Privacy policy
Last updated: June 2026
Recoly is a macOS app sold outside the App Store, and it is built to collect as little as possible. This policy explains exactly what we store, what we never touch, and how to ask us to delete your data.
Data we collect
We store the email address tied to your purchase, your license key, and a record of which Macs the license is activated on. That is what we need to deliver your license, enforce per-Mac limits, and help you with support. We do not ask for your name, address, or any profile beyond your email.
Data we never collect
Recoly does not read your files, your screen, your clipboard, your keystrokes, or the contents of any workload you run. It does not upload your documents or projects anywhere. It does not send us your raw machine identifier. The app does its job locally on your Mac.
Payments
Payments are processed by Polar, our merchant of record. Your card details go directly to Polar and their payment processors. We never see or store your full card number. We receive only the purchase email and order confirmation needed to issue your license.
Email, license, and account portal
Your email is used to send your license, deliver receipts, and let you sign in to the account portal by a one-time link. We do not sell or rent your email, and we do not add you to marketing lists without your consent.
Machine fingerprint hash
To enforce per-Mac limits we store a one-way hash derived from a machine identifier, never the raw identifier itself. The hash cannot be reversed back into your hardware details. It exists only to count how many Macs a license runs on.
Privacy-first analytics
Any website analytics we use are cookieless and aggregate, and they are off by default. We do not use ad networks, cross-site trackers, or fingerprinting for advertising. We never sell data.
Anonymous usage statistics and update checks
When anonymous statistics are on (you can turn this off any time in the app), Recoly may send a random install ID, the app version, your free or Pro tier, your macOS version, the processor architecture, and a country inferred by our server. It never sends your name, email, machine serial or name, files, prompts, project names, or source code. We use this only to count active installs, understand which versions are in use, and catch update problems. If you turn statistics off, Recoly still checks for a new version about once a day by sending only the current app version — no install ID or tier — and the install is not counted.
Logs and server security
Our servers keep short-lived operational logs (for example, activation requests and errors) to keep the service running and to prevent abuse. Access is limited, traffic is encrypted in transit, and logs are rotated and not used to profile you. When someone downloads Recoly via recoly.app, we log: timestamp, file requested, IP address (stored as a one-way hash; raw IP visible to founders/support for abuse investigation), browser name, OS type, Cloudflare Ray ID, referral source, and whether the request was flagged as a bot or abuse. These download logs are retained for 180 days, then permanently deleted.
Data retention
We keep your purchase email and license records for as long as your license is active, plus the period required for tax and accounting. Operational logs are kept only for a short window and then discarded. Download logs are retained for 180 days, then permanently deleted.
Data deletion requests
You can ask us to delete your personal data at any time by emailing [email protected] from your purchase address. We will remove your account and email from our systems, subject to records we must keep by law. Deleting your data may end your ability to re-download or transfer the license.
International users
Recoly is available worldwide. Wherever you are, the principles above apply: minimal collection, no selling of data, and a clear deletion path. If your local law gives you specific rights over your data, email us and we will honor them.
Children
Recoly is a tool for developers and professionals and is not directed at children. We do not knowingly collect data from anyone under the age required by their local law.
Questions about privacy, or want your data deleted? Email [email protected].