Privacy Policy

ZincFiles is made by Vivek Gowda S, an individual based in Bengaluru, India, who also makes the ZincWolf apps and is responsible for your data under this policy (its “controller”). In this policy, “we”, “us” and “our” mean Vivek Gowda S. Our postal address is #18/7, Mahadi Road, Magadi Road Police Quarters, Bangalore North, Bengaluru, Karnataka 560023, India. For anything about your privacy, email privacy@zincwolf.app.

Everything ZincFiles works with stays on your Mac: your files and folders, the search index, your history of changes (so you can undo them), your tags, the servers you save and your settings. None of it is sent to us or anyone else. There’s no account, and the app has no analytics, no telemetry, no ads and no tracking.

Passwords and keys for servers you add are kept in your Mac’s Keychain. Some features use macOS permissions, such as Full Disk Access to see protected folders; each is optional, and what it lets ZincFiles read never leaves your Mac.

Ask ZincFiles turns a request in plain words into a plan of file changes. It runs on Apple’s on-device model (Apple Intelligence), on your Mac. What you type, and the names and details of the files it looks at to make a plan, aren’t sent to us or to any cloud service.

When you connect to an SFTP server, an S3 bucket or Docker, ZincFiles talks to it directly from your Mac. We’re not part of that connection and receive nothing from it; whoever runs that server decides what it keeps. SFTP connections use your Mac’s own SSH setup.

A ZincFiles license is for one Mac. To activate it, the app sends our server (api.zincwolf.app):

• Your license key.
• An anonymous ID for your Mac: a one-way, hashed code made from its hardware ID, never the hardware ID itself.
• Your Mac’s name and model.
• The versions of macOS and of ZincFiles.

Our server activates the license with Dodo Payments, which issues the keys and receives your key and your Mac’s name. After that, the app confirms its license with our server when it opens and about once a day, sending the same kind of details; without a connection it keeps working for up to 30 days. Nothing about your files is ever part of this.

We keep a one-way code made from your license key (never the key itself), your Mac’s anonymous ID, the activation’s ID, your Mac’s name and model, when it was activated and last checked, and the license’s status. If a purchase is refunded or its payment is disputed, its license is revoked and stops working.

To offer updates, the app downloads the list of new versions from api.zincwolf.app. Like most update checks, the request says which version of the app and of macOS you have, and nothing else about your Mac. Our server logs these requests, like all others, with shortened IP addresses only.

• Dodo Payments, our reseller and merchant of record, sells you ZincFiles on its own checkout. It takes your payment and billing details, handles tax, receipts, refunds and chargebacks, and emails you your receipt and license key. We never see your card details. Dodo’s privacy policy applies to what you give it.
• Our server gets a record of each order from Dodo, through secure notifications: what was bought, the payment and its status, and any refund or dispute. We keep it without your name, your email address or any card details.
• When you’ve paid, Dodo sends you back to zincfiles.app with your license key and email address in the page’s address, so the page can show you your key. The page takes them out of the address as it opens and keeps them only while it’s open. It runs no analytics or advertising code, and sends them nowhere.

If you’re looking at zincfiles.app on a phone or a computer that isn’t a Mac, you can send yourself the link to ZincFiles, to open on your Mac. We use the email address you enter only to send that one email, through Resend, and we don’t store it. To stop the form being used to flood someone’s inbox, we keep, for 8 days:

• A one-way, keyed hash of the address, not the address itself, so one address can get at most one email a day and three a week.
• Which app you asked about, and when.
• A one-way, keyed hash of your IP address, not the address itself, to limit how many requests can come from one network.

Cloudflare Turnstile checks that the request comes from a person; it processes your IP address and signals from your browser, as its privacy policy describes. The email says why you got it, and has a link that blocks emails to that address for good, for anyone whose address someone else entered. We keep a one-way, keyed code made from a blocked address, never the address, so we can keep honouring it.

Our server’s access logs never include your email address, and they shorten every IP address to its first half (for example, 203.0.0.0), so a log entry can’t be traced back to you. Vercel, which hosts the website, and Cloudflare keep their own short-lived logs for security.

