Privacy Policy

Last updated: 28 October 2026

1. Who we are

NewMac (“we”, “us”) makes the Mac apps sold at newmac.app: Nook, DevSweep, Clipnest, Reelcast, Shareline, Ribbon, Transmute, Folio, Utter, Nightwatch, Mantel, Mailcellar, Vigil, Satchel, Perch, Quill, Tally, Tabulate and Kitty. NewMac is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], India.

For the small amount of personal data we handle (purchase records and support emails), we are the data controller (a “data fiduciary” under India’s Digital Personal Data Protection Act, 2023). Dodo Payments is a separate controller for the payment data it collects as Merchant of Record (see section 5).

This policy covers the nineteen apps, their license and update checks, and the newmac.app website including each app’s page (for example nook.newmac.app).

2. What each app accesses

Every app processes your data on your Mac. The table lists what each one reads, what it keeps on your Mac, and whether anything leaves your Mac beyond the license and update checks described in section 3. Text recognition, speech recognition and file conversion use Apple’s frameworks running on your Mac. The one exception is Satchel’s Transcribe tool, described in its row.

App	What it reads	What it keeps on your Mac	What leaves your Mac
Nook	Files and folders in Desktop, Documents, Downloads, Pictures, Movies and Music, plus any folder or drive you add (macOS asks once before it shows Desktop, Documents, Downloads and external drives; Nook doesn’t need Full Disk Access), including file details such as the web address a download came from. The pictures in those folders, which it looks at with Apple’s on-device image and text recognition to describe them and read the words inside them.	A file index and an image index (the things, colours and words recognised in each picture) in ~/Library/Application Support/Nook. Your favourites, tags and collections are kept there too, as references to files where they are: nothing is copied or moved. Settings in its preferences.	Nothing.
DevSweep	Project folders you point it at, and the caches and build folders developer tools leave in your user Library.	Your chosen folders and settings in its preferences.	Nothing.
Clipnest	What you copy (text, links, images, file references). It skips items that apps mark as concealed or temporary, as password managers do, and apps you exclude.	Your clip history in ~/Library/Application Support/Clipnest: up to 500 clips by default, kept until you clear them or set an automatic clean-up in Settings.	Nothing.
Reelcast	The screen or area you record; your microphone and camera only if you turn them on; the mouse pointer’s position and clicks while recording (for automatic zoom). It does not record keystrokes or system audio.	Recordings and projects in ~/Movies/Reelcast, exports in ~/Movies/Reelcast/Exports (you can change this).	Nothing. Sharing a video is up to you.
Transmute	Files you drop on it or pick.	Converted files next to the originals or in a folder you choose (it never overwrites a file); a list of recent conversions in ~/Library/Application Support.	Nothing.
Folio	PDFs and documents you open in it.	New files next to the originals or in a folder you choose (it never overwrites a file); a list of recent files in its preferences.	Nothing.
Utter	Your microphone, only while you hold the dictation key; the name of the app you’re dictating into. Speech is recognised by Apple’s on-device speech recognition, which Utter requires: audio is never sent to Apple, to us or anyone else, and is not saved.	Dictation history (the text, the app’s name, the length, and a tiny loudness outline used to draw the waveform, not a recording) in ~/Library/Application Support/Utter. You can turn history off in Settings. Your custom word list is kept there too.	Nothing.
Ribbon	The position, size and title of your open windows, so it can arrange them.	Settings and remembered layouts (app names and window titles) in ~/Library/Application Support/Ribbon.	Nothing.
Mailcellar	The email in the accounts you add, over IMAP.	Your backup as .eml files in ~/Documents/Mailcellar (you can move it) plus a search index. Your mail password (an app-specific password) is stored in the macOS Keychain.	Mailcellar connects directly to your mail provider’s server over an encrypted connection, never through us. Remote images in messages stay blocked unless you click “Show images”; the images then load from the sender’s servers, which can tell the message was opened (known tracking pixels stay blocked).
Nightwatch	macOS’s power log and current sleep blockers (via the built-in pmset tool): sleep and wake times, battery levels, and the names of apps and processes that kept your Mac awake.	Night summaries in ~/Library/Application Support/Nightwatch.	Nothing.
Shareline	The details of the network shares you add; file servers that announce themselves on your local network.	Your share list and an activity log (30 days by default) in ~/Library/Application Support/Shareline. Share passwords are stored in the macOS Keychain.	Shareline connects only to your own servers (SMB, AFP, NFS or WebDAV) to mount shares and to check every so often that they’re reachable. Nothing goes to us.
Mantel	The photos you pick from your Photos library, or image files you choose. It never changes or deletes anything in your library.	Copies of the images you pin in ~/Library/Application Support/Mantel.	Nothing to us. If a photo you pick is stored only in iCloud Photos, macOS downloads it from Apple under your own Apple Account.
