Privacy Policy

What we collect — and what we don't

ClearDesk is built on a local-only architecture. The app does not communicate with any server operated by Vibhutix or any third party during ordinary use. Below is a precise record of what data exists, where it lives, and who can access it.

Data we do not collect

How your data is used

All processing is performed entirely within the macOS sandbox on your machine. The purposes are narrow and user-directed:

We do not use your data for advertising, profiling, machine learning, or any purpose beyond operating the features you actively use.

Data stored on your device

ClearDesk stores the following data locally on your Mac only, under the sandbox container at ~/Library/Application Support/ClearDesk/ and in UserDefaults:

Payments & StoreKit 2

All in-app purchases and subscriptions for ClearDesk Pro (ClearDesk Plus yearly, monthly plan) and ClearDesk Pro (Lifetime) are processed exclusively through Apple's StoreKit 2 framework.

This means:

• Payment processing, receipts, and billing are handled entirely by Apple. Vibhutix never receives, stores, or processes your credit card number, Apple ID, or any payment credentials.
• Subscription management, cancellation, and refunds are handled through your Apple ID settings or the Mac App Store.
• StoreKit 2 communicates directly between the app and Apple's servers. ClearDesk does not route this traffic through any Vibhutix infrastructure.
• Apple's own privacy policy (apple.com/legal/privacy) governs the transaction data Apple holds.

Sandbox & permissions

ClearDesk operates within Apple's macOS App Sandbox (com.apple.security.app-sandbox = true). This is a hard technical boundary enforced by the operating system — the app is structurally incapable of accessing files outside its container unless you explicitly grant permission.

Permissions you may grant

• ~/Library folder — required for Smart Cleanup, Large Files, Duplicates, and Privacy modules. You grant this once via a standard macOS Open dialog and the permission is remembered as a security-scoped bookmark.
• /Applications folder — optionally required for the Apps & Uninstall module (Pro) to locate and move .app bundles.
• Downloads folder — accessible via sandbox entitlement; used only when you initiate a scan that includes Downloads.
• Notifications — requested only when you enable the scheduled auto-clean feature (Plus/Monthly plans), to deliver completion alerts.

You can revoke any permission at any time via System Settings → Privacy & Security or by removing stored bookmarks within ClearDesk's settings.

Children's privacy

ClearDesk is a Mac utility app intended for general audiences. It does not contain features targeted at children and does not knowingly collect any personal data from anyone, including persons under the age of 13 (or the equivalent minimum age in your jurisdiction).

Because the app collects no personal data at all — from any user — there is no special risk to minors beyond standard macOS data-handling practices. If you are a parent or guardian and have concerns, you may contact us at the address in Section 13.

Your rights & controls

Because ClearDesk holds no personal data on any server, most data rights are exercised directly on your device. The following summarises what you can do and how:

If you are located in the European Economic Area, UK, Brazil, California, or another jurisdiction with explicit data rights legislation, you may contact us at any time and we will respond within the legally required timeframe.

Data retention

Vibhutix retains no data about you on its servers. All data retention decisions are therefore yours to make:

• Cleanup history and undo manifests — retained until you clear them in-app or delete the Application Support folder. Undo manifests for each run are small JSON files; you control how long to keep them.
• Schedule records — retained locally until the schedule feature is disabled or data is deleted.
• Licence cache — retained in UserDefaults until the app is uninstalled. StoreKit 2 re-validates status with Apple on each launch.

Vibhutix does not retain logs, usage records, or any derivative of your activity beyond what is described in Section 3, all of which lives on your device.

Third-party services

ClearDesk integrates with the following Apple system frameworks only. No commercial third-party SDKs, analytics libraries, advertising networks, or data brokers are included in the application bundle.

Apple's privacy practices are governed by Apple's own Privacy Policy. Vibhutix has no influence over Apple's data handling, but has deliberately limited integration to frameworks that minimise data exposure.

Regional & legal compliance

Even though ClearDesk collects no personal data, we commit to the following standards that apply globally:

European Union — GDPR

Under the General Data Protection Regulation, the legal basis for any on-device processing is legitimate interests (providing the service you installed) and contractual necessity (delivering a paid product). Because no personal data is transferred outside your device to Vibhutix, no data transfer agreement (SCCs, BCRs) is required for our operations. StoreKit 2 transactions are governed by Apple's own GDPR compliance programme.

United Kingdom — UK GDPR & DPA 2018

The same principles as EU GDPR apply. UK users retain equivalent rights and can contact us via the address in Section 13.

California — CCPA / CPRA

ClearDesk does not sell or share personal information as defined under the California Consumer Privacy Act. We do not engage in cross-context behavioural advertising. California residents have the right to know, delete, and opt out — rights that are automatically satisfied by our no-collection architecture.

Brazil — LGPD

ClearDesk's on-device-only processing is consistent with the Lei Geral de Proteção de Dados. No personal data is processed by Vibhutix in Brazil or elsewhere on our infrastructure.

Canada — PIPEDA / Law 25 (Québec)

We handle personal information in accordance with Canadian federal privacy law. Given that no personal information is collected, the accountability, consent, and safeguard requirements are satisfied by design.

Australia — Privacy Act 1988

ClearDesk does not collect personal information as defined by the Australian Privacy Principles. No cross-border disclosure of personal data occurs.

Apple Mac App Store guidelines

ClearDesk complies with Apple's App Store Review Guidelines and includes a PrivacyInfo.xcprivacy manifest declaring the privacy-relevant APIs the app uses, as required by Apple for all submitted apps.

Security

We employ the following technical and architectural safeguards:

• macOS App Sandbox — enforced at the kernel level; the app cannot access files outside approved scopes regardless of any software bug.
• Trash-first deletion — ClearDesk's cleaning engine exclusively uses FileManager.trashItem, never permanent deletion by default. This means cleaned files remain recoverable.
• Security-scoped bookmarks — folder access is tokenised and persisted cryptographically; raw paths are not stored outside the bookmark data.
• Private OS logging — file paths inside the user's Library are logged with privacy: .private to prevent leakage into system log aggregators.
• No network stack — the application binary contains no outbound HTTP client code for data transmission. There is no attack surface through which your data could be exfiltrated to a remote server by the app itself.
• Universal binary & notarisation — the distributed app is built for Apple Silicon and Intel, notarised by Apple, and scanned for malware before distribution.

In the unlikely event we discover a security issue affecting your device's data, we commit to notifying affected users promptly and providing clear remediation guidance.

Changes to this policy

We will update this Privacy Policy when ClearDesk's features change in ways that affect how data is handled, when applicable laws change, or when we need to clarify our practices.

When we make a material change — for example, if a future version introduced optional cloud sync — we will:

• Update the "Effective date" at the top of this document;
• Post the new policy at the same URL before the change takes effect;
• Show an in-app notice on first launch after the update;
• For changes that require consent, ask for it explicitly before activating any new data processing.

Continued use of ClearDesk after a non-material update constitutes acceptance. For material changes requiring consent, the feature will remain unavailable until you actively opt in.

Prior versions of this policy are archived and available on request.

Contact us

Questions, requests, or concerns about this Privacy Policy or ClearDesk's data practices should be directed to: