PRIVACY POLICY
Privacy policy
This describes what personal information XY Space Inc. collects through the Memory Notch application and through memorynotch.app, why, and for how long. It is separate from the licence agreement, which covers what you may do with the Software; this page covers your data instead.
1. The Software runs on your Mac, not on a server
Recording, transcription, and note-writing all happen locally, on your own Mac. Your audio, transcripts, and notes are never sent to XY Space or to any third party, and XY Space has no way to see them. Transcription runs on models bundled inside the app, so it needs no network connection to work.
If a bundled model file is ever missing — from a damaged or incomplete install — Settings offers to download the missing one instead of leaving transcription broken. That download goes to the model's host, Hugging Face, not to XY Space: it carries no licence key, no email address, and no account identifier, and XY Space neither sees nor receives it. A normal install never takes this path.
2. The one request the Software makes
The Software periodically downloads a signed list of revoked licences, so that a refunded licence stops unlocking it (see the licence agreement, section 7). The app sends no licence key, no email address, no account identifier, and nothing it derives about your Mac. Because it always asks for the entire list rather than a single entry, the request cannot reveal which licence is asking.
Like any request to a web address, this one still travels over the internet and so still carries your IP address and a standard browser header naming your operating system version — that is true of every request any app or browser makes, not something particular to this one, and XY Space does not use it to identify you or connect it to a licence.
Other than the model-recovery download described in section 1, this is the only network request the Software makes. It does not check for updates, and it contains no telemetry, no analytics, and no advertising.
3. What buying a licence stores
Card numbers and other payment details are entered on a page hosted by Stripe and go to Stripe directly. They never reach XY Space's servers.
Once Stripe confirms your payment, the Website stores: your email address, and an internal reference linking the licence to your Website account, if you have one; the Stripe Checkout session ID for that payment; the amount and currency paid; and the licence itself — the key, whether it is active or revoked, and the date its free updates run to — along with the related dates: when the licence was created, when it was claimed on the Website, when it was revoked (if it was), when this payment was made, what the update window was extended to, and when the licence email was sent.
This is kept so a licence can be found again later — to resend a key you have lost, to process a refund, or to record a renewal — and so XY Space's books are accurate.
The licence key itself also contains your email address, in plain text, as part of what makes it a valid key (see the licence agreement, section 3). The app displays this as “Licensed to [your email]”. Anyone you give the key to, or anywhere you post it, discloses that email address along with it — this is a property of the key, not of anything the Website does with it.
4. Accounts and sign-in
An account is optional. The Software works fully without one, and buying a licence does not require one. Signing in to the Website is by a link sent to your email address; there are no passwords. Signing in stores your email address and a session identifying you as signed in. There are no tracking cookies and no analytics on the Website.
5. Email
Licence-delivery emails and sign-in links are sent through Cloudflare's email service. Your email address is used only to deliver these messages to you.
6. How long records are kept
Licence and purchase records are kept for as long as the licence exists. A licence is perpetual, so this is, in practice, indefinitely: the record has to be findable years from now to resend a key, confirm a renewal, or process a refund.
7. Devices
The Software does not track, count, or report which or how many devices use a licence key. The licence agreement limits use to five personal devices, but that limit is a term of the agreement, not something the Software enforces or the Website records — no per-device identifier is ever sent, collected, or stored.
8. No selling, no sharing, no advertising
XY Space does not sell or share your personal information with third parties for their marketing purposes. XY Space does not run third-party analytics or advertising, on the Website or inside the Software.
9. Your rights
You can ask what XY Space holds about you, or ask for it to be deleted, at the address in section 12.
Deleting your purchase record does not disable a licence key already installed on your Mac. The Software verifies a licence entirely offline, from a digital signature, so the record kept on the Website and the working copy of the Software on your Mac are separate things: deleting one does not touch the other. To stop a licence key from working, XY Space revokes it, which the Software checks for through the download in section 2 and which takes effect within 30 days, usually much sooner — the same 30 days within which you may also ask for a refund.
10. Changes to this policy
XY Space may update this policy. A change applies from the date it is posted at this page's address. Continuing to use the Software or the Website after a change means you accept the updated policy.
11. Governing law
This policy is governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to its conflict of law provisions. The courts of the Province of Ontario shall have exclusive jurisdiction over any dispute arising under or in connection with it, and each party irrevocably attorns to the jurisdiction of those courts.
12. Contact
Privacy enquiries: hello@xyspace.dev
XY Space Inc.
Ontario, Canada