Privacy Policy

Desktop companion and optional screen search

Mewbi for Mac stores its preferences, name and relationship records on your Mac. Accessibility and local visual checks support window-edge behavior; local perception does not upload screenshots. Only an explicit finder-glasses scan, after consent, sends the selected window or screen snapshot and query through our service to TypeSafe for analysis. Our proxy does not store or log screenshots, queries or answers; minimal scan and provider-request counters linked to your account and random device ID support rate limits and cost controls and are normally removed after 30 days. TypeSafe handles submitted data under its privacy policy and applicable service terms; our proxy’s non-storage does not promise zero retention by that provider. Cloud scans require an active account session and an activated Play Pack device. An optional personal provider key is encrypted with the operating system’s secure storage. Cloud features can be unavailable without affecting local companionship.

1. Account, purchases and restoration

Mewbi verifies email codes in the app, uses Resend to deliver them and Stripe to process checkout, and stores email, hashed sessions, order and refund records and up to three opaque device activation IDs in Cloudflare D1. Codes are stored as short-lived keyed digests. We also store session client/device associations, activation and last-sync times, and security/support events without raw IP addresses. Email delivery records use keyed recipient digests and provider message IDs; permanent bounces and complaints can suppress further sends. Desktop session tokens last 90 days and can be rotated within a 180-day absolute lifetime; website sessions last two hours; expired sessions have a seven-day cleanup buffer. Delivery details normally expire after 30 days, aggregate sign-in counters after 90 days, and security events after 180 days through bounded cleanup. Suppression records remain until reviewed or no longer needed. The app encrypts its session with macOS secure storage and keeps a device-bound signed offline license. From version 0.5.24, the cached offline certificate is also encrypted with macOS secure storage. When connected, the app may check account and device license status, including while signed out; this does not upload your cat’s name, relationship memories, screenshots or search queries. Offline use does not require periodic renewal.

2. Payments and service providers

Stripe hosts checkout and processes payment details. We do not receive or store full card numbers. Stripe sends us payment and refund status so we can grant or remove item access. Cloudflare hosts the website, API and database; Resend delivers account verification emails. These providers may process data outside Singapore under their own terms and safeguards.

3. Retention and your choices

Local desktop data can be removed through the app or by removing its application support data. For desktop, signing out removes the online session while preserving an existing permanent offline license. Releasing this Mac removes its matching local license. Account deletion removes email and online recovery access; historical payment records remain linked to a non-login account identifier. Other offline copies cannot be removed remotely. Changing email requires fresh proof of the current email and verification of the new email, and signs out all sessions. We retain account, order and entitlement records while needed to provide purchased items, resolve disputes or meet legal obligations; expired sign-in states and sessions may be removed. Contact us to request access, correction or deletion of personal data. Deleting an account can affect access to purchased items, subject to applicable rights.

4. Security and updates

We use HTTPS, restrict access to the commerce database and store session tokens as hashes on the server. No system is perfectly secure. We may update this policy when the product changes and will post the new effective date here. For privacy questions or complaints, email buddy@lingo-bear.com.