1. Controller
YATT SPORIXIN YEVGENIY SERGEYEVICH, 15 Shoxjaxon Street, 303, Tashkent 100100, Republic of Uzbekistan, is responsible for the personal data described here. Contact: [email protected].
2. Data we process
- Account data: email address and authentication records.
- License data: plan, license key, purchase reference, status, allowed devices, and activation history.
- Device data: device name, a device identifier or fingerprint, application version, and activation timestamps.
- Support data: messages and files you choose to send us.
- Technical data: IP address, browser or user-agent information, request timestamps, and security logs generated when you use our website or services.
3. Data that stays local
Screen recordings, camera and microphone capture, system audio, Qreata project files, editing data, and local transcription are processed on your Mac and are not uploaded to Qreata’s servers. We cannot view them unless you deliberately send them to us, for example in a support request.
If you choose to upload an export to Google Drive, you direct that transfer to Google. Google authorization tokens are stored in the macOS Keychain, and Google’s privacy policy applies to the destination account.
4. Why we use data
We use data to authenticate you, issue and validate licenses, enforce device limits, deliver downloads and email, provide support, prevent fraud and abuse, maintain security, comply with legal obligations, and improve reliability. Depending on context, we rely on performing our contract with you, our legitimate interests in operating and protecting Qreata, consent where requested, and legal obligations.
5. Service providers
We use providers that process limited data for us: Railway for application hosting and PostgreSQL; Cloudflare for DNS, delivery, security, and R2 application downloads; Resend for transactional email; and Google for website tag management and when you enable Google Drive.
After our store is approved and activated, Lemon Squeezy will act as merchant of record for purchases and will process payment, tax, receipt, refund, and fraud-prevention data under its own privacy policy. We do not receive or store your complete card number.
Website measurement
Our website loads Google Tag Manager to manage measurement tags. Loading the container sends technical request information, such as your IP address and browser information, to Google. Analytics tags configured through the container may process page views and interactions and use cookies according to their configuration. This website measurement is separate from local recording and transcription in the Mac app. See Google’s privacy policy for information about Google’s processing.
Optional app usage counts
If you opt in inside the Mac app, Qreata sends the first observed launch, first completed recording and first successful export to qreata.cc, together with a random installation identifier, app version, macOS major version and whether the installation already existed. We store a hash of the random identifier and milestone receipts for up to 180 days. This is first-party measurement, separate from Google website analytics and licensing. It includes no recording, audio, transcript, filename, account or license key. Turning it off in Settings stops future sends and clears pending events; events already received expire under the retention period. Counts cover participating installations only and are not automatically attributed to a website visit.
6. Sharing and international processing
We do not sell your personal data. We share it only with providers needed to run Qreata, advisers or authorities where legally required, or a successor in a genuine business transaction. Providers may process data in countries other than yours and use contractual or other lawful safeguards where required.
7. Retention and security
We retain account and license records while your license is active and as needed for support, fraud prevention, tax, accounting, dispute, and legal requirements. Support and technical logs are kept only as long as reasonably necessary for those purposes. We use access controls, encryption in transit, and protected storage; no system can guarantee absolute security.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of your personal data, and may object to or withdraw consent for certain processing. Email [email protected]. We may need to verify your identity and may retain records where law or legitimate security needs require it. You may also complain to the competent data-protection authority.
9. Children
Qreata is not directed to children under 16, and we do not knowingly collect their personal data. Contact us if you believe a child has provided data to us.
10. Changes
We may update this policy when Qreata, our providers, or legal requirements change. The effective date above shows the latest revision. We will provide additional notice for material changes where required.