Privacy Policy

1. Who We Are

Expedit is made by Expedit Limited, a company registered in England and Wales with company number 17512149 and registered office at 64 Hatherleigh Road, Ruislip, England, HA4 6AU. In this policy, "we" and "us" mean Expedit Limited. We are the data controller for the personal data described here, except payment details, which Paddle controls (see section 5).

Privacy questions and requests: [email protected].

2. Your Photos Stay on Your Mac

Expedit is a desktop application. All machine learning training and image analysis happens locally on your Mac. We never upload your photos, previews, catalogs, or XMP files, and the model Expedit trains on your editing stays on your Mac. Training and editing work offline; the app only goes online for the license check, update checks, and the reports described below.

3. What We Collect and Why

We collect the minimum needed to sell, license, and support the app. For each item, the legal basis under UK GDPR is in brackets.

• Purchase and license records: when you buy, Paddle passes us your email address and order references, and we keep the status of your license (active or refunded). Used to activate the app, answer support requests, and handle refunds. (Contract.)
• Activation: to activate, the app asks for your email and we email you a one-time code. We store the code only in scrambled (hashed) form, for at most 15 minutes. (Contract.)
• Your activated Macs: for each activated Mac we store its hardware identifier, its name (for example "Ryan's MacBook Pro"), when it was activated, and when it last checked in. This enforces the one-Mac limit and lets you move your license yourself. (Contract, and our legitimate interest in preventing license sharing.)
• License checks: the app periodically confirms your license is still active. The request carries your license token and nothing about your photos. (Contract.)
• Update checks: the app checks our website for new versions. The request carries the app version (and a tester code, if you are a tester), nothing about you or your photos. (Legitimate interest: keeping your copy secure and up to date.)
• Diagnostic reports: if the app hits a problem, or you click Send Diagnostics, it sends us a small technical report so we can fix it. On by default; you can turn it off in Setup. (Legitimate interest: fixing bugs. Turning it off is how you object.)
• Usage counts: once a day the app sends a few hundred bytes of running totals: how many photos it has predicted, synced, and culled, and how many trainings it has run, with a random install ID and the app version. No file names, paths, or settings. It uses the same on/off switch as diagnostic reports. (Legitimate interest: understanding how much the product is used.)
• Launch waitlist: if you join the waitlist on our website, we store your email address, whether you have confirmed it, and when, plus the country your connection appears to come from (Cloudflare estimates it from your IP address; we never store the IP address itself). The country helps us plan the launch. We email you a link to confirm first, and you are only on the list once you click it. We then email you about Expedit's launch and nothing else. Every email has a link to leave the list, and leaving stops all emails at once. To limit abuse we also keep, for two days, a log of the confirmation emails we send, with a scrambled (hashed) form of the sender's IP address that changes every day. (Consent, which you can withdraw at any time by leaving the list.)
• Emails you send us: whatever you choose to include when you write to us. (Legitimate interest: answering you.)

To be precise about what a diagnostic report can contain: application logs, app settings, and statistics about your editing model (things like slider values and accuracy numbers). Logs may include file paths, such as folder names, because they help us reproduce bugs. Before a report leaves your Mac, the part of every path that would show your Mac's account name is removed (your home folder appears as ~). A report also carries the random install ID and a random ID for that run of the app, so we can match it to the right log lines. A report never contains photos, previews, thumbnails, or your catalog file.

4. Our Website

The website uses Umami, a privacy-focused analytics service, to count visits: which pages are viewed, the site that linked you here, your browser, operating system, device type and country. Umami sets no cookies and collects nothing that identifies you or follows you to other websites. (Legitimate interest: learning which pages are useful.) The website sets no tracking or advertising cookies. Pages load their fonts from Google Fonts, so your browser requests those files from Google, which sees your IP address as part of that request. Like any website, our hosting provider (Cloudflare) processes your IP address to deliver pages and block abuse. The waitlist form uses Cloudflare Turnstile to check that sign-ups come from a person rather than a bot; it reads technical signals from your browser for that check only, and sets no tracking cookies.

5. Who We Share It With

We never sell your data. It reaches only these recipients:

• Paddle: Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle collects your payment details, name, email, and address at checkout and is the controller for that information. See Paddle's privacy policy.
• Cloudflare: hosts our website, license service, and report storage, delivers our emails, and routes email sent to our addresses.
• Resend: sends the waitlist emails (the confirmation and the launch email), so it receives your email address for that purpose. Our account stores email data in the EU (Ireland). See Resend's privacy policy.
• Umami: counts website visits anonymously (see section 4).
• Google: email you send to our @expedit.uk addresses is delivered to a Google (Gmail) mailbox.
• Professional advisers such as accountants or lawyers, when we need their help.
• Authorities, where the law requires it.

6. International Transfers

Cloudflare, Google and Resend are based in the United States, and they and Umami may process data outside the UK. Where they do, the transfer is protected by a recognised safeguard: the UK-US data bridge for certified providers, or the UK International Data Transfer Addendum to the EU standard contractual clauses.

7. How Long We Keep It

• Purchase and license records: while your license exists, then up to six years for tax and accounting.
• Activation codes: deleted when used, and never kept longer than 15 minutes.
• Activated Macs: until you deactivate that Mac or the license ends.
• Diagnostic reports: deleted automatically after 90 days.
• Usage counts: up to two years. After that we keep only combined totals for all users (for example, how many photos were predicted on a given day), with no install ID, which can't be linked back to you.
• Waitlist: until you leave the list, or until we send the launch email, plus up to three months to handle replies, then deleted. An unconfirmed sign-up is deleted after 30 days. The log of confirmation emails sent is deleted after two days.
• Emails: as long as needed to help you, then up to two years.

8. Your Rights

Under UK data protection law (and the GDPR, if you are in the EU) you have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive it in a portable format, and withdraw consent wherever we rely on it. Email us to use any of these rights and we will respond within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live. We would appreciate the chance to fix things first.

9. Security

Everything the app sends travels encrypted over HTTPS. Activation codes are stored only in hashed form, license tokens are cryptographically signed, and access to our systems is limited to us.

10. Changes

If we change how the app handles your data in a way that affects your privacy, we will update this page and tell you in the app before the change takes effect.