Privacy Policy

Last updated: October 27, 2026

This Privacy Policy describes how Apis Systems LLC ("we", "us", "our") handles information in the applications we publish. It applies to all of our applications unless an application section below states otherwise.

1. Data we collect

What our applications process to do their job, such as the files they scan, their names, paths, sizes and what a scan found, stays on your device and is never sent to us. That is the part that matters most, and it has not changed.

The exceptions are listed here and described in full below:

• Anonymous usage counters. Which features are opened or run, and nothing about what they found. No account, no sign in, no identifier of ours. There is a switch for this in the app's settings.
• Feedback you choose to send. If you write a report in the app and press Send, we receive the message, any files you attached, the app and system version, and, only if you leave one, an email address for replying. A diagnostic log is attached when you leave its box checked; it records app events and errors, never file names, paths or scan results.
• A photograph, when an app cannot answer on its own. Foliata recognises plants on your device. When its offline model cannot name the plant in front of it and you are online, that one photograph is sent to our server, passed to Google’s Gemini API for a second opinion, and dropped. It is used to produce the answer and for nothing else: it is not stored by us, not used to train anything, and not linked to you. We keep a count of how many such requests an installation has made, which is how the free allowance is enforced, and that count says nothing about what was in the picture. There is a switch for this in the app’s settings, and turning it off means no photograph is ever sent.
• Crash reports, if you allow them. Our mobile applications ask, once, whether they may send anonymous usage counters and crash reports. If you say no, neither is collected and the reporting library is never switched on. A crash report describes where the app failed (the device model, the operating system version and the stack of the crash) and carries nothing about your files, photographs, plants or home pin.
• Where a find was made, if you turn it on. Foliata can note the coordinates of a plant you keep, so its herbarium label carries a place. This is off until you switch it on, and the coordinates live in your herbarium: they go to our server only when you have an account and only as part of your own collection.
• What a live map needs. WTFAustin keeps an anonymous account on our server. If you subscribe and save a home pin, the server keeps that pin and your alert settings, so it can send you alerts while your phone is asleep. Reports you post, and a push token once you turn notifications on, are stored with the account too. The WTFAustin section below lists all of it.
• A once-a-day check for a newer version. Disk Reviewer reads its own public listing in Apple's App Store catalogue to notice when an update exists, so it can offer you a link to it. The request carries the app's numeric identifier and nothing else (no account, no identifier of ours, nothing about you or your files) and it goes to Apple, not to us. It runs at most once a day, and failing quietly is its normal behaviour when you are offline.

We do not collect contacts, browsing data, or any advertising identifier, and none of our applications contains an advertising SDK. Crash reports and location are collected only in the narrow cases named above, and only after you have allowed them or placed a pin yourself.

2. How we use information

Usage counters tell us which parts of an app people actually use, so we can improve those parts and stop guessing. Feedback is used to understand and fix the problem you reported, and to reply to you if you left an address. A WTFAustin home pin is used for one thing: deciding which incidents are close enough to it to notify you about. That is all. We do not profile you, build advertising audiences, or make automated decisions about you.

Information that our applications process to perform their function, such as the file listings in a disk cleanup tool, is processed locally on your device and is never transmitted to us or to anyone else. The exceptions are the Foliata photograph described above, which is transmitted for a single purpose (naming the plant in it) and is not kept afterwards, and the WTFAustin data listed in its section, which the app cannot work without.

3. Sharing with third parties

We never sell, rent or trade data, and we share nothing for advertising. These processors handle data on our behalf:

• TelemetryDeck (Germany) receives the anonymous usage counters. It is built for privacy-preserving analytics and does not profile individual users.
• Supabase runs our servers. For our other applications it stores feedback reports and their attachments in its Frankfurt region, and runs the small server function that forwards a Foliata photograph for identification. WTFAustin's server, which holds its anonymous accounts and everything listed in that app's section, is in Supabase's United States (Virginia) region.
• Google receives a photograph through the Gemini API when Foliata asks for a second opinion, and operates Firebase Crashlytics and Firebase Cloud Messaging for Foliata's crash reports and notifications. The Gemini API is used on its paid terms, under which Google does not use what is sent to it to improve its models; we chose to pay rather than use the free tier precisely because the free tier reserves that right. WTFAustin uses Firebase Cloud Messaging only, to deliver notifications, and no other Firebase service.
• Sentry (United States) receives WTFAustin crash reports, and only after you said yes to them in the app.
• RevenueCat records which subscription an installation holds, so an app knows what you have paid for. It receives the store receipt and an identifier of ours, never your name, email or payment details. In WTFAustin that identifier is the anonymous account described below. See RevenueCat’s privacy policy.

Apple and Google process purchases and subscriptions, and Apple answers Disk Reviewer's once-a-day question about whether a newer version is on the App Store; we never receive your payment details. Beyond these, nothing is shared, including with advertisers, data brokers, or tracking networks. There are no tracking SDKs in our applications.

3a. How long we keep it

Feedback reports and their attachments are kept for up to 12 months and then deleted; we may delete a report sooner once it has been dealt with. Where a report's attachments and reply address are removed as soon as it has been dealt with, the text of the report may be kept longer, as a record of what was reported and what we changed. Usage counters are aggregate and are not tied to you, so there is no individual record to retain or remove. The diagnostic log on your Mac keeps the last seven days and prunes itself; it never leaves the device unless you attach it to a report.

A photograph sent for identification is not retained at all: it exists for the length of the request and is gone when the answer comes back. What remains is a number (how many such requests an installation has made) which we keep for as long as the installation exists, because it is what makes the free allowance mean something.

What WTFAustin stores on our server stays until you remove it or delete your account. Turning notifications off deletes the push token at once.

Photographs you take in Foliata stay on your phone. Every scan is kept in the app’s own storage so that your scan history and your herbarium can show it later, and it stays there until you remove the find, delete your account, or uninstall the app; we do not age them out. They are not uploaded, not backed up to us, and not readable by other apps. Deleting your account removes them from the device along with everything else the app had stored.

4. Our applications

Disk Reviewer (macOS)

• All scanning and cleanup happens locally on your Mac. File names, paths, sizes and scan results never leave the device.
• Anonymous usage counters record that a feature was opened or run, never what it found. Settings › "Share anonymous usage data" turns them off; switched off, the app makes no such request at all.
• The Feedback section sends a report only when you write one and press Send: your message, any files you attach, the app and macOS version, the interface language, whether the plan is free or paid, and an email address only if you type one. The diagnostic log is attached when its box is checked. It holds the last seven days of app events and errors and, by design, cannot contain file names, paths or scan results.
• Once a day the app asks Apple's public App Store catalogue whether a newer version of itself exists, so it can offer you a link to the listing. It sends the app's numeric identifier and nothing else, and it cannot install anything: a Mac App Store app has no way to update itself.
• There is no advertising and no tracking of any kind.
• Files you choose to remove are moved to the macOS Trash, and photos are moved to the Recently Deleted album in Photos. The app never removes anything without your explicit confirmation.
• In app purchases, if offered, are processed entirely by Apple. We do not receive your name, payment details or any other personal information from a purchase.

DeckMirror (macOS)

• DeckMirror shows the screen of an iPhone or iPad connected to your Mac with a cable. The picture travels from the cable to your screen and nowhere else: there is no network path in the mirroring flow at all.
• Two of the exceptions described above apply to this app, and only those two. Anonymous counters record which features are used (never what is on your screen) and Settings › Share anonymous usage data turns them off. A feedback report is sent only when you write one and press Send; it carries what you typed, anything you attached, and the reply address if you gave one. The mirroring itself stays untouched by both: nothing is recorded, and the picture never leaves your Mac.
• macOS asks for camera access the first time you mirror. This is required because the screen of a connected device is published to macOS as a capture device, the same mechanism QuickTime Player uses for “New Movie Recording”. DeckMirror never uses your Mac’s camera and never opens one; it filters Continuity Camera devices out of its list so only device screens are offered.
• The microphone permission is used only to play the connected device’s sound through your Mac, and it is off by default.
• The purchase is one time and is processed entirely by Apple. We do not receive your name, payment details or any other personal information from it.

