Privacy Policy

This Privacy Policy explains how Consalik AB collects, uses, discloses, and protects information when you use Hindsight’s website, downloads, macOS application, license activation, updates, documentation, and related services, collectively the Services.

Hindsight is designed to keep your timeline on your Mac. The app captures, processes, transcribes, indexes, searches, and stores your history locally unless you choose to send information to us or a third-party service yourself.

Information Hindsight Processes Locally

Depending on your settings and macOS permissions, the Hindsight app may process information such as:

• Screen frames and thumbnails captured from your Mac.
• Text detected from screen captures through local OCR.
• Microphone audio, system audio, and local audio transcripts when audio capture is enabled.
• Calendar event details, such as event titles, start and end times, and video conference links, read locally to recognize meetings when calendar access is granted.
• Meeting recordings, including full screen video, audio, a local transcript, and text recognized from the meeting’s screen video through local OCR, when you choose to record a meeting.
• App names, app bundle identifiers, window titles, timestamps, browser URLs, and similar context.
• Search queries, settings, app exclusions, retention preferences, and local usage state.

This timeline data is stored locally on your Mac. We do not receive your screen images, audio, OCR text, transcripts, window titles, browser URLs, search queries, or local history from the app unless you choose to send that information to us, for example in a support request.

If notifications are allowed, Hindsight may send local status notifications, such as when recording pauses because your Mac switches to battery power. You can disable battery pause notifications in Hindsight’s settings or turn off notifications in macOS System Settings.

Local Storage and Security

Hindsight stores local history in encrypted local storage. Encryption keys are stored in macOS Keychain. Local data remains under your control on your Mac, subject to your device security, operating system account, backups, file sharing settings, malware protection, and anyone else who can access your Mac.

You can delete local history from Hindsight’s settings. You can also delete downloaded transcription models when you want to reclaim disk space. Reducing the retention period may remove older local history automatically.

Private Browsing and App Exclusions

Hindsight can skip supported private browser windows, including Chrome Incognito and Safari Private windows, when private browsing exclusion is enabled. This depends on macOS Accessibility permission and browser window context being available.

Hindsight also includes app exclusions so selected apps do not appear in your timeline. Some sensitive apps, such as password managers, may be excluded by default. You should review exclusions before using Hindsight in environments that contain confidential, regulated, workplace, or shared-device information.

Calendar Access and Meeting Recording

If you grant macOS Calendar access, Hindsight reads your calendar locally to recognize meetings that contain a video conference link, such as Zoom, Google Meet, Microsoft Teams, or Webex. Calendar information is used only on your Mac to schedule meeting recordings and is never uploaded to us or shared with anyone.

When meeting detection is enabled, Hindsight asks whether to record each meeting shortly before it starts, and can open the meeting for you. If you choose to record, Hindsight records the meeting’s screen video and audio and generates a local transcript, then saves them in the same encrypted local storage as the rest of your timeline. The local meeting transcript may be organized by microphone audio, system audio, and combined audio, and may include word-level timing for playback highlighting. Hindsight also recognizes on-screen text from the meeting’s screen video through local OCR and stores it with the recording, so you can search a meeting by what was shown on screen and jump to that moment. All of this processing happens on your Mac. You can turn meeting prompts off at any time in Hindsight’s settings, and you can delete individual meeting recordings from the Meetings window. Calendar access is optional, and Hindsight works without it.

Information We Collect From You

We may collect information you provide directly, such as:

• Your name, email address, messages, attachments, and diagnostic details when you contact support.
• Feedback, feature requests, bug reports, or other communications you send us.
• Information needed to respond to privacy, legal, billing, or security requests.

Please avoid sending screenshots, audio, transcripts, logs, or other sensitive material unless it is necessary for your request.

Account, Purchases, Subscriptions, and Billing

To sign in you enter your email address on our website, which creates an account identified by that email. We use your email to send one-time sign-in links and purchase-related messages. When you open a sign-in link, our website hands you back to the app and our backend issues a device token that the app stores locally in the macOS Keychain to keep you signed in on that Mac; we store only a hashed version of that token on our server. To prevent abuse, we limit how many sign-in links can be requested from a given network address or sent to a given email address in a short period, using your IP address and the requested email for that purpose.

To run the free trial fairly, the app also generates a random, anonymous device identifier, stored locally in the macOS Keychain, and sends it when you sign in. Our backend keeps only a one-way hash of it to allow one free trial per Mac and to prevent trial abuse, such as repeatedly deleting an account or signing up with new email addresses on the same Mac. This identifier is not linked to your screen content, audio, or local timeline, and is not used for advertising or for tracking you across other apps or websites. See Retention below for how long we keep it.

One-time payments and subscription billing are handled by Stripe. Card details are entered on Stripe’s secure checkout and are not collected or stored by Hindsight. We receive purchase type, subscription status, plan, billing period, Stripe Checkout and payment identifiers, payment status, purchase timestamps, and related records that we need to provide or revoke access, prevent abuse, support you, and keep billing records. Stripe’s processing is governed by its own privacy policy.

