Privacy Policy

The Support Centre is a public notice board for our Mac apps: bug reports, feature requests, comments, votes, and testimonials. Posting here is public by design, so this page explains exactly what we collect, where it goes, and the rights you have. It is written to satisfy UK GDPR without losing the plain English.

• Everything you post is published on this board, under a display name you choose.
• Email is optional and stays private. If you leave one, we use it only to email you replies about your own report. This site sends no marketing email, ever.
• No accounts, no cookies. There is nothing to sign up for, and nothing tracks you across other websites.

Who is the data controller?

The data controller for any personal data this site holds about you is:

Email support@theodorehq.com with any data-protection question.

What happens when you post a bug report, feature request, or comment?

Your post is published on this public board. We collect three things:

• Your display name. You choose it, and it can be anything. It is published alongside your post.
• The text you write. The title and description (or comment) are published on the board.
• Your email address, which is optional. Leave it only if you would like updates. It is stored privately in a private repository, is never published, and is used only to email you replies about your own report. Nothing else, ever: no newsletter, no marketing.

Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR) in running a public support board and replying to the people who post on it. The email is entirely optional, and leaving it out changes nothing about how your report is handled.

Because posts are public, please do not include other people's personal data in them (see the Terms of Use). If you post something you later regret, email us and we will remove it.

Testimonials

Testimonials work differently: nothing is published until a person has read and approved it. Your words are shown with the name you give, if you choose to give one; otherwise they are credited simply as a user of the app (for example “Muse user”). The star rating, optional country and optional private email you give are kept privately and never published.

Votes never leave your browser

When you upvote a bug or feature request, the only record of which items you voted on is a small flag in your own browser's localStorage. It is never sent to a server as an identifier; the server only ever sees an anonymous plus one, and the vote count itself identifies nobody.

Storage basis: the PECR exception for appearance and functionality storage (Regulation 6, as amended by the Data (Use and Access) Act 2025), which covers first-party storage that simply makes a site work the way you asked. You can clear it at any time by clearing this site's data in your browser; the only effect is that the arrows you tapped forget they were tapped.

AI-assisted first replies

When you submit a bug report or feature request, we send the text of your submission (its title, its description, and your first name) to Anthropic, a US company, whose Claude model drafts the short acknowledgment that is posted publicly on your report and, if you left an email, emailed to you. That is the whole flow: a first “we have seen this” reply, so you are never left wondering whether your report landed. It is labelled Automatic Reply on the board and in the email, and a person follows up.

Anthropic does not use data sent to its API to train its models, under its commercial terms. Your email address is never sent to Anthropic.

Rate limiting and server logs

To keep spam out, and to stop this form being used to email people who never asked, our API counts submissions per IP address and per email address. It never keeps either as written: each is first turned into a scrambled one-way code, which is held in our host's short-term cache for at most 24 hours and then deleted automatically. It is never written to a log or connected to your post. Lawful basis: legitimate interests (Article 6(1)(f)) in preventing abuse.

Vercel, our hosting provider, keeps standard access logs, as virtually every host does, under its own privacy notice (linked below).

Crash reports from our Mac apps

Some of our Mac apps can send us a report when they crash, but only if you agree: the app asks you after a crash, and you can choose to always send them, or switch that off again, in the app's settings. A report contains the app's name, version and build, your macOS version, the type of chip in your Mac, the kind of problem, the error's name and message, and a list of the places in the app's code where it happened. Home-folder names, email addresses and licence keys are removed from the message, on your Mac and again on our server, before anything is stored. A report contains nothing else about you or your files.

Reports are sent to this site, which uses your IP address only for a short rate limit held in memory and never stored. They are kept in a private GitHub repository that only we can read, are never published, and are deleted once the same crash has not been reported for 12 months. Lawful basis: your consent (Article 6(1)(a) UK GDPR), which you can withdraw at any time by choosing not to send, or switching automatic sending off.