Foliata (iOS, Android)

• Recognition runs on your phone. The camera picture is examined by a model inside the app, and neither the viewfinder nor the photographs you keep are uploaded as a matter of course.
• When that model cannot name the plant and you are online, the single photograph you just took is sent to our server, passed to Google’s Gemini API, and dropped once it has answered. It is not stored, not used for training, and not tied to you. The first time this is about to happen the app says so, and there is a switch in Settings, Ask online when unsure, that stops it entirely.
• Your herbarium (the plants you kept, their photographs, the dates and any places) lives on your device. It is copied to our server only if you create an account, and only then; without one it stays local. Deleting your account deletes that copy, photographs included.
• An anonymous account is made the first time the app opens, so that the herbarium has an owner before anyone signs in. It holds no name and no email, only an identifier of ours, and against it our server keeps one row: when the app was first opened, when it was last opened, and how many times. That is how we can tell a reader who came back from one who opened the app once, and it is the only thing of its kind we keep. It is not tied to your device, carries nothing about the plants you looked at, and is not affected by the usage counters switch, which governs a separate and genuinely anonymous service. Deleting your account deletes this row with everything else.
• Recording where a find was made is off until you turn it on. The coordinates belong to your herbarium entry and are sent nowhere else.
• Anonymous usage counters and crash reports are collected only if you allowed them when the app asked. Saying no is respected permanently and can be changed in Settings at any time.
• Notifications are used for watering reminders for the plants you kept. They are never marketing.
• Subscriptions are processed by Apple or Google; we never receive your payment details.

WTFAustin (iOS, Android)

• An anonymous account. The first time the app opens it signs in anonymously with our server (Supabase). The account has no name, email or password, only an identifier of ours. Against it the server records when the app was first and last opened and how many times, so we can tell whether people come back.
• Location, only while you use the app. With your permission the app uses your position to centre the map on you and, if you ask, to place your home pin. It never asks for location in the background and does not follow where you go. Your position is not sent to us; the only place we store is a home pin you save.
• Your home zone, if you subscribe and save one. Our server keeps the pin, the radius around it and your alert settings, such as how serious an incident must be and your quiet hours, so it can decide what to notify you about while your phone is asleep. It also keeps a list of the alerts already sent to you, so you are never told twice. Only your account can read any of this. It never goes into usage statistics and is never exported or shared.
• What you post. A report you send (its category, title, any text and the place you pin) is stored with your account and appears on the map under a pseudonym once a moderator approves it. Flagging someone else's report, or blocking a person, is stored too.
• Notifications, once you turn them on. Until then the app does not register for push at all. When you turn them on, Google Firebase Cloud Messaging gives the device a push token (on iPhone it hands delivery on to Apple), and our server stores that token, the platform and the app's language with your account, so an alert reaches you in your language. Firebase is used only to deliver: there is no Firebase Analytics and no Crashlytics in this app. Turning notifications off in Settings deletes the token.
• Subscriptions. Apple or Google sells the subscription and RevenueCat records which one you hold. RevenueCat receives your anonymous account identifier, the store receipt and an identifier the store gives our app on your device, which is not an advertising identifier. We never receive your name or payment details.
• Usage statistics and crash reports, only after a yes. Both are off until you switch them on in the app's own question, and the switch starts off. Usage statistics go to TelemetryDeck and record which screens and filters get used, never a place. Crash reports go to Sentry and carry the device model, system version and the crash itself, with web addresses and map positions removed. Settings › Analytics stops both at once.
• Public sources, loaded directly. Traffic camera images come straight from the City of Austin, and registry photographs and records straight from the Texas Department of Public Safety (the Texas Public Sex Offender Registry). Those servers see your device's IP address and which camera or which registry record you opened, as they would if you visited them in a browser. We send them nothing about you.
• Feedback. If you rate the app and write to us in the sheet that follows, we receive your rating and message, an email address only if you leave one, and the app version, platform and language.
• There is no advertising, no tracking across apps or sites, and we sell no data.
• Deleting your account. Settings › Delete account erases your home zone and alert settings, your push tokens, the list of alerts sent to you, your reports and your blocks, and then deletes the account itself. A flag you raised against someone else's report stays with our moderators with your account removed from it, so the record of what was reported survives. Deleting the account does not cancel a subscription: cancel it in the App Store or Google Play.

