Privacy Policy

Effective date: July 21, 2026

This Privacy Policy explains how Cloister (the "App"), operated by Dochi (도치), a sole proprietorship registered in the Republic of Korea ("we", "us"), handles information when you use the App or purchase Cloister Pro.

Short version: Cloister keeps your data on your device. We run no server and no user accounts. The only information that leaves your Mac is what's needed to (a) process a purchase through our payment provider and (b) activate and update the App. We do not use analytics, advertising, or third-party trackers.

1. Data stored on your device only

Everything you create in Cloister — focus/break sessions, stacks, streaks, statistics, presets, and settings — is stored locally on your Mac (in the App's local database and its App Group container). This data is never transmitted to us or anyone else. You can delete it at any time by removing the App and its data.

2. Purchases (handled by our payment provider)

Cloister Pro is sold through Lemon Squeezy, which acts as the Merchant of Record for the transaction. When you buy, Lemon Squeezy collects the information needed to process payment (such as your email address, payment details, and billing location) and to comply with tax law. This processing is governed by Lemon Squeezy's Privacy Policy (https://www.lemonsqueezy.com/privacy). We receive limited order information from Lemon Squeezy (such as your email and order/license details) to provide the license and support.

3. License activation

To unlock Pro, the App sends your license key and a device name to Lemon Squeezy's License API to activate, validate, and deactivate your license. The device name is your Mac's name as set in macOS (for example, "Jane's MacBook Pro"), which may contain your name. It is used only to label the activated device so you can recognize and manage it. No other device data or usage data is sent.

4. Automatic updates

The App checks for and installs updates using Sparkle over a secure (HTTPS) connection. When it checks for updates, the update server (hosted on GitHub) receives standard request information, including your IP address and the current App version. Updates are cryptographically signed and verified before installation.

5. What we do NOT collect

We do not collect analytics or usage telemetry, we do not use advertising or third-party tracking, and we do not sell or share your personal information.

6. Legal bases and your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information (for example, under the EU/UK GDPR, California's CCPA/CPRA, or Korea's PIPA). Because most of your data lives only on your device, you control it directly. For the limited information tied to a purchase or license, contact us at support@dochigarden.com and we will respond as required by applicable law. Payment-related data held by Lemon Squeezy is subject to their privacy practices and your rights against them.

7. Data retention

We keep purchase and license records for as long as needed to provide the license, offer support, and meet legal, tax, and accounting obligations. Lemon Squeezy retains payment records under its own policies.

8. International transfers

Our providers (Lemon Squeezy, GitHub) may process information in countries other than yours. Where required, appropriate safeguards apply.

9. Children

Cloister is not directed to children under the age required by your local law, and we do not knowingly collect their personal information.

10. Changes

We may update this Policy. Material changes will be reflected by a new effective date, and where appropriate we will provide additional notice.

11. Contact

Questions about this Policy or your data: support@dochigarden.com.