Website analytics

We use Umami, a privacy-friendly analytics tool we self-host on our own server at analytics.theodorehq.com. It is cookieless, first-party, and collects aggregate statistics only: which pages are read, roughly where in the world from, and on what kind of device. No analytics data is shared with any third party.

Storage basis: the PECR statistical-purposes exception (Regulation 6, as amended by the Data (Use and Access) Act 2025), because the access solely compiles aggregate statistics about how the site is used. That exception requires a simple, free way to object. If you would rather not be counted at all, this switches our analytics off for this browser. It sets a flag your browser keeps, and nothing further is sent.

Turn Analytics Off

Do Not Track and US visitors

We don't track you across other websites and we don't run advertising, so there is nothing for a Do Not Track signal to switch off. If you are in the United States, including California: we do not sell or share your personal information, and you can ask to see or delete what we hold by emailing support@theodorehq.com.

Who handles your data, and international transfers

Six providers touch Support Centre data. Where a provider is outside the UK, the transfer is covered by a UK-recognised safeguard: UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the provider's data-processing agreement incorporating UK-approved clauses.

• GitHub (a Microsoft company) stores submissions, including the private email addresses, in a private repository that only we can read. See GitHub's privacy statement and data protection agreement.
• Vercel hosts the site and runs the small functions that receive submissions and votes. Vercel is certified under the UK Extension to the EU-US Data Privacy Framework. See Vercel's privacy notice and data processing addendum.
• Resend sends the reply-notification emails described above. See Resend's privacy policy and data processing agreement.
• Apple hosts our support@theodorehq.com mailbox on iCloud Mail, so any email you send us is stored there. See Apple's privacy policy.
• Missive (Heliom Inc., based in Canada, which the UK recognises as giving adequate protection) is the email app we use to read and answer support email. See Missive's privacy policy.
• Anthropic drafts the acknowledgment replies, as described above. See Anthropic's privacy policy and commercial terms.

You can ask us for more detail on any of these safeguards at support@theodorehq.com.

How long do we keep your data?

• Published posts (reports, comments, testimonials) remain published as part of the public support record until removal is requested. Email us and we will take a post down.
• Your private email address is kept while its report remains published, and is deleted on request at any time.
• Crash reports are deleted once the same crash has not been reported for 12 months.
• The vote flag in localStorage stays on your own device, under your control, until you clear your browser's site data.

Your rights under UK GDPR

You have the following rights over any personal data we hold about you:

• Right of access: ask us for a copy of the data we hold (Article 15).
• Right to rectification: correct anything inaccurate (Article 16).
• Right to erasure: ask us to delete your data, including any published post (Article 17).
• Right to restrict processing: pause our processing while a dispute is resolved (Article 18).
• Right to data portability: receive your data in a structured, common format (Article 20).
• Right to object: object to processing based on legitimate interests (Article 21).
• Right to withdraw consent: at any time, where processing relies on it (Article 7(3)).
• Right not to be subject to automated decision-making: we make no such decisions about you (Article 22).

To exercise any of these, email support@theodorehq.com. We respond within thirty days, free of charge.

Complaints

Under section 164A of the Data Protection Act 2018 (inserted by the Data (Use and Access) Act 2025) you can complain to us directly about how we have handled your personal data. Email support@theodorehq.com: we will acknowledge your complaint within 30 days, investigate it, and tell you the outcome.

You can also complain to the UK Information Commissioner's Office, the independent supervisory authority, at any time, though we would appreciate the chance to put things right first:

Children

The Support Centre is for adults: you must be 18 or over to post here (see the Terms of Use). We do not knowingly collect personal data from anyone under 18; if you believe we hold such data, email us and we will delete it promptly.

Changes to this policy

If this policy changes, we will update the date at the top and announce any material change on this site before it takes effect. We will not quietly widen what we collect.

Contact

Questions, concerns, or anything that smells off: support@theodorehq.com. A real human (Theodore) reads every email.