Privacy Policy

Effective: October 20, 2026 · Last updated: October 20, 2026

clat.ai ("clat.ai", "we", "us") is a Mac cleaning and system utility that runs locally on your Mac. This policy explains what we process, why, and how you can control it.

In one sentence: scanning, cleaning and analysis happen on your Mac. We do not upload your file contents, file names or folder structures. Only license activation and purchases require the network, and they send only what is necessary to issue and validate a license.

1. Processed locally

The following happens entirely on your device and is not sent to our servers:

We do not upload file contents, names, folder structures or scan results. To render the UI, the app reads metadata such as paths, sizes and modification dates in memory; scan details are not retained after you quit.

2. Information we collect

2.1 License activation and validation

When you activate a license key, or when the app periodically validates it, we send to api.clat.ai:

We use this to confirm the license, enforce the device limit (2 Macs per license), prevent key abuse and help with support requests. Our servers log the request IP address for rate limiting and security.

2.2 Purchases and payments

Payments are processed by Dodo Payments as Merchant of Record. We do not receive or store your full card number. We can see order status, the purchase email and the license key generated by Dodo, so we can deliver, refund and support your purchase.

2.3 Update checks

The app requests version information from download.clat.ai to check for updates. This is served by Cloudflare, which records standard request logs such as IP address, User-Agent and time. We do not use these logs for advertising profiles.

2.4 Website

The website uses browser localStorage only to remember your language preference. We do not use advertising trackers or build cross-site profiles. Cloudflare may set essential security cookies.

2.5 Support email

If you email hi@clat.ai, we receive your address, message and attachments, and use them only to respond and provide support.

3. System permissions

"Full Disk Access" lets the app read other apps' caches, Trash and disk usage; all reading stays local. You can revoke it at any time in System Settings → Privacy & Security → Full Disk Access. Administrator prompts appear only when you explicitly run a system-level task, and are used to execute the command you confirmed.

4. Sharing

We do not sell your personal information. We share only where necessary:

5. Retention

License and device records are kept while the license is active and for up to 24 months afterward for refunds, disputes and duplicate-activation handling. Server access logs are generally kept for no more than 30 days. Support emails are deleted within a reasonable period after the issue is resolved.

6. Security

We use HTTPS in transit, sign license responses with Ed25519, and collect only the minimum needed to authorize a device. No system is perfectly secure, but we continually tighten permissions and logging.

7. Your rights

You may request access to, correction of, or deletion of information we hold about you, and you may withdraw consent or deactivate a device. Email hi@clat.ai and we will respond within a reasonable period. Users in some regions (such as the EEA, UK and California) also have rights under local law, including access, deletion, correction and portability.

8. Children

clat.ai is not directed to children under 13, and we do not knowingly collect their personal information.

9. Changes

If this policy changes materially, we will update the "Last updated" date on this page and, where appropriate, notify you in the app or by email. Continued use means you accept the updated policy.

10. Contact

Privacy questions: hi@clat.ai