Privacy Policy

1. Who we are and what this covers

Kimeur Labs, LLC, located at 4848 Lemmon Ave STE 420, Dallas, TX 75219, United States, operates ActionBar and actionbarapp.com. “We,” “us,” and “our” mean Kimeur Labs, LLC. We are responsible for personal information we process as described in this policy and act as its controller where that term applies.

This policy covers the ActionBar Mac app, our weather API, this website, and communications you send us. It covers both the direct-download and Mac App Store editions; available features differ by edition. It does not govern an independent app, website, script, search engine, or service you choose to open through ActionBar. Those providers have their own privacy practices.

2. Information processed on your Mac

ActionBar processes app names and identifiers, file and project names and paths in the folders it can access, search input, calculator expressions, quicklinks, workflows, and workspace configuration locally to provide its launcher features. The Mac App Store edition uses folders you explicitly add. The direct-download edition can also use macOS Spotlight for explicit file searches.

Preferences, folder access records, workspaces, quicklinks, and supported workflow or script configuration are stored locally. Search ranking stores command identifiers, use counts, last-used times, and favorites. This is not an uploaded search history. The file index is built locally; our analytics and diagnostic reporting exclude search text, file paths, clipboard contents, and workspace contents.

Local does not mean inaccessible to everything else on your computer. macOS, backups, device management, apps you authorize, and cloud-synchronized folders you select may process information under their own settings. When you intentionally open a URL, perform a web search, or run a supported script, the destination or script receives the information needed for that action. For example, a web search sends your search query to the search engine you selected.

3. Optional clipboard history

Clipboard history is off by default. When you enable it, ActionBar begins monitoring new plain-text copies; it does not import the text already on your clipboard at that moment. It keeps up to 100 text items, subject to size limits of 64 KiB per item and 2 MiB in total, along with available source-app information. These contents stay in app memory and are not uploaded or written to a clipboard-history file by ActionBar. Only the enable/disable preference is saved.

Quitting ActionBar, turning history off, or selecting Clear Clipboard History discards the in-app history. This does not erase the current macOS clipboard, text already pasted elsewhere, or copies made by another app. Choosing a history item copies it to the system clipboard; ActionBar does not automatically paste it into another app.

ActionBar skips recognized sensitive clipboard markers and known password-manager sources. Unmarked passwords, payment details, or other sensitive text can still be captured. Disable history before copying information you do not want it to retain. Text supplied by Apple’s Universal Clipboard can appear like other clipboard text; ActionBar does not operate a clipboard-sync service. Releasing app memory is not a guarantee of immediate physical erasure from every operating-system memory or backup mechanism.

4. Weather requests

When you request weather, your entered city is sent over HTTPS to the ActionBar API hosted on Railway. The API uses Open-Meteo to resolve the city and retrieve a forecast using the resulting coordinates. Those coordinates describe the searched place, which need not be where you are. ActionBar does not request GPS or macOS Location Services access for this feature.

Our API and its hosting infrastructure receive ordinary connection information, including your IP address, request URL, and request time. We use the IP address for rate limiting and service protection. Our API sends the city and resolved coordinates to Open-Meteo from our server; it does not deliberately forward your client IP address to Open-Meteo.

Forecasts are cached by city to reduce repeat requests. The shared cache includes the returned place, coordinates, forecast, and timestamp, with no account or app analytics identifier. A hashed city lookup key is not a guarantee that a city is anonymous. Weather requests also involve the service diagnostics described below. Avoid including a street address or other private details in the city field.

5. Optional app usage analytics

Share feature usage is off until you enable it in ActionBar’s Privacy settings. If enabled in a build configured for analytics, Google Analytics for Firebase receives fixed feature-use events, such as opening the launcher or using a tool, and standard app/session, version, device, operating-system, and language information. It uses an app analytics identifier and can derive approximate geographic information from the connection IP address.

This information helps us understand which features are used and improve the app. Events may be associated with the same app installation; we do not describe this data as anonymous. We do not attach your name, email, an account ID, search queries, clipboard text, file paths, script contents, or workspace contents to analytics events.

