Privacy & your data

What stays on your Mac

Your drink and break history, reminder preferences, chosen companion, personal names and note are stored locally. The app does not need to upload this personal care data for license activation.

Local personal data is not encrypted by the app. Anyone with access to your macOS account or its backups may be able to read it. macOS account security and FileVault remain useful protections.

What license checks send

Activation sends your key and a label containing part of a random installation ID directly to Dodo Payments. Validation and deactivation send the key and Dodo activation-instance ID. Dodo also receives ordinary request metadata such as your IP address. Your purchase information is handled by the checkout provider.

This is separate from local history. “Local personal data” does not mean the paid app makes no network requests. The app contains no merchant API key and does not send your notes or care history to Dodo.

Software update checks

Sip & Sass uses Sparkle to check the Aira Builds update feed over HTTPS. The update host receives ordinary request metadata such as your IP address and app version. These requests do not include your personal care history or license key. System profiling and JavaScript in release notes are disabled.

Daily checks default on. Automatic download and installation are a separate opt-in in Settings → Updates. You can turn checks off and check manually. The first Sparkle-enabled release needs a manual installation; update delivery uses the signed Aira Builds feed.

What optional safeguards observe

• Input activity: elapsed time since keyboard or pointer input, rather than typed text or click contents.
• Possible calls: whether a microphone is in use. The app does not record audio.
• Display mirroring: display configuration, rather than a screen recording.
• Protected apps: which app is currently in front.
• Shared macOS Focus: the available shared status, subject to system support and permission.

These safeguards do not capture your screen, camera, audio or the contents of your work. They can be turned off individually in Settings. Explicit Focus and meeting protection work without assuming a call has been detected.

Trial and license storage

The commercial release uses persistent trial and license state so that reinstalling or replaying the tour does not simply start a new trial. Removing the app alone may leave this state and your local app data behind.

Sharing a care package

A care package intentionally exports your note and selected reminder settings into a file you can send to someone. Inspect that file before sharing if it contains a private name or message. Imported characters travel separately.

Security and custom files

Only import character packs from sources you trust. File validation reduces mistakes and rejects unsupported content, but it is not a guarantee that arbitrary downloaded files are safe. Signing and notarization status must be checked for the specific build you install.

Questions about access, deletion or a purchase? Email [email protected]. Share the minimum details needed; leave personal notes, history and full keys out of public reports.