If you email support@zincwolf.app or privacy@zincwolf.app, Resend, our email provider, receives and stores your message. We keep it, and our reply, for as long as we need to deal with it.

zincfiles.app sets no cookies, has no analytics or ads, and loads nothing from other companies, except Cloudflare Turnstile when you use Email me the link. ZincFiles the app never contains any of these.

• There’s no account to create.
• ZincFiles the app has no analytics, telemetry, ads or tracking, and never sends us your files, their names or what you do with them.
• We never see your card details, and we keep no names or email addresses from your orders.
• We never sell or rent your personal data.

We use your data only for these purposes:

• To sell you ZincFiles and keep its license working (activating it, checking it, and stopping it after a refund or dispute), and to offer updates. The legal basis is our contract with you, under Article 6(1)(b) of the GDPR; in India, it’s a legitimate use of data you gave us for that purpose, under section 7(a) of the Digital Personal Data Protection Act, 2023. We keep order records because tax and accounting laws require it, under Article 6(1)(c) of the GDPR.
• If you use Email me the link: to send you the email you asked for, and to stop the form being misused. The legal basis is taking the step you asked for, under Article 6(1)(b) of the GDPR, and our legitimate interest in preventing abuse, under Article 6(1)(f); in India, it’s a legitimate use of data you gave us for that purpose, under section 7(a) of the DPDP Act.
• To answer you when you write to us: taking the step you asked for, under Article 6(1)(b) of the GDPR, and in India a legitimate use of data you gave us for that purpose.
• To keep the server and the license check secure and stop abuse, with shortened or hashed IP addresses: our legitimate interest, under Article 6(1)(f) of the GDPR.

A few providers help us run the website, licenses and our email:

• OVHcloud hosts our license server and its database, on a server in Canada.
• Vercel hosts the website.
• Cloudflare runs the Turnstile bot check on the Email me the link form, which processes your IP address and signals from your browser to tell people from bots. You can read how Cloudflare handles this data in its privacy policy.
• Resend, Inc., in the United States, sends our emails and receives the emails you send to our zincwolf.app addresses. You can read its privacy policy.

Dodo Payments sells ZincFiles as our reseller and merchant of record. For your purchase it’s a controller in its own right, and its privacy policy applies. To activate a license, our server sends it your license key and your Mac’s name.

These providers may process your data outside the country you live in, including in Canada and the United States. Where the law requires it, these transfers are protected by appropriate safeguards, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

We keep a license’s records for as long as the license exists, and order records for as long as tax and accounting laws require. If you ask us to delete a license’s records, the license stops working.

We keep emails you send us, and our replies, until we no longer need them to help you or for your license.

Email me the link keeps no email address. The hashes it keeps, with the app and the time of each request, are deleted after 8 days. The code made from a blocked address is kept for as long as we send email, so we can keep honouring it.

Our server’s logs, with shortened IP addresses only, are overwritten as they fill up. Vercel and Cloudflare keep their logs for a short time, as their own policies describe.

You can:

• Ask for a copy of the data we hold about you.
• Correct it if it’s wrong.
• Ask us to delete it.
• Object to how we use your data.
• If you’re in India, nominate someone to exercise these rights for you if you die or become unable to.

To do any of these, email privacy@zincwolf.app. We reply within 30 days. We may ask you to confirm the request comes from you, for example by writing from the email address you bought with.

If you have a complaint, write to us first at privacy@zincwolf.app: we’re the contact for grievances about your data. If you’re still unhappy, you can complain to a regulator: in India, the Data Protection Board of India; in the EU or UK, your local data protection authority.

ZincFiles and zincfiles.app aren’t meant for children under 16, and we don’t knowingly collect data from them. If you think a child has given us data, write to privacy@zincwolf.app and we’ll delete it.

Your data travels over encrypted connections (HTTPS). License keys are stored only as one-way codes, and the database isn’t reachable from the internet; access to it is limited to us.

When we change this policy, we update the date at the top of this page, and if a change is significant, we’ll say so on zincfiles.app. This is version 2026-11-09.