Privacy Policy

1. What we don't collect

The app does none of the following.

• It does not collect analytics data such as usage statistics or crash reports.
• It does not track you or your device, and it shows no ads.
• There is no account or sign-in. Your license is checked with a single key.
• It does not send the contents of the files you inspect, your project source or your build output to the seller.

2. Handling of files

The files handled by artifact inspection and profile management (IPA, APK, AAB, .mobileprovision) are read only on your Mac. Their contents and anything derived from them (bundle ID, signing certificates, permission lists and so on) are only shown in the app window and are never sent anywhere. Artifact inspection does not modify the original file. Files created by building or exporting are saved only to the folder you choose.

3. Network use

The app connects to the network only in the cases below. Requests to Apple and Google go straight from your Mac, without passing through the seller's servers.

Feature	Where it connects	What is sent
Listing, downloading, creating and renewing profiles; listing and registering devices; App Store releases	Apple App Store Connect API (api.appstoreconnect.apple.com)	An authentication token signed by the app, plus the values you choose or enter (profile type, bundle ID, certificate, device name, UDID, store listing, screenshots and so on)
Google Play uploads and store releases	Google Play Developer API (androidpublisher.googleapis.com · oauth2.googleapis.com)	Authentication requests signed with your service account key, plus the AAB, APK, store listing and screenshots you choose
Building, app upload, device install	Wherever Apple's and Google's developer tools (xcodebuild, gradle and so on) connect	These tools communicate in their own way. Repositories that dependencies are downloaded from (Maven and so on) are included here
License activation, checks and deactivation; the list of registered Macs; getting your key again or changing it; starting a payment; the billing management link; the free period check	The seller's license server	Section 5
Checking for updates · downloading the installer	The update list the seller publishes (shouarchive.beakbig.com) · the installer (download.beakbig.com, Cloudflare R2)	An ordinary web request (a User-Agent containing the app name and version). It only downloads the update list and sends nothing else. When you download the installer, your IP address and User-Agent are processed by Cloudflare to deliver the file. The app asks on its second launch whether to check automatically; if you turn it on, it checks the list once a day. You can turn it off in Settings › General.
Fetching news	The news list the seller publishes (shouarchive.beakbig.com)	An ordinary web request (a User-Agent containing the app name and version). It only downloads the news list and sends nothing else. The app fetches it when it opens and when you open the News tab (at most once every 6 hours), and when you click Refresh. You can turn off automatic fetching in Settings › General.

• Your App Store Connect .p8 private key and Google service account key stay on your Mac. The app signs the tokens needed for requests locally and never sends the keys themselves anywhere, including to Apple and Google.
• How Apple and Google handle these requests is governed by each company's developer terms and privacy policy.

4. What is stored on your Mac

• App settings (theme, language, text size, project list and so on) are stored in macOS user defaults and the Application Support folder.
• The contents of API keys are stored in this Mac's keychain and are not synced through iCloud Keychain. For keys chosen as files, only the file's location is remembered.
• Profile activity history and build history stay local, and you can clear them in the app.
• The news list the News tab downloads, and which items you have read, are stored only on this Mac.
• Your license key and check results are stored on this Mac. What the license server stores is described in Section 5.
• The app does not delete files you placed yourself, such as .p8 files and build output.

5. License checks — what is sent

The app sends the following values to the license server only to register and check your license and update period. The website’s “get your key again”, “change your key”, “erase my data” and payment-complete pages also send only the values listed below. They are not used for any other purpose, and everything is sent over HTTPS.

