Privacy policy
This policy explains the personal data we process when we sell and license Meow. Your chats aren't part of it: they travel only between your Mac and the model provider you choose, and never reach us.
1. Who is responsible
The controller of your personal data is [seller legal name — to be added], an individual trading as Meow in the United Kingdom.
- Address: [seller business address — to be added]
- Email: support@meow.torabit.ai (also for privacy requests)
2. What this policy covers
This website, the license server, payments and support. It doesn't cover the chat content Meow handles on your Mac: the app sends those messages straight to the model provider you chose (for example DeepSeek or Anthropic), under your own account, and we never receive them. The full picture is on where your data goes.
3. What we process, why, and on what basis
| Data | Purpose | Lawful basis |
|---|---|---|
| Payment details from Stripe: email, name (if you give one at checkout), country, plan, amount, currency, order and payment IDs, payment status | Fulfilling your order, issuing your key, refunds and disputes, accounting | Contract; legal obligation (accounting and tax) |
| License data: a hash of your key (we don't store the key itself), plan, status, end date, updates-until date | Checking, renewing and upgrading licenses | Contract |
| Device data: a hash of the device ID, the Mac's name, platform, app version, first and last seen, active or not | Enforcing Mac limits, issuing leases, spotting shared or abused keys | Contract; legitimate interests (preventing abuse) |
| The email you enter to recover a key | Sending you the keys under that address | Contract |
| Waitlist: email, country, language | Telling you when we sell in your region or release for Windows | Consent, which you can withdraw any time |
| Emails you send to support | Answering you and handling requests | Contract; legitimate interests |
| IP addresses and request logs for the site and license server | Rate limits, security, abuse prevention | Legitimate interests |
Card numbers and WeChat Pay or Alipay account details are handled by Stripe and the payment providers; we never see them. We don't collect message content, contact lists, nicknames, WeChat IDs or your API keys. The payment and license data is needed to sell you a license; without it we can't complete a purchase. Joining a waitlist is optional.
4. Who processes data for us
- Stripe: payments, refunds and disputes, and your receipt.
- Cloudflare: hosting for this website and the license server, network delivery and security.
- Our email delivery provider: sending license keys and key-recovery emails.
They act on our instructions under contract. We don't sell personal data, use it for advertising or share it with anyone else unless the law requires it.
5. International transfers
We are in the UK. The providers above may process data outside the UK, including in the United States. Transfers from the UK rely on UK adequacy regulations or on safeguards such as the UK International Data Transfer Agreement or Addendum.
If you're in mainland China: personal data you give us when you buy, activate a license or contact us is transferred outside mainland China, to the controller named in section 1, for the purposes, in the ways and of the kinds described in this policy. You can exercise your rights as set out in section 8. By buying, activating a license or joining a waitlist you give your separate consent to this transfer.
6. How long we keep it
- Payment and order records: 6 years after the transaction, for accounting and tax.
- License and device records: while the license is valid, then deleted or anonymised within 12 months after it ends or is revoked; a lifetime license's records for as long as it exists. Deactivated devices: deleted within 12 months of deactivation.
- Waitlist: until we've told you, or 24 months, whichever comes first; or sooner if you ask.
- Support emails: 24 months after our last exchange.
- IP addresses and request logs: normally no more than 30 days.
7. Security
Everything travels encrypted. The license server stores only a hash of your key, and the device ID is hashed on your Mac before it's sent, so the raw hardware ID never leaves your computer. Only we have access to this data.
8. Your rights
Under the UK GDPR and the Data Protection Act 2018 you can ask to access, correct or erase your personal data, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Users in mainland China have the rights the Personal Information Protection Law gives them, including to be informed, to decide, to access, copy, correct, complete and delete their information, to withdraw consent and to ask for an explanation.
To use these rights, email support@meow.torabit.ai. We reply within one month, and may need to confirm it's you (for example, by replying from the email you paid with).
If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO, ico.org.uk) or to the data protection authority where you live.
9. Cookies and analytics
This website sets no cookies, runs no analytics or ad tracking, and loads every file from our own domain. A license key you type on the license page is used only to ask the license server about it and isn't stored in your browser. Stripe's checkout page is on Stripe's site, under Stripe's own cookie and privacy policies.
10. Children
Meow is for people aged 18 or over. We don't knowingly collect personal data from anyone younger, including children under 14; if we find we have, we delete it.
11. Automated decisions
We make no automated decisions with legal or similarly significant effects on you. Deactivating the least recently used Mac when you reach the limit is part of the license rules, and you can change which Macs are active on the license page at any time.
12. Changes
We may update this policy and will show the version date on this page. We'll give notice on the website before significant changes, and ask again for consent where the law requires it.