Privacy Policy

Overview

Mint is a local-first macOS application designed to help you organize files on your Mac. We built Mint with a fundamental commitment to your privacy: your files never leave your computer. This policy explains in detail what data Mint does and does not access, process, or transmit.

Local-First Architecture

Mint operates entirely on your Mac. All core functionality runs locally without requiring an internet connection:

• File analysis and organization — All scanning, categorization, and file-moving operations happen on your local filesystem. No files, file contents, filenames, or directory structures are ever uploaded to any server.
• OCR text recognition — Document text extraction is performed entirely on-device using the Apple Vision framework. Extracted text is processed in memory and never transmitted externally.
• Content-aware processing — Mint uses on-device metadata analysis, filename tokenization, OCR, language detection, and image classification to organize files and power cleanup search. All processing runs locally on your Mac.
• Activity logs — Mint maintains logs of its operations (file moves, renames, organization actions) stored locally at ~/Library/Application Support/Mint/. These logs never leave your machine and exist solely so you can review and undo actions.

No File or Behavioral Telemetry

Mint does not transmit file activity, feature usage, file names, file contents, folder structure, or behavioral telemetry. Mint does not include advertising, cross-app tracking, or a general-purpose crash-reporting service. We process limited purchase and entitlement records for the Direct edition as described below. A distribution platform may separately process limited technical information needed to provide its edition of Mint. In particular, the Setapp edition includes the Setapp Framework, which may provide Setapp with usage, performance, and device information for licensing, distribution, reliability, and developer reporting. Setapp processes that information under its own privacy notice.

Network Communication

Mint does not upload your files, filenames, folder structure, activity history, or usage behavior. Network communication is limited to purchase and entitlement flows:

• Direct website edition — When you activate or validate an Unlimited license, a secure HTTPS request is sent to our Cloudflare Worker to validate your license key against LemonSqueezy. The request contains the license key, a license-instance identifier, and the Mint version, build, and distribution edition needed to operate and troubleshoot the entitlement flow. Our measurement database stores keyed one-way hashes of the license key and instance identifier, the validation outcome, and the related LemonSqueezy order ID; it does not store the raw license key or raw instance identifier in analytics tables.
• Mac App Store edition — The one-time Lifetime Unlimited purchase and restores are handled through Apple StoreKit. Apple processes payment information; Mint receives entitlement status needed to remove the weekly limits.
• Setapp edition — Mint communicates with Setapp through the Setapp Framework to verify entitlement, support licensing and updates, and provide the technical usage, performance, and device information described in Setapp’s documentation. Mint does not send Setapp your file contents, filenames, folder structure, or Mint activity and undo history.
• License or entitlement validation may occur at app launch and periodically thereafter to confirm access status.

If you use the free tier outside Setapp without activating or restoring Unlimited, Mint does not need to contact our licensing infrastructure. The Setapp edition communicates with Setapp as described above.

Your Files Are Never Uploaded

To be unambiguous: Mint does not upload, copy, sync, or transmit your files or any file contents to any server, cloud service, or third party. All file operations are strictly local. Your documents, images, videos, and all other files remain on your Mac at all times.

Website Analytics

The Mint website uses a small, first-party analytics endpoint hosted with Cloudflare Pages to understand aggregate traffic and whether visitors reach the download page. It does not use advertising cookies, persistent user identifiers, or cross-site tracking.

For each browser-tab session, the site stores a random session identifier and first-touch attribution in sessionStorage. A new analytics session begins after 30 minutes of inactivity, and closing the tab also removes the stored session. The stored attribution is limited to the landing path, referral hostname, traffic channel, browser language, selected website interface language, and the utm_source, utm_medium, and utm_campaign labels when present.

If you continue from the website to the Direct-edition checkout, the random session identifier and the same normalized source, medium, channel, and campaign labels are sent to LemonSqueezy as custom checkout data. LemonSqueezy returns those labels with signed order and license webhooks. This lets us connect an aggregate acquisition source to a real payment, refund, and later Direct-license activation. We do not send a referral URL, IP address, file information, name, or email address as checkout attribution data, and our measurement database does not copy the customer name, email address, billing address, or payment credentials from the webhook.

The server retains privacy-minimized website event records for up to 90 days. Direct-edition activation event rows are retained for up to 400 days; older checkout session identifiers are removed from order records after 400 days. Non-personal order totals, refund totals, product identifiers, and keyed license hashes may be retained for accounting, fraud prevention, license administration, and historical aggregate reporting. The server does not store IP addresses, cities, user-agent strings, full referral URLs, arbitrary URL query parameters, or information about files used in the Mint app.

Contact Form

If you use the contact form on our website, we collect the information you voluntarily provide: your name, email address, and message. This data is processed by a Cloudflare Worker and used solely to respond to your inquiry. We do not sell, share, or use this information for marketing purposes. Contact form submissions are retained only as long as necessary to address your request.

Data Storage and Retention

All application data is stored locally on your Mac:

• Application preferences — Stored in macOS user defaults.
• Activity logs and undo history — Stored in ~/Library/Application Support/Mint/.
• License information — Direct-download license keys are stored securely in the macOS Keychain. Mac App Store entitlement state is managed through Apple StoreKit. Setapp entitlement state is managed through the Setapp Framework and Setapp services.
• Direct purchase and activation measurement — Our Cloudflare database stores the privacy-minimized order, refund, source attribution, and keyed-hash license records described above. It never stores your files, file paths, raw license key in measurement tables, or payment credentials.

You can delete all Mint data at any time by removing the application and its associated support files. Uninstalling Mint removes all locally stored data.

Third-Party Services

• LemonSqueezy — Handles payment processing and license management. When you purchase Mint, LemonSqueezy processes your payment information according to their privacy policy. Mint itself never sees or stores your payment details.
• Apple — Handles the Lifetime Unlimited App Store purchase, restores, refunds, and StoreKit entitlement status for the Mac App Store edition. Mint itself never sees or stores your App Store payment details.
• Setapp — Handles distribution, licensing, payments, applicable taxes, entitlement validation, updates, and first-line billing and licensing support for the Setapp edition. The Setapp Framework may collect limited usage, performance, and device information from users who activate Mint through Setapp. Setapp processes this information according to its privacy notice.
• Cloudflare — Provides our license validation API infrastructure and website hosting. Subject to Cloudflare’s privacy policy.

Children’s Privacy

Mint does not knowingly collect personal information from children under 13. Mint does not independently collect personal information through the desktop application; distribution platforms may process limited account, entitlement, usage, performance, and device information under their own privacy policies. If you believe a child has submitted personal information through our contact form, please reach out so we can delete it.

Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of Mint after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or Mint’s data practices, email us at [email protected] or use the contact form on our website.