Vigil	The list of your own running processes (name, arguments and which terminal tab they run in), only to offer them as jobs to wait for; your power source, battery level and temperature state, to apply your battery rules. It never reads your screen, terminal scrollback or files.	Your vigil history (what each vigil waited for, how long it ran and why it ended) and settings in ~/Library/Application Support/Vigil. If you turn on closed-lid mode, Vigil adds a rule file, /etc/sudoers.d/app.newmac.vigil, that lets only your account run exactly two commands without a password: pmset -a disablesleep 1 and pmset -a disablesleep 0. Adding it asks for your administrator password once, in macOS’s own prompt; Vigil never sees or stores the password. Remove the rule in Vigil › Settings › Closed Lid, or with sudo rm /etc/sudoers.d/app.newmac.vigil.	Nothing.
Satchel	Files you drop in or pick, only for the tool you run. Colour Picker reads the one spot you click with the system eyedropper; Battery Health reads your battery’s condition and cycle count from macOS.	Results in a new dated folder in Downloads/Satchel, or next to the originals if you choose. Originals are never changed, except by the two clearly labelled options: Batch Rename’s “Rename the originals” (with Undo) and Storage Hogs, which moves files you tick to the Trash after asking. Your recent and favourite tools in its preferences.	Your files: nothing. Network Speed, when you run it, uses macOS’s built-in networkQuality test, which exchanges test data with Apple’s servers. Transcribe asks macOS to recognise speech on your Mac; for a language your Mac can’t recognise on-device, Apple’s speech recognition may process the audio on Apple’s servers, as dictation does, under Apple’s privacy policy.
Perch	Files you put on the shelf and new screenshots in your screenshot folder. Whether the microphone or camera is in use by another app (the same signal as the orange dot), so eye breaks can wait until your call ends; it never records either. The commands your terminal shells are running and how long they take, for finished pings, never their output. With Accessibility (asked only when you turn on Homing), the position and size of your windows; with Screen Recording (asked only when you turn on Grab Text), the area of the screen you select, read with Apple’s on-device text recognition.	The shelf (pointers to files where they are; nothing is copied, moved or deleted), break counts, remembered window layouts and settings in ~/Library/Application Support/Perch. Grabbed text is copied to your clipboard.	Nothing.
Quill	Your microphone and your Mac’s sound output (system audio), only while you’re recording a call, which you always start yourself. Quill captures sound only, never your screen, though macOS calls the permission “Screen & System Audio Recording”. Recordings you import.	Recordings (your side and the call as two tracks), transcripts written by Apple’s on-device speech recognition, notes, summaries, to-dos and draft emails in ~/Library/Application Support/Quill. If you turn on AI summaries, your API key is stored in the macOS Keychain.	Nothing by default. Only if you turn on AI summaries and press Summarise is that call’s transcript, with the names you’ve added, sent over HTTPS to the provider you chose (Anthropic, or an OpenAI-compatible service such as OpenAI) using your own key, and handled under that provider’s terms. Audio is never sent. If you choose a server on your own Mac, such as Ollama or LM Studio, the transcript stays on your Mac.
Tally	Which app is in front, and when you’re idle (from macOS’s input timer, without Accessibility or Screen Recording). In each browser you turn on, the current tab’s address, which it asks the browser for through Automation (macOS asks once per browser); Tally keeps only the domain, like github.com. Private windows in Chrome, Arc, Brave and Edge are skipped; Safari doesn’t tell other apps which windows are private. If you turn on the AI agents page, the usage logs that Claude Code (~/.claude/projects) and Codex (~/.codex/sessions) already keep on your Mac: times, token counts, model names and project folder names. They are read locally, never changed, and prompts, replies and code are skipped.	Your time history (start and end, app, and site domain, never full addresses, page titles, window contents, keystrokes or screenshots) in one SQLite file in ~/Library/Application Support/Tally, with your settings and limits, until you delete it. Day and year sheets only if you save them.	Nothing. Tally’s optional MCP server is part of the app and runs on your Mac, read-only. It answers only the AI tool you add it to yourself (such as Claude Code, Claude Desktop, Codex or Cursor), over a local connection; what that tool asks for becomes part of your conversation with it and is handled under its provider’s terms.
Tabulate	Bank and credit-card statement PDFs you open or drop in, read with Apple’s PDFKit; scanned pages with Apple’s on-device text recognition.	Your statements’ transactions, edits and category rules in ~/Library/Application Support/Tabulate; exports where you save them. A statement’s password only if you tick “Remember”, in your login Keychain under that bank’s name; you can forget saved passwords in Settings.	Nothing. Statements are never uploaded.
Kitty	Receipts and invoices you drop in or pick (photos, scans and PDFs), read with Apple’s on-device text recognition; bank statements you import from files (CSV, OFX, QIF, or Tabulate’s export). Kitty never logs in to your bank.	Your books in one folder, ~/Library/Application Support/Kitty/Library by default: kitty.json, your receipts by month, invoice PDFs and the last 14 daily backups. You can move the folder anywhere; if you put it in iCloud Drive, Apple syncs it under your own Apple Account.	Nothing by itself. When you email an invoice or a reminder, Kitty opens a draft in Mail (or your email app) with the PDF attached; it is sent only when you press Send, from your own email account.

