Privacy policy

Effective: April 26, 2026. Last updated: April 26, 2026.

What we collect

• Sign-in identity. We receive your email and a stable subject identifier from your OAuth provider (Apple, Google, Microsoft) or the email address you authenticate with via magic-link.
• Billing metadata. Paddle is the merchant of record. They handle payment details; we never see your card number. We receive transaction ID and tier purchased.
• Activation log.When you click “Activate on this Mac,” we record the envelope ID, tier, seat ID, timestamp, IP address, and user agent. Used for support reproducibility and abuse detection. Retained for 12 months.

What we do not collect

• Anything from inside the Loupe.app. The application has no network entitlement; the OS itself prevents it from talking to us.
• Logs, files, cases, narrator output, exports, or anything else you process with the application.
• Analytics, telemetry, crash reports, A/B-test cohorts, or behavioral tracking.

How we use what we collect

Email + identity exists so you can sign in to manage your licenses. Billing metadata exists to satisfy the legal record-keeping requirements that come with being a paid product. Activation logs exist so support can resolve your issue when something doesn't work.

We do not sell your data. We do not buy data about you. We do not enrich your profile from third parties.

Cookies

Essential cookies for sign-in only. No analytics cookies. No advertising cookies. No third-party cookies.

Data subject rights

Right to access, right to delete, right to portability. Email legal@useloupe.toolsand we'll fulfill within 30 days. Delete-your-account is the same operation regardless of jurisdiction (GDPR, CCPA, or otherwise).

Where data lives

Our database is hosted in the EU (Supabase). Email delivery is Resend. Application hosting is Vercel. Authentication providers are operated by Apple, Google, and Microsoft respectively.

Changes to this policy

We'll email registered users 30 days before any material change. The current version is always the one at this URL.