different Macs) are flagged for review by a person.
- **New-Mac alerts and moves:** when your licence is activated on another Mac we email you and record the move (date, device IDs and hashed hardware IDs), so that a licence moves at most twice in 30 days.
- **Integrity signal:** the app may send a short number with its licence requests when it detects that it was modified or is being debugged. It contains nothing about you beyond your licence and device.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in preventing licence abuse (Art. 6(1)(f) GDPR). We keep account and licence data while your account exists and for up to [ACCOUNT RETENTION] after it ends, unless the law requires longer.

## 5a. Closed beta: applications and diagnostics

- **Controller for the beta:** [BETA CONTROLLER: name and address — Andrei until the company exists]. [LEGAL REVIEW: controller identity]
- **Applications:** your first name, email address, country, language, Mac model, chip, memory, free disk space, macOS version, the list of your Intel-only apps (name, identifier, version, architecture — from your own list or the scanner report; folder paths and your user name are removed before anything is stored, the uploaded file itself is not kept), how you use them, your technical level and your confirmations, plus the consent texts you agreed to with their date and a keyed hash of your IP address. We use them to choose testers. Legal basis: your request to take part (Art. 6(1)(b) GDPR). Unconfirmed applications are deleted after 30 days; applications that are not selected are deleted [BETA APPLICATION RETENTION] after the beta ends.
- **Diagnostics during the beta:** per kept app its name/identifier and version, whether it opened, drew its windows and accepted typing, your verdict from the in-app beta checklist (works / doesn’t work), crash signatures (no paths) and the time to the first window; per session the Mac model, chip, memory, macOS versions, frames per second, input delay, memory used, sleep/wake results and error codes; for the setup the step reached and how long it took. **Never:** file or folder names, document contents, screen contents, keystrokes or your user name. The app shows the exact data before it is sent. Legal basis: the beta agreement (Art. 6(1)(b) GDPR) — sending these diagnostics is part of taking part in the beta. In the application and again in the app you confirm that you know what is sent; we keep that acknowledgement with its date and version (it is not a consent under Art. 6(1)(a) GDPR). If you no longer want diagnostics to be sent, you leave the beta: as soon as you tell us (by email or through the contact form), we delete the diagnostics stored for your licence and Mac. You can also delete them yourself at any time — in your account (“Delete my diagnostics data”) or in the app (Settings › Diagnostics) — or ask us to. Otherwise they are stored with your licence and Mac for 12 months and then deleted automatically. [LEGAL REVIEW: Art. 6(1)(b) GDPR as the basis for beta diagnostics]
- **Problem reports:** what you write in Keep86 › Help › Report a problem and, if you choose to attach it, the diagnostics bundle you saw before sending. They are handled like emails to our support (section 4).
- **Published results:** only aggregated, anonymous results reach the compatibility database (for example “tested by beta users (n = 12, October 2026)”), after review by a person.

## 5b. Crash reports and anonymous usage statistics (Keep86 app)

- **What the app sends:** when Keep86 or one of its parts (the helper, the agent in the virtual Mac, Guest Tools) crashes or reports an error, and when you use certain features, the app sends an anonymous report to keep86.com: the Keep86 version; crash signatures (exception type, signal and a hash of the stack — no file paths); our own error codes and how often they occurred; named feature events such as “app kept” or “setup completed”, with counts; for each kept app its identifier and version and whether it opened and worked; the setup step reached and how long it took; and coarse context — macOS version, chip family (for example “M4”), memory size and the Keep86 protocol version.
- **Never:** your licence key or licence, your email address, your Mac’s serial number or other hardware identifiers, your user name, file or folder names, document or screen contents, or keystrokes. The reports are not linked to your account, licence or Mac. The only identifier is a random install number that the app creates itself and replaces at least every 30 days. We don’t store your IP address with the reports.
- **On by default, one switch to turn it off:** in Keep86’s settings, “Send crash reports and anonymous usage statistics”. When it is off, nothing more is sent; turning it on again starts with a new install number.
- **Why and legal basis:** to find and fix crashes and to learn which apps work — our legitimate interest in a working product (Art. 6(1)(f) GDPR). You can object at any time with the switch. The reports are kept for 180 days and then deleted automatically. Because they can’t be linked to you, we can’t pick out one person’s reports to show or delete them. [LEGAL REVIEW: Art. 6(1)(f) GDPR with an opt-out default; ePrivacy / § 25 TDDDG]

## 6. Payments

Payments are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., which acts as an independent controller under its own privacy statement. We receive your name, email address, country, PayPal payer and transaction identifiers and the payment status — never your card or bank details. We use them to provide your subscription and to issue invoices. Legal basis: contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR). Invoices and payment records are kept as long as tax and accounting law requires. [LEGAL REVIEW: retention period for the seller’s country]

## 7. Emails we send

Transactional emails (sign-in codes, trial codes, receipts, licence and payment notices) are sent from our own mail server. Launch emails are sent only to confirmed launch-list addresses. We don’t use tracking pixels or tracked links.

## 8. Processors and transfers

Our servers are hosted by Contabo GmbH in the European Union, as our processor. We don’t sell personal data and don’t share it with advertisers. PayPal may process data outside the EU under its own safeguards.

## 9. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent at any time. Write to us through the contact form. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live. [LEGAL REVIEW: name the lead supervisory authority]

## 10. Changes

We update this policy when our processing changes. The date below shows the last change.


---
Source: https://keep86.com/privacy