Privacy Policy

Pocket CVI is made by Nullbase ApS (Denmark), the data controller for the limited personal data described below. Reach us any time at hello@pocketcvi.com.

Your collections, colors, logos, fonts, documents, and notes are stored locally on your Mac. With sync on, the library — files included — syncs across your own devices through your private iCloud storage, which we never see or operate. None of this content lives on our servers.

Three app features use the network, and only when you use them. iCloud sync talks to your private Apple account. Website import fetches the site you point it at. The AI features send their prompts directly from your Mac to Anthropic, OpenAI, or a model server you run yourself, using your own API key — stored in your Mac's Keychain, never synced, never proxied through us. We never see your key or your content. Everything else works fully offline.

When you start a trial or buy Pro, our licence server processes the minimum needed to deliver and protect your licence: your email address (to send and recover your key) and a one-way hash of a hardware identifier for each Mac you activate (to enforce the five-device limit — we never receive the raw hardware ID). Payments are handled by our payment processor; we receive confirmation and the billing details we need for our records, not your full card number. The legal bases are performance of our contract with you and our legitimate interest in preventing licence abuse; tax and accounting records are kept to meet our legal obligations.

We do not sell your data or use it for advertising. A small number of processors act on our behalf or at your direction: Apple (iCloud sync, on your own account), your chosen AI provider (only when you use the AI features, under your own agreement and key), our payment processor (to take payment and handle EU VAT), and our email provider (to deliver your licence key). Each receives only what its task requires.

The pocketcvi.com website sets no advertising or tracking cookies and does not profile visitors. It uses Plausible, a cookieless, privacy-friendly analytics service, to count page views in aggregate — no personal data, no cross-site tracking, nothing stored in your browser. Beyond that, the only network requests are ones you trigger yourself, such as submitting the licence-recovery form.

If you are in the EU/EEA or the UK, you can ask us to access, correct, delete, export, or restrict the personal data we hold about you — in practice, your email and licence records. Email hello@pocketcvi.com and we will respond within 30 days. You may also complain to your local data-protection authority (in Denmark, Datatilsynet). We keep licence and purchase records only as long as your licence is active, plus any period the law requires.