Every app also keeps its preferences in ~/Library/Preferences, its license details in ~/Library/Application Support/NewMac (see section 5), and a downloaded update in ~/Library/Caches until it’s installed.

The apps contain no analytics, advertising, tracking or crash-reporting code. If you have chosen to share analytics with Apple in System Settings, macOS may send crash reports to Apple; we don’t receive them.

3. What leaves your Mac

Apart from the connections shown in the table (to your own mail and file servers, to the AI provider you choose in Quill, and to Apple from Satchel’s Network Speed and, for some languages, Transcribe), the apps make only these requests:

• License activation and checks, sent to Dodo Payments’ license server (live.dodopayments.com): your license key and an identifier for this activation. When you activate, the app also sends your Mac’s name and model (for example “Asha’s MacBook Air · Mac14,2”) so you can tell your Macs apart; we can see this name in our Dodo dashboard. The app re-checks the license about once a week when you’re online, and contacts the server again when you choose “Deactivate this Mac”. Your Mac’s name often includes your first name; you can change it in System Settings → General → About before activating.
• Update checks, sent to the app’s own address (for example nook.newmac.app/version.json) shortly after launch and then every six hours. The request includes the app’s name and version. If a newer version exists, the app downloads it from the same address and checks its digital signature before installing. You can turn off automatic downloading and installing in each app’s Settings; the app will still tell you when an update is available.

Like any internet request, these reveal your IP address to the server that receives them. Nothing else about you, your Mac or your use of the app is sent. If you open a link from inside an app (for example a link in an email in Mailcellar, or our support address), it opens in your browser or mail app as usual.

4. macOS permissions

macOS asks you before any app can use protected data or features, and each of our apps explains why before it asks. You can change any permission at any time in System Settings → Privacy & Security; the app keeps working for anything that doesn’t need it.

