PRIVACY POLICY

Last updated November 3, 2026

This Privacy Notice for Xin Cheng ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Download and use Jellipace for Mac, Jellipace for iPhone and iPad, or any other application of ours that links to this Privacy Notice
• Use Jellipace. Jellipace is a focus pacing app. It notices how you work on your own Mac, stays quiet while you focus, and suggests a break at a natural pause. The free iPhone and iPad app is a companion to the Mac app.
• Visit our website at jellipace.com, buy Jellipace or Jellipace Pro, or contact us for support

The short version. Jellipace has no accounts and no sign-in. What it records about your work is stored and analysed on your own devices, and we cannot see it. We do not use analytics, advertising or tracking, and we do not sell personal information.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@jellipace.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using the table of contents below.

What personal information do we process? Very little of it reaches us: what you send us when you contact us, and order details that Paddle shares with us when you buy Jellipace or subscribe to Pro. The activity record Jellipace keeps (which apps you use, window titles, timings and your notes) stays on your devices. If you turn on Pro, parts of it are sent to an AI model to be processed and are not kept. Learn more in Section 1.

Do we process any sensitive personal information? We do not ask for sensitive personal information. Window titles and on-screen text can contain anything you work on; they stay on your Mac unless you turn on Pro, and even then they are not kept. Learn more in Section 1.

Do we collect any information from third parties? When you buy Jellipace or subscribe to Pro, Paddle, our reseller, shares your order details with us. We do not buy personal information from anyone.

How do we process your information? To provide the app, issue and renew licences, answer support requests, keep our records for tax law, and keep the Services secure. Learn more in Section 3.

In what situations and with which parties do we share personal information? Only with the service providers that run parts of Jellipace for us: Paddle, Apple, Cloudflare, Anthropic (only if you turn on Pro), and Google and Resend (for support email). We do not sell personal information or share it for advertising. Learn more in Section 5.

How do we keep your information safe? Most of it never leaves your device. We use organisational and technical measures for the rest. No method of transmission or storage is 100% secure. Learn more in Section 9.

What are your rights? Depending on where you live, you may have rights to access, correct, export, or delete personal information. Learn more in Section 10.

How do you exercise your rights? In Jellipace for Mac, open Settings › Your data to export or delete everything the app has recorded. For anything we hold, email support@jellipace.com.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE TREAT CHILDREN'S INFORMATION?
3. HOW DO WE PROCESS YOUR INFORMATION?
4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
6. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
8. HOW LONG DO WE KEEP YOUR INFORMATION?
9. HOW DO WE KEEP YOUR INFORMATION SAFE?
10. WHAT ARE YOUR PRIVACY RIGHTS?
11. CONTROLS FOR DO-NOT-TRACK FEATURES
12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
14. DO WE MAKE UPDATES TO THIS NOTICE?
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

In Short: Jellipace has no account and no analytics. Most of what it uses never leaves your device. We receive only what you send us and what Paddle shares when you buy.

Information that stays on your devices

Jellipace learns your work rhythm from what happens on your own devices. This information is stored and processed on the device. It is not sent to us, and we cannot see, read or recover it.

Jellipace for Mac keeps an activity record of:

• Which app is in front, and when.
• The title of the front window, and for documents and web pages, the document name or page address, if "Read window titles" is on (Settings › What it sees). This uses the macOS Accessibility permission. You can decline it or turn titles off, and Jellipace then works with app names only.
• When you stop and start using the keyboard or mouse. Jellipace does not record your keystrokes. It watches for a double-tap of one modifier key (Control by default) as its pause shortcut and ignores every other key.
• Whether the microphone is in use and which app is using it, whether a window is full screen, whether the screen is being recorded or shared, and whether the display is asleep. These checks exist only so that Jellipace never interrupts a call, a video or a presentation. Jellipace never listens to audio, never takes screenshots and does not request the Screen Recording permission.
• Things you write in the app, such as notes for when you are back.
• What the app works out from all of this: work sessions, breaks, labels for the work, a learned memory of your rhythm, and daily insights.

