Privacy policy

Last updated: 11 October 2026

StintLoop is built to keep your work on your Mac. This policy explains the little personal data we do handle, as required by the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

Who is responsible

AiHawk Tobias Grunow, Libellenweg 12, 8048 Zürich, Switzerland. Email: hello@stintloop.com.

Data in the app

• Your Jira and Linear data stays on your Mac. Your API token is encrypted with macOS secure storage. Sessions, notes, settings and history are stored in files in the app's data folder on your Mac. The app talks to your Jira or Linear site directly; this data never passes through our servers and we cannot see it.
• Update checks. The app asks our update server whether a new version exists and downloads it from there. The server receives your IP address and app version. Purpose: delivering updates and keeping the app secure.
• Licence activation. When you activate Pro, the app sends your licence key, a random device ID created by the app and the app version to our licence service. Purpose: checking your licence and limiting it to three Macs. We keep the device IDs linked to your licence.
• Crash reports, only if you switch them on. A report contains the error, a stack trace and the app and macOS version. Reports never contain your token, email address, Jira site, issue keys, titles, notes or comments. You can switch them off in Settings at any time.

The app contains no advertising, no analytics and no tracking.

Buying StintLoop

Paddle is the Merchant of Record and processes your payment and billing data as its own controller under Paddle's privacy policy. Paddle passes us your name, email address, country, plan, licence and subscription status so that we can deliver and manage your licence and answer support questions. We never see your full card details.

This website

• The site sets no cookies and uses no analytics or tracking. Fonts are served from this site, not from a third party.
• The site is hosted on Cloudflare Pages. Cloudflare processes your IP address and technical request data to deliver the site and protect it from attacks.

Email

If you write to us, we use your email address and message only to answer you and, for customers, to handle your licence. Emails are stored with our email provider.

Legal bases

Under the GDPR we rely on: performance of the contract (licence activation, purchase records, support), our legitimate interest in a secure and working app and website (update checks, hosting and security logs, answering emails), your consent (crash reports, which you can withdraw at any time in Settings) and legal obligations (keeping accounting records).

Service providers and transfers abroad

• Cloudflare, Inc. (United States): website hosting, update downloads and the licence service.
• Functional Software, Inc. (Sentry) (United States): crash reports, stored in its EU data region, only when you switch them on.
• Paddle.com Market Limited (United Kingdom) and its affiliates: sales, payment, invoicing and tax.

Data may therefore be processed outside Switzerland and the EU. The United Kingdom is recognised by Switzerland and the EU as providing adequate protection. For the United States we rely on the Swiss-US and EU-US Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses.

How long we keep data

• Licence records and device IDs: while your licence is active, then up to 12 months to handle questions and refunds.
• Purchase and accounting records: 10 years, as required by Swiss law.
• Crash reports: deleted after 90 days at the latest.
• Emails: deleted when they are no longer needed, at the latest 2 years after the last contact, unless they are accounting records.
• Server logs at Cloudflare: kept for a short period under Cloudflare's own retention rules.

Your rights

You can ask us what personal data we have about you and ask us to correct it, delete it, restrict its use, hand it over in a common format or stop using it. Where we rely on consent, you can withdraw it at any time. Write to hello@stintloop.com; we answer within 30 days. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to the data protection authority in your EU country.

Other points

We make no automated decisions with legal effect about you. StintLoop is not directed at children under 16.

Changes

We update this page when what we do with personal data changes. The date at the top shows the latest version.