Privacy

Privacy Policy

Last updated 11 July 2026

Plain-English summary, not legal advice. Consumer and privacy rights that cannot lawfully be excluded still apply.

Remote-session data does not pass through MacReacher servers. A session connects directly between devices over your LAN or the private network/VPN you configure. The apps contain no advertising or behavioural analytics.

1. Who controls website and purchase data

Flavr Web Dev Ltd, registered in England and Wales under company number 14994358, is the controller for the limited personal data described here. Our current registered office is recorded at Companies House. Contact support@flavrapps.com for privacy requests or a postal service address.

2. Data handled by the apps

The host and viewers process screen content, keyboard and pointer input, clipboard content, audio and files only to provide the feature you select. That content travels over the direct encrypted session and is not received or stored by us. Saved host details remain on your device. Apple clients use Keychain for saved passwords; Android uses encrypted, Keystore-backed storage. The host separately contacts the licensing provider with its licence/instance identifiers and a user-visible host name to validate activation.

3. Early-access list

If you join the beta or launch list, we store your email address, consent version and signup time and send one confirmation message. Unconfirmed requests are deleted after seven days and are never exported to the campaign list. Our basis is your consent. We use confirmed addresses only for MacReacher beta invitations, availability and material product updates. You can withdraw at any time by emailing us; withdrawal does not affect earlier lawful processing. We delete the launch list within 90 days after the campaign ends unless you separately choose to continue receiving product news.

4. Purchases and support

Lemon Squeezy acts as merchant of record and processes payment, tax and billing data under its own privacy terms. It supplies the identifiers needed to issue and manage a licence. We do not receive full card details. If you contact support, we process your message and address to answer it and prevent abuse. Resend may process recipient addresses and message delivery data when transactional email is enabled.

5. Website data and cookies

The site uses no advertising, cross-site tracking or analytics cookies. Security logs may temporarily record request metadata such as an IP address, user agent, time and requested path. Rate limiting stores a keyed hash rather than the raw address in the application database. Fonts and core assets are hosted on this site, so visiting does not request Google Fonts.

6. Legal bases and retention

Purchase and accounting records are normally retained for seven years. Support conversations are normally deleted after 24 months, unless needed for an unresolved dispute or security investigation. Application security rate-limit records expire after two days; infrastructure access logs should be rotated within 30 days.

7. Processors and international transfers

Current intended processors are Lemon Squeezy for checkout/licensing and Resend for transactional email. Tailscale or another VPN is chosen and operated by you, not embedded as our relay. Some processors may handle data outside the UK. We use the provider's data-processing terms and an applicable UK adequacy decision, UK International Data Transfer Agreement or UK Addendum where required. Contact us for the current processor list.

8. Your UK data-protection rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent. Email support@flavrapps.com. We may need to verify your identity. You can complain to the UK Information Commissioner's Office at ico.org.uk.

9. Security and changes

We use access controls, restrictive file permissions, signed webhook validation and encrypted transport. No system is risk-free. Material policy changes will be dated here; where appropriate, we will notify subscribers directly.