Privacy Policy

Your Kapsicum data is stored locally by default. Optional features you choose, including Google Drive storage and backup, can send data directly from your Mac to the selected service provider. We do not have access to your locally stored data.

This policy explains what data we collect, when and why we collect it, and what rights you have.

Data we currently collect

• Email address — only if you sign up for our waitlist. Used solely to notify you about Kapsicum updates. You can unsubscribe at any time.

Data we do not collect

• We do not collect, access, or store the personal data you keep in Kapsicum on your device
• We do not track your browsing activity, keystrokes, or application usage by default

Data we may collect in the future

• Usage metrics for licensing — If we introduce paid plans, we may collect limited metrics such as storage used, number of devices, or feature usage. We will update this policy before any such collection begins.
• Crash reports and diagnostics — To improve the Software, we may collect anonymized crash data. This will be opt-in.

Your data lives on your device. Kapsicum is designed so that:

• Your files, notes, and personal data are stored locally on your Mac
• The Software is designed to work offline and without requiring an account
• You maintain control over your locally stored data

There are specific situations where data may be transmitted from your device. This happens only with your knowledge and consent.

AI Features (Optional)

If you choose to use AI-powered features (such as chatting with hosted language models), the content you submit will be sent to the AI service provider for processing. We will clearly identify when a feature requires sending data externally, and you will be asked to consent before the first use.

Google Drive

Google Drive is optional. Kapsicum requests access only to Drive files it creates or that you explicitly authorize for it. This is Google's per-file access permission, not permission to read your entire Drive. Kapsicum reads and writes these files and their metadata to provide the storage, backup, and recovery actions you request.

Google returns account information, including your email address, display name, and Drive account identifier. Kapsicum uses your email address and account identifier to show and verify the connected account. Authorization tokens allow the app to keep working with the files you authorized without asking you to sign in for every backup.

Backup and recovery transfers take place directly between your Mac and Google over HTTPS. Kapsicum's servers do not receive your Drive file contents or authorization tokens as part of this feature. Connection tokens are stored in an encrypted configuration file on your Mac, with its unlock secret protected by macOS Keychain. Account and file metadata used by the app are also stored locally.

Kapsicum retains local connection information between sessions so that backups can continue. That information may remain on your Mac after you stop using Drive or revoke access. Removing access in Google does not erase local connection information, restored files, or existing cloud backups. You control your local copies and can delete backup files in Google Drive. For help removing Kapsicum's saved local connection data, contact contact@thekapsicum.com.

You can revoke Kapsicum's access in your Google Account connections. Google then prevents further access under that authorization. Google's privacy policy also applies to data stored with Google.

Kapsicum uses Google user data to provide the features you choose. We do not sell that data. Kapsicum's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Licensing Verification (Future)

If we introduce licensing or subscriptions, the Software may communicate limited usage data (such as storage occupied or device count) to verify your plan. This data will be minimal and used solely for licensing purposes.

When data is sent to third-party services (such as AI providers), those services have their own privacy policies. We will:

• Make reasonable efforts to identify the providers at the point of use within the Software
• Link to their privacy policies where applicable
• Aim to send only the data needed for the feature to work

We do not sell your personal data to anyone.

We use commercially reasonable measures to protect data in transit and any data we hold (such as waitlist emails). However, no system is perfectly secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access — Request a copy of any personal data we hold about you
• Correct — Ask us to fix inaccurate data
• Delete — Ask us to delete your data from our systems
• Opt out — Decline optional data collection (AI features, diagnostics, cloud backup)
• Data portability — Your local data is already on your device in accessible formats

To exercise any of these rights, contact us using the information below.

Kapsicum is not intended for children under 13. We do not knowingly collect personal data from children.

We may update this policy as the Software evolves. For material changes (such as new data collection or new third-party sharing):

• We will make reasonable efforts to inform you in advance
• We will update the "Last updated" date at the top of this page
• Continued use of the Software after the effective date constitutes acceptance

If you have questions about this policy or want to exercise your privacy rights, reach out to us at contact@thekapsicum.com.