Privacy Policy

1. Introduction

Commit+ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use Commit+ ("the Application"), a native Git client for macOS.

We believe in transparency and want you to understand exactly what data we do and do not collect. Our guiding principle is simple: your data belongs to you, and we respect that completely.

2. Information We Collect

Guest use does not require a Commit+ account. If you choose to create or sign in to a Commit+ account, we process only the information needed to provide account, subscription, sync, and device-access services.

• Firebase account information, such as your user ID, email address, display name, and sign-in methods.
• Your server-owned Free or Pro entitlement and billing status. Payment details are handled by our billing provider and are not stored in the Application.
• Settings, provider-account metadata, repository bookmarks, and Custom Action definitions that you explicitly choose to sync. A synced Custom Action can include its script source, arguments, and a local executable or script path. Provider credentials and access tokens remain in this Mac's Keychain.
• A random UUID generated by Commit+ for this app installation, plus the generic Mac model family, macOS version, Commit+ version, device status, and created, last-seen, or revoked timestamps.

The random device ID is used only to enforce signed-in Mac limits and protect account sync access. It is stored in ThisDeviceOnly Keychain storage. We do not derive it from a serial number, MAC address, Apple account, IP address, or hardware fingerprint.

3. Repository Data

Repository contents and Git data—including your code, commit history, branches, and working-tree state—remain on your local machine. Commit+ accesses them only to display them within the Application and to perform Git operations you initiate. We do not upload, sync, or back up repository contents, local paths, Git history, remotes, credentials, or Git activity as part of the Commit+ account or device registry. A repository bookmark may contain the remote identity needed to reopen a repository when you explicitly enable that cloud feature, but never its working tree or history.

Custom Action output, selected file paths, selected commit hashes, and repository contents are not synced. Because executable paths are machine-specific, Commit+ requires each Mac to review and trust a synced action before it can run.

4. Usage Data & Analytics

Commit+ uses TelemetryDeck only to count daily active users (DAU) and monthly active users (MAU). The Application sends an App.active event at most once per UTC day when it is active, without custom properties. We do not send your account details, repository contents, Git activity, or feature usage to TelemetryDeck. The SDK automatically processes an anonymized app-installation identifier, event time, and basic app and device metadata. We do not collect or store any other user information for this activity measurement.

TelemetryDeck processes these events under its privacy policy. Service providers may also process standard operational request data, such as an IP address, to secure and operate their infrastructure; Commit+ does not add that data to your device registry. The website may use a country derived from the request, together with browser language or time zone, only to display regional pricing; this pricing-market selection is not stored in your account or device registry.

5. Third-Party Services

Commit+ uses Firebase Authentication, Cloud Functions, and Firestore for optional accounts, entitlement, device access, and sync. Polar provides subscription checkout and billing. Their processing is governed by their own terms and privacy policies.

Commit+ can also integrate with third-party Git hosting platforms, such as GitHub and GitLab, when you explicitly connect an account or perform a remote operation. Their processing is governed by their policies. Git/provider credentials stay in Keychain or your configured Git credential manager or SSH agent; Commit+ cloud sync stores only non-secret provider metadata when enabled.

6. Update Checks

The Application may periodically check for updates by making a request to a public GitHub Releases endpoint. This request contains no identifying information beyond what is standard in any HTTP request (e.g., your IP address may be visible to GitHub's servers). You can disable automatic update checks in the Application preferences at any time.

7. Security, Retention, and Your Controls

Commit+ restricts account and synced data to authenticated sessions and uses a server-owned active-device registry for official cloud access. No system is completely secure, so you should also protect your Mac, account, Git hosting accounts, and recovery methods.

You can sign out to release this Mac, revoke or replace another Mac, disable settings sync, and delete your Commit+ account. Revoked-device records may be retained with minimal status and timestamps while the account exists so that access decisions and account security remain consistent. Account deletion removes account-owned device, settings, bookmark, Custom Action, entitlement, and authentication data, subject to limited records a service provider must retain for legal, fraud-prevention, or billing obligations.

8. Children's Privacy

Commit+ is not directed at children under the age of 13. We do not knowingly collect any information from children.

9. Changes to This Policy

If we make material changes to this Privacy Policy, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us at contact@commitplus.app.