Permission	Asked for by	Why
Files and Folders	Nook, DevSweep, Transmute, Mailcellar, Satchel, Perch, Kitty	To see your Desktop, Documents, Downloads or external drives; Transmute and Satchel to save results beside your files or in Downloads; Mailcellar to save its backup in Documents; Perch to show new screenshots saved to your Desktop; Kitty to read receipts you drop in from those folders.
Screen Recording	Reelcast, Quill, Perch (optional)	Reelcast to record your screen; Quill to capture your Mac’s sound output during a call (audio only; macOS calls this “Screen & System Audio Recording”); Perch to read the area you select with Grab Text.
Microphone	Utter, Quill, Reelcast (optional)	Utter for dictation; Quill for your side of a call while you record; Reelcast to record your voice if you turn it on.
Camera (optional)	Reelcast	For the camera bubble in a recording.
Speech Recognition	Utter, Quill, Satchel	To turn speech into text: Utter and Quill on your Mac only; Satchel’s Transcribe on your Mac wherever macOS can (see section 2).
Accessibility	Ribbon, Utter, Clipnest (optional), Perch (optional)	Ribbon to move and resize windows; Utter to insert text where you’re typing; Clipnest to paste a clip into the app you were using; Perch to put windows back with Homing.
Automation (optional)	Tally	To ask each browser you turn on for the current tab’s address, so Tally can count time per site. macOS asks once per browser.
Administrator password (optional, once)	Vigil	To add the closed-lid rule described in section 2. macOS asks for it in its own prompt; Vigil never sees it.
Photos	Mantel	To import photos you pick. macOS calls this “Full Access”; Mantel only reads.
Local Network	Shareline	To find file servers on your network and check they’re reachable.
Notifications	Shareline, Vigil, Tally	Shareline when a share drops or comes back; Vigil when a job you’re waiting on finishes; Tally when you near or reach a limit.
Open at login	Clipnest, Utter, Ribbon, Nightwatch, Shareline, Mantel, Vigil, Perch, Tally	Only if you switch it on, so the app is ready after you log in.

5. Purchases and licensing

Purchases are handled by Dodo Payments, our reseller and Merchant of Record. Dodo collects your name, email address, billing country or address and payment details, processes the payment, charges any sales tax or GST, and issues your invoice and license key. Dodo uses this data as an independent controller under its own privacy policy. We never see or store your full card or bank details.

Through Dodo’s dashboard, we receive and can see:

• your name, email address and country;
• what you bought, the plan (1, 3 or 5 Macs), the price, currency, tax and order number;
• your license key, its status (active, disabled, refunded), and each activation’s Mac name and model and when it was activated.

We use this only to deliver and support your license, handle refunds and disputes, prevent license abuse, and meet tax and accounting duties. We don’t send marketing email unless you have separately asked for it, and we never sell or rent personal data.

On your Mac, each app keeps its license details (the key, the activation identifier, the product name, the email address Dodo returns for the key, and when the license was last checked) in a small file in ~/Library/Application Support/NewMac. It is a plain file protected by your Mac user account, not by the Keychain.

Legal bases (for people covered by the GDPR or UK GDPR): performing our contract with you (licensing and support), our legitimate interests in preventing abuse and keeping our services secure, and legal obligations (tax and accounting records).

6. Support emails

If you email [email protected], we receive your email address, your message and anything you attach. We use it only to answer you. Please don’t send files, mail or recordings you don’t want us to see; we’ll ask if we need something specific. Our email is hosted by [EMAIL PROVIDER], which processes it on our behalf.

7. This website

• Hosting. newmac.app and the app sites are hosted on Cloudflare, which processes standard request data (such as IP address, browser type, and the page requested) to deliver the site and protect it from attacks, under Cloudflare’s privacy policy. Cloudflare gives us aggregated traffic statistics; we don’t use them to identify anyone. The same applies when you download an app or the one-line install script.
• Fonts. Our pages use the fonts already on your device. They load nothing from Google Fonts or any other font or script service.
• Checkout. “Buy” buttons take you to Dodo Payments’ checkout, which is covered by Dodo’s privacy policy, not this one.

The site has no analytics, advertising or social-media trackers, and no forms.

