Privacy Policy

1. Overview & Philosophy

At ApexMouse ("we", "us", or "our"), we believe desktop utilities should do their job silently and respectfully. ApexMouse is not an ad-supported application, nor do we monetize user data. Our business model is straightforward: we sell lifetime software licenses.

This Privacy Policy explains how information is (and is not) collected, used, and protected when you visit our website (www.apexmouse.tech) and when you use the ApexMouse macOS application.

2. macOS System Permissions & Hardware Access

To deliver smooth scrolling, gestures, and button mapping, macOS requires specific user-granted permissions. Here is transparently why each is requested and how it is used:

3. What Information We Collect

A. In the ApexMouse Desktop Application

• Zero Keystroke or Activity Logging: We do not log which apps you open, your typing, visited websites, or your cursor positions. All mouse smoothing, cursor acceleration bypass, radial dials, and button remappings execute purely in-memory and are never stored or transmitted.
• Minimal Usage Metrics (Opt-Out): To understand install volume and active adoption without tracking individual identity, ApexMouse sends lightweight pings to our secure telemetry endpoint:
  • Install Event: Dispatched once upon initial setup.
  • Daily Active Heartbeat: Dispatched at most once every 24 hours while the app is running.
  These events contain a randomly generated installation UUID, the macOS version, the app version, and hardware architecture (Apple Silicon / Intel). You can toggle this completely off at any time in Settings > General > "Send anonymous usage statistics & crash diagnostics".
• 100% Anonymous Diagnostic & Crash Reports: If an internal anomaly occurs (such as an Accessibility event tap drop or unexpected crash) or if you use the "Send Feedback / Report Issue" tool in Settings, an anonymous diagnostic report is sent to our secure API. All reports are automatically scrubbed on-device prior to transmission: personal macOS user names, account names, home directory paths (/Users/...), email addresses, and license keys are completely redacted. Telemetry uses only an ephemeral, randomly generated installation UUID with zero link to hardware serial numbers, MAC addresses, or Apple IDs. Issue reports never include keystroke logs, mouse coordinates, or personal files.
• Analytics Infrastructure (PostHog EU): Anonymous product usage metrics (install counts and 24h active heartbeats) and scrubbed error diagnostics are processed using PostHog Cloud (EU), hosted within the European Union. In accordance with strict data minimization principles, client IP addresses are explicitly stripped and discarded ($ip = null), no personal names or emails are stored, and events are linked solely to the ephemeral installation UUID. The desktop binary embeds zero third-party tracking SDKs; all transmission is handled server-side through our domain. You can disable this reporting entirely at any time in Settings > General.
• Local Application Settings: Your scroll physics settings, custom button maps, and per-app profiles are saved exclusively on your local Mac disk in UserDefaults and Application Support.

B. License Activation & Validation

When you enter a license key to unlock ApexMouse Pro, the application transmits an encrypted HTTPS request to our Merchant of Record, Gumroad (api.gumroad.com), containing:

• The license key you entered.
• The product permalink (e.g. apexmouse or apexmousepb).
• A non-reversible, salted cryptographic hash of your Mac's hardware identifier (UUID) for activation seat accounting.
• The software version number (e.g. 26.9.20).

Upon successful activation, your license key and product tier are stored securely on your local Mac disk in private application storage (UserDefaults and an atomic backup in ~/Library/Application Support/ApexMouse/license.json) without triggering disruptive system Keychain password dialogues. A periodic validation check occurs every 3 days over TLS 1.3 without consuming additional activations. If your Mac is offline, ApexMouse provides a 15-day offline grace period during which Pro features remain fully active.

C. On Our Website

Our website is hosted on Vercel's global edge network. When you browse the website, standard web server access logs (anonymized IP address, user-agent, referring URL, and timestamp) may be temporarily recorded by Vercel for infrastructure health, DDoS mitigation, and performance monitoring. We do not use third-party marketing cookies or tracking pixels.

4. Payments & Merchant of Record

All financial transactions for ApexMouse licenses are conducted through our Merchant of Record, Gumroad, Inc. Gumroad securely manages payment processing, currency conversion, VAT/sales tax compliance, and order fulfillment.

We do not collect, process, or store your credit card numbers, bank details, or billing addresses. Gumroad's handling of your financial and transactional data is governed by the Gumroad Privacy Policy.

5. Data Security & Storage

We adhere to industry best practices to safeguard any data associated with your license and diagnostics:

• All network communications with the licensing and telemetry APIs use modern TLS 1.3 encryption.
• License keys and instance identifiers are stored locally in user preferences and dedicated Application Support backup files, requiring zero invasive macOS keychain password prompts.
• Telemetry and issue reports are processed under European GDPR standards via PostHog Cloud (EU) and stored in an access-controlled administration endpoint restricted to verified engineering personnel. Client IP addresses are explicitly discarded at the edge.
• We do not maintain centralized customer databases containing your browsing or behavioral data.

6. Your Rights (GDPR, UK DPA & CCPA)

Depending on your jurisdiction (including the European Economic Area, the United Kingdom, and California), you have specific statutory rights regarding your personal information:

• Right to Access & Portability: You may request confirmation of whether we hold personal data related to your license purchase.
• Right to Rectification: You may update the email address linked to your license key at any time.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your license activation records by contacting support. Note that deleting active license records terminates the license entitlement.
• Do Not Sell My Personal Information: We never sell, rent, or monetize your personal data.

7. Software Updates

ApexMouse checks for application updates by querying public release metadata from GitHub Releases (or our secure update endpoint). This request transmits standard HTTP headers (OS version and client user-agent) to check if a newer build is available. No personal identifiers are attached to update requests.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our security practices, please contact our engineering team: