Privacy Policy

This policy explains what Servey collects, what it deliberately never sees, who we share data with, how long we keep it, and how you get it removed. It covers both the Servey apps for macOS, iOS and iPadOS and the servey.in website.

Servey is currently pre-launch. Until the apps are generally available, the only data most people give us is a waitlist email address. The app sections below describe the software as built, and take effect for you when you install it.

The short version

• We never see your screen, your keystrokes, your files, or anything you type or read in the terminal.
• We never receive your master password, and we cannot reset it for you.
• We never sell or rent your personal data, and we never have.
• We hold your email address, your device names, your subscription status, and counts of how many sessions you have run. That is close to all of it.
• There is no analytics or crash-reporting SDK inside the apps at all.

What we collect

Account information

You sign in with Google. From that we receive your email address, your display name, and the account identifier Google issues. We do not receive your Google password, and we do not request access to your Gmail, Drive, contacts, or calendar.

Alongside that we store your country (derived from your device region setting), your App Store storefront, the time you last signed in, which platform you last used, and the app and operating system versions you are running. The versions exist so we can reproduce bugs against the right build.

Your devices

So your Mac can appear on your iPhone or iPad, we store a record for each device: a device identifier generated by the app, the device name you have given it in macOS or iOS, its type, and whether it is currently online. These records are scoped to your account, and a device you revoke is removed.

Connection data

Setting up a direct connection between two devices requires them to exchange network information through a server, because neither can reach the other until they have. That exchange contains candidate network addresses, including IP addresses, for both devices.

This data is ephemeral. It exists only to introduce your two devices to each other, it is scoped to your account, and the record is deleted when the session ends. It is not used to profile you, build a location history, or anything else.

Subscription and usage

We store which plan you are on, whether it renews, the currency and period of your subscription, and the identifier your subscription was issued under. We also keep counts: how many screen and terminal sessions you have started, roughly how long they lasted in total, and how many you have started today. The daily count is what enforces the free tier’s three sessions a day.

These are numbers, not content. A count records that a session happened. It records nothing about what you did in it.

Payments

We never see your card details. We do not collect them, store them, or receive them from anyone. Payments are handled entirely by our payment providers, and which one depends on where you bought your subscription.

On iPhone or iPad, Apple processes the payment under Apple’s own privacy policy. Apple tells us that a subscription exists, what it covers, and when it renews or lapses - and nothing more.

On Mac or through this website, the payment is processed by Dodo Payments, acting as Merchant of Record - meaning Dodo is the seller for that transaction and handles the tax registration for it. We pass them your email address and your country, which is what they need to create the subscription and work out the tax. Your card details are entered on their checkout page and never reach our servers.

Records we keep.When a payment succeeds we store a transaction record: the amount and currency, the date, the plan, the country or storefront it was bought in, and the provider’s transaction and subscription identifiers. We also keep the provider’s original notification for each payment event, which is how a payment is reconciled and a duplicate is caught. None of it contains a card number.

We keep these records for accounting, tax and dispute purposes, and we keep them after an account is deleted, because we have to be able to account for money we have been paid. They are never used for marketing or profiling.

The website

If you join the waitlist we store the email address you give us, along with your name, country, the time you signed up, and which part of the page you signed up from. If you use the contact form, we receive whatever you write in it.

We use PostHog for website analytics, kept deliberately light-touch:

• We do not build a personal profile for anonymous visitors, and we never link analytics activity to your waitlist email address.
• We do not record your screen, your typing, or the contents of any form on this site.
• Your IP address is used to derive an approximate country, so we can see where Servey is wanted. We use it for nothing else.
• Analytics requests are served from servey.in rather than a third-party domain, so the setup does not rely on third-party cookies.
• If your browser sends a Do Not Track signal, we honour it and collect nothing at all.

There is no analytics SDK inside the Servey apps. The analytics described here run on the website only.

What we never see

This section is the point of the product, so it is worth stating precisely.

• Your screen. Video travels directly between your own devices, encrypted end to end. We do not record it, store it, or have the keys to decrypt it.
• Your input. Mouse movement, clicks and keystrokes go to your Mac over the same encrypted channel. They are never logged.
• Your terminal. Commands you run and the output they produce stay between your devices and your Mac. We do not capture command history, output, or the contents of any file.
• Your master password. Your Mac stores only a key derived from it, in the macOS Keychain, and never transmits the password itself. There is deliberately no remote reset - which also means that if you forget it, we cannot recover it for you.
• Your activity log. The record your Mac keeps of connections, approvals, refused passwords and sessions is written to that Mac and is never uploaded to us.

Some networks - strict NATs and certain mobile carriers - refuse to allow a direct connection between two devices. When that happens the encrypted stream is relayed through our own serverrather than a third-party vendor's cloud. A relay forwards encrypted packets; it does not decrypt them, and we do not record their contents.

