Privacy Policy

Last updated 6 August 2026

The Hutch app sends us nothing. It has no accounts, no analytics, and no usage tracking. What follows is the full list of exceptions, and they are all things you either start yourself or that happen when you buy.

What the app does on your Mac

Everything Hutch indexes — your apps, files, clipboard history, windows, running processes — stays on your Mac. None of it is transmitted anywhere. Your clipboard history is stored locally and never leaves the machine.

When the app does talk to a server

• Updates. Hutch checks for a new version. That request reveals only what any download does: your IP address and app version. We keep no record tying it to you.
• Licence activation. If you buy Hutch, activating a Mac sends us your licence key and a device identifier, name and model, so we can count how many Macs a key is on. The identifier is derived from your hardware and isn't reversible into anything about you.
• AI features. Only if you enter your own API key. Those requests go straight from your Mac to that provider. We never see them and never proxy them. Your key is stored in your Mac's Keychain.
• Crash reports and feedback. Captured locally, and only sent if you press send — which opens your own mail client with the full text visible first. You can turn capture off in Settings → Feedback.

What we store when you buy

A purchase creates one record: your email address, the order id, how many seats you bought, when it was issued, which Macs have activated, and what the sale was worth — the amount, currency, and the country Paddle reports for tax. We do not store your licence key itself — we can regenerate it when you ask, which means a copy of our database is not a pile of usable keys.

We never see your card details. Payment is handled by Paddle, who act as Merchant of Record. Paddle has its own privacy policy covering the payment.

This website

We count pageviews so we know whether anyone is reading. There are no cookies and no local storage, and nothing follows you to other sites.

For each visit we record the page path and, if there is one, the domain you arrived from. To count a visitor once per day rather than once per click, we compute a one-way hash of the date, the site, your IP address and your browser's user-agent string. Your IP address itself is never written down — only that hash, which is discarded after a short retention period.

Crash reports & anonymous usage data (the app)

The Hutch app sends two kinds of anonymous telemetry, both of which you can turn off in Settings → General → Privacy (“Share anonymous usage & crash data”): crash reports via Sentry (EU-hosted) — the app version and a technical stack trace when Hutch crashes, never your window contents, file names, or licence key — and usage counts via PostHog (EU-hosted) — anonymous events like “a tool was used”, never what it was used on. No user profile is created and nothing is linked to your identity.

Who else touches your data

• Paddle — payment, invoicing, tax, and refunds.
• Google Cloud — hosts the licence records, in the EU.
• Our email provider — delivers your licence key. It sees your email address and the message.
• GitHub — serves this website and app downloads.
• Sentry (EU) — receives anonymous crash reports from the app, if you leave telemetry on.
• PostHog (EU) — receives anonymous feature-usage counts from the app, if you leave telemetry on.

We don't sell anything to anyone, and there are no advertising or tracking networks involved.

How long we keep it

Licence records are kept for as long as the licence is valid, since a perpetual licence needs a record to stay perpetual. Website visit hashes expire automatically. Tax records are kept by Paddle for whatever period the law requires.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it — write to kuraydev.io@gmail.com and we will answer within 30 days. Deleting your licence record means the licence can no longer be verified or recovered, so we'll confirm before doing it.

Children

Hutch isn't directed at children under 13, and we don't knowingly collect anything from them.

Changes

If this policy changes we'll update the date at the top. If a change materially affects what we collect, we'll say so in the app's release notes rather than quietly editing this page.

Who controls your data, and how to reach us

The data controller is Kuray OGUN, trading as Coursion, of Ankara, Türkiye.

Email kuraydev.io@gmail.com about anything on this page — including asking for a copy of what we hold, or asking us to delete it.

Paddle acts as Merchant of Record and is a separate controller for the payment itself; their privacy policy covers the card details we never see.