Privacy policy

Who's responsible

Rafael Ali Oliveira Khalil, an individual in São Paulo, Brazil, makes ilha and is responsible for the personal data this policy describes, under Brazil's data protection law (LGPD) and, where it applies, the GDPR. Paddle.com, which sells ilha Pro as merchant of record, is separately responsible for the data it collects to sell it. Write to support@ilha.app about any of this.

The app keeps your data on your Mac

ilha reads your CLIs' usage straight from Anthropic, OpenAI and xAI with the logins already on your Mac, keeps its own copies of those logins in your Keychain, and reads the session logs your CLIs keep for Insights. None of that is sent to the seller, this website or Paddle. The app has no analytics and no tracking.

What the app sends for a license

On Free and during the trial, the app sends the seller nothing. Once you enter a license key, it sends this website's license server two things, and nothing else:

• The license key, which names your purchase.
• A device id: a SHA-256 hash of the text “ilha device” and your Mac's hardware UUID, never the UUID itself. It tells your Macs apart without saying anything about them: no name, user, email or usage.

It sends them when you activate the key, when ilha opens and about once a day after, to keep the license current, and when you deactivate the Mac. Opening Paddle's customer portal from Settings sends the key alone.

What the license server keeps

The license server has no database of its own. It looks up the key's purchase at Paddle and keeps, in your customer record there, one entry per Mac using the license: the purchase it's for, the first half of its device id, and when it last checked in, updated at most once a day. An entry is removed when you deactivate that Mac, and replaced when another Mac takes its seat.

The website

This website runs on a server the seller rents from Contabo, and keeps no log of visits: not your IP address, nor the pages you open. It sets no cookies and runs no analytics. When its pricing section comes into view, it loads Paddle.js from Paddle, which runs Paddle's checkout.

Buying Pro, through Paddle

Paddle.com is the merchant of record for ilha Pro: it sells it to you, takes the payment, works out and pays the tax, sends the invoice and handles refunds. Its checkout opens over this website but is Paddle's, and collects your email address, your country and postcode, your payment details, and information about your device and connection for tax and fraud prevention, under Paddle's Privacy Notice. This website only tells Paddle which price you chose, for 1, 2 or 3 Macs.

From Paddle, the seller sees your email address, name and country, what you bought and when, and your payments and refunds, never your card details. The seller uses them to provide and support your license, to answer you, and to keep the records tax law requires.

Why, and who else

Your data is processed to carry out the purchase and the license (a contract with you), to meet tax and accounting obligations, and, for the device ids, in the legitimate interest of keeping a license to the Macs it was bought for. It's shared only with Paddle (the sale, and the license records), Contabo (the server the website runs on), the seller's accountant where tax law needs it, and authorities when the law requires. Paddle and the host may process it outside Brazil, such as in the United Kingdom, the European Union or the United States. It's never sold.

How long, and how it's kept

Purchase records stay at Paddle while your license lasts, and after that for as long as tax law requires (five years, in Brazil). Device ids go as described above. The app and the license server talk to each other and to Paddle only over HTTPS, and the license server's secrets live in its host's settings, never in its code.

Your rights

You can ask what data about you the seller holds, and have it corrected, sent to you, or deleted, though deleting a purchase's records ends its license. Write to support@ilha.app; for what Paddle holds, see its Privacy Notice. You can also complain to Brazil's data protection authority (ANPD), or to the one where you live.

Changes

If this policy changes, the new version will be here, with its date at the top.