Value sent	What it is	Why it is needed
License key	The key that identifies the license you bought	To check that the license is valid and when the update period ends
Purchase email	The email address you paid with. Sent only when you register in the Enter key window and when you ask for your key again	To check that the key you entered belongs to that purchase, and to send the key again only to the purchase address
Device identifier	The first 32 characters of a SHA-256 hash of this Mac's hardware UUID with an app-specific prefix. The raw hardware UUID, host name and user name are not sent. If the hardware UUID can't be read, a random installation id created at first launch is used in the same way. The value stays the same even if your Mac's name or network changes	To check whether the number of devices the license allows (2 Macs) has been exceeded
Mac model	This Mac’s hardware model name (e.g. MacBook Pro (14-inch, Nov 2023)). Not your Mac’s name or user name	To tell the registered Macs apart in the list and let you choose which one to deactivate when all slots are taken
App version	App version and build number	To check whether that version was released within your update period, and to troubleshoot problems
Access logs	Time, action (activation, check, deactivation and so on), result, license id, a hash of the device identifier, app version and a short reason. No IP address. Deleted automatically after 30 days	To respond to outages and troubleshoot problems

What is sent, and when.

• Activation — license key, purchase email (when registering in the Enter key window), device identifier, installation identifier, Mac model, app version
• License check — about every 12 hours: license key (if any), device identifier, installation identifier, Mac model, app version
• Free period check — about every 12 hours (even without a license). Nothing is sent except a User-Agent with the app name and version, and the server does not record these requests
• Registering the Mac you paid on (Register This Mac in the dialog after paying from the app) — device identifier, installation identifier, Mac model, app version
• Registered Macs list and deactivating another Mac — license key, device identifier, installation identifier, the list id of the Mac to deactivate
• Deactivation — license key (if the app has it), device identifier, app version
• Starting a payment (purchase or renewal) — license key (for renewals), device identifier, installation identifier, app version, language (for purchases). The payment itself takes place on Paddle’s checkout screen
• Billing management link (Settings › License › “Manage billing…”) — license key (if present), device identifier, installation identifier, app version. The link we return is not stored in the app
• Getting your key again (app and website) — purchase email, language
• Changing your key (app and website) — purchase email and language when you ask for the confirmation email; the confirmation value and language when you change the key with the link in that email
• Erasing your data (website) — purchase email and language when you ask for the confirmation email; the confirmation value and language when you erase with the link in that email
• Buying on the website and the payment-complete page — the language when you start a purchase; after payment, the transaction id and a payment confirmation value, used only to show the license key you just bought on that page

What is stored on the server. Device and installation identifiers are not stored in their original form — only as hashes (SHA-256 · HMAC-SHA256). License keys are stored as a lookup hash together with an encrypted copy (AES-256-GCM) so the same key can be sent to you again; the decryption key is kept in the server’s secret settings, separate from the database, so the database alone does not reveal any license key. Payment confirmation values and email addresses used to ask for a key again or to change a key are stored only as hashes. Key-change confirmation values and replaced keys are also stored only as hashes; replaced keys are kept so we can tell a request that uses one that the key has changed. The Mac model, app version and purchase email are stored as they are; the purchase email is used to look up licenses and send keys. From Paddle we receive the customer, transaction and auto-renewal ids, the auto-renewal status (on or off), the price id and the date updates end. We do not receive names, addresses or card details.

What is not stored. IP addresses, request headers and request bodies, names and addresses, card numbers, marketing consent, usage statistics. The app does not send the macOS version.

• Values that could identify you (user name, a name you gave the device and so on) are not used for license checks.
• The contents of files (IPA, APK, AAB, .mobileprovision) and artifact inspection results are not sent to the license server.
• No advertising, tracking or behavioral analytics SDKs are included in the app.

