Privacy Policy

Last updated: August 20, 2026

The short version

Calliday's whole design is that your activity data never reaches us or anyone else. There are no accounts, no analytics, no telemetry, and no server of ours that ever holds your data. What little does cross the network exists only to sell you a license, deliver your key, and power the optional AI features you explicitly invoke — and it's all listed below.

The optional multi-Mac sync (licenses covering two or more Macs) moves your data only between your own Macs, through a folder in your cloud storage — iCloud Drive, Dropbox, or any folder you choose. Every file it writes there is encrypted with AES-256 under a key derived from your license key, which only your Macs hold: your storage provider carries ciphertext it cannot read, and Calliday's servers are never involved in any way. Sync is off by default; turning it on, and which folder it uses, is entirely your choice.

What the app records — and where it stays

Calliday records which app, window, website, and document you're using, into a database stored locally on your Mac. This data is never transmitted to us or anyone else — with multi-Mac sync enabled, encrypted copies move between your own Macs through your own storage, as described above, and that is the only movement there is. Privacy exclusions (Pro) let you keep chosen apps, sites, and private browsing out of the record entirely — excluded activity is never written down at all, and so never syncs anywhere either.

What does leave your Mac, and why

• Purchases — checkout is handled by Paddle, our merchant of record. Paddle collects your payment details and email under Paddle's privacy policy; we never see your card number. We receive your email address and an anonymous machine identifier (a random hardware fingerprint — it contains no personal information) to issue your license, and we keep that record for fulfillment and support.
• License email — your key is sent to your email address via our email provider.
• Trial & licence status — starting a trial sends only the anonymous machine identifier to calliday.app. A one-time licence never expires, so it has nothing to check for.
• Update checks — the app periodically fetches a version manifest. Like any web request this exposes an IP address; no identifier or usage data is attached.
• AI features, only when you invoke them — asking for a summary or rule suggestions sends aggregated activity facts (app names, site domains, window titles with durations — never raw logs, never excluded activity) to the provider you configured, using your own key. It never passes through calliday.app: we sell no AI and stand in the middle of nothing. Choose Apple Intelligence on your Mac, or a model you run yourself, and the request never leaves the machine at all.
• Support email — if you write to us, we have your message and address, used only to help you.

What we keep

One fulfillment record per purchase: email address, license key, transaction id, and the anonymous machine identifier. We keep it because it's how "please resend my key" and refunds work. We don't sell or share it with anyone except the processors named above, and we'll delete what we can on request (some transaction records must be retained for tax and accounting law).

The website

calliday.app serves static pages with no analytics and no advertising trackers. The checkout overlay is provided by Paddle and operates under Paddle's privacy policy. Fonts load from Google Fonts.

Your rights

Ask us at support@calliday.app to see, correct, or delete the fulfillment data we hold about you, and we will — subject to the legal retention noted above. Since your activity data lives only on your Mac, deleting it is always in your own hands.

Changes

If this policy changes materially, the date above changes with it — and given the architecture, changes can only be boring.