Privacy Policy

Last updated: 9 October 2026

FavTray is published by Soha Enterprise, a sole proprietorship registered in India (Udyam registration UDYAM-TN-02-0476804), and built by Akash Rajagopal ("we", "us"). Contact: hello@favtray.com. This policy explains what data we collect, how we use it, and your rights. The short version: no FavTray server stores your app data, we don't sell anything, and we collect as little as possible.

What the App Collects

Your app data stays on your Mac. Eye rest statistics, AI usage history, break history, reminders, notes, project boards, artifacts, screenshots, clipboard history and clipboard pins, window layouts and settings are stored locally, in macOS preferences (UserDefaults) and in files in your home folder (~/.config/FavTray and ~/Library/Application Support/FavTray). No FavTray server stores this data.

The app reads files in your ~/.claude/ directory, and the local logs of other AI tools you use such as Codex, to work out AI usage and cost on your Mac. Those logs are not sent anywhere.

Credentials. Keys and tokens you give FavTray (for example an OpenAI or Anthropic API key, a GitHub token, a cookie you paste for a provider, or your Flow AI provider settings) and your license key are stored in the macOS Keychain. For Claude Code, Codex and Gemini, FavTray reuses the sign-in that tool already keeps on your Mac, read-only, and sends it only to that provider to read your limits; it does the same with Cursor's sign-in when Cursor is signed in on your Mac (sent only to cursor.com). It does this for each provider that is turned on, even when its tool is hidden, until you turn the provider off in Settings › AI Usage. It never renews a Claude Code or Codex login. For Factory, it reads your Factory API key from the FACTORY_API_KEY environment variable or ~/.factory/.env, read-only, and sends it only to Factory (api.factory.ai). For Amp, Augment, CodeRabbit and Kiro, FavTray runs that tool's own command-line program (amp, auggie, coderabbit, kiro-cli), which uses its own sign-in, and reads only what the program prints. Windsurf, JetBrains, Vertex AI and Antigravity are read only from local files or from a server running on your Mac. A cookie you paste for a provider is kept in the Keychain and sent only to that provider. For GitHub it can also reuse the sign-in of the GitHub CLI (gh auth token) or of your git credential helper (git credential fill), read-only too. Cloud Costs reuses the credentials your AWS CLI (~/.aws/credentials) and gcloud already have. FavTray holds these borrowed sign-ins in memory while it refreshes and doesn't save its own copy, with one exception, Switch account, below. (FavTray 2.0.7 and earlier also let macOS's web cache keep copies of FavTray's web requests, sign-in headers included, in ~/Library/Caches/com.favtray.app, and cookies that services set in ~/Library/HTTPStorages/com.favtray.app. FavTray 2.0.8 turns both off and deletes what was stored the first time it runs.)

Switch account (Pro). The one time FavTray changes another tool's sign-in is when you use Switch account for Claude Code or Codex. FavTray then copies the login the tool is using into FavTray's own Keychain items, and when you switch it writes the saved login back where the tool keeps it (Claude Code's Keychain item and ~/.claude.json, or ~/.codex/auth.json). While a saved login is still signed in, FavTray sends it only to that provider's own usage endpoint (Anthropic or OpenAI) to read that account's limits. FavTray never renews a login; the tool renews it the next time you use it. Saved logins stay on your Mac until you remove them in Settings › Accounts. If your trial or licence has ended, FavTray 2.0.8 and later still list them there with Remove; on earlier versions the list is hidden, so delete FavTray's items in Keychain Access instead, as Remove FavTray completely describes. Anthropic's and OpenAI's own terms cover how their logins may be stored and used, so read them before you use Switch account.

Clipboard history. In FavTray 2.1.0 and later, Clipboard is its own tool, and it is off until you turn it on. When on, it keeps what you copy only on this Mac, encrypted (AES-256-GCM) in ~/Library/Application Support/FavTray/Clipboard, with the key in your login keychain (the item clipboard.vaultKey). Free keeps history for 24 hours; Pro keeps it for the period you choose, from 1 day to forever (30 days by default). Pins stay until you unpin them, and nothing is deleted when a trial or licence ends. Clipboard history is never synced, uploaded or read by an AI, and the sorting into groups runs on your Mac. It skips copies that apps mark private (as password-manager apps do) and copies made in the password-manager apps it knows; their browser extensions mark nothing, so those copies rely on the next rule. It doesn't keep API keys and private keys it recognises, and copies that look like passwords, tokens, card numbers or one-time codes are hidden and kept in memory only, for 10 minutes. It catches most of these, not all. Copies from your iPhone that arrive through Universal Clipboard are recorded like any other. Safe Paste's list of masked values is kept in memory only and forgotten after 10 minutes. In FavTray 2.0.8, clipboard history was one of FavShelf's paid tools, off until you turned it on, and kept in memory only, never on disk, for 24 hours; 2.0.7 and earlier had it on by default for trial and paid users.

