Draft, pending legal review. Not in force. Words in brackets are facts still to be confirmed.
Privacy
Your tasks stay on your Mac. This page lists the few things that do leave it, where they go, and how long they are kept.
Effective [EFFECTIVE DATE]
Who is responsible
SARGA task is made under the SAR.GA name by [SELLER ENTITY], [REGISTERED ADDRESS]. Questions and requests: [CONTACT EMAIL].
Grievance contact: [GRIEVANCE OFFICER NAME AND EMAIL, IF REQUIRED].
The short version
- No account and no login in the app.
- Tasks, steps, notes and attachments never leave your Mac.
- The app goes online to activate and check its license, and to send feedback you write.
- Usage counts, crash reports and website analytics are all off until you turn them on.
- Polar handles payment. We never see your card.
The Mac app
- Your work
- Plain files in the app’s Application Support folder on your Mac. Attached files are copied there. Export makes a complete copy in a folder you choose, even in read-only mode.
- Apple Reminders
- Optional. With your permission, dated tasks are copied to a Reminders list called SARGA so alerts reach your other Apple devices. From there Apple handles them under your iCloud settings.
- Calendar
- Optional. With your permission, the app reads today’s meetings on your Mac to offer prep and follow-up tasks. Meetings are not sent anywhere.
- What Helped
- Optional and off by default. A record of stuck actions you used and whether they helped. It stays in your data folder, and you can delete it in Settings.
- License checks
- Activation and a check about once a day send your license key and a device identifier to our license service, which asks Polar whether the key is valid. A checked license works offline for up to 7 days.
- Feedback
- Only what you type, plus an email address if you add one. App and macOS version are included only if you tick the box to share them.
- Usage counts
- Off by default. If you turn them on: counts of app opens, captures, completions and resumes. No task content or identifiers. Turning them off stops future sends.
- Crash reports
- Off by default and separate from usage counts. If you turn them on, a report holds a fixed error code, app and macOS version and technical addresses. No task content. The reporting service (Sentry) sees your network address when a report arrives.
This website
- Waitlist
- Your email, the time you joined, the consent sentence you agreed to, and beta interest if you tick it. We send one email to confirm you joined. The record deletes itself after 12 months, and you can remove it sooner yourself or by asking us.
- Feedback form
- The same rules as feedback from the app.
- Analytics
- Off by default and never on with Do Not Track. If you allow it: daily counts of page views and a few actions, such as section reached or button pressed, with a broad device size and referrer type. Never full URLs, query strings, email or what you type. No cookies. Your choice is saved in your browser’s local storage, and a random visitor number is saved there only after you allow analytics.
- Error reports
- A separate switch, off by default, also respecting Do Not Track. Reports hold a fixed error code and the file and line, nothing you typed.
Your network address is used to limit repeated sign-ups and messages. It is kept only as a salted hash that expires within two hours, never with your email or message.
Payments
Purchases run through Polar’s hosted checkout. Polar collects your payment details and email, sends your license key, and runs the customer portal where you manage billing and release a Mac. Polar’s own privacy policy applies there. We receive what Polar shares with us about the purchase: [DATA RECEIVED FROM POLAR].
Who handles data for us
- Polar: payments, license keys and the customer portal.
- Resend: sends our emails and keeps the waitlist contact list.
- Vercel: website hosting and the functions behind it.
- Convex: the database for the waitlist, feedback, license records and analytics counts.
- Sentry: crash and error reports, only if you turn them on.
- Apple: Reminders and Calendar, only if you allow them, under your Apple account.
Server locations and transfers: [REGIONS AND TRANSFER SAFEGUARDS].
How long we keep it
- Waitlist
- 12 months, then deleted automatically.
- Feedback
- Up to 180 days.
- Rate-limit hashes
- Up to two hours.
- Analytics
- Per-visitor experiment rows 90 days. Daily totals: [RETENTION PERIOD].
- License records
- [RETENTION PERIOD].
Your choices
- Everything in the app can be exported, and deleting the app’s data folder removes it.
- Turn usage counts, crash reports or website analytics off at any time.
- Ask us to see, correct or delete what we hold about you at [CONTACT EMAIL].
- Your rights under the law that applies to you: [RIGHTS UNDER APPLICABLE LAW].
Changes
When this page changes, the effective date at the top changes with it. [HOW MATERIAL CHANGES ARE ANNOUNCED].