Privacy Policy

This Privacy Policy explains how DeskOS handles information in connection with the DeskOS website at trydeskos.com and the DeskOS applications for Mac, iPhone, and iPad.

DeskOS is an independent software product operated by an individual developer based in Ottawa, Ontario, Canada.

You can reach us about privacy at hello@trydeskos.com.

When you create a DeskOS account, you sign in with Apple. We process the account identifier provided by Sign in with Apple, and an email address where you choose to share one, to authenticate you and to associate your connected services with your account. We never receive your Apple password.

If you contact us for support, we process the information you choose to send so we can respond to your request.

When you connect an integration, DeskOS processes authorization credentials, connection details, selected resources, and the provider data needed to display your chosen metrics. Depending on the integration, this can include repository and pull request information, deployment statuses, project issues, or business metrics. We request only the access needed for the metrics you choose, and you should only connect accounts and resources you are authorized to use.

DeskOS uses a Supabase backend for account-owned connections and integration snapshots. Provider credentials are encrypted in backend storage. Connections belong to your DeskOS account and can be restored when you sign in on another device. Disconnecting a provider affects that account connection across your devices.

Calendar access requires permission on each device. DeskOS reads calendar information through the device calendar service and keeps that calendar information on the device rather than uploading it to the DeskOS backend. Your calendar provider may separately sync your calendars.

The app can keep local preferences, layouts, tasks, focus information, and cached display data on your device. Supported system widgets use shared local display snapshots rather than provider credentials.

When you visit the website, our hosting and content-delivery providers process the requests needed to deliver and secure the site. The website also loads fonts from Google Fonts, which causes your browser to contact Google servers.

We use PostHog (PostHog Cloud, United States) to understand how the website is used. On the website we record page views and clicks on app download links. Analytics runs only on the production site at trydeskos.com and is disabled on local and preview builds. We do not use advertising trackers, automatic event capture, or session recording. Page addresses are recorded without their query strings or fragments, and we disable PostHog’s approximate location lookup. PostHog stores an anonymous identifier in your browser to recognize repeat visits; it is not linked to your identity unless you sign in.

In the apps, analytics runs only in released builds. We record events such as app launches, sign-in completion, and when you add a widget or connect an integration. These events use a random installation identifier stored locally on your device. After you sign in, events are associated with your DeskOS account identifier only — never your name or email — and signing out resets that association.

If you buy a DeskOS plan, your payment is processed by our payment provider, which collects the information needed to complete the purchase. Your payment card details are entered with and handled by the payment provider, not by DeskOS. We receive records of your purchase, such as your plan, transaction identifiers, and subscription or license status, so we can provide access and support.

We use information to deliver the service, authenticate accounts, retrieve and display your connected data, maintain security, understand how DeskOS is used, process purchases, and respond to support requests.

We share information with service providers that help us run DeskOS, including Apple (Sign in with Apple), Supabase (backend and database), PostHog (analytics), Google Fonts, our hosting and content-delivery providers, and our payment provider. Connected providers you authorize receive the requests needed to operate those integrations. Some of these providers process information in the United States and other countries. We do not sell your personal information, and we do not share it with third parties for their own advertising.

We keep information for as long as needed to provide DeskOS and for legitimate business and legal purposes, after which we delete or de-identify it. Disconnecting an integration removes that account connection; deleting your DeskOS account removes the account and its associated connections; and canceling a paid plan stops future billing. These are separate actions. To request deletion of information we hold, contact hello@trydeskos.com.

You can manage device permissions through system settings and revoke provider authorization through the connected service. You can manage or clear the website’s analytics identifier through your browser’s cookie and site-data controls.

Depending on where you live, you may have rights to access, correct, delete, or port your information, or to object to or restrict certain processing, as well as to withdraw consent. To exercise these rights, contact hello@trydeskos.com; we may need to verify your request before acting on it. Some information is needed to provide the features you ask for.

We use technical and organizational measures to protect information, including encryption of connected-service credentials in our backend. No method of storage or transmission can be guaranteed completely secure. If we make material changes to this policy, we will update the date above and, where appropriate, provide additional notice.