Privacy Policy for Valpas

App name: Valpas Bundle identifier: com.kirsulab.valpas Platform: macOS 13.0 or later Publisher: KirsuLab LLC Contact: hello@kirsulab.com

Valpas is a menu bar utility that keeps your machine awake for as long as you ask it to. It is built to do that one job without learning anything about you. This policy explains, plainly, what that means.

1. The short version

Valpas collects no personal data at all. There are no accounts, no analytics, no advertising, no tracking and no crash reporting. The App Store build never touches the network. The direct download makes exactly one kind of request, when you activate or deactivate a Valpas Pro key, and section 2 says what is in it.

2. Network access

The Mac App Store build is sandboxed and is not granted network access of any kind, not outgoing, not incoming. This is not a promise about our intentions. It is enforced by macOS itself, which will not let the app open a network connection even if it tried.

The direct download is not sandboxed, because its lid-closed mode needs a privileged helper, and it makes one request to kirsulab.com in two situations only:

• when you press Activate with a Valpas Pro key, it sends the key and a hashed identifier of your Mac (the SHA-256 of the hardware UUID, not the UUID itself) and receives a signed licence for that Mac
• when you press Deactivate this Mac, it sends the same two values so the slot on your key is freed

Nothing else is ever sent: no usage, no settings, no names, no addresses. There is no check-in afterwards. The licence is verified on your Mac against a public key built into the app, so the app works offline from then on. The trial needs no network at all.

On our side, the server keeps the key, the email address Ko-fi gave us with the purchase, the Ko-fi transaction ID and the hashed identifiers of the Macs the key was activated on, with the time of each activation. That is what makes the three-Mac limit and a lost-key lookup possible. We delete this on request, which also ends the licence.

3. Permissions it does not ask for

Valpas requests no access to your camera, microphone, contacts, calendars, photos, location or documents. It does not ask for Accessibility permission: the optional global shortcut is registered through macOS's own hot key API, which requires no such grant and cannot observe what you type in other apps.

Valpas can see the identifiers of applications currently running on your machine. That is what makes the optional “while an app is running” trigger possible: you choose an app, and Valpas checks whether it is open. This information is compared inside the app and never leaves it; nothing is recorded except the identifier and name of the one app you chose, stored in your own preferences.

4. What is stored, and where

Valpas stores only your own settings: the mode, the chosen duration, which triggers you enabled, the app or process names you typed for the triggers, the battery threshold and the keyboard shortcut. These live in the app's preferences on your machine. They are never transmitted anywhere, and they are removed when you delete the app.

The direct download also keeps two small files in /Library/Application Support/com.kirsulab.valpas/, written by its helper: the date the seven-day trial began and was last seen, and the signed licence once you activate a key. They are readable only by the system, they contain the hashed identifier of your Mac and nothing about you, and they stay when the app is deleted, so that a trial cannot be restarted by reinstalling. Removing that folder with administrator rights removes them.

5. What Valpas does to your machine

While a session runs, Valpas holds a standard macOS power assertion so the display or the system does not fall asleep on its own, and — in the “Keep display on” mode — periodically tells macOS that the user is active, which is what holds the screen saver back. When the session ends, both are released and your machine's own Energy Saver settings apply again. Valpas never changes your system settings.

6. Children

Valpas is a general-purpose utility and is not directed at children. It collects no personal information from anyone, including children.

7. Changes to this policy

If the app changes in a way that affects this policy, we will update this page with a new effective date.

8. Contact

Questions about this policy? Email hello@kirsulab.com.