Our entitlement backend runs on Cloudflare, and sign-in and purchase emails are delivered through Resend. You sign in on our website, and the Hindsight app contacts our backend to complete sign-in, check paid entitlement status, and open billing or checkout pages.

You can delete your account at any time from Hindsight’s settings. This immediately cancels any subscription, removes any lifetime entitlement, deletes your server-side account and device tokens, and asks Stripe to delete your customer record. It cannot be undone. See Retention below for what this removes and what we may keep.

Crash Reporting and Diagnostics

If enabled in a configured app build, Hindsight may use Sentry for crash reporting, release health, app hang reporting, limited performance diagnostics, sanitized nonfatal error reports, manual diagnostic breadcrumbs, sanitized diagnostic logs, and sanitized aggregate metrics. Hindsight configures Sentry to avoid sending screenshots, view hierarchy, raw Apple unified logs, automatic network breadcrumbs, automatic personal identifiers, device hostnames, and user records.

Diagnostic events may include technical information such as app version, build number, operating system version, environment, crash details, stack traces, app hang stack traces, anonymous session status, coarse operation names, sanitized error categories, sanitized diagnostic log messages, sanitized numeric metrics such as counters, gauges, and timing distributions for selected app operations, and limited performance timing for selected app operations. Manual network diagnostics use coarse service labels and status classes, not request or response bodies, headers, sign-in tokens, full URLs, screenshots, transcripts, OCR text, window titles, browser URLs, search queries, or local history. We use this information to find, debug, and fix reliability and performance problems.

Website, Downloads, and Updates

When you visit the website, download Hindsight, or check for updates, our hosting providers, GitHub, Sparkle update infrastructure, or similar providers may process technical information such as IP address, browser or app user agent, request time, requested URL, download metadata, and server logs.

Hindsight uses this information to provide the website, downloads, release notes, update feeds, security checks, troubleshooting, fraud prevention, and basic service operations.

How We Use Information

We use information we collect or receive to:

• Provide, maintain, update, secure, and troubleshoot the Services.
• Manage your account and paid entitlement, process payments, prevent abuse, and provide customer support.
• Investigate bugs, crashes, performance issues, fraud, security events, and policy violations.
• Respond to support, privacy, legal, and billing requests.
• Comply with applicable law and enforce our Terms of Service.

How We Share Information

We do not sell your personal information. We do not use your local Hindsight timeline to train AI models. We may share information with service providers that help operate the Services, such as payment processing (Stripe), backend hosting (Cloudflare), email delivery (Resend), crash reporting (Sentry), website hosting, downloads and updates, analytics of server operations, or support.

We may also disclose information if required by law, to protect rights and safety, to investigate abuse or security incidents, or as part of a merger, acquisition, financing, or sale of assets, subject to appropriate protections where required.

Retention

Local Hindsight timeline data is retained according to your app settings and remains on your Mac unless you delete it, reduce the retention period, uninstall the app in a way that removes app data, or otherwise remove the files from your device.

We retain information we collect from your account, purchases, subscriptions, payments, support, diagnostics, logs, and legal requests only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. You can delete your account at any time from Hindsight’s settings. Deleting your account immediately cancels any subscription, deletes any lifetime entitlement, your account, and the device tokens we hold, and asks Stripe to delete your customer record. It does not delete the Hindsight timeline data stored locally on your Mac, which you can clear separately in the app. We delete or anonymize associated personal data except records we or our payment providers must keep for legal, tax, accounting, fraud-prevention, refund, or dispute purposes.

To prevent repeated use of the free trial, we retain the one-way hash of your device identifier after account deletion. This hash cannot be used to recover your identity, email, or any timeline data, and exists solely to enforce one free trial per Mac.

Your Choices and Rights

You can control many privacy choices directly on your Mac, including:

• Granting or revoking macOS Screen Recording, Accessibility, Microphone, Calendar, and notification permissions.
• Turning screen or audio capture on or off in Hindsight.
• Turning meeting record prompts on or off, and deleting individual meeting recordings.
• Adding app exclusions and private browser exclusions.
• Changing local retention settings, clearing local history, or deleting downloaded transcription models.
• Deleting your account from Hindsight’s settings, which cancels any subscription, removes lifetime access, and removes your server-side data (local timeline data is cleared separately).
• Removing Hindsight from your Mac and deleting local app data.

Depending on where you live, you may also have legal rights to access, correct, delete, export, restrict, or object to certain personal information we hold about you. We may need to verify your request before acting on it.

Children

The Services are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can take appropriate action.

International Transfers

We and our providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers.

Changes

We may update this Privacy Policy from time to time. The updated date will show when the policy last changed. If a change materially affects how we handle personal information, we may provide additional notice where practical.

Contact

Questions or privacy requests should be sent to Consalik AB using the support contact listed in the app, on the website, or on your purchase receipt.