We disable advertising storage, advertising personalization, advertising user data, vendor-identifier collection, and automatic screen reporting in our analytics integration. We do not use this integration to track you across other companies’ apps or websites for advertising. You can use the app’s features without enabling analytics.

6. App and service diagnostics

Optional reports from your Mac

Send crash and error reports is a separate, default-off setting. If you enable it, Sentry receives crash or app-hang stack traces, binary identifiers needed to interpret them, app/build and operating-system versions, limited device model/architecture information, and predefined error codes. These reports help us diagnose and fix reliability problems.

Our reporting filters remove user identity fields, request details, full file paths, arbitrary messages, and interaction breadcrumbs. We disable screenshots, session replay, automatic network and file tracing, and memory-content inspection in this integration. Connection IP addresses necessarily reach the receiving service, but our Sentry project is configured to remove stored client IP addresses and IP-derived location from events. Filtering reduces exposure; it cannot make every software defect or transmission risk impossible.

Diagnostics for the weather service

The ActionBar API uses Sentry for server errors and sampled request timing, independently of your Mac’s diagnostics toggle. We send predefined route and error information and technical stack/timing data to operate and protect the service. Our filters exclude request bodies, headers, cookies, query strings (including the searched city), user information, and source context from those reports. Hosting-level connection and security logs are separate from this filtered reporting.

7. Website visits and communications

This website does not add analytics, advertising trackers, account tracking, or nonessential cookies. Fonts and product media are served with the site. Interactive sample searches and calculations run in your browser and are not submitted to us. A calculator writes an answer to your clipboard only when you explicitly choose to copy it; the website does not read your clipboard history.

Delivering the website still exposes ordinary request information to our hosting and network providers, such as IP address, requested page, browser information, referrer where supplied, timestamp, and response status. Providers may keep operational and security logs to deliver and protect the site. Your browser also caches site assets according to its own settings.

If you contact us, we process the contact details, message, and attachments you choose to provide to answer your request, troubleshoot, manage a privacy request, or keep necessary correspondence records. Please avoid sending passwords, confidential clipboard contents, or full files when a redacted description will do. This website does not currently provide accounts, payment processing, or a mailing-list signup.

8. Why we process information

We use information to provide the features you request; maintain, secure, and troubleshoot the app and online services; improve features when you permit analytics; respond to you; and meet legal obligations or establish and defend legal claims. We do not use local clipboard or file contents for advertising or AI-model training.

Where a law requires a legal basis, we rely on:

• Your consent for optional app analytics and app diagnostics, and other processing for which consent is legally required. Accepting Terms or reading this policy does not enable those settings.
• Performance of a contract or steps you request to provide app functionality, requested weather results, and related support.
• Legitimate interests in delivering and protecting our website and API, preventing misuse, investigating service failures, and handling ordinary business correspondence, balanced against your rights and expectations.
• Legal obligations where applicable, including responding to valid legal requests and preserving required records.

You do not have to provide optional analytics or app diagnostics to use ActionBar. Features that need a selected folder, city, or external destination cannot perform the requested action without that information. We do not make solely automated decisions about you that produce legal or similarly significant effects.

9. Who receives information

We share information only for the purposes described in this policy. Providers processing user information on our behalf must protect it to the same or an equivalent standard as this policy and applicable Apple requirements, use it for the authorized service purposes, and comply with applicable data-protection obligations.

Google Analytics for Firebase

Optional app usage events and associated technical metadata. See Firebase’s privacy information and Google’s Privacy Policy.

Sentry

Optional app diagnostic reports and operational API diagnostic reports. See Sentry’s Privacy Policy.

Vercel and Cloudflare

Vercel hosts and delivers this website and processes its ordinary connection and operational information. Cloudflare provides domain name system (DNS) services. See Vercel’s Privacy Policy and Cloudflare’s Privacy Policy. We do not enable Vercel Web Analytics or Speed Insights on this site.

