Privacy Policy
Last updated 26 August 2026
The short version: CakeTax has no accounts and no cloud. Your settings, proximity readings and lock history stay on your Mac. Nothing is sent anywhere unless you turn it on, and there are only three things the app can ever do over a network: check for updates, send opt-in anonymous statistics, and check a licence when you buy it. Anything you type on this website — a beta request, an email to us — is covered further down.
Who is responsible: JIBBY ehf., kt. 6504230979, registered in Iceland, is the data controller for anything described here, except checkout (see "Buying" below). Contact: hello@caketax.app.
The app on your Mac
Everything CakeTax needs to work stays local: your paired device's identifier, distance and rule settings, the event log ("why did it lock?"), and the cake counter. They live in your macOS user preferences and your Application Support folder, are never transmitted, and are deleted when you delete the app and those folders.
For the Safe Zones feature, when you press "Make This Network a Safe Zone" the app notes your current network router's hardware identifier and stores it locally with a name you choose — no permission needed. You can also add a zone by picking one of your Mac's saved Wi-Fi networks by name; because macOS treats the name of the currently connected Wi-Fi network as location-revealing, matching those zones requires the system Location permission, which CakeTax uses solely to read that one network name. It never reads your actual location. Nothing about your networks leaves the Mac, and the optional statistics report carries only a count of zones.
Update checks
If automatic updates are enabled, the app periodically fetches a version file from our server (the Sparkle framework). The request carries no identifier or personal data; like any web request, the server necessarily sees your IP address and the app version, which are used only to serve the update.
Anonymous usage statistics — off by default
In Settings → Advanced there is a switch called "Send anonymous usage statistics". Until you turn it on, nothing exists: no identifier is created and nothing is stored for this purpose (consent under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) GDPR).
If you opt in, a random identifier is created at that moment, and once a day the app sends: that identifier, the app and macOS versions, your distance and delay settings, the number of safe zones, and counts of locks and pauses. It never sends Wi-Fi names, your device's name or identity, your location, or the event log. The app shows you the exact report before you enable it ("Show Me").
Turning the switch off deletes the identifier and pending counts. Because reports are anonymous, we cannot link them to you afterwards — which also means we cannot retrieve or delete "your" reports on request; there is no way to know which are yours.
Beta research reporting — closed beta only
Beta builds are a separate thing from the app you'll be able to buy, and they report more. This section applies only while you are running a beta build.
This is not the anonymous statistics switch described above. That one stays off unless you turn it on, in beta builds as in any other. Beta research reporting is separate, is on because it is the point of the beta, and is not anonymous: reports carry your beta code, which we can match to the email address you signed up with.
Once a day a beta build sends: your beta code, the app and macOS versions, your Mac's chip family, which of the two signal filters was active and when it last changed, your distance and delay settings, the number of safe zones, counts of locks, pauses and safe-zone matches, whether each lock was followed by a quick unlock, and up to sixty seconds of signal-strength readings either side of each lock.
It never sends Wi-Fi network names or router identifiers, your device's name or identity, your location, the contents of your event log, or anything you type.
The legal basis is our beta agreement with you: reporting is what the beta is for, so taking part means taking part in the research. We ask you plainly on first launch and show you a real sample report before you agree, and you can decline — that simply means not running the beta. You can leave at any time by emailing us, and because reports carry your beta code we can actually find and delete yours — hello@caketax.app. Everything collected during the beta is deleted when the beta ends, and the reporting stops working on 15 October 2026 regardless.
Buying CakeTax
Purchases are processed by Lemon Squeezy, LLC as merchant of record. They are the seller of record and the data controller for checkout: your name, email, payment details and country (for VAT) are handled under the Lemon Squeezy privacy policy. We receive your email address, order details and licence key so we can deliver the product, honour refunds and provide support — and we use them for nothing else.
This website
caketax.app is a static site: no cookies, no analytics, no trackers. Our hosting provider keeps standard server logs (IP address, requested page, time) for security and abuse prevention, retained briefly.
Requesting beta access
If you ask to join the closed beta, we store exactly what you typed into the form — your email address, and if you filled them in, your name, the device you'd carry, your macOS version, your note, and whether you want an email at launch. We do not record your IP address, browser or country with it.
It goes into our own database at Cloudflare (our hosting provider, acting as our processor); we do not use a third-party form or mailing service, and the list is never sold, rented or shared. We use it only to run the beta: choosing testers, sending download links and update news, and asking how it went. A launch email is sent only if you ticked that box, and you can opt out at any time. The legal basis is your consent, which you can withdraw whenever you like. We delete the list once the app has launched and the beta is over, or as soon as you ask — hello@caketax.app, and we'll confirm when it's gone.
If you write to us, we keep the correspondence for as long as needed to help you and to keep a record of support and refund decisions.
Your rights
Under the GDPR (which applies in Iceland through the EEA) you can ask us for access to, correction of, or deletion of personal data we hold about you — in practice that's purchase records and email threads. Write to hello@caketax.app. You can also complain to the Icelandic Data Protection Authority (Persónuvernd) or your local supervisory authority.
Changes
If this policy changes materially, the new version appears here with a new date, and the in-app description of the statistics report is updated in the same release.