Igidu Privacy Policy
Effective date: November 6, 2026
Operator: the individual identified in section 11, operating as Igidu
Privacy contact: support@igidu.app
1. Scope
This policy covers Igidu for Mac, igidu.app and the purchase, licensing and support services we operate. "We" means the operator identified in section 11. Third-party games, music services, operating-system services and payment providers may handle information under their own policies.
2. Recording and replay on your Mac
You choose a window and confirm audio sources before recording or enabling replay. Video is scoped to the selected window. App audio may include sound from other windows or tabs of that same app, including voice chat. Optional microphone capture uses your selected microphone and macOS permission. Disabling the microphone does not exclude voices played through the selected app.
Replay continuously captures recent footage while you have enabled it, temporarily retaining compressed video and selected audio. It does not automatically resume on app launch. Capture indicators show recording/replay status. Manually turning replay off discards the unsaved buffer and cancels a pending replay save. A normal app quit allows an already-requested save to finish or report failure before closing. Force quit, a crash, power loss or an export failure can still interrupt it. If the selected game window temporarily stops delivering frames, replay may pause buffering and resume for that same window without switching to another source. Completed recordings remain in your destination until you manage or delete them.
Saving replay may write temporary fragments and a final MP4 to your selected destination. Normal export cleanup removes temporary files; a crash, power loss or failed cleanup may leave temporary footage. Discarding memory is not secure erasure against operating-system swap, crash artifacts or forensic recovery. Permissions and protection vary by destination filesystem. We do not claim that clips are encrypted by Igidu or that other software with sufficient access cannot read them.
The recording feature does not send your screen video, replay buffer or microphone recordings to our servers. A folder you select may nevertheless synchronize or back up through iCloud Drive, another cloud service, network storage or software you use. Those transfers are controlled by your settings and providers. We do not remotely delete your saved recordings when a license expires or is refunded.
3. Other local information
Igidu uses local preferences, controller mappings and device information to provide its controls. Depending on features you use, this can include device identifiers and capabilities, audio device identifiers, selected source/window information, controller-profile backups, discovered application names and paths, launcher bookmarks, recording destinations and local performance readings.
Local diagnostic files can include app version, launcher-discovery information and foreground-app/focus status. They are not automatically submitted through the reviewed feedback flow. Current optional focus/discovery diagnostics are off by default and use ~/Library/Application Support/Igidu/Diagnostics. Fixed-name reports replace earlier reports when generated; they are not automatically uploaded or aged out. Explicit controller-diagnostic exports use that folder too. Local preferences and backups may remain after uninstalling; see the local-data instructions in the release documentation. Do not delete controller backups without checking whether you need them.
We do not use this local information for advertising or automatically transmit your library, controller backups or recording contents to us.
4. Permissions and network activity
Igidu requests permissions for relevant features, such as Accessibility for software input, screen/system-audio capture access, separate microphone permission, and Automation for supported music control. You can manage permissions in macOS System Settings. Revoking a permission can disable its associated feature.
Companion's latency check sends network traffic to a public endpoint (currently 1.1.1.1); that endpoint receives normal connection information such as your public IP address. It is not a measurement of your specific game server. The probe runs approximately every five seconds while Companion is visible and stops when Companion closes. Music services and games you launch make their own connections. "Local recording" does not mean the entire application or computer makes no network connections.
Checking for updates contacts our distribution service and exposes normal connection information, such as your public IP address, along with app/update compatibility information. Igidu uses Sparkle to verify update signatures. System-profile collection is disabled, and installation requires your approval. The hosting-provider processing described below also applies to update and installer downloads.
5. Purchases and licensing
Our website and test licensing services use Cloudflare, test checkout uses Paddle, and recovery email uses Resend. Live sales are not yet enabled. When live sales open, these providers will also support production purchases, licensing and recovery as described below. Test transactions do not charge real money.
Paddle processes checkout and applicable billing/tax information under its terms and privacy notice. We receive the transaction and entitlement information needed to provide purchases, refunds and support. We do not receive full payment-card numbers or card security codes.
Licensing uses a random installation signing identity generated on your Mac. The private key remains in your Keychain; the service receives the public key and an installation identifier derived from it. This is not a hardware serial-number fingerprint. Records include trial start/expiry, checkout intent and transaction identifiers, license state, activation identifiers/dates and recovery authorization data.
The service processes purchase or recovery email addresses to locate purchases and deliver recovery messages. Its license database uses a secret-protected email hash as a lookup value. Hashing is not anonymization: the records remain associated with purchases and installations. Email services necessarily receive the destination email address and message contents.
Requests expose normal network metadata to hosting providers. The implementation uses short-lived hashed IP/device/email rate-limit keys for abuse prevention. Application request observability is disabled in our deployed Workers. Cloudflare still processes network and security metadata to deliver and protect the service. Resend retains email and log data under its service retention policy, currently 30 days on our Free plan. We do not claim that infrastructure logging is disabled. We do not treat the absence of application request logging as proof that infrastructure providers keep no operational records.
6. Support and feedback
A support message may contain your contact details and whatever you choose to include. The in-app support form previews your text, app version/build, macOS version and any saved device validation results you explicitly choose to include. You can save or copy the message locally, or open an email draft addressed to support@igidu.app. Igidu does not send it: you review and send it in your email app. Your email provider handles delivery, and sending reveals your sender address. This form does not collect or attach logs, recordings, serial numbers or device inventories, and does not count votes. Support messages are used to investigate issues and evaluate requests; support and delivery dates are not guaranteed. If you send a recording, diagnostic file or screenshot separately, review it first and remove material you do not want support staff to receive.
