NEOMAS / LEGAL

Privacy Notice

This notice explains what personal data Neomas processes, why it is processed, who receives it, how long it is kept, and the choices available to you.

1. Controller and contact

METAKAIHOS, a sole proprietor trading as Neomas and established in Paris, France, controls personal data collected directly by Neomas. For privacy requests, contact metakaihos@pm.me.

2. Data stored by the application

Neomas is a desktop application. Your vault, notes, memory files, decisions and settings remain on your computer as files you can open, copy, export, back up or delete. Neomas does not require an account and does not upload your vault to METAKAIHOS.

3. Website, downloads and technical data

The website uses no advertising cookies, no tracking scripts and no cross-site tracking. Language, theme and motion preferences are stored only in your browser. Downloads started from this site are counted (operating system, architecture, country, date), without cookies, without an identifier and without storing your IP address. The counter keeps only a “human click or robot” flag, computed from standard browser headers; those headers are not stored. The hosting provider may process standard request data such as IP address, browser information, requested URL, timestamp and security logs to deliver and protect the site. Google Fonts receives your IP address when the font files are requested.

Anonymous install signal and counters. On first launch and after each update, the app sends one anonymous signal: event type (install, update, or first launch of an existing installation made before this signal existed), version, operating system and architecture. At most once a week, it also sends anonymous counts from the plans screen: locks seen, plans-screen openings and clicks through to payment (by the area of the app they came from), offers shown (by trigger) and offers declined, with version, operating system, architecture and whether the installation is free or paid. Neither carries an identifier or anything from your notes. Your IP address is not stored; the country derived from it is kept with the install signal only. Download and install counts and the weekly counts are stored in a Supabase database. One box in Settings → Privacy turns both off.

4. Purchases and Paddle

Paddle is the merchant of record and authorised reseller for paid Neomas transactions. Paddle independently processes identity, billing, payment, tax, fraud-prevention and transaction data under its Privacy Notice. METAKAIHOS receives the customer email, transaction and subscription identifiers, plan, billing status and information needed to issue and verify the license. METAKAIHOS does not receive full card details.

5. Waitlist, license delivery and support

If you join the Daedalus waitlist or contact support, METAKAIHOS processes the email address, language, message and related correspondence you provide. Brevo is used to maintain requested lists and deliver transactional or requested email, including license delivery. Waitlist data is not used for unrelated marketing and you may leave at any time.

6. AI providers

When you connect your own API key, Neomas sends the prompt and context needed for the requested result directly from your computer to the provider you chose. Your key remains on your device and is not sent to METAKAIHOS. That provider processes the request under its own terms and privacy notice.

When free hosted AI is used, selected prompts and context pass through the Neomas proxy to DeepSeek. To prevent quota resets by changing a device identifier, devices on the same network share an additional protection limit. The quota database stores a keyed cryptographic pseudonym of the connection IP (IPv6 /64), not the raw IP, with usage counters. Feedback uses the same type of network limit. Cloudflare processes connection information to operate and protect its network. BYOK and local models remain available when this shared allowance is exhausted.

7. Purposes and legal bases

Data is processed to provide the site and software, deliver and verify licenses, administer subscriptions, answer support requests, secure the service, prevent abuse and meet legal obligations. The legal basis may be performance of a contract, steps taken at your request, legitimate interests, compliance with law, or consent where required.

8. Recipients and international transfers

Personal data is shared only as needed with hosting and security providers, Brevo for requested email, Paddle for transactions, Supabase to store download and install counts and the weekly plans-screen counts without identifiers, professional advisers or authorities where legally required, and the AI provider you deliberately connect. METAKAIHOS does not sell personal data. Some providers operate outside your country and are responsible for using lawful transfer safeguards where required.

9. Retention and security

Local vault data remains until you delete it. Waitlist data is kept until you unsubscribe, the list has served its stated purpose, or you request deletion. Support correspondence and license records are kept only as long as needed for service, fraud prevention and legal or accounting obligations. Reasonable safeguards are used.

10. Your rights

Where applicable, you may request access, correction, deletion, restriction, portability or object to processing, and may withdraw consent. Contact metakaihos@pm.me. You may also complain to your local data-protection authority; in France this is the CNIL.

11. Changes to this notice

Material changes will be posted here with a new effective date. If a change requires consent or direct notice under applicable law, that notice will be provided before the change takes effect.