How we use it

• To sign you in and pair your devices to your own account.
• To introduce your devices to each other so a direct connection can be made.
• To determine what your plan includes and to enforce free-tier limits.
• To diagnose faults, understand which builds and OS versions are affected, and keep the service running.
• To detect and prevent abuse, fraud, and attempts to access an account that is not yours.
• To contact you about your account, and about launch if you asked us to.

We do not use your data for advertising, we do not build advertising profiles, and we do not use it to train machine-learning models.

Who we share it with

We do not sell or rent your personal data. We share the minimum necessary with service providers who process it on our behalf:

• Google Firebase - authentication, and the database holding your device and signaling records.
• Supabase - the database holding account, subscription and usage records.
• Apple - purchases, subscription status and renewals for subscriptions bought on iPhone or iPad.
• Dodo Payments - Merchant of Record for subscriptions bought on Mac or on this website. Receives your email address and country, and handles the checkout, the billing portal and the tax.
• Resend - delivers waitlist and account email on our behalf, and processes your name and email address for that purpose only.
• PostHog - website analytics, as described above.

We may also disclose data where we are legally required to, or to establish or defend a legal claim. If Servey is ever acquired or merged, your data may transfer as part of that business, and this policy would continue to apply until you are told otherwise.

How long we keep it

• Connection records - deleted when the session ends.
• Device records - kept until you revoke the device or delete your account.
• Account, subscription and usage records - kept while your account exists, and after closure only for as long as we need them for tax, accounting and legal obligations.
• Payment records - the transaction records described above. Kept after your account is deleted, for as long as tax and accounting law requires us to be able to account for the payment.
• Waitlist email - kept until you unsubscribe or ask us to remove it.
• Your activity log - stored on your Mac, capped at the most recent entries, and removable by you at any time. We never hold a copy.

Your rights

Wherever you live, you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, or stop using it for a particular purpose. You can withdraw consent at any time, and you can ask us not to send you email.

If you are in India, these rights are given to you by the Digital Personal Data Protection Act, 2023. If you are in the UK, the EU or the EEA, they are given to you by the UK GDPR and the GDPR, and you also have the right to complain to your local supervisory authority.

To delete your account and data, email hello@servey.in from the address you signed up with. We will confirm the request, delete your account record, device records, usage counts and waitlist entry, and tell you when it is done. We aim to complete requests within 30 days, and to resolve any complaint within 90 days.

Two things survive that deletion, and we would rather say so plainly than let you find out later. Payment records stay, for the accounting and tax reasons above. And deleting your Servey account does not cancel a subscription: if you bought on iPhone or iPad, cancel it in your Apple account settings; if you bought on Mac or this website, cancel it in the billing portal, which you reach from Manage subscription on the Account screen of the Mac app.

Security

Your screen and input are encrypted end to end between your own devices. Access to your records is enforced at the database level, scoped to your authenticated account, so one account cannot read another's. Your master password never leaves your Mac in a recoverable form. Payment details never reach us at all.

No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal data we will notify you and the relevant authority as required by law.

Children

Servey is not directed at children. You must be at least 13 years old to use it, and old enough to agree to this policy where you live. If we learn we have collected data from a child below that age, we will delete it.

Where your data is processed

Servey is operated from India. Our service providers operate globally, so your data may be processed on servers outside your country, including in the United States and the European Union. Where the law requires a safeguard for that transfer, we rely on the standard contractual protections our providers offer.

Ownership, availability and discontinuation

Servey - the applications, the website, the name, the design, and all associated intellectual property - is owned by the builders of Servey and its rights holders. Nothing in this policy, and nothing in your use of the service, transfers any ownership in it to you. Your subscription grants you a personal, non-transferable right to use the apps while it is active, and no more.

Content that is yours stays yours. Your files, your terminal sessions and whatever is on your Mac belong to you, and we claim no rights over any of it.

We may change, suspend, limit or discontinue Servey, any part of it, or support for it, at our discretion - including where continuing would not be sustainable for the organisation, or where it is necessary for the welfare, viability or security of Servey and the people who build it. Where a discontinuation is planned rather than forced on us, we will give reasonable notice, stop billing, and give you the chance to export or delete your data before access ends. If the service stops permanently, we will delete personal data we no longer have a legal reason to keep.

Your terminal sessions are ordinary tmux sessions on your own Mac, and the app shows you the command to attach to them. That is deliberate: if Servey ever goes away, the work you started does not go with it.

Changes to this policy

We will update this page as Servey changes, and the date at the top always reflects the current version. If a change materially affects how we handle your data, we will tell you by email or in the app before it takes effect rather than relying on you to notice.

Contact

For any privacy question, to exercise any right above, or to raise a grievance, email hello@servey.in and mark it for the attention of our Grievance Officer. You can also reach us through the contact form on this website. We answer privacy mail ourselves, and we aim to reply within a few working days.