We use support information to respond, investigate issues and improve the product. Original support messages are reviewed by the operator in Apple Mail and may be copied into a private local support workspace. That workspace has no automatic AI upload. The operator may prepare a manually redacted technical summary for AI-assisted development; direct customer identifiers, secrets and unrelated personal material must be removed before sharing. Review is not a guarantee of anonymization. Any proposed sharing of identifiable support content with an AI provider requires a separate reviewed basis and appropriate disclosure before it is enabled. We do not publish submitted recordings without separate permission.
7. Purposes and recipients
We use necessary information to deliver the app and licenses, fulfill purchases, respond to support, prevent abuse, maintain security and comply with legal obligations. Our providers are Cloudflare (hosting/database/security), Paddle (checkout and merchant-of-record services), and Resend (transactional recovery email). Support email uses Apple iCloud Mail through Apple Mail (https://www.apple.com/legal/privacy/); your own email provider also handles your message. No automated inbox connection is present in the internal support workspace. Their contractual roles and independent processing may differ; do not assume every provider acts only on our instructions.
We may disclose information when legally required, to protect legitimate rights and security, or in a business transfer subject to applicable safeguards and notice requirements. We do not sell personal information or use behavioral-advertising pixels in the reviewed implementation. Public marketing and policy pages use Cloudflare Web Analytics to measure aggregate visits, page views, referring sites, countries, browser/device categories and page performance. This is website measurement, not in-app usage tracking. We do not add analytics cookies, persistent visitor identifiers, cross-site advertising profiles, session recordings or keystroke collection. Hosting and analytics requests still expose normal network metadata to Cloudflare. Password-protected previews, requests carrying preview authorization and our analytics-preferences page are excluded from our analytics script. We also skip loading it for browsers with our local exclusion preference, Do Not Track or Global Privacy Control. You can manage the browser-local exclusion at Analytics preferences. That preference is stored locally and is not a visitor identifier. Known-bot filtering reduces noise but cannot identify every bot, and visit counts are not a count of unique people. Browser blocking and privacy preferences can reduce measurement coverage. Paddle checkout is a separate payment surface and uses its own necessary payment and fraud-prevention technologies. Necessary provider technologies may support checkout, fraud prevention or service delivery.
8. Retention
Local recordings remain under your control. Unsaved replay storage rolls over within its configured bounds and is discarded when replay stops, subject to the temporary-file and operating-system limitations above. Other local data remains until removed through supported controls or verified cleanup instructions.
Our licensing implementation expires challenges after five minutes, restore codes after fifteen minutes and recovery grants after ten minutes. Expiration prevents use; scheduled cleanup may occur later. Short-lived rate-limit records expire separately, and completed webhook-event records are eligible for removal after thirty days. Pending retry events can remain longer.
Trial records are retained to enforce the original trial, and purchase/activation records support continuing licenses, refunds and fraud prevention. Open support cases are kept while needed. Closed records in the internal support workspace are flagged for review after 90 days, not automatically deleted. The operator reviews whether they remain necessary and separately manages original emails, exports and backups. Installation, trial, checkout-intent and purchase records do not currently have an automatic deletion schedule. We retain them for continuing license service, trial-abuse prevention, transaction support and applicable recordkeeping needs, and review deletion requests individually. Pending failed webhook events remain until resolved or reviewed. Our Cloudflare D1 Free-plan point-in-time recovery window is seven days, so recently deleted database records may remain recoverable during that window. Provider-held billing, security, email and backup records are governed by the relevant provider’s policies and legal obligations; a deletion from our active database does not guarantee deletion from every provider system.
9. Your choices and rights
You can stop capture, change recording choices, revoke macOS permissions, manage files you saved, and contact us about personal information held by our services. Depending on your location, you may have rights to access, correct, delete, receive a copy of, restrict or object to processing of your information, and to complain to a competent authority. We will verify requests proportionately and respond as applicable law requires. Some records may need to be retained for legal obligations, fraud prevention or continuing license service; we will explain applicable limits. Deleting activation information may affect purchase recovery, but does not remove rights the law gives you.
We cannot access or delete local recordings through the licensing service. Deleting our records does not automatically delete records independently held by Paddle or other providers.
10. International processing, children and security
Our service providers may process information outside your country. The operator is based in the United States. Cloudflare uses international infrastructure; our licensing database was provisioned in western North America and our Resend sending domain uses its US East region. Provider processing may also occur elsewhere. Where applicable, we rely on performing the requested service or contract, complying with legal obligations, legitimate interests in security and support, and consent where required. Provider privacy notices and data-processing terms describe their international-transfer mechanisms. Contact us for information about safeguards applicable to a specific request. This notice does not waive rights or substitute for any additional disclosures required in your location.
Igidu is not specifically directed to children under thirteen, and we do not knowingly solicit their personal information through our online services. Contact us if you believe such information was provided. Our online services do not offer a child-account or parental-consent enrollment process. Please do not submit personal information about a child under thirteen through support or recovery forms.
We use safeguards appropriate to the service, including signed licensing requests, protected server secrets and limited-purpose recovery codes. No software or storage system can guarantee absolute security. Provider configuration and release testing must support any security claims we make.
11. Changes and contact
We will post updates with an effective date and provide additional notice or choices where required for material changes. Contact support@igidu.app for questions or requests. The operator is Jesse Miller, an individual operating as Igidu in Kansas, United States. Business postal address: 602 Wedgewood Ct., Hesston, KS 67062, United States. This policy does not reduce mandatory privacy or consumer rights.
## Provider information
Cloudflare: https://www.cloudflare.com/privacypolicy/
Paddle: https://www.paddle.com/legal/privacy
Resend: https://resend.com/legal/privacy-policy and https://resend.com/security
Apple iCloud: https://www.apple.com/legal/privacy/
Database recovery: https://developers.cloudflare.com/d1/reference/time-travel/