8. Cookies and local storage

Our pages don’t set cookies and don’t use your browser’s local storage. Cloudflare may set a strictly necessary security cookie when it needs to tell people and bots apart. Dodo’s checkout uses its own cookies to process your payment. Because none of this is used for advertising or analytics, we don’t show a cookie banner.

9. How long data is kept

• On your Mac: until you delete it. To remove an app completely, drag it to the Trash and delete its folder in ~/Library/Application Support, its license folder in ~/Library/Application Support/NewMac, and its file in ~/Library/Preferences (named after the app, for example app.newmac.transmute). Files you created, such as recordings or mail backups, are yours to keep or delete. Passwords and keys saved by Mailcellar, Shareline, Quill or Tabulate can be removed in Keychain Access. If you set up Vigil’s closed-lid mode, remove its rule in Vigil’s Settings before deleting the app (or later with sudo rm /etc/sudoers.d/app.newmac.vigil).
• Purchase and license records: kept by Dodo and visible to us for as long as your license exists, and afterwards for as long as tax, accounting and legal obligations require.
• Support emails: deleted within [RETENTION PERIOD, e.g. 24 months] of our last message, unless we need them longer for a refund, dispute or legal reason.
• Website request logs: kept by Cloudflare under its own retention rules. We don’t keep separate logs.

10. Your rights

Most of your data never reaches us, so most of it is entirely under your control on your Mac. For what we do hold (purchase records and support emails), you can ask us at [email protected] to:

• tell you what personal data we hold about you and how we use it, and give you a copy;
• correct it or bring it up to date;
• delete it (we may need to keep some records for tax or legal reasons, and deleting your purchase record also ends your license);
• stop or restrict a particular use of it, or object to it.

We will answer within 30 days, and we may need to confirm you own the purchase email address before acting. Exercising your rights is free and won’t affect how we treat you.

India (DPDP Act, 2023)

You have the right to information about your personal data, to correction, completion, updating and erasure, to grievance redressal, and to nominate someone to exercise your rights if you die or become incapacitated. Where we rely on your consent, you can withdraw it at any time. If you aren’t satisfied with our response, you can complain to the Data Protection Board of India.

EU, EEA and UK (GDPR and UK GDPR)

You have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

California (CCPA, as amended)

In the past 12 months we have collected identifiers (name, email address, IP address), commercial information (your purchases) and device information (your Mac’s name and model) for the purposes in section 5. We don’t sell personal information or share it for cross-context behavioural advertising, and we don’t use sensitive personal information to infer anything about you. You can ask to know, delete or correct your personal information, and we won’t discriminate against you for asking.

11. International transfers

We are based in India. Dodo Payments, Cloudflare and our email provider may process data in other countries, including India, the United States and the European Union. Where the law requires it, we rely on the safeguards these providers offer, such as standard contractual clauses.

12. Security

• Your data stays on your Mac, protected by your user account and, if you turn it on, FileVault disk encryption.
• Mail and network-share passwords, Quill’s AI provider key and the statement passwords you ask Tabulate to remember are stored in the macOS Keychain.
• License checks and update downloads use encrypted HTTPS connections, and every update is checked against our digital signature before it is installed.
• Only the people who run NewMac can access our Dodo dashboard and support mailbox.

No system is perfectly secure. If we learn of a breach affecting your personal data, we will tell you and the relevant authorities as the law requires.

13. Children

Our apps are general-purpose tools, not made for children. We don’t knowingly sell to or collect personal data from anyone under 18 (or the age of digital consent where you live) without a parent’s or guardian’s involvement. If you think a child has bought from us, contact us and we’ll delete their purchase data.

14. Changes to this policy

If an app starts handling data in a new way, we will update this page before that version is released and change the date at the top. For significant changes, we will also mention it in the app’s release notes.

15. Contact and grievances

Questions, requests or complaints about privacy: [email protected].

Grievance Officer (India): [GRIEVANCE OFFICER NAME], [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [email protected]. We aim to resolve complaints within 30 days.

See also our Terms of Use and Refund Policy.