Apps you add to the ignore list (Settings › What it sees) are recorded only as "Private app". Their window titles and screen contents are never read.

Where Apple Intelligence is available, Jellipace uses Apple's on-device model to label your work sessions. That model runs on your Mac.

Jellipace for iPhone and iPad:

• Screen Time. With your permission, the app uses Apple's Screen Time framework to put a shield over apps you choose during a focus block, and to lift it during a break. Apple gives the app opaque tokens for the apps you choose, not their names. Your Screen Time usage stays inside Apple's system on that device. It is never sent to us, never synced, and never shared with anyone. You can withdraw the permission in iOS Settings at any time.
• Sync with your Mac. Notes you write and the insights from your Mac are synced between your own devices through the private database of your own iCloud account. We cannot access your iCloud account or anything stored in it. Apple's iCloud terms apply.
• Notifications. If you allow notifications, the app can tell you when a break ends. These notifications are created on your device.

Because this information stays on your devices or in your own iCloud account, we do not collect it. You control it in the app: see Section 10.

Jellipace Pro (Mac only, optional)

Pro uses Claude, an AI model made by Anthropic, to judge whether a pause is a good moment for a break and to write a daily insight. Pro sends nothing until you turn it on and accept the line in Settings › Pro that says what is sent. When Pro is on:

• At a pause, when a break might be offered: the visible text of the front window (up to about 1,500 characters), read through the Accessibility permission, and its document or page address; plus today's work sessions so far, the current focus block, the time of day and your learned memory. The screen text is read at that moment, used once, and never saved on your Mac. Ignored apps are never read, and password fields are never exposed by macOS.
• Once a day, while you are away and your Mac is on power: the day's window titles and app names with the time spent on each, your pause readings, a sheet of the day's figures worked out on your Mac, and your learned memory.

Pro can reach Claude in one of two ways, which you choose in Settings › Pro:

• Pro licence. Requests go through our relay, a small service we run on Cloudflare. It checks your licence, forwards the request to Anthropic and returns the answer. It does not log or store the content of requests.
• My own key. The app sends requests straight to Anthropic using your own Anthropic API key, under your agreement with Anthropic. The key is kept in your Mac's Keychain and is never sent to us.

Requests through our relay are processed by Anthropic under zero data retention: Anthropic does not store them after answering and does not use them to train its models. What comes back (labels, the daily insight, changes to your learned memory, and one line on what you seemed to be doing) is stored on your Mac with the rest of your record. To stop sending, set Settings › Pro to Off or turn off the consent switch. Nothing is sent after that.

Purchases and licences

What you can buy. Jellipace for Mac is a one-time purchase after a free trial. Jellipace Pro is an optional subscription, paid monthly or yearly. Your first Pro payment also gives you Jellipace for Mac to keep, even if you later cancel Pro.

Free trial. During the free trial, Jellipace notes the date the trial started on your Mac, so the trial is not repeated. Nothing is sent to us, and we do not know who is using the trial.

Paddle. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. When you buy, Paddle collects your name, email address, billing address or country, and payment details, under Paddle's privacy policy. We never receive your card details. Paddle shares with us your name, email address, address or country, and what you bought. We use these only to fulfil your order, give you support, handle refunds, prevent fraud and keep tax and accounting records. We do not use them for marketing unless you agree to it.

Licences. After you buy, Jellipace for Mac sends your purchase number once to our licence service. The service asks Paddle whether the order is paid, which product it is and, for Pro, when the paid period ends. It then returns a signed licence and stores nothing. A Jellipace licence has no end date. A Pro licence lasts until the end of each paid period, and the app renews it near the end of each period. A licence holds a random identifier, the product and its dates, and no name or email address. Licences are kept in your Mac's Keychain, together with the purchase number so the app can renew Pro or restore a licence.

iPhone and iPad. The iPhone and iPad app is free and has no purchases.

When you contact us

If you email us, we receive your email address, your name if you include it, your message and any attachments. Email sent to our addresses is forwarded by Cloudflare's email routing to a Google (Gmail) mailbox, and our replies are sent through Resend. Please do not send your activity record unless you want us to see it. If you do attach an export, we use it only to answer your request and delete it afterwards.

