Privacy Policy
Last updated: August 2026
1. Introduction
Daedalus ("we", "us", "our") is a desktop application for Windows, macOS and Linux that uses AI to research and build apps, together with this website at daedalus.ai-smarter.org. This Privacy Policy explains what data the app and website collect, why, how it is stored, and your rights under the GDPR and other applicable laws. Because Daedalus runs on your own machine and connects to AI providers you choose (bring-your-own-keys) or to local models, your prompts, project files and generated apps are processed on your device or by those providers — they are not sent to or stored by us. By using Daedalus you agree to the practices described here.
2. Data We Collect
- Purchase & license data: your email address and order details, received from our payment provider (Lemon Squeezy) when you buy a license, plus the license key we issue. We never receive or store your card details.
- Device fingerprint (for licensing): to enforce the device-limited, node-locked license, the app sends a one-way hashed hardware fingerprint at activation. It is not personally identifying on its own and is used only to count and verify licensed devices.
- Support communications: messages you send us by email.
- Website analytics (optional): anonymised, privacy-respecting usage statistics for the website only, with no cross-site tracking.
- API keys & provider settings (optional): any AI-provider API keys and connection settings you enter are stored locally on your device and are sent only to the providers you choose — never to us.
3. How We Use Your Data
- Issue, activate, verify, and recover your license.
- Provide, maintain, and improve the Daedalus app and website.
- Respond to support requests and deliver updates.
- Detect and prevent fraud, abuse, and license sharing.
- Comply with legal and tax obligations.
We do not sell your personal data to any third party, ever.
4. Data Storage & Security
- Data in transit is encrypted with TLS; license data at rest is protected on hardened EU-hosted infrastructure.
- Access to the licensing database is restricted by role-based authentication.
- Your prompts, project files and generated apps are processed on your own machine or by the AI providers you connect — they are never sent to or stored on our servers.
5. Third-Party Services
- Lemon Squeezy — our Merchant of Record, which processes payments, taxes, and refunds/chargebacks. Its own privacy policy governs your payment data.
- AI providers you connect — the third-party or local AI services you choose process your prompts and generate your output, under their own terms and privacy policies. We are not a party to that processing.
- Website analytics — anonymised website usage statistics only, if enabled.
Each service has its own privacy policy. We only share the minimum data required for the service to function.
6. Local Processing
Daedalus is local-first: the research, planning, building, and export all run on your machine. Your ideas, source code, databases, and generated applications stay under your control on your own device (and with the AI providers or hosting you choose). We do not receive, inspect, or store your projects or their contents.
7. Cookies
- Essential cookies: required for basic website security and function.
- Analytics cookies (optional): anonymised usage patterns for the website.
We do not use advertising cookies or cross-site tracking.
8. Data Retention
- License & purchase records: retained for the life of the license and as required for legal/tax purposes (typically up to 7 years).
- Support messages: up to 3 years.
- Website analytics: aggregated and anonymised.
9. Your Rights (GDPR)
Under the GDPR and other applicable laws you have the right to:
- Access a copy of your personal data.
- Rectification of inaccurate data.
- Erasure ("right to be forgotten"), subject to legal retention obligations.
- Portability — export your data in a machine-readable format.
- Object to or restrict certain processing.
To exercise any right, email [email protected]. We respond within 30 days.
10. Children's Privacy
Daedalus is a professional software tool intended for users aged 16 and above. We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy. Material changes will be communicated by updating the "Last updated" date above. Continued use after changes constitutes acceptance.
12. Contact
Email: [email protected]
Response time: Within 30 days for privacy requests.