Privacy Policy

1. Overview

MessageHarvest is a macOS desktop application that extracts iMessage conversations from local iPhone backup data. The app can read existing backups already stored on your Mac and, on supported macOS systems, can also create a temporary local backup from a connected iPhone for import. The app is designed around a single principle: your data stays on your machine.

All message processing, searching, media extraction, and file exports happen entirely offline. There is no cloud component, no sync service, and no server that ever receives your message content.

This policy explains what data (if any) we handle, what stays on your Mac, and the limited circumstances in which the app connects to the internet.

Data controller: Maciej Klunder (Klunder Labs), aleja Jana Pawła II 27, 00-867 Warsaw, Poland, NIP 9512040384. Contact: support@messageharvest.com

2. Information We Do Not Collect

MessageHarvest does not collect, transmit, upload, or otherwise send any of the following data to us or to any third party:

• Message content (text, reactions, replies, threads)
• Conversation metadata (participants, timestamps, read receipts)
• Attachments (photos, videos, audio, documents, links)
• Search queries or search results
• Export files you generate
• Contact names, phone numbers, or email addresses from your conversations
• iPhone backup contents or metadata

Additionally, the app does not access your Contacts, Photos, Location, Microphone, Camera, or any other macOS system data beyond the backup data you choose to process and the limited system access needed to create a temporary local backup from a connected iPhone.

3. Information the App Stores Locally

MessageHarvest stores data in two locations on your Mac, both fully under your control.

Application support folder

~/Library/Application Support/com.messageharvest.desktop

This folder holds the app's internal state:

• Encrypted import database — the structured index of conversations extracted from your iPhone backup, from which exports are generated
• Cached license state — a local record of your license activation status
• Local preferences — your app settings and configuration
• Application logs — diagnostic logs stored locally for troubleshooting

Workspace folder

By default this is ~/Documents/MessageHarvest/Exports. You can change this location in the app's settings. The workspace contains:

• Generated exports — PDF, HTML, or other export files you create from the imported database
• Retained media — images, PDFs, and optionally video and audio files associated with your messages
• Export job history — a log of exports you have produced

None of this data is transmitted off your computer.

4. When the App Connects to the Internet

MessageHarvest connects to the internet only in the situations described below, none of which involve your message data:

4a. License Validation

The app contacts our licensing service to validate your license. This happens when the app starts, when you activate a license, and at other points during normal use to confirm your license is still valid. Each request includes:

• Your license key
• A device identifier (used to manage activation limits)

No message content, conversation data, filenames, or personal information beyond the above is included in this request.

4b. Update Check

MessageHarvest may contact our update server when the app launches and when you click Check for Updates to see whether a newer version is available. This request contains no message data and no conversation content.

4c. Checkout

When you purchase a license, the app opens your default web browser to a checkout page hosted by our payment processor. The information you provide during checkout (including your email address and payment details) is handled through that checkout flow and is subject to the payment processor's privacy policy. MessageHarvest does not store your card or payment details, but we do store the purchaser email address associated with the license so we can deliver the license key, look up the purchase later, and assist with support.

4d. Support and Help Links

Clicking a support or documentation link in the app opens the URL in your default browser. No data is sent automatically by the app when this happens; it is a standard browser navigation.

5. Website Analytics

The MessageHarvest website does not currently use any visitor analytics or tracking service.

The desktop application also does not contain analytics, telemetry, or crash reporting code. No website usage data is linked to your use of the app or to your message data.

6. Third-Party Services

MessageHarvest integrates with the following third-party services:

• Payment processor (Stripe) — Handles checkout and payment for license purchases. Your card and payment details are provided through Stripe's checkout flow and are governed by Stripe's privacy policy. We do not store your payment details.
• Licensing service — Operated by us. Validates license keys and manages activation. Our licensing service stores your license key, the device identifiers of activated devices, and the customer email address associated with the purchase so that we can deliver the license, look up the purchase later, and assist with support. It receives only your license key and a device identifier from the app at runtime; no message data is ever sent.

No third-party service ever receives your message content, conversation data, or attachments.

7. Data Retention and Deletion

Because all app data lives on your Mac, you have full control over it at all times.

Delete all app data

To completely remove all MessageHarvest data from your Mac, delete the application support folder:

~/Library/Application Support/com.messageharvest.desktop

You may also want to delete your workspace folder if you chose a custom location, and remove the app itself from your Applications folder.

8. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process the limited personal data described in this policy on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — We process your email address, license key, and device identifiers because it is necessary to deliver, activate, and manage your license. Without this data we cannot fulfil the purchase.

We do not use your data for profiling, automated decision-making, or direct marketing.

9. Your Rights

If you are located in the European Economic Area, you have the following rights regarding the personal data we hold about you:

• Access — You can request a copy of the personal data we store about you (Art. 15).
• Rectification — You can ask us to correct inaccurate data (Art. 16).
• Erasure — You can ask us to delete your data from our licensing service (Art. 17). Note that deleting your licensing data will deactivate your license.
• Restriction — You can ask us to restrict processing in certain circumstances (Art. 18).
• Data portability — You can request your data in a structured, machine-readable format (Art. 20).
• Objection — You can object to processing based on legitimate interest (Art. 21).

To exercise any of these rights, email us at support@messageharvest.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. For Poland, this is the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

10. Cookies

The MessageHarvest desktop application does not use cookies.

The MessageHarvest website does not currently use analytics, advertising, or profiling cookies.

Your browser may still store standard technical data such as cached files or connection state as part of normal web operation. You can clear that data through your browser settings at any time.

11. International Data Transfers

Our licensing service is hosted within the European Union. Your license key, device identifiers, and email address are stored on servers located in the EU.

Stripe may process payment data outside the EEA in accordance with Stripe's privacy policy and applicable data transfer mechanisms.

12. Children's Privacy

MessageHarvest is not directed at children under the age of 13. We do not knowingly collect personal information from children. Since the app processes data entirely offline and does not collect user data, there is no mechanism through which children's data would be gathered.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app or applicable regulations. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

If we make material changes that affect how your data is handled, we will provide notice through the app or on our website before the changes take effect.

14. Contact

If you have questions about this Privacy Policy or about how MessageHarvest handles data, you can reach us at:

support@messageharvest.com