Our website

jellipace.com uses no cookies of its own, no analytics and no advertising. It is hosted by Cloudflare, which processes the technical details of each visit (such as your IP address and browser) to deliver and protect the site. Our buy page loads Paddle's checkout, which may use cookies needed for payment and fraud prevention, under Paddle's policies.

Updates. Jellipace for Mac checks our website for new versions. Like any web request, this shows Cloudflare your IP address and the app's version. It carries no identifier for you or your Mac.

Information from Apple

Apple handles App Store downloads of Jellipace for iPhone and iPad. If you have chosen in your device settings to share analytics with app developers, Apple may give us crash reports and aggregated App Store statistics. These do not identify you.

2. HOW DO WE TREAT CHILDREN'S INFORMATION?

In Short: Jellipace is for adults managing their own work.

Jellipace is not directed to children under 13, or the older minimum age that applies in your country. The iPhone and iPad app uses Screen Time for a person managing their own device, not to supervise another person. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, email support@jellipace.com and we will delete it.

3. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process the little information we receive to provide the Services, support you, keep records the law requires, and keep the Services secure. We may also process your information for other purposes only with your prior explicit consent.

On your devices, Jellipace processes your activity record to find natural pauses, avoid interrupting you, learn your rhythm, and show your Insights. With your consent, Pro processes parts of it through Claude as described in Section 1.

We process the information we receive:

• To fulfil your order and issue and renew your licence.
• To run Pro requests through our relay, if you use a Pro licence.
• To respond to support requests, refunds and questions.
• To keep tax and accounting records the law requires.
• To protect the Services, including preventing fraud and misuse of licences.
• To comply with law and to protect an individual's vital interests where required.

We do not use your information for advertising, and we do not combine it to build a profile of you.

4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process personal information when we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you. We may rely on:

• Consent. For Pro, and for the permissions the apps ask for. You can withdraw consent at any time (see Section 10). Withdrawal does not affect processing that already occurred.
• Contract. To provide what you bought: your licence, Pro, and support.
• Legitimate Interests. To keep the Services secure and prevent fraud and licence misuse, where those interests are not overridden by your rights.
• Legal Obligations. To keep tax and accounting records, and to comply with law or legal process.
• Vital Interests. Where needed to protect someone's vital interests.

If you are located in Canada, this section applies to you. We may process your information with your express or implied consent, or where Canadian law permits processing without consent (for example fraud prevention or legal process).

5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: Only with the service providers below, and in the limited situations described here. We do not sell personal information or share it for advertising.

Each of these providers is bound, by its agreement with us or its published terms, to protect personal information to a standard at least equal to this notice, and to use it only to provide its service.

Screen Time data from Jellipace for iPhone and iPad is never shared with anyone, including us.

• Business Transfers. We may share or transfer information in connection with a merger, sale of assets, financing, or acquisition of all or part of our business. This notice would continue to apply.
• Legal. We may disclose information if required by law or legal process, or to protect rights, safety, or the Services.

International transfers. We are based in Australia. Our service providers may process information in other countries, including the United States. Where the law requires, we rely on the safeguards in their agreements, such as standard contractual clauses.

6. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for the privacy practices of third-party websites we link to.

Our website and apps link to third parties such as Paddle's checkout and customer pages, Apple, and Anthropic. Those sites have their own privacy policies. The inclusion of a link is not an endorsement.

7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: Yes. Jellipace uses Apple's on-device model. Pro, if you turn it on, also uses Claude by Anthropic.

Where Apple Intelligence is available, Jellipace uses Apple's on-device model to label your work. It runs on your Mac and nothing is sent anywhere.

Jellipace Pro uses Claude, provided by Anthropic. Section 1 lists exactly what is sent, when, and how it is protected. Pro asks for your permission in Settings › Pro before anything is sent.

How to opt out. Don't turn on Pro, or set Settings › Pro to Off. You can also add apps to the ignore list, or turn off "Read window titles", so that their contents are never read or sent.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: Only as long as needed. Most information is never kept by us at all.