Railway

Weather API hosting, the shared forecast database, connection handling, and operational protection. Railway hosts our backend services, not this website. See Railway’s Privacy Policy.

Open-Meteo

Searched city and resolved coordinates for weather, sent by our API. See Open-Meteo’s terms and privacy information.

Apple and destinations you choose

Apple handles App Store distribution and any App Store transactions under Apple’s Privacy Policy. Apple’s own device analytics are controlled in macOS. Websites, search engines, and apps you open receive data according to the actions you take and their own policies.

Authorized personnel and professional advisers may access information when needed for support, security, legal, or business administration. We may disclose information when required by law, to respond to valid legal process, or when reasonably necessary to protect rights, safety, or service security. If our business is involved in a merger, acquisition, financing, or asset transfer, relevant information may be disclosed under appropriate confidentiality protections; any successor must honor applicable privacy obligations and required notices.

We do not sell personal information, share it for cross-context behavioral advertising, or provide it to data brokers. We do not run targeted advertising. Those statements also apply to information about minors. We do not offer a paid incentive in exchange for personal information.

10. How long information is kept

Retention depends on the type of information and the purpose. We keep personal information only for as long as reasonably needed for the disclosed purpose, subject to applicable law, security investigations, and required record preservation. A local reset does not automatically delete a provider’s already-received records.

Clipboard contents

In app memory until removed by size/count limits, cleared, disabled, or ActionBar quits. The system clipboard and copies outside ActionBar have separate lifetimes.

Local settings and configuration

Until you change, reset, or delete them. Removing the app alone may leave settings, its sandbox container, or backups. Search-ranking usage can be reset separately; favorites remain until removed.

Weather cache and rate limiting

Forecast cache entries are usable for five minutes. Expired database entries are normally removed by a cleanup that runs every minute; bounded in-memory entries can remain until replaced or the server restarts. Rate-limit counts use one-minute windows; their IP records may remain in process memory until replaced, pruned under load, or the server restarts. This is separate from infrastructure logs and backups.

Optional analytics and diagnostics

Providers retain received events under the retention settings and limits of the applicable service. We retain them to evaluate feature use and investigate or verify reliability fixes, limited by those settings and any earlier deletion we can perform. The relevant criteria are the event’s age, whether an issue remains under investigation, and whether aggregate information can serve the purpose. Provider aggregates, backups, and legally required records can have different lifetimes. Turning off sharing stops future collection by that app integration; it does not recall events already delivered or in flight.

Infrastructure and security records

For the operational, troubleshooting, abuse-prevention, and security periods of the applicable hosting service, and longer only where reasonably necessary for a specific incident or legal obligation. Our short forecast-cache duration does not describe these logs. Open-Meteo separately states that individual API log files are removed after 90 days in its provider policy.

Support and privacy correspondence

For as long as needed to resolve the request and maintain necessary evidence of the response, legal compliance, or a related dispute. We consider the request’s sensitivity, applicable limitation and recordkeeping periods, and whether a shorter or de-identified record is sufficient.

Where retained data is no longer needed, our policy is to delete or de-identify it, subject to lawful exceptions. Records in backups may persist until the backup expires; they should not be restored to ordinary use after an applicable deletion except where legally necessary. You can contact us for information about retention relevant to your request.

11. Your controls and deletion options

1. Withdraw analytics or app-diagnostics consent: open ActionBar Settings → Privacy and turn off “Share feature usage” and/or “Send crash and error reports.” These choices are independent. Disabling analytics also resets its local data and identifier; disabling diagnostics closes its SDK and removes its private local report cache. Previously transmitted or in-flight information cannot be recalled by these switches.
2. Reset local analytics: choose “Reset Local Analytics Data” in Privacy settings. If sharing remains enabled, new analytics data can be generated. This is not a request to delete provider-held reports.
3. Clear clipboard history: use “Clear Clipboard History,” turn the feature off, or quit ActionBar. To replace the current system clipboard too, copy harmless new text. Copies previously pasted elsewhere must be removed in those destinations.
4. Reset ranking and folder access: use “Reset Recent Use” in Search ranking; remove favorites separately. Remove a folder in Files & projects to stop indexing it. Changing a setting in ActionBar does not revoke permissions or delete data in other apps.
5. Remove local configuration: quit ActionBar, preserve any workflows you wish to keep, and remove its own Application Support data. The support page explains the locations for each edition. Backups and operating-system-managed caches require separate management.
6. Request server-side deletion or another privacy right: contact Kimeur Labs, LLC at the address below. Explain the request and the relevant feature, approximate date, and contact information you previously provided, if any. Do not send clipboard contents, passwords, or identification documents unless we establish that a specific verification step is necessary.

