Privacy policy

This policy explains what personal data Langouste — the macOS app that switches keyboard layouts — and the langouste.app website process, why, where it is kept and what rights you have. It follows the Law of Ukraine «On Personal Data Protection» and, for users in the European Union, the General Data Protection Regulation (GDPR).

Who processes your data

The controller of your personal data is the owner of the Langouste service («we»). You can reach us about personal data at [email protected].

What you type stays on your Mac

Langouste reads nothing you type: it only matches the shortcuts you recorded. The free app works offline and sends nothing anywhere. Data leaves your Mac only when you sign in for Pro and when the Pro licence is renewed, and, if the app offers them and you agree, in a diagnostic report or a usage journal (see below).

What data we process

• Account: the e-mail address, name and identifier of the account you sign in with (Google, Apple, Facebook or an e-mail link); when the account was created.
• Plan and purchases: your plan, subscription status, payment and renewal dates, Paddle order identifiers. We never receive or store payment details such as card numbers.
• Devices: an identifier for each device where you signed in to Langouste, its name, operating system and when it last checked the licence.
• Support requests: the name, e-mail address, topic and message you send us through the form or by e-mail.
• Your cookie choice: what you chose, when, under which version of this policy and from which country — no IP address.
• Diagnostic reports: the log and, after a crash, the crash report you choose to send, with the app and system versions, the processor and memory, an optional comment and a random identifier of the installation (see Diagnostic reports).
• Usage journal: if the app offers it and you agree, a journal of how you use the app and a random identifier of the installation; your account if you are signed in.
• Technical data: IP address and request times in server logs, and an account event log (sign-ins, device connections, purchases).

Why, and on what basis

• To provide the service — sign-in, licence, devices, payment, support. Basis: performing our contract with you (the Terms).
• Security and abuse prevention — logs, rate limits, account protection. Basis: our legitimate interest.
• Counting visits — to learn where visitors come from and which pages and buttons they use, so we can improve the site (see Cookies). Basis: your consent where we ask for it (the EU, the EEA, the UK and Switzerland); elsewhere our legitimate interest, and you can object at any time.
• Fixing faults — diagnostic reports, which you send yourself. Basis: your consent.
• Improving Langouste — the usage journal: which features are used and which are not, where errors happen. Basis: your consent; you can withdraw it at any time in the app's settings.
• Accounting and tax — purchase records. Basis: legal obligation; tax documents are kept by Paddle.

We do not use your data for advertising, do not sell it and do not build profiles.

Diagnostic reports

If Langouste crashes, or you press the button to report a problem, the app asks you before it sends anything. A report holds the app's log; after a crash, the operating system's crash report; the version of the app and of the system, the processor and the memory of your Mac; a comment, if you add one; and the random identifier of the installation. If you are signed in, we attach your account. A log or a crash report can contain the name of the Mac. We read reports only to find and fix the fault, keep them for 90 days and then delete them. Basis: your consent — you send a report yourself.

Usage journal

The journal is optional and off until you agree. It is sent once per session of the app and holds the app version, the operating system and processor type, the interface language, your country as the system settings report it, when the session started and how long it lasted, a random identifier of the installation, and a list of events: which screens you opened and for how long, which buttons, switches and menu commands you used, and errors. It does not hold what you type. If you are signed in when it is sent, we attach your account. We do not sell it, use it for advertising or share it with anyone. We keep it for 12 months and then delete it.

Cookies and counting visits

Necessary cookies, set without asking because the site does not work without them: langouste_sid keeps you signed in (up to 30 days), langouste_app_intent and langouste_oauth finish signing in from the app or with another account (minutes), langouste_lang remembers the language you chose (one year), langouste_consent remembers your answer below (six months).

Counting visits. When enabled, we count visits with Umami, which we run ourselves on servers in the European Union; the data does not leave them and nobody else receives it. It records the page, where you came from, your country, language, browser and device type, and a few clicks (download, pricing, sign-in). It sets no cookies and keeps no IP address: a visit is told from another by a one-way value that changes every month. It honours your browser's Do Not Track setting. Pages in your account are not counted, and neither are the contents of forms. The checkout page is counted, without your e-mail or any payment details: whether you opened it, completed the payment, and whether you applied a promo code. Downloads of the app and of its updates are also counted by our server, in the same Umami: which installer and which version, and nothing about you, neither your address nor your browser.

If you visit from the EU, the EEA, the UK or Switzerland, the counting starts only after you press Accept in the notice at the bottom of the page; Reject keeps it off. You can change your answer at any time with the Cookie settings link at the bottom of every page. Visitors from other countries are counted without the notice.

We do not use advertising or tracking cookies and the site loads no font or script from third parties, except Paddle's widget on the checkout page, which belongs to the payment: your browser shares its IP address with Paddle when it loads.

Who receives data

We share data only with those who help us provide the service, and only as much as they need:

• Google, Apple and Facebook — to sign you in with the account you choose;
• Paddle — our reseller and Merchant of Record: it takes payment and handles taxes, invoices and refunds as an independent controller of payment data;
• a hosting provider — servers in the European Union running the website and database;
• a network and security provider — it sits in front of the website: it passes the traffic on, protects it from attacks, serves the domain name and forwards e-mail sent to our support address;
• an e-mail delivery service — for service and support e-mails.

Otherwise we share data only where the law expressly requires it.

Where data is kept

Accounts, licences and purchases are kept on servers in the European Union. Some of the providers above may process data outside the EU and Ukraine; such transfers rely on standard contractual clauses or other safeguards the law provides for.

How long we keep it

• Account, device and plan data — for as long as the account exists.
• After an account is deleted we delete its data within 30 days, except purchase records the law requires us to keep.
• Support requests — as long as needed to answer them, and no longer than two years.
• Server logs — no longer than 30 days.
• Diagnostic reports — 90 days, then deleted.
• The usage journal — 12 months, then deleted.
• The record of your cookie choice — no longer than three years, as proof of what you chose.

Your rights

You have the right to know what data of yours we process; to access it and get a copy; to have it corrected or deleted; to restrict or object to processing; and to receive your data in a portable format. You also have the other rights under Article 8 of the Law of Ukraine «On Personal Data Protection», and users in the EU have their rights under the GDPR.

To use any of these rights or to delete your account, write to [email protected] from the address you sign in with. We answer within 30 days.

You can complain to the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, to your country's data protection authority.

Security

Connections to the website and server are encrypted. Device tokens are stored only as hashes. Only those who need it to run the service have access to the data.

Children

Langouste is not meant for children under 16. If you believe a child has created an account, write to us and we will delete it.

Changes

If we change this policy, the updated version will appear on this page with a new date. We will tell you about significant changes by e-mail.