Privacy Policy

The short version: Brim runs on your Mac and keeps your data there. No account, no cookies, no third-party trackers. The app only goes online to register your free trial and check your license (with an anonymous device identifier), to look for updates (you can turn this off) and to fetch Spotify artwork. When you buy Pro, we keep your email and license so we can deliver and restore it.

1. Who we are

The data controller is RMJD Group SRL, a private limited company (SRL) under Belgian law, enterprise number 1042.172.453 (VAT BE 1042.172.453). It publishes the Brim app for macOS and this website. You can reach us at support@brimisland.com. More in our legal notice.

2. Data that stays on your Mac

Brim’s features work locally. The following is processed on your Mac only and is never sent to us or anyone else:

• What’s playing (title, artist, artwork) and your playback controls.
• Your calendar events, if you allow Calendar access.
• Your clipboard history, stored on your Mac. Passwords and secrets are never saved.
• Files you drop on the island for AirDrop or the Shelf.
• Download progress, battery status and connected headphones and speakers (such as their name and battery level).
• Your battery’s readings (such as its health and your recent usage), used for the battery-life estimate on the Lock Screen. The estimate is computed entirely on your Mac.
• Your settings and preferences.

The Lock Screen features send nothing anywhere, and while your Mac is locked the island never shows your clipboard, files, calendar or notifications. You can revoke any macOS permission at any time in System Settings › Privacy & Security.

3. When the app goes online

• Free trial. On first launch, Brim sends our license server (on our Hostinger hosting) an anonymous device identifier: a salted SHA-256 hash of your Mac’s hardware UUID. It can’t be reversed and contains no name and no email. For that identifier, the server records the date your 7-day trial started, so the trial can’t be restarted by deleting files, together with the app version, the macOS version, the Mac model (such as “MacBookAir10,1”), your language and country, which tell us which Macs Brim must support.
• License. When you activate Pro, Brim sends your license key, the same anonymous device identifier, your Mac’s name, the app and macOS versions and the Mac model to our license server. About once a week, Brim sends back the signed license it received (no key), with the same versions, to confirm it is still valid.
• Buying from the app. When you start a purchase from Brim, the app sends the checkout reference, the anonymous device identifier and your Mac’s name (for example “Anna’s MacBook Air”), so that Pro activates on that Mac automatically once you’ve paid.
• Update check. Once a day, Brim checks whether a new version is available. The request carries nothing personal beyond what any internet request does, such as your IP address. You can turn it off in Brim’s Settings.
• Album artwork. When music plays from Spotify, Brim may download the artwork from Spotify’s servers, which can see your IP address; Spotify’s privacy policy applies.

Brim contains no analytics, advertising or tracking code, and doesn’t need an account. Our server keeps a technical log of these requests (the request, its result, the app version, the anonymous identifier and your IP address with its last part removed) for 90 days, to fix problems and prevent abuse.

4. Purchases

Payments are processed by Stripe, which collects your payment details, email address, name and country. We never see your full card details. Stripe tells us what we need to deliver and support your license: your name, email, country, the amount and the order reference. Stripe also processes some data as an independent controller, for example to prevent fraud and meet its legal obligations; its own privacy policy applies to that.

Our license server keeps your license key, the email address, name, country and postal code entered at checkout, the order references (Stripe checkout and payment), the amount, discount and currency, the payment method type, your language, the license status, and the Macs it’s activated on (their name, model, macOS and app versions, anonymous identifier, country, IP address with its last part removed, and the dates of activation and of the last check). It also logs the emails it sends you (address, subject, date). License emails are sent from our email service (Hostinger, or Resend). When you ask for a lost key, a hashed form of your email address is kept for up to 2 days to limit repeated requests.

5. This website

This website uses no cookies and no third-party trackers. It remembers your language choice in your browser’s local storage; after a purchase, the confirmation page keeps your order reference in that browser tab’s session storage so you can reload it. The checkout page is hosted by Stripe, whose own policy applies there.

When you download Brim, we count the download: its date, your country, browser, system and language, the page and the website you came from (and campaign tags such as utm_source), and your IP address with its last part removed. The country is looked up from your IP address on our own server (DB-IP database): it is never sent to anyone. A hash that changes every day lets us count unique visitors without recognising anyone over time. The site you came from is kept in that browser tab’s session storage until the download. Our hosting provider, Hostinger, may keep standard server logs (such as IP addresses and pages requested) for a limited time, for security and reliability. The administration area uses a sign-in cookie, for our team only.

6. Support

When you email us, we use your address and message only to reply and help you, and keep the conversation only as long as needed.

7. Legal bases

Under the GDPR, we process personal data to perform our contract with you (selling, delivering and licensing Brim, and answering you: article 6(1)(b)), to meet our legal obligations (such as keeping accounting records: article 6(1)(c)), and on our legitimate interest in keeping Brim and this website secure and working and in preventing abuse of licenses and of the free trial (article 6(1)(f)).

8. Processors and transfers

We use Stripe (payments), Hostinger (hosting of this website and of our license server, email) and Resend (license emails, when used). They process data on our behalf under data processing agreements. Some of them are based in, or use servers in, the United States. Where data leaves the European Economic Area, they rely on appropriate safeguards: the EU–U.S. Data Privacy Framework where the provider is certified, or the European Commission’s Standard Contractual Clauses.

9. Retention

Order and license records are kept while your license exists and for as long as Belgian accounting and tax laws require. Trial records (an anonymous identifier, a start date and the technical details above) are kept for as long as they’re needed to prevent trial abuse, and at most 2 years. Download statistics and request logs are kept at most 90 days in detail; beyond that, only totals. Support emails are deleted once they’re no longer needed. Data on your Mac stays under your control: uninstalling Brim and deleting its data removes it.

10. Security

Everything between the app, this website and our servers is encrypted in transit (HTTPS). Licenses are signed, so the app can check them offline without sending anything else about your Mac, and the administration area is protected by strong passwords, two-factor authentication and an audit log of every change.

11. Your rights

You have the right to access, correct and erase your personal data, to restrict or object to its processing, and to data portability. To exercise them, write to support@brimisland.com; we answer within one month.

You can also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, Belgium, www.autoriteprotectiondonnees.be, or with the data protection authority of the country where you live or work.

12. Children

Brim is not directed at children under 13, and we don’t knowingly collect their data.

13. Changes

If we change this policy, we’ll update this page and the date at the top.