Services you connect talk to your Mac directly. When you turn on a tool that uses an outside service, FavTray connects from your Mac straight to that service, using your own credentials. Nothing passes through a FavTray server, and that service's privacy policy covers what it receives:

AI usage: the AI providers you connect (such as Anthropic, OpenAI, Google, Cursor or GitHub Copilot), to read your plan limits, and their public status pages. FavTray 1.x also read Vertex AI usage from Google Cloud Monitoring with your gcloud sign-in; 2.0 and later only read which gcloud account and project are active, from gcloud's own files.
GitHub: the GitHub API, or your GitHub Enterprise server, for pull requests, reviews and CI, and GitHub's servers for account pictures
Cloud Costs: AWS Cost Explorer and Google Cloud (your BigQuery billing export and Recommender)
Flow AI and AI Writer: the AI provider you set up, with your own key, or a local model (such as Ollama or LM Studio) that runs on your Mac. Flow AI sends only the kinds of data you allow in Settings › Flow AI; AI Writer sends the text you select.
Weather in the notch island: Open-Meteo, with the city you search for and its coordinates
Now playing: while Spotify plays, the notch island loads the track's artwork from Spotify's servers
Artifacts: an artifact that shows a web image (an https:// link) loads it from that address only when you click Load image on it, and then shows it again without asking until you quit FavTray. FavTray 2.0.7 and earlier loaded it as soon as you opened the artifact.

AI Writer in FavTray 1.10 to 1.13. In those versions, the text you selected for AI Writer went through our server to DeepSeek (api.deepseek.com), which rewrote it. Our server didn't keep the text; it kept a monthly count of rewrites for each licence. FavTray 2.0 and later never send AI Writer text to us, only to the provider you set up. We switched that old route off on 1 October 2026. AI Writer in 1.10 to 1.13 now shows "Update FavTray to keep using AI Writer". We deleted the monthly rewrite counts that same day. If you still run one of those versions, update FavTray.

What the app sends to FavTray. The app contacts services we run only for these:

License check: see License Validation below.
Update check: about every 4 hours, and when you open FavTray, wake or unlock your Mac if the last check is over an hour old (15 minutes when you open Settings › Updates), the app reads a small update file from our Google Cloud Storage bucket. Updates download in the background unless you turn that off (Settings › Updates). It sends no identifier, only the standard details of any web request, such as your IP address.
Product news: about every 6 hours, plus a random delay of up to an hour (and after your Mac wakes, if a check is due), the app reads a small signed news file from the same bucket, so it can show a short note when something new ships. Which note, if any, to show is decided on your Mac. It sends no identifier, only the standard details of any web request, such as your IP address. In FavTray 2.0.8 and later it is off unless you turn it on in Settings › General › Product news; earlier versions had it on.
Skill check: if you have a paid license and install the FavTray Skill, the app reads a small manifest file from the same bucket when it starts and about once a day, to see whether a newer version of the skill exists, and downloads it when there is one. It sends no identifier.
Max, the desk buddy: a licensed install downloads Max's model from our API once. The request carries your license key and your Mac's hardware UUID (both also sent by the license check) so that only licensed installs receive it. After that Max works offline.
Your email, if you add it: see below.

Adding your email in the app (optional): if you choose "Add your email" to get 7 more days of the Pro trial (offered during setup, and later in the app), the app sends your email address, whether you ticked the updates box, and a one-way hash of your Mac's hardware identifier (never the identifier itself) to our API. The hash lets each Mac, and each email, extend the trial once. The app remembers the email on your Mac so you can delete it later.

License Validation

If you purchase a license, the app contacts our licensing API when you activate it and then to validate it, at most about twice a day. This sends:

Your license key
A device identifier (hardware UUID) and a one-way hash of it
The name you give this Mac when you activate (its Sharing name unless you change it)
App version

This data is stored in Google Cloud Firestore and used solely for license management. For each Mac on a licence we keep the name you gave it, its device identifier (or a one-way hash of it), when it was activated and when it last checked in. We do not use it for tracking or profiling.

