Privacy policy

Who we are#

Hushtop is made by Farhan, an individual based in Jakarta, Indonesia, who is responsible for the data described here. Questions about privacy: [email protected].

What Hushtop sends to our server#

Hushtop talks to our license server only to manage your trial, your license and updates. It sends:

• An anonymous Mac ID, with the date your trial started, so reinstalling doesn’t restart the trial. The ID is a SHA-256 hash of your Mac’s hardware UUID combined with a fixed app value. It can’t be turned back into the UUID, and your hardware UUID and serial number never leave your Mac.
• Your license key and the Mac ID, when you activate a Mac.
• The license token our server gave your Mac, when Hushtop refreshes your license (each time it starts and once a day) or when you deactivate a Mac.
• An update check, about once a day. It carries your license token, or the Mac ID during a trial, so we only offer updates your copy can get. Like any update check, it includes your Hushtop version.

That’s all. Hushtop doesn’t send usage data, analytics, what’s on your screen, your music, your files, your messages or your notifications.

Features that use the internet#

A few features need a service on the internet. Your Mac talks to these services directly. We don’t see these requests, and nothing is sent until you use the feature.

What stays on your Mac#

Media, Calendar, Reminders, Contacts, Files, Clipboard, Messages, the camera mirror, microphone levels and the pet’s speech recognition all work on your Mac only. AI usage for Claude Code and Codex is read on your Mac, from what those tools already save there. Hushtop never records or saves sound.

What we store#

On our license server:

• Your license: a hash of the key to look it up, an encrypted copy of the key so we can show it after purchase and email it again when you ask, a hash of your purchase email, the Paddle order number, whether the license is active or refunded, and whether the license email was delivered.
• Which Mac ID your license is active on, when it was activated and when it last checked in.
• For the trial: the Mac ID and the date the trial started.
• The date of each deactivation, to limit them to 5 in 30 days.
• Short-lived rate-limit entries: a hash of your IP address or email and the time.
• Feedback you send from the website, described below.
• Standard request logs kept by our hosting provider, Cloudflare (IP address, time, request path), for security and rate limiting.

This website#

This website has no analytics and sets no cookies of its own. It runs on our own server behind Cloudflare, which sees your IP address and the pages you request so it can deliver and protect the site. The cookie policy lists what’s stored in your browser.

• Feedback. When you send feedback, we store your message, its type, the app version if you add it, and your email if you give one for a reply, on our server (Cloudflare D1), so we can answer it. It’s also emailed to us. We only use your email to reply.
• Get updates. If you sign up for updates, we store your email, the two optional answers (which Mac, what you’d use it for), the link you came from and the time, on our website server.
• Restoring a purchase. The email you enter is hashed and compared with the hashes we store. If it matches, we email the key to the purchase address again.

Payments#

Paddle.com is our Merchant of Record. When you buy Hushtop, Paddle collects and processes your name, email, billing address and payment details under Paddle’s privacy policy. We never see your card details. Paddle sends us your email and order details so we can send your license key and help you.

Email#

We send your license key from [email protected] through Resend, our email provider, with no tracking. Replies go to [email protected]. We use your purchase email only for your license and to help you. We don’t send marketing email unless you sign up for updates.

Who else handles data#

Paddle, Cloudflare and Resend handle data for us. The subprocessors page lists what each one does and where.

Reports you send from the app#

You can send feedback, or a crash or error report, from Hushtop (Settings, or the prompt after a crash). A report leaves your Mac only when you click Send, after you see exactly what’s in it. Nothing is sent on its own, and developer builds can’t send at all.

Every report contains:

• what you write, and your email if you add one for a reply
• the Hushtop version and your anonymous Mac ID
• for a crash: a short signature of the crash

If you leave “Include diagnostics” on, it also contains, all shown in the preview first:

• the Hushtop version, build and environment, your macOS version and your Mac’s model identifier (for example Mac15,3)
• which Hushtop tools are switched on
• Hushtop’s own error and fault log entries from the last 24 hours (up to 200 lines)
• for a crash: the crash report macOS wrote for Hushtop

Diagnostics are redacted before you see them: your user folder name and any email addresses are taken out. We store the report on our server (Cloudflare D1) and it’s emailed to us, so we can answer and fix the problem.

How long we keep it#

• Feedback: deleted after 1 year.
• Reports from the app: diagnostics deleted after 90 days, the rest of the report after 1 year.
• License, activation and email records: as long as the license exists, or until you ask us to delete them. Paddle, our Merchant of Record, keeps the purchase and tax records under its own policy.
• Trial records: kept so that reinstalling doesn’t restart the trial, until you ask us to delete them.
• Rate-limit entries: they count for an hour at most, then they’re cleared out.
• Get updates sign-ups: until you ask us to remove you.
• License server logs: kept by Cloudflare for up to 7 days. They never contain license keys or email addresses.

Your choices and rights#

You can turn off any feature in the table above in Hushtop’s Settings. Settings › Privacy › Your data shows what Hushtop sends. To see the data we hold about you, correct it or delete it, write to [email protected]. Deleting license data deactivates the license. Paddle handles requests about payment data, and we’ll pass them on if you write to us.

Depending on where you live, laws such as Indonesia’s Personal Data Protection Law, the GDPR in the EU and UK, or the CCPA in California give you these rights, and you can complain to your local data protection authority. Write to us first and we’ll do our best to help.

Children#

Hushtop isn’t directed at children under 16.

Changes to this policy#

If what Hushtop sends ever changes, we’ll update this page before the app version that changes it ships.

Contact#

[email protected]. Farhan, Jakarta, Indonesia.