Privacy Policy
Last updated: August 25, 2026 · Aimgonna Inc.
The short version: your camera video and blink statistics never leave your Mac — we can't see them, and we don't want to. The only personal data we ever hold is your email address and purchase record, and only if you choose to sign in to buy premium characters. No ads, no data selling, no profiles. From version 0.1.5 the app reports one anonymous "started" count on launch, and from version 0.1.7 three one-off setup milestones as well — whether you allowed the camera, that you finished calibration, and that you saw your first reminder. No identifier of any kind is attached to any of them, that is the whole of it, and one switch in Settings turns all of it off.
1. Who we are
slow-blink is made by Aimgonna Inc., a Delaware corporation (United States). We are the data controller for the personal data described in this policy. Contact: info@aimgonna.com.
2. What we do NOT collect
- Camera video. Blink detection runs entirely on your device using a locally executed model. Video frames are analyzed in real time in memory and are never stored, recorded, or transmitted anywhere. We do not receive them, ever.
- Blink and usage statistics. Your blink counts, alerts, eye-break history, and streaks are stored only in a local file on your Mac and are never uploaded.
- Behavioural analytics, crash reports, advertising. The app contains no third-party analytics SDK, no crash reporter, and no advertising SDK. Nothing about how you use the app day to day — how long you run it, what your blink data looks like, how often a reminder appears, which characters you pick — is ever sent anywhere. The exceptions are the launch count and the three setup milestones in section 3: each records only that a step happened, carries no identifier, and can be turned off in Settings. When it is off the app builds no request at all — nothing to see on the wire, not merely something we discard on arrival.
You can verify this yourself: the app's only network connections are the ones listed in section 3 (launch count and setup milestones, sign-in, entitlement check, purchase, update check). Tools like Little Snitch or Activity Monitor will show you exactly that.
3. What we collect, and why
| Data | When | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Email address, account ID (from Google or Apple sign-in) | Only if you sign in | Linking your premium purchases to your account so they restore on any of your Macs | Contract performance, Art. 6(1)(b) |
| Purchase record (account ID, product ID, order reference) | Only if you buy | Delivering and restoring what you bought; accounting and tax obligations | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) |
| Payment details (card number etc.) | Only if you buy | Processed directly by Stripe — we never see or store your card details | Contract, Art. 6(1)(b) |
| Website analytics (this site only, not the app) | Visiting this website | Aggregate, cookieless counts of visits, download clicks, broken links, and whether the on-page blink test was started and finished (Google Analytics with consent-mode storage denied, plus numai — our own cookieless analytics. No analytics cookies are set by either). The blink test’s own measurement never leaves your browser — we count that it ran, never how often you blinked | Legitimate interest, Art. 6(1)(f) |
| App launch count (app version and build channel only) | Each time the app starts, from version 0.1.5 — unless you turn it off in Settings → "Send anonymous launch and setup counts" | Knowing roughly how many people actually run the app, and whether a release broke startup. The request contains no account ID, no device ID, and no installation ID — nothing that could tie two launches to the same Mac | Legitimate interest, Art. 6(1)(f) |
| Setup milestones (three counts, no identifier) | From version 0.1.7, at most once each — unless you turn it off in Settings → "Send anonymous launch and setup counts" | Seeing where first-time setup goes wrong. Three things are counted: the answer you gave to the camera permission prompt (allowed / denied / blocked by your Mac), that calibration finished, and that a first reminder appeared. Nothing about what the camera saw, and no account, device, or installation ID | Legitimate interest, Art. 6(1)(f) |
Signing in is optional. The app is fully functional without an account; an account is only needed to purchase or restore premium characters.
4. Service providers (processors)
We use a small number of service providers to run the account and purchase system. Each receives only what is needed for its role:
- Supabase (database & authentication, US) — stores your email and entitlements. Transfers safeguarded by Standard Contractual Clauses (SCCs).
- Stripe (payment processing, US) — processes payments; certified under the EU–US Data Privacy Framework (DPF).
- Vercel (website & API hosting, US) — hosts this site and our purchase API; DPF certified.
- Google (sign-in, US) — provides OAuth sign-in; DPF certified. Google's own privacy policy applies to your Google account.
- Apple (Sign in with Apple, US) — provides OAuth sign-in; supports Hide My Email (private relay addresses). Apple's own privacy policy applies to your Apple Account.
- numai (analytics, US) — our own analytics service, operated by Aimgonna Inc. rather than bought from a third party, running on Vercel with event storage at Tinybird (US). It sets no cookies, stores no raw IP address or user agent, and drops URL query strings on arrival; visitors are counted with a hash that is re-salted daily, so the same person cannot be followed from one day to the next.
We do not sell personal data or share it with anyone else, and we never will.
5. International transfers
Our servers and providers are located in the United States. Where GDPR applies, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses as noted above.
6. Retention
- Account data (email, entitlements): kept until you delete your account.
- Purchase/transaction records: kept as required by tax and accounting law (typically up to 7 years), even after account deletion.
- Local data on your Mac (statistics, settings): under your control; removed when you delete the app and its data folder.
7. Your rights and account deletion
You can delete your account directly in the app (Settings → account section → Delete account). This removes your account and email from our systems; purchase records are retained only as required by law.
Where GDPR or similar laws apply, you also have the right to access, rectify, export, or erase your data, restrict or object to processing, and lodge a complaint with your local supervisory authority. For any request, email info@aimgonna.com — we answer within 1–2 business days.
8. Children
slow-blink is not directed at children under 13, and we do not knowingly collect personal data from them.
9. Changes
If we change this policy, we will update this page and the date above. Material changes will be noted on the download page.