ActionBar has no user-account registration or cloud account to close. Because we do not maintain a name-to-installation directory, we may be unable to connect a particular analytics or diagnostic record to you without additional information. We will explain applicable limits and any verification reasonably needed; we will not collect extra identifying information merely to make otherwise unlinked data identifiable.

Withdrawing consent does not affect the lawfulness of processing before withdrawal. These controls do not turn off website delivery logs or the operational handling needed for weather requests. You can avoid that processing by not using the corresponding online feature. There are no advertising cookies to opt out of on this site; we do not sell or share information for targeted advertising regardless of a browser’s Global Privacy Control or Do Not Track setting.

12. Rights under applicable privacy laws

Depending on your location and which laws apply to us, you may have rights to learn whether we process your personal information; access or receive a copy; correct inaccuracies; request deletion or portability; restrict or object to certain processing; and withdraw consent. These rights are subject to legal exceptions, identity verification, and technical limits described above. We will not unlawfully discriminate against you for exercising them.

Residents of California and other U.S. states may have additional rights to know the categories, sources, purposes, and recipients of personal information, and to opt out of sales, targeted advertising, or certain profiling. This policy describes those categories in the sections above, including identifiers and connection data, app interactions, approximate location, diagnostics, and information you voluntarily provide. We do not engage in the sale, advertising, or significant-decision profiling activities described above and do not use sensitive personal information to infer characteristics about you.

You or an authorized agent can send a request to our privacy contact. We may request proportionate proof of identity or authority and will respond within the period required by applicable law. If we decline a request, we will explain the reason to the extent permitted. Where an appeal right applies, send a request marked “Privacy Appeal” to the same contact; we will review it and explain any further complaint route available to you.

If you are in the European Economic Area, United Kingdom, or Switzerland, you may also complain to the competent data-protection supervisory authority, including the authority where you live or work. You may contact us first, but that is not a condition of exercising your rights. U.S. residents may contact their state attorney general or relevant privacy regulator where applicable.

13. Security and international processing

We use measures appropriate to the information and risks, including HTTPS for our online requests, bounded local clipboard storage, default-off optional telemetry, and filters that reduce diagnostic content. Your device security, disk encryption, backups, and permissions also matter. No software, transmission method, or storage system can be guaranteed completely secure.

Kimeur Labs, LLC is based in the United States. Online providers may process information in the United States and other countries where they operate; our Sentry projects use its U.S. region. These countries may have different privacy laws from your country. Where a regulated international transfer requires safeguards, applicable data-processing terms and legally recognized transfer mechanisms, such as standard contractual clauses or an applicable adequacy decision, must cover it. A provider’s certification is not a certification of Kimeur Labs, LLC. Contact us for details of safeguards relevant to your information.

14. Children’s privacy

ActionBar is a general-purpose productivity tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13, or below an applicable higher age where parental authorization is required, without the legally required authorization. If you believe a child has provided personal information to us contrary to this policy, contact us so we can investigate and take appropriate deletion or other required action. Optional sharing should remain off where a user cannot provide valid consent.

15. Changes to this policy

We may update this policy when features, providers, or legal requirements change. The revised policy will identify its effective date here. For material changes, we will provide additional notice appropriate to the change and obtain new consent where required before applying a new consent-dependent use. Posting a policy update alone does not switch on optional analytics or diagnostics.

16. Contact Kimeur Labs, LLC