Privacy

Short, because there's little to confess.

This website

• No cookies. No trackers. No ad pixels. Your theme preference lives in your own browser's local storage and never leaves it.
• We count visits in aggregate (page, browser family, country) using a salted daily hash that cannot be traced back to you and is never stored alongside your IP address.
• If you buy a license, Stripe processes your payment. We receive your email address and payment confirmation, and use the email only to deliver your license key and answer support.

The app

• Headroom talks to your AI providers directly from your device. Your provider credentials and usage readings are not sent to Headroom servers.
• API keys and provider sign-ins are encrypted using the operating system's secure storage, including Windows Credential Manager, the macOS and iOS Keychain, and encrypted storage on Android.
• Desktop license activation sends us your license key, an anonymous device identifier, device label, app version and operating system, enough to enforce the applicable device limit.
• Mobile license recovery sends us your email address and a short-lived verification code. Mobile activation stores an anonymous device identifier, optional device model, and an activation token.
• For an Android lifetime unlock, Google Play processes the payment. The app sends the Google Play purchase token and an anonymous device identifier to Headroom so the purchase can be verified, restored, and revoked after a refund. We store the product, order and billing-region identifiers returned by Google Play, but we do not receive your payment-card details.
• For an iPhone or iPad lifetime unlock, the Apple App Store processes the payment. The app sends the App Store-signed transaction and an anonymous device identifier to Headroom so the purchase can be verified, restored, and revoked after a refund. We store the product, transaction and App Store environment identifiers, but we do not receive your payment-card details.
• Headroom does not include advertising or third-party analytics SDKs.

Retention and deletion

License, activation, and purchase-verification records are retained while needed to provide, restore, secure, and support your purchase. Email [email protected] to request access to or deletion of personal information associated with your email address, subject to records we must retain for legal, fraud-prevention, or accounting purposes.

Questions

Email [email protected].