Last updated: October 20, 2026

Privacy Policy

This policy covers the Supermac app for macOS and the website at supermac.io. The short version: Supermac runs on your Mac, your AI chats, searches and files are not sent to us, and everything the app sends us is listed below. Questions? Email [email protected].

1. Who we are

Supermac is made by George Kitanov (“Kitze”), a sole proprietor based in Skopje, North Macedonia. “We”, “us” and “our” mean Kitze. Privacy contact: [email protected].

2. Your data in the app

Your Mac does the work. Launcher search, window snapping, math, emoji & symbols, File Shelf, Screenshots and Breaks run on your Mac. What you search, snap, calculate, shelve or capture stays on your Mac. We have no copy of it.
AI chat uses your own key. If you connect an AI provider (for example OpenAI, Anthropic Claude, Google Gemini or xAI Grok) with your own API key, the messages you send are sent directly from your Mac to that provider. There is no Supermac server in the middle. That provider’s own terms and privacy policy apply. With a local model through Ollama or LM Studio, nothing leaves your Mac.
Translator. On macOS 26 and later, translation can run on-device. If you translate with your AI model instead, the text goes directly from your Mac to the provider you picked, as above.
Optional integrations. Integrations you turn on (Spotify, Linear, YouTube, weather via wttr.in, stock quotes via Alpha Vantage, and site icons from Google) talk directly to those services under their own privacy policies.

3. What the app sends us

Usage analytics. The app sends usage events to our self-hosted PostHog instance at posthog.server.kitze.io: a random install ID, app launches, settings choices, which features get used and anonymous performance timings. We use this to find bugs and see what to improve. Analytics are designed to exclude the content of your AI chats, search queries, clipboard, files and screenshots.
Crash reports. If Supermac crashes, it sends a technical report (error details and app state, none of your content) to the same PostHog instance so we can fix it.

Both are on by default and can be turned off in Settings → About.

License activation. When you activate Supermac, your license key and an activation for this Mac are checked with our licensing service at releaseflow.net, which enforces the 3-Mac limit.
Update checks. Supermac checks an update feed hosted on releaseflow.net for new versions. Like any web request, this exposes your IP address and app version to the server.
Currency rates. The calculator downloads exchange rates from supermac.server.kitze.io, which exposes your IP address.

4. Buying Supermac

Checkout goes through releaseflow.net and Polar, our payment provider and merchant of record. Polar collects your name, email, country and payment details; we never see your full card number. We receive your name, email and order details so we can issue your license key and support you. We record the purchase in our analytics to measure sales. If we run ads, we may report the purchase to that ad platform using only a SHA-256 hash of your email.

5. The website

Analytics. supermac.io uses our self-hosted PostHog for page views and clicks on things like the buy button, so we can see where the site breaks or confuses people. We don’t record sessions. PostHog sets a first-party cookie and uses localStorage to connect visits.
Affiliate links. If you arrive through an affiliate link, an affonso_referral cookie (60 days) remembers the referrer so they get credit if you buy. Affiliate tracking is run by Affonso.
Ad pixels. When we run ad campaigns, the site may load pixels from ad platforms to measure page views and purchases. These services can set their own cookies under their own policies.
Hosting logs. The site runs on Cloudflare, which processes IP addresses, user agents and request paths for delivery and security.

6. Services we use

Polar: payments, receipts, license keys, customer portal (name, email, billing details).
ReleaseFlow (our own service at releaseflow.net): checkout pages, license activation, downloads and update feeds.
PostHog, self-hosted on our own server: app and website analytics, crash reports.
Cloudflare: website hosting, CDN and DDoS protection.
Affonso: affiliate referral tracking.
Ad platforms, only when we run campaigns: ad measurement.

AI providers you connect with your own API key are your choice, not our processors: your data goes straight from your Mac to them.

We do not sell your data.

7. Your rights

Wherever you live, you can email [email protected] and ask us to confirm what we have on you, send you a copy, correct it, or delete it. We have to keep payment records as long as tax law requires. Everything you do in Supermac lives on your Mac, so you can delete it yourself at any time. We reply within 30 days.

8. International transfers

Some of the services above are based outside the EU (for example Polar and Cloudflare in the United States). They provide their own safeguards for international transfers, such as Standard Contractual Clauses, and we rely on those.

9. Children

Supermac is not directed at children under 16, and we do not knowingly collect their data. If you think a child has bought Supermac or sent us data, email us and we will delete it.

10. Changes

We update this page when what we collect or the services we use change. The date at the top shows the latest change.