Privacy.

This policy covers Mobster for Mac (the “app”), its license service (api.mobster.dev), and mobster.dev. They are run by Radish Retail, LLC, a Delaware limited liability company (“we”, “us”), 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Contact: support@radish.software. For the personal data described here, we are the controller. Mobster CLI, the free open-source part, sends nothing to us at all.

The short version

• The only Mobster server the app talks to is the license service. It never receives your tasks, screens, AI keys or results.
• To run a task, the app sends the task and what is on your iPhone’s screen to the AI provider whose key you add, Anthropic or OpenAI, under your account and their terms. Nothing from your phone goes anywhere else, and none of it comes to us.
• mobster.dev has no analytics, no tracking, no advertising and no cookies of our own.
• We don’t sell your data, and we don’t share it for advertising.

What we collect

• Your email and license record. When you buy, Stripe collects your email and payment details. We keep a license record on your customer record at Stripe: your email, your license key, your plan and its status, and the hashed ids and names of the Macs it is active on (device activations). We run no database of our own. We use it to issue, check, recover and refund licenses, to take payments, and to answer your support requests.
• Payment data. Your card details go to Stripe, which processes payments for us. We never see your full card number. Stripe also gives us your billing country and postal code where needed to work out tax, and the receipt and payment status.
• License checks. The app sends your license key, a one-way hash of your Mac’s hardware id, and your Mac’s name to the license service when you activate or deactivate, and at most once a day on a monthly plan.
• Support email. If you write to us, we keep the messages and what you send in them.
• Website data. Our host, Vercel, processes the request data any web host does to serve mobster.dev, such as your IP address, browser and the pages you request, in server logs. We don’t use analytics or advertising tools on the site. After checkout, the thanks page keeps your checkout session in your browser tab only (session storage), so a reload still finds your key.
• Crash reports and analytics. The app and the site send none to us.
• Nothing from your phone. We collect nothing from your iPhone. What your phone shows goes only to the AI provider you chose, as described next.

What leaves your Mac, and where it goes

Screen content can include personal information that apps on your phone show: names, messages, contacts, account details, photos. Mobster sends only what the current task needs, but it can’t tell whether screen text is sensitive. Don’t run tasks on screens you aren’t willing to share with your chosen AI provider. Each provider receives this directly from your Mac, under your own account, and is responsible for it under its terms. We are not a party to that.

The live view of your phone streams from the phone to your Mac over the cable and stays on your Mac.

Who processes data for us

• Stripe (payments, billing portal, and storage of license records in customer metadata): processes your email, payment details and license record.
• Vercel (hosting for mobster.dev and the license service): processes request data such as IP addresses.
• GitHub (update downloads).
• Anthropic or OpenAI: only if you add your own key. They get what the agent sends them, as your provider, not as ours.

We don’t sell personal data and we don’t use it for advertising. We share it with these processors to run the service, and where the law requires it.

What stays on your Mac

• Your AI keys and settings, readable only by your macOS user. The app shows only a key’s last four characters and never writes keys to logs or task records.
• Task history: your most recent tasks, with their steps, the screen text Mobster read, and the results.
• Small pictures of your iPhone’s screen at each step. They go when you delete the task, or when it drops out of the recent history.
• Your license key and its signed license.

Legal bases (EU and UK)

Where the GDPR or UK GDPR applies, we process your data to perform our contract with you (license, payment, support), for our legitimate interests (security, preventing fraud and license abuse, keeping the service running), and to meet legal obligations (tax and accounting). We don’t rely on consent for the data described here.

How long we keep it

• License record: for as long as your license or subscription is active, and then until you ask us to delete it, or for as long as we need it to prevent abuse and honor refunds.
• Payment, invoice and tax records: as long as tax and accounting law requires, which can be several years. Stripe keeps these under its own policy.
• Support email: up to 3 years after the last message.
• Web server logs: kept by Vercel for a short period under its own settings.

Where data is processed

We are in the United States, and Stripe, Vercel and our other processors process data in the United States and other countries. If you are in the EU, UK or another region with transfer rules, your data is transferred to the US under the safeguards our processors provide, such as standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

Write to support@radish.software to ask us to access, correct, delete or export your data, or to object to or restrict how we use it.

• EU and UK (GDPR): you have the rights above, the right to withdraw any consent you gave, and the right to complain to your data protection authority (in the UK, the ICO).
• California and other US states (CCPA and similar): you can ask what we collect and why, to see it, to have it deleted or corrected, and not to be discriminated against for using these rights. We don’t sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.

We answer within 30 days (45 for California requests, extendable as the law allows). We may ask you to prove it’s you, from the email you bought with. Stripe keeps payment records as the law requires, and we may keep what we must for tax and legal reasons or to prevent abuse.

Your choices

• Delete a key in the app’s settings. Delete a task, and its pictures go with it.
• Delete everything on your Mac: quit the app and delete ~/Library/Application Support/app.mobster.desktop/.
• Ask us to delete your license record by writing to support@radish.software.

Children

Mobster isn’t directed at children. You must be at least 13 to use it (16 in the European Union and the UK, or the age your country sets for consenting to data processing, if higher). We don’t knowingly collect data from children below that age. If you think a child has given us data, write to us and we’ll delete it.

Security

We use Stripe and Vercel’s security, and store license records only on your Stripe customer record. No system is perfectly secure; if a breach affects you, we’ll tell you as the law requires.

Changes

If we change this policy, we post the new version here and change the date below. If a change is material, we’ll also tell customers by email.

Contact

Radish Retail, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA. support@radish.software.