What the Website Collects

Downloads: The download page stores your verified email with a download count. We also keep anonymous daily download totals (date, the link you came from, country and operating system). The download counter stores no IP address and sets no cookie. To find the country, our server sends your IP address to country.is, an IP-to-country lookup service, and keeps only the country. Our server also holds your IP address in memory for up to an hour to stop one address inflating the count. The pricing page uses the same country lookup to show the right checkout for your country.

Help and feature requests: if you write to us through the Help widget or the feature request form, we store your message, any screenshots you attach, your email if you give one, and a one-way hash of your IP address that we use to limit spam. We get an email copy of the message.

Server logs: like most web services, our API runs on Google Cloud, whose standard request logs record IP addresses. Since 1 October 2026, our own log lines hold a licence ID or a 12-character one-way hash of the email, never the email address or a sign-in code. Older lines may still hold an email address until Google Cloud deletes them after 30 days, as it does all these logs. Deleting your account can't reach them sooner. We use them only to fix problems and protect the service.

Waitlist: If you joined our pre-launch waitlist, we store your email address and use it only for FavTray launch news.

Payment data: Payments are processed by our merchant of record, Dodo Payments. Purchases made before September 2026 were processed by Razorpay, which still handles those subscriptions. We never see or store your credit card number.

Your Email and Marketing Consent

When you verify an email with a 6-digit code (to download FavTray, to extend your trial in the app, or at checkout), we store in Google Cloud Firestore: the address, that it was verified, where you gave it (our website, the app, or the site that sent you, such as Hacker News or Product Hunt), how many times you downloaded, and whether you used the trial extension.

Sign-in codes are stored only as a hash and expire after 10 minutes. We use that email only for what you asked for: the download, the trial extension, sign-in codes and purchase emails. We never send you product updates or offers unless you tick "Send me product updates and offers". The box always starts unticked. If you tick it, we record the exact wording you agreed to, its version, when, and where.

Every product update or offer email includes a one-click unsubscribe link, and you can also unsubscribe by writing to hello@favtray.com. Unsubscribing stops those emails at once; it does not affect your license, your trial or the app.

Delete Your Data

You can delete your email, and everything we keep with it, yourself at any time. Either place does the same thing:

In the app: Settings › FavTray Pro › Delete my account and email.
On the website: favtray.com/account → verify your email with a 6-digit code → Delete my data.

It happens at once. We delete: your email address and its consent history (whether you ticked the updates box, the exact wording, when and where); where you signed up and how many times you downloaded; any waitlist signup or unfinished checkout; the in-app trial extension record (your email, your Mac's hash and the signed grant); and your email on anything you sent through Help (the message stays, no longer linked to you). In the app, FavTray also forgets the email on your Mac and turns product-update emails off.

We keep only:

A salted one-way hash of your email and of your Mac's hash (HMAC-SHA-256 with a secret key only our server holds). It can't be turned back into your email or your Mac. Its only job is to stop the free extra week being claimed a second time. Kept for as long as we offer the trial extension.
Licence and payment records, if you bought Pro: the licence, its key, the email on it and the purchase. Tax law requires us to keep sales records, and your licence needs them to keep working. Deleting your account never revokes a licence. Kept for the life of the licence, then for as long as tax law requires us to keep sales records (currently 6 years in India, where FavTray is run). After that, write to hello@favtray.com and we'll delete them too.
Server logs that may contain your email, until Google Cloud deletes them after 30 days (see Server logs).

Dodo Payments (or Razorpay, for purchases before September 2026) and Resend, which sends our emails, keep their own records of receipts and emails sent, under their own privacy policies. Deleting your FavTray account doesn't reach them; ask them directly.

Pro trial days you already have in the app stay. Deleting twice is harmless: the second time there is nothing left to delete. Messages you emailed us directly live in our inbox; ask and we'll delete those as well.

Cookies & Analytics

This website uses Google Analytics 4 to understand how visitors use the site (page views, referrers, device type). GA4 sets two cookies:

_ga — distinguishes users (expires after 2 years)
_ga_V8X4N3JQXL — maintains session state (expires after 2 years)

No Google Analytics code loads unless you accept via the consent banner. Until you accept, no request is made to Google Analytics and no analytics cookies are set. The site's fonts are served from favtray.com itself. If you decline, nothing is loaded or collected. Clicks on the download button are counted as an analytics event only after you accept. IP addresses are anonymized.

You can change your preference anytime with the Cookie Settings link in the footer. We do not use any other tracking pixels or third-party analytics.

No analytics in the app. The app contains no analytics or crash-reporting SDK and does not report how you use it. Its logs, and the crash and hang reports macOS keeps for it, stay on your Mac (~/Library/Logs/FavTray and ~/Library/Logs/DiagnosticReports) and reach us only if you send them, for example with Settings › General › Export Diagnostics… in FavTray 2.0.8 and later. It contacts services we run only for the checks listed under What the App Collects. Website analytics are described above.

