Privacy Policy

The controller is Salim Mouttaki, an individual based in Switzerland, who publishes Kanbell (“we”, “us”).

Publisher

Salim Mouttaki, an individual based in Switzerland

Email

salim-apps@protonmail.com

We process personal data under the Swiss Federal Act on Data Protection (FADP), in force since 1 September 2023, and, for users in the European Union and the European Economic Area, under the General Data Protection Regulation (GDPR).

The app connects to two services only: Polar and GitHub.

Polar: your license

Only once you enter a license key. During the free trial, the app makes no network request for the license.

• Activation. The app sends Polar (api.polar.sh): your key, our organization identifier, a label of the form “Kanbell · macOS · ” followed by 4 random hexadecimal characters (to tell your Macs apart in the list of activations), the app version and the processor architecture. It does not send your Mac’s name, your macOS version, a hardware identifier or any of your content.
• Checks. At launch, then every 24 hours, the app sends the key, the activation identifier and our product’s benefit identifier to confirm the license is valid. Without a connection, it keeps working for up to 14 days after the last successful check.
• Deactivation. When you deactivate the key in Settings › License, the app asks Polar to remove that Mac’s activation.

Like any server, Polar receives the IP address the request comes from. Polar keeps a record of license keys and their activations; its documentation lists, for example, the number of validations and the time of the last one.

GitHub: your issues

Only if you connect a GitHub token, to show and edit the issues of a repository you choose. The app talks to api.github.com directly from your Mac and sends what you write: issues, comments and their changes. Your token is stored encrypted on your Mac and is sent to GitHub only. What you publish on GitHub is visible according to the repository’s settings.

GitHub: updates

One minute after launch, then every 6 hours, the app checks the public repository where Kanbell releases are published on github.com, and downloads new versions. The request is anonymous: it carries no identifier and none of your content. GitHub sees your IP address and the app version (in the user agent).

Nothing else

No telemetry, no analytics, no advertising or tracking. Crash reports are not sent: if the app crashes, the report stays on your Mac.

Kanbell never sends your code or your prompts to Anthropic, OpenAI or Google itself. The agents you run in its terminals (Claude Code, Codex CLI, Gemini CLI and others) are separate programs. They talk to their providers with your accounts, under those providers’ terms and privacy policies.

To show what each agent is doing, Kanbell reads, locally and read-only, the session files these tools write on your Mac: state, model, token counts and subscription usage. It keeps a usage record on your Mac.

The small local servers Kanbell uses for agent hooks and for the kanbell command listen only on 127.0.0.1, which is reachable from your Mac only.

The app keeps its data in ~/Library/Application Support/Kanbell:

• settings, projects, session metadata, local boards, notes and pasted images;
• usage records;
• error logs, with secrets removed, limited to 1 MB and rotated;
• encrypted files: your license, the trial state and your GitHub token, encrypted with macOS safeStorage (its key is the “Kanbell Safe Storage” entry of your Keychain).

The content of your terminals is not written to disk. The trial is also anchored in the app’s macOS preferences, encrypted the same way; it holds the trial dates and a random installation identifier.

We have no access to any of this data.

To remove what Kanbell stored on your Mac:

1. If you have a license key, open Settings › License and deactivate it first. This frees the Mac’s activation at Polar; deleting the app does not.
2. Quit Kanbell and move it from Applications to the Trash.
3. In Finder, choose Go › Go to Folder, enter ~/Library/Application Support/Kanbell and delete that folder.
4. Open Keychain Access, search for “Kanbell Safe Storage” and delete that entry.

Once the Keychain entry is deleted, the encrypted trial marker left in macOS preferences can no longer be decrypted.

Your repositories, and the files your agents keep in their own folders, are not part of Kanbell’s data: deleting the app leaves them as they are. If you approved Kanbell’s hooks in Codex CLI, Codex records that approval in its own configuration (~/.codex/config.toml), where you can remove it.

For data held by Polar or GitHub, see your rights below.

You pay on Polar’s checkout page. Polar Software, Inc. sells the subscription as merchant of record (see its Buyer Terms) and processes your purchase, billing and payment data under its own Privacy Policy, which lists, for example, the payment card type and last 4 digits, billing address, email address and tax number.

Through Polar, we have access to the customer, subscription and license information needed to provide your license and answer you.

This website sets no cookies, uses no browser storage and runs no analytics. Its fonts are hosted on the site itself and it loads no third-party scripts.

Our web host keeps technical access logs, such as the IP address, the page requested and the user agent, under its own rules. Buying links take you to Polar’s checkout page, which is governed by Polar’s policies.

If you email us at salim-apps@protonmail.com, we receive your email address and your message, and use them to answer you. Our mailbox is provided by Proton.

Where the GDPR applies, we rely on the following legal bases. We process data only for the purposes listed here.

Activating and checking your license

Data License key, activation identifiers, the activation label, app version, processor architecture, IP address

Legal basis Performance of the contract (Art. 6(1)(b) GDPR)

Selling and billing your subscription (done by Polar)

Data The purchase, billing and payment data you give Polar

Legal basis Performance of the contract (Art. 6(1)(b) GDPR)

Showing and editing GitHub issues, if you connect GitHub

Data Your GitHub token, the issues and comments you write, IP address

Legal basis Performance of the contract: the feature you asked for (Art. 6(1)(b) GDPR)

Checking for and downloading updates

Data IP address, app version

Legal basis Legitimate interest in keeping the app working and secure (Art. 6(1)(f) GDPR)

Running and securing this website

Data Access logs kept by our web host: IP address, page requested, user agent

Legal basis Legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR)

Answering your emails

Data Your email address and what you write to us

Legal basis Legitimate interest in answering you, or the contract when your message concerns it (Art. 6(1)(f) or (b) GDPR)

• Polar Software, Inc., United States: sale, billing, license checks. Privacy Policy.
• GitHub, Inc., United States: issues, if you connect GitHub, and updates. Privacy Statement.
• Our web host: website access logs.
• Proton: our email provider, for the messages you send us.

We do not sell or rent personal data, and we do not share it for advertising.

Polar and GitHub are based in the United States, so the data the app sends them may be processed there and in other countries whose laws may not protect personal data as Swiss or EU law does. Polar’s Privacy Policy says that for such transfers it relies on adequacy decisions or on safeguards such as the European Commission’s standard contractual clauses. GitHub’s Privacy Statement describes its use of standard contractual clauses and of the Data Privacy Framework.

• Data on your Mac: until you delete it (see Deleting your data).
• Data at Polar and GitHub: according to their own policies and legal obligations.
• Website access logs: according to our web host’s rules.
• Your emails: as long as needed to deal with your request and its follow-up.

You can ask us for access to your personal data, and for its correction or deletion. You can object to processing based on legitimate interest, and ask for a copy of data you gave us in a portable format. Where the GDPR applies, you can also ask us to restrict processing.

To exercise these rights, write to salim-apps@protonmail.com. We may need to confirm your identity. Most data is on your Mac and under your control. For data held by Polar or GitHub, you can contact them directly, or ask us and we will help.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU and EEA, to the data protection authority of your country.

We do not make decisions about you based solely on automated processing, and we do not profile you.

Secrets (license, trial state, GitHub token) are encrypted on your Mac with macOS safeStorage. The app talks to Polar and GitHub over HTTPS. Its local servers accept connections from your Mac only.

We will update this policy when what we process changes. The new version is published on this page with a new “Last updated” date.

Questions about your data: salim-apps@protonmail.com.