6. The license server and retention

• The license server is run by the seller, Beakbig (business registration no. 613-40-01820) · contact support@shouarchive.beakbig.com. The server uses Workers from Cloudflare, Inc. (USA), and the database is in the Asia-Pacific region (the exact location within that region is determined by Cloudflare).
• The values sent and the license status (issued, update period, revoked) are kept for as long as the license exists. The license remains after the update period ends, so it is not deleted then. If a license is revoked because of a refund or chargeback, its records are deleted or anonymized 2 years later (for now the operator does this manually), or when you ask for deletion. Short-lived records are deleted automatically every day — access logs after 30 days, payment notification (webhook) processing records after 90 days, key delivery records after 365 days (only a hash of the recipient address is kept), unprocessed pending issuances after 7 days, records linking a payment to a Mac (payment confirmation records) after 30 days, records of deactivating other Macs after 30 days, requests to get or change a key after 1 day (only a hash of the email address is kept), and key-change confirmation links after 30 days (only a hash of the confirmation value is kept). You can erase your records yourself on the Erase my data page after confirming your purchase email (Section 11) — once erased, the app can no longer be used with that license, and only the payment records (transaction id, type, time) are kept for 5 years as required by the E-Commerce Act.
• The values stored on this server are the same as those listed in Section 5. Payment method details, card numbers and bank accounts are not stored.
• The server runs on Workers from Cloudflare, Inc. (a US company) in the Cloudflare data center closest to you, and the database is in the Asia-Pacific region (the exact location within that region is determined by Cloudflare). Cloudflare processes the license server and this site for transport and security purposes; the seller has Cloudflare's request logging turned off and does not store IP addresses. This site uses Cloudflare Web Analytics for visit statistics — it uses no cookies, local storage or device identifiers, and keeps only aggregate figures such as page address, referrer, browser and country, so the seller cannot see records of individual visitors. Payment is handled by Paddle as merchant of record (Section 7).
• Every email the seller sends goes only to your purchase email address, through the email delivery service Resend, Inc. (USA). Resend receives only the recipient email address and the body of the email, which may contain the license key, a confirmation link, or the model and registration time of a newly registered Mac. The emails we send: license key · key resend · key-change confirmation · new key · new-Mac registration alert · renewal payment notice · 7-days-before-renewal notice · advance notice of a renewal price change · data erasure confirmation · purchase-email change alert (to the previous address). We send no marketing email.
• To download the records stored on the license server or ask for them to be deleted, contact us as described in Section 11.

7. Payment and Paddle

Payment is handled by Paddle (paddle.com — Paddle.com Market Limited, London, UK; for US customers, Paddle.com Inc., USA) as the Merchant of Record. In this document, “Paddle” refers to both companies. Paddle becomes the seller to the customer and takes care of verifying payment methods, calculating and charging tax, issuing receipts and processing refunds. Payment method details are kept by Paddle and never pass through this site's servers.

• What Paddle collects and processes — name, address, email address, payment method details and payment history, billing address, tax number, IP address, location, device and browser information, consent records and so on. These are processed under the Paddle Privacy Policy, and Paddle keeps transaction data for 5 years to meet legal obligations.
• What is passed to the seller (me) — the buyer's name, address and email address, purchase history, and the transaction analytics visible in the dashboard. Full card numbers and security codes are not passed on. No special categories of sensitive data are shared.
• The seller and Paddle are each independent data controllers for this data. The seller uses the information received only to issue licenses, confirm payments and respond to customer inquiries, and for no other purpose.
• Paddle's script on the payment pages — this site's checkout page and payment method page (where you update your payment method when a renewal payment fails) load Paddle's payment script (Paddle.js) to open the payment window. While it runs, Paddle processes browser and device information and your IP address under its own privacy policy. Apart from a cookieless visit statistics script (Cloudflare Web Analytics, Section 6), the seller places no other scripts, and no cookies, advertising or tracking tools, on this site, and Paddle's script is not loaded unless you open one of those two pages.
• For a refund, send your payment email and order number to support@shouarchive.beakbig.com and the seller requests it from Paddle. Questions about the payment itself, such as receipts and tax, are also handled by Paddle's customer support. Refund terms are described in the Refund Policy.
• The seller terms under which Paddle acts also apply: Paddle Terms of Service, Paddle Buyer Terms.