5. Your rights

You remain in full control of everything our applications touch on your device. For what we do hold, you can ask for a copy, a correction, or its deletion, and we will act on it. Write to [email protected] from the address you used, or describe what you sent well enough for us to find it; we respond within 30 days. Disk Reviewer and DeckMirror never create an account. Foliata signs you in anonymously the first time it opens; Settings, then your account, then Delete account removes that account, the copy of your herbarium and the record of your launches in one step. WTFAustin also signs you in anonymously; Settings › Delete account erases what is listed in its section above.

You can also stop the usage counters at any time in the app's settings, without asking us. Because they are anonymous and aggregate, they hold nothing tied to you that could be retrieved or erased individually.

6. Children's privacy

Our applications are not directed at children and do not knowingly collect personal information from them.

7. Our websites

This website (apissystems.dev) is a static site served through Cloudflare. Like most hosting providers, Cloudflare processes basic technical request data, such as IP addresses, to deliver the site and protect it from abuse. We use Cloudflare Web Analytics, a privacy first, cookie free service that shows us aggregate page statistics and cannot identify individual visitors. The site sets no cookies and runs no advertising or cross site trackers.

Two forms on this site send what you type to us: the contact form on the home page and the waitlist on the direct booking page. The contact form is delivered to our inbox by FormSubmit (formsubmit.co). The waitlist is stored with Cloudflare, which hosts this site, and FormSubmit sends us a copy of each new signup by email. The waitlist keeps your email address, the number of homes you rent out, and, if you fill them in, your state and how guests book with you today, together with the link or site that brought you to the page and the country your request came from. We use it to send one email when it launches and to judge whether it is worth building. If we decide not to build it, the list is deleted. You can ask to be removed at any time by writing to [email protected]. See FormSubmit’s privacy policy.

Until October 27, 2026, the direct booking page also took pre-orders, paid on a checkout page run by Stripe. Stripe collects your card details and we never see them; we receive your email address, the amount and the payment status, which we use to deliver what you paid for or to refund you. See Stripe’s privacy policy.

We also run diskreviewer.com, a single page site for Disk Reviewer that we advertise. It is hosted the same way, and it uses TelemetryDeck, the same analytics provider as the app, to record page views and whether a visitor followed the link to the Mac App Store. TelemetryDeck sets no cookies and does not fingerprint your device. Instead of an identifier that follows you around, it derives a one way hash from your IP address, your browser's user agent string and a salt that changes every day, so a visitor cannot be recognised the next day or on any other site. It also records the page address, including any campaign parameters an advertising link carries, together with coarse browser, operating system and country information. We use this only to see whether our advertising reaches people who actually want the app. No cookie banner is required because no cookies are set, and that site carries no advertising or cross site trackers either.

8. Changes to this policy

We may update this policy from time to time, for example when we release a new application. The date at the top of this page always reflects the latest revision. Material changes will be described in the relevant application section.

9. Contact

Questions about this policy or about your privacy in our applications: [email protected]

More

• Support
• About Apis Systems