Privacy Policy

What we collect and why

• At purchase: payments in US dollars are processed by Stripe, which collects your name, email, country and payment details. We receive your name, email, the plan and the payment status; we never see or store your card. We use them to issue your license, send receipts and support you (performance of a contract and legal obligation).
• In the license: the key, the plan, an identifier of the activated Mac stored only as a cryptographic hash (SHA-256; the serial number never leaves your Mac), the Mac's name (as shown in System Settings) and, at each activation and each automatic renewal of the authorization (before the 30 days run out), the IP address and the KeepFree version. We use them to keep the license on your Mac, let you switch Macs and prevent key sharing (performance of a contract and legitimate interest in preventing fraud).
• In the dashboard (painel.keepfree.ia.br/en): your purchase email and the sign-in code, stored only as a cryptographic hash and valid for a few minutes. The dashboard uses a session cookie, needed to keep you signed in. When you sign in, the dashboard reads the cookie with the source of your first visit (described below) and keeps that source with your purchase.
• By email: we send your key, sign-in codes and license notices, and record whether each email was delivered. Emails you send to [email protected] are kept for support.
• Phone alerts (Complete plan only, and only if you turn them on): KeepFree on your Mac sends the dashboard the available space, the goal, the disk size, the version, the type of each alert, how much a cleanup freed and a short title and text, with no folder, file or program name. We keep the latest state, the last 50 alerts and one available-space point per day for up to 90 days. To notify you, we keep the address your browser creates in its notification service (Apple, Google, Mozilla or Microsoft), its keys and the device type. The notification is end-to-end encrypted. You turn it off in My Mac or by signing out of the dashboard on the device.
• On keepfree.ia.br: we count visits and clicks and keep the source of your first visit in a cookie of ours, as explained in "Visit measurement and cookies" below. Cloudflare, which hosts the site, logs requests for security and performance.

Visit measurement and cookies

To know how many people visit the site and which source (Instagram, a search, a link of ours) brings buyers, keepfree.ia.br does the following. The basis is our legitimate interest in measuring our marketing.

• Visit counter: on each visit (once per open tab), the site tells our dashboard the source you came from, which is the previous site or the campaign in the link (for example, instagram/bio). The dashboard keeps only the daily total per source; it does not store your IP address or anything that identifies you. Clicks on the plan buttons are counted by the dashboard when it opens the Stripe checkout, also without storing your IP address.
• Cookie keepfree_origem (ours, for 90 days): keeps the source of your first visit. If you buy, that source goes with your purchase, so we know which source brought the sale. A direct visit, with no source, does not set the cookie.
• Cookie keepfree_aviso (ours, for 1 year): remembers that you have seen the cookie notice, so it does not come back on every page.
• You can delete or block these cookies in your browser settings: the site and the purchase keep working, we just stop knowing the source of your visit. We do not use advertising cookies.

What stays on your Mac

KeepFree measures and cleans the disk on your own Mac. What it finds (the names and sizes of your folders and files, the tools you use), the cleaning history and the quarantine stay on your Mac and are not sent to us. With phone alerts on, only the numbers and short alerts described above go to the dashboard.

Who we share it with

We do not sell personal data. For KeepFree to work, some providers process data on our behalf:

• Stripe: payments in US dollars.
• Cloudflare: hosting of the site and the dashboard, database, incoming email and protection against attacks.
• Apple, Google, Mozilla and Microsoft: delivery of phone notifications, encrypted, only if you turn on the alerts.
• Email delivery services, such as SendKit and Resend: sending the key, the codes and the notices.
• Public authorities, when the law requires it.

International transfers

Some of these providers, such as Cloudflare, Stripe and Resend, may process data outside your country, including in the United States and Brazil. These transfers rely on the contractual safeguards those providers offer.

How long we keep it

We keep data for as long as it is needed for your license, support, security and legal obligations. Purchase and tax data are kept for the period required by tax law (5 years in Brazil). You can ask us to delete the rest at any time.

Your rights

Depending on where you live (for example under the GDPR in the European Union and the United Kingdom, the LGPD in Brazil or US state privacy laws), you can ask for access, correction, deletion, portability, restriction or objection, and withdraw your consent. Write to [email protected]: we answer within 15 days. You can also complain to your data protection authority.

Security

All connections are encrypted. The sign-in code and the identifier of each Mac are stored only as cryptographic hashes, and the authorization our dashboard signs for KeepFree only works on the Mac it was issued for. The dashboard limits repeated attempts. No system is infallible: if an incident could put you at risk, we will tell you and the authorities, as the law requires.

Children

KeepFree is not intended for people under 18.

Changes to this policy

When this policy changes, the date at the top is updated and buyers are notified by email or in the dashboard.