Privacy policy
Last updated: September 13, 2026. This is a translation; the French version prevails.
In short: the website sets no cookies and does not measure traffic. The app works on the folders of your Mac and sends nothing to BAAIR. The only personal data we receive is your purchase and your support emails.
Data controller
BAAIR, SASU with a share capital of €5,000, 19 avenue de la Forge, 44500 La Baule-Escoublac, France — SIREN 829 515 410. Contact: alexandre@baair.solutions.
The hipokamp.baair.app website
No cookies, no analytics, no advertising trackers, no forms. The website loads no external resources (no fonts, scripts or videos): viewing a page sends your IP address to no one but the host.
The host, Hostinger International Ltd (Cyprus, European Union), keeps technical logs: IP address, date, requested page or file, browser. They are used for security and operation, based on our legitimate interest (Article 6(1)(f) GDPR), and are not used to measure traffic. App downloads and update checks appear in the same logs.
The Hipokamp app
Your projects, notes, databases and posts stay in folders on your Mac; your secrets stay in the macOS Keychain. BAAIR has no access to them, and the app sends us no usage statistics and no crash reports.
The app goes online in the following cases:
| When | To whom | What is sent |
|---|---|---|
| License activation, validation (at most once a day) and deactivation | Lemon Squeezy (license API) | The license key, the computer name as set in macOS, and the activation ID. No project content. |
| Update checks | hipokamp.baair.app | A standard request: your IP address and a header with the app's name and version. No system profile is sent. |
| Services you connect yourself | GitHub, Notion, the Anthropic API, your publishing tool (webhook), your calendars | Whatever you ask to send, with your own keys. These exchanges go directly between your Mac and the service, not through BAAIR, under that service's terms. |
When you use Claude Desktop or Claude Code, Claude reads from your projects what its tools allow (never a secret's value, unless you explicitly ask via get_api_key). What Claude reads is processed by Anthropic under your agreement with Anthropic, not by BAAIR.
Your purchase
Lemon Squeezy (Lemon Squeezy LLC, United States) sells licenses as reseller: it collects the payment, handles VAT and issues the invoice. For these operations it acts as an independent controller under its own privacy policy. Your card details never reach BAAIR.
Lemon Squeezy passes us the order details: name, email address, country, product, amount, license key and activations. We use them to perform the contract (Article 6(1)(b) GDPR): deliver and manage your license, provide support, process a refund. We keep them for the life of the license, then five years (contractual limitation period). As Lemon Squeezy is based in the United States, this data may be transferred there, under the safeguards Lemon Squeezy puts in place (European Commission standard contractual clauses or the EU–US Data Privacy Framework).
We send no marketing emails and never share your data.
Support
If you write to alexandre@baair.solutions, we use your address and message to reply (legitimate interest, or contract performance if you are a customer). Conversations are kept for three years after the last message, then deleted. Never send an API key or password by email.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. To exercise them, write to alexandre@baair.solutions; we reply within one month. Your project data is already in your hands: it is files on your disk that you can copy or delete at any time.
You may also lodge a complaint with the French data protection authority, the CNIL, or the authority of your country.
Changes
If this policy changes, the date at the top changes too. Any change to what the app sends will be mentioned in the release notes.