Privacy Policy

Summary

TL;DR — The Short Version

Hygieia does not collect, sell, or share your personal data. Almost everything happens on your device. The only network calls are for licensing. Diagnostics, if you switch them on, are written to a file on this Mac and never sent anywhere.

1

Who We Are

Hygieia is developed and operated by Symeon Lampadarios, an independent developer based in Belgium. For GDPR purposes, we are the data controller.

Contact: privacy@hygieia.app

2

What Data We Collect & Why

2a. Licensing (Stripe & Apple Sign‑In)

• If you purchase a Pro licence via Stripe, we receive your email address and a Stripe customer ID from Stripe's servers. We use this only to issue and verify your licence key. We never store full card details.
• If you authenticate with Apple Sign‑In, we receive an opaque Apple user identifier (not your name or email unless you share it). We store a one-way hash of this ID to verify your subscription status.

GDPR Art. 6(1)(b) — processing necessary to perform a contract.

2b. Diagnostics — opt-in, and they stay on your Mac

• If you switch on Keep a local diagnostics log in Settings, Hygieia writes errors to a file on your own Mac at ~/Library/Logs/Hygieia/. Nothing is transmitted. There is no analytics service, no crash-reporting service, and no endpoint for this data to go to.
• Home directory paths, user names and email addresses are stripped before anything is written to that file.
• You can withdraw consent at any time in Settings → Privacy.

GDPR Art. 6(1)(a) — consent.

2c. What We Do NOT Collect

• File names or paths scanned on your Mac
• Photos, documents, or any user content
• Browsing history, location, or contacts
• Device hardware identifiers (IMEI, serial number, etc.)

3

Data Storage & Retention

• Licence records are stored in our backend database (hosted on DigitalOcean, Frankfurt fra1 region, EU) for the duration of your subscription plus 30 days after cancellation.
• Apple user ID hashes are deleted within 90 days of an account-deletion request (in line with Apple's requirements).
• Diagnostics never reach us. The local log is capped at 512 KB, rotates once, and you can delete it at any time from Settings or in Finder.

4

Third-Party Services

• Stripe — payment processing (US/EU)
• Apple — App Store, Sign‑In and StoreKit
• DigitalOcean — backend hosting, Frankfurt (EU) region

We do not use advertising networks, analytics SDKs, or data brokers.

5

Your Rights (GDPR)

As an EU resident you have the right to:

• Access — request a copy of data we hold about you
• Erasure — delete your account and all associated data via Settings → Account → Delete Account in the app, or by emailing privacy@hygieia.app
• Portability — receive your data in a machine-readable format
• Object — opt out of any processing based on legitimate interests
• Lodge a complaint — with the Belgian DPA (dataprotectionauthority.be)

We respond to all requests within 30 days.

6

Children

Hygieia is not directed at children under 16. We do not knowingly collect data from minors.

7

Changes to This Policy

We will notify you of material changes via the Hygieia release notes. Continued use of the app after changes constitutes acceptance.

8

Contact

Questions or requests: privacy@hygieia.app