Privacy, with the boundaries in view.

This website.

The download page offers the current Mac build. Checkout is open. There are no advertising pixels, session replay, third-party chat, contact forms, or email signup forms.

We count page visits with Cloudflare Web Analytics, which sets no cookies and gives us only totals such as page views, referring sites and countries. We also count visits with Umami, an analytics tool we host ourselves on Amazon Web Services, which sets no cookies, does not store IP addresses and records the page, referring site, browser, operating system, device type, approximate location and how quickly the page loaded, when Buy is selected, and, when a purchase completes, the plan and price, never the order, payment or customer details. If you accept analytics cookies in the banner, we also use DataFast analytics to see which pages and referring sites lead to visits and purchases. DataFast does not load until you accept, and you can change your choice at any time with Cookie settings at the bottom of every page; declining after accepting removes its cookies. Once accepted, DataFast sets two first-party cookies on this website: datafast_visitor_id, a random identifier kept for one year, and datafast_session_id, which groups the pages of one visit. With each page view it receives the page address, the referring site, and your browser, device type and approximate country. When you start a purchase, the website passes that random identifier to Dodo Payments with the order, and Dodo Payments sends DataFast the payment event so the sale can be credited to the visit. That event carries the amount and currency and the customer details Dodo Payments holds for the payment, such as your name and email address. DataFast does not run on the checkout status page. Blocking these cookies or the script does not change how the website or checkout works.

When checkout is open, starting a purchase asks the NotchMind API to set one cookie named __Host-nm_checkout. It is Secure, HttpOnly, and SameSite=Lax, it is limited to the API host, and it expires after 24 hours. The server stores a hash of that cookie and a hash of a matching security token. It does not store the raw values, and the cookie is not a license, an account, or a visitor profile. It only lets that same browser check its own order and display its license key.

Cloudflare hosts this website, the API, and the download files. Cloudflare can process connection data, such as an IP address and user agent, to deliver and protect those services. That processing follows Cloudflare’s own privacy practices. Following an external link, including the contact link to X, takes you to that provider’s website and its own privacy practices.

We also use Plausible Analytics on public pages. It gives us aggregate statistics about page views, referring sites, browsers, devices and approximate location, without cookies. It does not run on the checkout status page. Plausible’s data policy describes its processing.

Contact and support.

NotchMind is operated by Rudra Satani. Privacy questions go to support@notchmind.com. You can also reach the maker through @rudraxx13.

Support receives the messages and attachments you choose to send. Review diagnostics and screenshots first. Avoid passwords, API keys, private clipboard text, complete license keys, and full payment-card details. Do not post sensitive information publicly.

Information stored on your Mac.

Supported clipboard history and File Tray information are stored on your Mac. Eligible-image text recognition and Secret Guard checks run locally. File Tray references point to original files; Keep a Copy creates a separate local copy. Local data can include sensitive information. Do not treat a local history feature as encrypted storage or a password manager.

Secret Guard checks for supported patterns. Suspected secrets it detects are excluded from the Smart-classification path and from ordinary plaintext clipboard-history records. Detection can miss sensitive content or flag harmless content.

There is no free trial. The app requires an activated license from first launch. A license is active on 1, 2 or 5 Macs, depending on the plan you buy.

Optional Smart Mode.

Smart Mode is optional and starts off. For supported clipboard and file features, enabling it can send a minimized text snippet to the NotchMind API. The API sends that classification request to TypeSafe Jev. The request limits the snippet to 512 Unicode characters. The original image or file is not uploaded. Extracted text can still contain personal or confidential information. Do not enable Smart for content you are not authorized to send.

Each Smart request also includes the app version/build, an installation label, a public device signing key, a one-time nonce, a timestamp, and a signature over the request. The installation label is not trusted by itself: Smart quota is pinned to the Secure Enclave signing key, and licensed Smart requests must use the key already pinned to that license. A copied installation label does not carry a license to another Mac. If this Mac’s signing key has to be regenerated, the licensed Mac re-activates its license to pin the new key. TypeSafe receives only the minimized classification state, not the device key or quota identity. This is proof of possession, not a guarantee that a deliberately modified client cannot share its own credentials.

The API also uses a daily keyed hash of the network address supplied by Cloudflare to enforce request limits. The raw IP address is not stored. Changing the installation label, public key, or network address does not reset the service-wide ceiling. Older Build 28 clients can use the installation label without a device signature only until the bounded compatibility date configured by the service; after that they must update.

Inbox Smart ranks mail on this Mac. Turning it on does not send those messages. Ask Smart on one message sends that message’s sender, subject, and a shortened preview, and only while Smart Mode is also on.

Smart off does not mean every feature is offline.

The app can check its Sparkle update feed, retrieve lyrics through LRCLIB and OVH, request weather through the NotchMind API and WeatherAPI, use integrations you configure, and open online destinations when you choose an action. License activation, validation, and deactivation contact the NotchMind API. Downloads are served from Cloudflare. A feature that works locally is not a promise that every operation stays on the Mac.

Purchases.

Payment is collected by Dodo Payments on Dodo’s hosted checkout page. NotchMind does not receive your card number. The API stores an order reference, the offer version, a payment identifier, a hash of the license, and timestamps. The license key itself is stored only as encrypted ciphertext so the purchasing browser can display it. Lookup uses the hash, not the readable key.

Dodo Payments is the merchant of record. Its checkout collects the name, email address, billing address and payment details needed for the payment, tax and fraud checks, under Dodo’s own privacy policy. The purchase email is handled by Dodo. Lost-key recovery uses that email in Dodo’s customer portal. Open the recovery portal.

Retention and deletion.

Local history follows the settings and deletion controls in the app, including reset. Files kept by other apps, operating-system backups, or independently used services are outside NotchMind’s direct control. Uninstalling the app does not necessarily remove every support file.

The checkout cookie expires after 24 hours, and the server then rejects it. Scheduled maintenance runs hourly; one-time request nonces expire after about ten minutes, short-lived rate-limit rows are removed after their enforcement window, and daily Smart usage counters after 35 days. The pseudonymous device-key anchor and its first-seen date are retained for 400 days after last use. A public device key and its pseudonymous installation label are not account identifiers. Licensed device-key pins are retained with the license while it is active and afterward as needed for refund, revocation, support, and same-Mac recovery.

Usage records store a date, a count, and a pseudonymous device-key, installation-label, or license hash. They do not store clipboard text, message bodies, or raw IP addresses. Order and license records are kept so a purchase can be activated and a refund can stay revoked. Scheduled maintenance never runs as part of a Smart request.

To ask about server records, email support@notchmind.com. Include the purchase email or order reference, not the card number or the full license key. A refunded or revoked license stays revoked.

Policy updates.

Material changes to optional processing will be reflected on this page before that processing is newly enabled. The effective date is the date shown at the top of this page.

For a question now, contact support without including private data in a public message.