Privacy Policy
Last updated:
This Privacy Policy explains how Korinotch (“we”, “us”) collects, uses, and protects information when you use our website (korinotch.com), create an account, purchase a subscription, or run the Korinotch macOS application.
1. Who we are
Korinotch is a native macOS utility that extends your Mac’s notch with music controls, notifications, productivity widgets, and related features. Support contact: Support@Korinotch.com.
2. Information we collect
Account information. When you register, we store your name, email address, and a secure password hash (Argon2id). We never store your password in plain text.
Authentication data. We issue access and refresh tokens for signed-in sessions. We may store short-lived 6-digit codes for email verification, two-factor sign-in, and password resets. We log authentication events (such as sign-in, trial start, or password reset) with timestamps and limited metadata for security and abuse prevention.
Subscription and billing. Purchases are processed by our payment provider (Polar). We store subscription status, plan type, and renewal dates tied to your account. We do not store full payment card numbers on our servers.
Website usage. We may collect anonymized page-view statistics (for example, which pages were visited and when) to understand site traffic. IP addresses may be hashed before storage where analytics are enabled.
Support communications. If you email us, we keep the content needed to respond to your request.
3. The Korinotch Mac app (local-first)
The Korinotch app runs primarily on your Mac. Features such as music playback, clipboard history, calendar reminders, and system controls are processed locally on your device. The app contacts our servers mainly to:
- Verify your account and subscription or trial entitlement
- Complete browser-based sign-in (handoff)
- Check for app updates
- Fetch optional online data you enable (for example, weather, sports scores, or stock tickers you configure)
We do not sell your personal data. The app is designed to avoid unnecessary cloud processing of your day-to-day activity.
4. How we use information
- Create and manage your account
- Verify your email and protect sign-in (including optional email-based 2FA)
- Provide trial access, subscriptions, and license entitlement checks
- Process payments through our payment provider
- Send transactional emails (verification codes, sign-in codes, password resets, receipts-related notices)
- Prevent fraud, abuse, and unauthorized access
- Improve the website and product
5. Email and transactional messages
We send emails only for account-related purposes, such as verifying your address, completing sign-in, resetting your password, or confirming important account changes. You cannot opt out of essential security emails while your account remains active.
6. Cookies and local storage
Our website may store session tokens in your browser’s local storage when you sign in so you stay logged in on that device. Admin and authentication cookies use secure, HTTP-only settings where supported. We do not use third-party advertising cookies on korinotch.com.
7. Third-party services
- Polar — payment processing and customer billing portal
- Email provider (SMTP) — delivery of verification and security codes
- Apple — notarization and code signing for the macOS app (no account data shared by us beyond normal distribution)
These providers process data under their own privacy policies when you interact with them (for example, during checkout).
8. Data retention
We keep account and subscription records while your account is active and as needed for legal, tax, and fraud-prevention obligations. Short-lived auth codes expire automatically (typically within 10 minutes). Security logs are retained for a limited period unless a longer retention period is required to investigate abuse.
9. Security
Passwords are hashed with Argon2id. Access tokens are short-lived. Refresh tokens can be revoked on logout or password reset. We rate-limit sensitive endpoints and monitor for suspicious activity. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard practices.
10. Your choices and rights
Depending on where you live, you may have rights to access, correct, or delete personal data we hold about you. To make a request, email Support@Korinotch.com from the address associated with your account. We may need to verify your identity before fulfilling a request.
You can delete local app data by removing Korinotch from your Mac. Closing your account on request will remove or anonymize associated server records except where retention is legally required.
11. Children
Korinotch is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data.
12. International users
If you access Korinotch from outside the country where our servers are hosted, your information may be processed in jurisdictions with different data-protection laws. By using the service, you understand that your data may be transferred and processed as described in this policy.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Korinotch after an update means you accept the revised policy.
14. Contact
Questions about privacy? Email Support@Korinotch.com.