Privacy Policy Effective May 2026. What we collect, what we do with it, and what we don't collect.

Short version. The apps run on your Mac and process data locally by default. We don't track you across the web. The optional Minuter cloud tier processes audio on the Developer's own private GPU server in Switzerland, using open-source local models - your audio is never sent to a third-party AI provider. We log the bare minimum required to deliver updates, verify licences, and operate the website. We don't sell or share data with advertisers. EU/UK customers have the usual GDPR rights and Swiss customers the rights under the Swiss FADP; email us to exercise either.

1. Who's responsible

The data controller is Manuel de Prada Corral, an individual sole trader based in Switzerland. Contact: eu (at) manueldeprada (dot) com.

2. Data the apps collect

velun

velun is a desktop VPN client. It runs entirely on your Mac and the Developer's servers cannot see your VPN traffic, your credentials, your authenticator seed, or the contents of any network packet. Specifically:

Update checks. velun periodically fetches the Sparkle "appcast" file from store.manueldeprada.com to look for new releases. Our web server logs the request (your IP address, the user agent string, the time, and the path requested). Logs are retained for up to 90 days for security and abuse-monitoring purposes.
Licence activation. After you purchase a licence, velun periodically validates the licence with store.manueldeprada.com/velun/api/activate.php. The request contains the licence blob (which includes the name and email you provided at checkout, embedded in a signed token) and a random per-installation identifier ("instance id") so we can detect abuse such as bulk sharing of a single licence. The server records these in an append-only audit log.
What velun does not send. velun never transmits your VPN gateway URL, your username, your password, your one-time-passcode seed, or any data from inside the VPN tunnel. Those stay in your macOS Keychain and in the local app sandbox.

Minuter

Minuter records meetings on your Mac. By default all processing - recording, transcription, and summarisation - runs locally on your device using open-source models, and no audio or text leaves the machine.

If you opt in to the optional cloud-processing subscription tier:

Recorded audio is uploaded over TLS to a relay server operated by the Developer (hosted on a virtual private server in France).
The relay queues the job and a worker running on the Developer's own private GPU server in Switzerland pulls and processes the job over an authenticated long-poll connection.
Transcription and summarisation use open-source models that run entirely on the Developer's Swiss GPU server. Your audio and transcripts are never sent to OpenAI, Anthropic, Google, Microsoft, AWS, or any other third-party AI provider. The "cloud" here is one machine in Switzerland operated by the Developer, not a big-tech AI cloud.
The result is returned to your Mac.
Audio and intermediate results are deleted from the relay queue once the job is delivered. We do not retain copies of your meetings after delivery.
Aggregate, non-content metadata about each job - timestamp, duration, success/failure, and an audit token tied to your installation - is retained in an append-only log for capacity planning, abuse prevention, and customer support, for up to 12 months.

The specific open-source models used by the Swiss GPU server may change over time as better open models become available. Any change of this kind does not alter the substance of this section: processing remains local to the Developer's own server, with no third-party AI provider involved.

Cloud-tier authentication uses the same licence-blob + installation-id pattern described in the velun section above.

3. Data the website collects

The storefront (store.manueldeprada.com) is a small static / PHP website. It does not use third-party analytics scripts, behavioural cookies, or advertising trackers. It does set:

Server-side access logs: IP address, request path, user-agent, timestamp, response status. Retained for up to 90 days.
Cloudflare, our CDN/anti-abuse provider, may set short-lived cookies or use IP-based rate-limiting to block bot traffic.

We do not use Google Analytics, Facebook Pixel, or any equivalent behavioural-tracking system.

4. Data the checkout collects

Payments are processed by an independent merchant of record (currently Paddle.com Market Limited, or a comparable third-party checkout provider). The merchant of record collects whatever payment, billing and tax-residence information they require to complete the sale - typically name, email address, country, billing address, and the last four digits of the payment card. We never see the full card number.

The merchant of record forwards us the buyer's name, email, country, order ID, and the product purchased, so we can issue the licence and provide post-sale support. We do not receive your full payment details and do not store your card.

5. Legal bases (GDPR / Swiss FADP)

The data controller is based in Switzerland and so the Swiss Federal Act on Data Protection (FADP) applies. For customers in the EU/UK the EU/UK GDPR also applies via its material scope. Under both regimes our processing is grounded in:

Contract performance. Processing your name, email and instance id is necessary to deliver the licensed software and validate the licence.
Legitimate interests. Server access logs and rate-limiting are necessary to operate and secure the service.
Legal obligation. Tax records related to your purchase are retained by the merchant of record for as long as applicable tax law requires.

6. Sharing data

We do not sell your data. We share data only with:

The merchant of record (Paddle.com Market Limited, or a comparable third-party checkout provider) - for payment processing and tax compliance.
Our hosting provider (OVH SAS, France) - the virtual private server on which the storefront, licence-verification API, and Minuter relay queue run.
Our CDN (Cloudflare, Inc., USA, with EU regional data localisation where available) - in front of the storefront for caching and abuse-blocking.
Tax, legal, or law-enforcement authorities, where a binding legal request requires it.

Audio uploaded via the Minuter cloud tier is additionally processed on a dedicated GPU server in Switzerland that is owned and operated by the Developer. That server is part of the Developer's own infrastructure, not a third-party service. No third-party AI provider (OpenAI, Anthropic, Google, AWS, Microsoft, or similar) receives your audio or transcripts.

7. International transfers

The data controller is based in Switzerland. Personal data may flow between Switzerland and the EU (OVH France), and between Switzerland and the United States (Cloudflare). Switzerland is recognised by the European Commission as providing an adequate level of protection, and likewise recognises the EU/EEA as adequate. For transfers to the United States we rely on the EU-US / Swiss-US Data Privacy Framework where applicable, or otherwise on Standard Contractual Clauses.

8. Your rights

If you are in Switzerland, the EU, the UK, or another jurisdiction with similar rules, you have the right to:

Access the personal data we hold about you;
Rectify inaccurate data;
Erase your data, where there is no overriding legal basis to keep it;
Restrict or object to processing;
Port your data to another provider;
Lodge a complaint with a supervisory authority - in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch); in the EU, your national supervisory authority.

To exercise any of these, email eu (at) manueldeprada (dot) com from the address you used at checkout, or quote your licence's order ID.

9. Retention

Server access logs: up to 90 days.
Licence audit log and activation records: for as long as the licence remains active, plus 12 months for support and fraud review.
Minuter cloud-tier audio and transcripts: deleted from the relay queue immediately after the job is delivered to your Mac.
Minuter cloud-tier job metadata (timestamps, duration, success/failure, audit token): up to 12 months.
Order and tax records: retained by the merchant of record per applicable tax law (typically 7-10 years).

10. Children

The Software and the storefront are not directed to children under 16, and we do not knowingly collect personal data from children.

11. Changes

We will update this policy as the apps evolve. The "Effective" date above always reflects the current version. Material changes will be announced inside the app or on the storefront.

12. Contact

Privacy questions or rights requests: eu (at) manueldeprada (dot) com.