8. Third-party libraries

• Lottie — an open-source library for showing loading animations. It is used only for display and neither connects to the network nor collects data.
• Sparkle — an open-source library that checks for and installs app updates. It is used only for the update check in Section 3, and sending system information is not turned on.

There are no other third-party SDKs that communicate over the network.

9. Sharing and sale

The only parties the seller shares personal information with are the license server (Cloudflare) and key delivery service (Resend) in Section 6 and Paddle in Section 7; it is not sold or handed to any other third party. Communication with Apple and Google described in Section 3 happens at your request, using your own accounts and keys. The app installer (DMG) is downloaded from Cloudflare R2, and the seller does not collect download records.

10. Children

ShouArchive is a tool for software developers and is not directed at children. We do not knowingly collect personal information from anyone under 14.

11. Your rights

You have the right to access, correct and delete your personal information, to restrict its processing, and to object to its collection (stopping processing based on decisions).

• Erasure — records on the license server — you can do this yourself on the Erase my data page. Enter your purchase email to receive a confirmation email (valid for 24 hours); clicking “Erase” in the link from that email revokes every license under that email, deactivates all registered Macs, deletes the purchase email, stored keys, delivery records and confirmation links, and cancels automatic update renewal. Erased licenses cannot be restored. Payment records (transaction id, type, time) are kept for 5 years as required by the E-Commerce Act and then deleted.
• Access, correction and restriction of processing, and erasure when you cannot use the erase page (for example because you no longer have access to your payment email) — send your request to support@shouarchive.beakbig.com. After verifying your identity, we handle it within 10 days of receiving the request and let you know the result.
• Payment information kept by Paddle — handled under Paddle's policies and procedures. Please make requests directly to privacy@paddle.com or at paddle.net.
• What you can refuse — license checks are a required process for using a license you bought. If you refuse them, you cannot use the features a license unlocks.
• Requests made by a legal guardian or agent are handled after the authorization is confirmed.

This policy is written based on the Personal Information Protection Act of the Republic of Korea. Users in the EU, EEA and UK are equally guaranteed the rights provided by the GDPR and UK GDPR.

12. International transfers

• Recipients and countries — license records are processed by Cloudflare, Inc. (USA), payment information by Paddle (UK and USA, Section 7), and key delivery emails by Resend, Inc. (USA). Installer downloads go through Cloudflare R2 (Cloudflare, Inc., USA), and site visit statistics are also processed by Cloudflare.
• Storage location — license records are stored in a database in the Asia-Pacific region (Cloudflare D1), and requests are processed in the Cloudflare data center closest to you.
• When and how — sent over the network when you activate, when your license is checked, when you view the registered Macs, when you ask for your key again or change it, when you erase your data, when you start a payment (purchase or renewal) or request the billing management link, and when any of the emails listed in Section 6 is sent to you.
• Items, purposes and retention — as described in Sections 5 and 6.
• Safeguards — Cloudflare follows its data processing terms (including the EU Standard Contractual Clauses), and Paddle, as Merchant of Record, processes payment information under its own privacy policy.
• How to refuse, and the consequences — if you do not use a license, no transfer takes place. In that case, after the trial period only profile management, artifact inspection, API key management and viewing history can be used.
• Requests to Apple and Google go directly to each company's servers (Section 3).

13. Changes

If this policy changes, the new version is posted on this page with a new effective date. When the way the app handles data actually changes, it is also noted in the app's update notes.

14. Contact

Send any questions about this policy or the app's handling of data to support@shouarchive.beakbig.com.

Data protection officer — Representative Hyunjin Kang · support@shouarchive.beakbig.com

Information received by support email — emails you send to support@shouarchive.beakbig.com (sender address, subject, body and attachments) are used only to answer your inquiry and solve the problem, and are kept in the seller's mailbox. Please make sure attachments do not contain key files (.p8) or sensitive information.

Effective: October 29, 2026 · Developer and seller: Beakbig