Privacy policy

Last updated 2026-09-26

Draft. This document is pending legal review and may change before Cuey launches.

Short version: your scripts stay on your Mac. Cuey never stores your voice or what you say. We only keep the data we need to sell you Cuey Pro and keep your license working.

Who we are

This policy explains how Zakaria Reziki, trading as Cuey ("we", "us"), the maker of Cuey, handles personal data when you use the Cuey Mac app and this website. We are the controller of the data described here, except where we say another company (such as Paddle or Apple) handles it under its own policy.

Privacy contact: [PRIVACY CONTACT EMAIL].

To confirm: Confirm the legal entity, address and whether an EU/UK representative or a data protection officer is required.

The Cuey app

Your scripts and settings

Microphone and Voice Follow

Speech recognition

Voice Follow uses Apple's Speech framework. If on-device recognition isn't available for the language you choose, Apple's speech service may process the audio under Apple's privacy policy.

An optional, experimental on-device engine (Apple SpeechAnalyzer, macOS 26 or later) may download Apple's language model. It does not upload your audio or scripts.

Diagnostics

Diagnostics are off unless you turn them on. They are local counters only: no audio, transcripts, script contents, device IDs, usernames or file paths. They leave your Mac only if you choose to export them and send them to support. The app does not upload telemetry or analytics automatically, and we don't use third-party crash reporting.

Update checks

In the direct-download edition, Cuey may check an update feed (Sparkle) when you check for updates. The update server sees the request, including your IP address and app version.

License activation

In the direct-download edition, activating and validating Cuey Pro sends your license key, a hashed device identifier and the app version to our license server. The app then works offline for up to 30 days before it checks again.

Mac App Store edition

If you get Cuey from the Mac App Store, Apple handles the purchase and Apple's terms and privacy policy apply to it instead of Paddle's.

This website

To confirm: Confirm whether Plausible is enabled at launch and whether a cookie notice is needed for Paddle.js in the EU/UK.

Purchases and payments

Paddle (Paddle.com) processes all Cuey Pro purchases as the Merchant of Record. Paddle collects your payment details, billing address and tax information and handles them under its own privacy policy. We never see or store your card or payment details.

What we store about your license

Our license database (Neon Postgres, hosted in [REGION]) stores:

To confirm: Fill in the Neon database region and confirm international transfer safeguards (e.g. Standard Contractual Clauses).

Why we use this data (legal bases)

To confirm: Lawyer to confirm the legal bases for each purpose.

Who we share data with

We don't sell or rent personal data, and we don't share it for advertising. We use these service providers:

We may also disclose data if the law requires it, or as part of a sale or merger of the business.

How long we keep data

We keep license records while your license exists and for as long as tax and accounting rules require. Diagnostics you send to support are kept only as long as needed to resolve your request.

To confirm: Confirm retention periods with an accountant (e.g. how many years tax records must be kept) and the support email retention period.

Your rights

You can ask us to access, correct, delete or export your personal data, or object to how we use it. Email [PRIVACY CONTACT EMAIL]. We may need to verify your identity first.

Please note: if we delete your license data, we can no longer restore Cuey Pro for you. Your scripts and settings on your Mac are not affected.

EU and UK (GDPR and UK GDPR)

You have the rights above, plus the right to restrict processing and to withdraw consent at any time. You can also complain to your local data protection authority (in the UK, the ICO).

California (CCPA/CPRA)

You have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising.

To confirm: Lawyer to confirm whether CCPA/CPRA thresholds apply and whether other US state privacy laws need specific wording.

Security

We store device identifiers only in hashed form and never hold payment details. No system is perfectly secure, but we limit what we collect so there is less to protect.

Children

Cuey is not directed at children, and we don't knowingly collect personal data from them.

To confirm: Confirm the minimum age (e.g. 13 or 16) to state here and in the Terms.

Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes, we'll give notice on this site.

Contact

Questions about privacy: [PRIVACY CONTACT EMAIL]. For anything else, see our contact page.