When the period ends, we delete the information or make it anonymous.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: By keeping most of it on your device, and using technical and organisational measures for the rest. No system is 100% secure.

Your activity record is stored in the app's own folder on your Mac. Keys and licences are stored in the Mac's Keychain. Requests between the app, our relay and Anthropic are encrypted in transit, and the relay keeps nothing. Use Jellipace in a secure environment and keep your devices protected with a passcode.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You control what stays on your devices. For anything we hold, you may have rights to access, correct, export, delete, or restrict processing of it, and to object or withdraw consent.

What is on your devices. In Jellipace for Mac, open Settings › Your data:

• Export a copy… saves your activity record as a spreadsheet file, with a copy of your memory folder.
• Delete everything… deletes everything Jellipace has recorded and learned on that Mac. This cannot be undone.

On iPhone and iPad, deleting the app removes its data from that device. Synced data can be deleted from your iCloud storage settings.

Withdrawing consent. You can turn off Pro in Settings › Pro; turn off "Read window titles" in Settings › What it sees; remove Jellipace's Accessibility permission in macOS System Settings › Privacy & Security; and remove Screen Time access or notifications in iOS Settings. The apps keep working with less information.

What we hold. For your emails to us and your order records, email support@jellipace.com to access, correct or delete them. Paddle holds your payment details; you can also contact Paddle about the data it holds.

In the EEA, UK, Switzerland, and Canada, your rights may include access, rectification, erasure, restriction, portability, and objection to certain processing. We do not make solely automated decisions with legal or similarly significant effects. EEA/UK complaints: your local data protection authority or the UK ICO. Switzerland: the FDPIC.

After a deletion request, we remove the information from our mailbox and records, except where the law requires us to keep it (see Section 8).

11. CONTROLS FOR DO-NOT-TRACK FEATURES

There is no uniform standard for Do-Not-Track (DNT) browser signals. We do not track you across websites or apps, so there is nothing for a Do-Not-Track or Global Privacy Control signal to turn off. If a standard is adopted that we must follow, we will update this notice.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Residents of certain US states may have rights to know, access, correct, delete, or obtain a copy of personal information, and to opt out of sale, sharing for targeted ads, or certain profiling. We do not sell personal information and we do not share it for targeted advertising.

Categories of Personal Information We Collect

The table covers the past twelve (12) months. "Collected" means information that reaches us; information kept only on your devices is not collected.

Sale and sharing. We have not sold or shared personal information for targeted advertising in the preceding twelve months, and we will not.

Your rights may include the right to know, access, correct, delete, obtain a copy, and non-discrimination. You may designate an authorised agent. We will verify your identity before fulfilling a request, usually by matching the email address on your order.

How to exercise / appeals. Email support@jellipace.com. If we decline a request, you may appeal to the same address. If an appeal is denied, you may contact your state attorney general.

California Shine the Light. We do not disclose personal information to third parties for their direct marketing.

13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand

We handle personal information in line with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. If you do not provide information needed for a purchase or a support request, we may not be able to complete it. You may request access or correction by emailing us. Complaints: the Office of the Australian Information Commissioner (OAIC) or New Zealand's Privacy Commissioner.

Republic of South Africa

You may request access or correction by emailing us. The Information Regulator: enquiries@inforegulator.org.za; complaints via PAIAComplaints@inforegulator.org.za and POPIAComplaints@inforegulator.org.za.

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, as needed to stay accurate and comply with law.

The updated version is marked by the date at the top. For material changes we will post a notice on our website or in the app. If we change what Pro sends, the app will ask for your permission again before sending it. Without Pro, Jellipace sends nothing except your purchase number when you activate or restore a licence, and we will not change that without asking you first.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Xin Cheng, Australia. Email support@jellipace.com.

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

For what is on your devices, use Settings › Your data in Jellipace for Mac (see Section 10). For what we hold, email support@jellipace.com. We will handle requests in line with applicable law. Rights may be limited in some circumstances.

This Privacy Policy follows the same structure as our other product notices and was adapted from a Termly-generated template for Jellipace's actual practices.