We Do Not Sell Your Data

We do not sell, rent, trade, or share your personal information with anyone. Period. This applies to your email address, license data, and any other information.

Third-Party Services

We use the following services to operate FavTray:

Google Analytics — website analytics, consent-based (privacy policy)
Dodo Payments — payment processing, merchant of record (privacy policy)
Razorpay — payment processing for purchases made before September 2026 (privacy policy)
Google Cloud — licensing API, email storage, and app downloads, updates, product news, skill files and the videos on this site (Cloud Storage) (privacy notice)
country.is — looks up the country for an IP address, for download counts and the pricing page (website)
Resend — sends verification codes and license emails (privacy policy)
Firebase Hosting — website hosting (privacy policy)
Cloudflare — DNS and email routing (privacy policy)

Data Retention

Verified emails: Kept until you delete them (Delete Your Data). When you unsubscribe we keep the record of your consent and when you withdrew it, so we can show we honoured it; deleting your data removes that too.
Waitlist emails: Kept until our launch campaign is complete, then deleted unless you become a customer.
License data: Kept while your licence works, then for as long as tax law requires. Deleting your account doesn't delete it or stop it working.
Server logs: 30 days, then Google Cloud deletes them.
App data: Stored locally on your Mac until you delete it. Moving FavTray to the Trash leaves its settings and files behind: ~/.config/FavTray, ~/Library/Application Support/FavTray (including the encrypted clipboard history in its Clipboard folder), its caches (~/Library/Caches/FavTray, ~/Library/Caches/com.favtray.app and ~/Library/HTTPStorages/com.favtray.app), the com.favtray.app preferences, the widget's containers if macOS created them, FavTray's items in Keychain Access (including the clipboard key, clipboard.vaultKey), the Claude Code hooks it added to ~/.claude/settings.json, and the copy of that file it saves as ~/.claude/settings.json.favtray-backup before adding them. Remove FavTray completely lists every one and how to remove it.

Some app data removes itself sooner:

Clipboard history: 24 hours on Free; on Pro, 30 days by default or what you choose from 1 day to forever; hidden items 10 minutes, in memory only; pins until you unpin them
AI Writer history: the last 50 rewrites, for up to 7 days
AI usage history: 56 days
System and process history: raw readings 24 hours, 5-minute averages 7 days, hourly averages 30 days
Eye Rest statistics, Hydrate and Posture history, Space scan history: 90 days
Screenshot history: the last 24 captures
Notes, projects, reminders and artifacts: until you delete them

Your Rights

You have the right to:

Access your data — ask us what we have
Delete your data — do it yourself in the app or at favtray.com/account (what's kept and why), or ask us
Correct your data — update your email or license info
Export your data — receive a copy of what we store
Withdraw consent — unsubscribe in one click from any product update or offer email, or by writing to us

These rights apply regardless of where you live (GDPR, CCPA, India DPDP Act, or otherwise). Email hello@favtray.com for any request or complaint — we'll respond within 30 days. If you're not satisfied with our answer, you can also complain to your data protection authority: in the EU or UK, the supervisory authority where you live; in India, the Data Protection Board of India.

Why We Use Your Data (Lawful Basis)

To give you what you asked for (contract): license activation and checks, Max's download, the download link, the trial extension, sign-in codes and purchase emails.
Your consent: product update and offer emails (the unticked box) and website analytics (the cookie banner). You can withdraw it at any time.
Our legitimate interests in running and protecting FavTray: download counts, the country lookup, spam limits on Help, and server logs.
A legal obligation: keeping sales records for as long as tax law requires.

Children's Privacy

FavTray is not directed at children under 13. We do not knowingly collect data from children.

International Transfers

Our licensing API and email storage run on Google Cloud. Data may be processed in the United States or other regions where Google operates. Dodo Payments, our merchant of record, processes your payment and billing details, which may happen outside your country. Resend, which sends our emails, processes your email address, which may happen in the United States. Razorpay processes payments in India. Where your data leaves the EU, the UK or India, we rely on each provider's own data protection terms; Google Cloud's include the European Commission's Standard Contractual Clauses.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top will change. Continued use of FavTray after changes constitutes acceptance of the updated policy.

Contact

For any privacy questions, data requests or grievances, email hello@favtray.com. FavTray is published by Soha Enterprise (sole proprietorship, India, Udyam UDYAM-TN-02-0476804).