Privacy Policy

1. Who we are

Desksquattaz ("we", "us", "our") is a Windows desktop application operated by:

Willy Lu Wang
Hermann-Müller-Würtz-Straße 36, 76189 Karlsruhe, Germany
hello@desksquattaz.com

We are the data controller for personal data processed through the Desksquattaz app and website (desksquattaz.com).

2. What we collect

• Account data (website): email address, authentication provider (Google, Apple), account creation date, subscription status.
• On-device app data: chat session buffer, memory traces, cat runtime state, icon-role assignments, and optional local API keys you enter. Stored in local app data on your Windows machine. We do not operate a server-side user memory database in v1.
• In transit (ephemeral): when chat uses AI, prompts/responses are sent to AI processors (e.g. OpenAI for routing, Google Gemini for generation) to produce replies. App-watch comments may include an app/process name — not window titles or document contents.
• Subscription / payment data: subscription status and billing period dates. Card details are held by Dodo Payments (merchant of record), not by us.

3. How we use your data

We process data under GDPR Article 6 on these bases:

• Account and subscription data — performance of contract (Art. 6(1)(b)): to provide the service and manage billing.
• Chat / AI processing — performance of contract (Art. 6(1)(b)): to generate responses when you use chat.
• On-device memory and desktop features — performance of contract / legitimate interests (Art. 6(1)(b)/(f)): core product behaviour.
• Legal compliance — legal obligation (Art. 6(1)(c)) where required.

We never sell your data. We do not use your chats to train our own AI models.

4. Desktop access

With your consent during onboarding, the app may read and reposition desktop icons you designate (e.g. litterbox / food bowl). It may also sample which application is in the foreground (process / friendly name only) for local humour patterns. Assignments and patterns stay on your device.

5. Third-party services and transfers

• Supabase — authentication and subscription profile storage (US-based). Transfers covered by Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework.
• Dodo Payments — web subscription billing. We do not store card details.
• OpenAI / Google — AI model providers for chat when enabled. Messages are transmitted to generate responses. Confirm DPAs with your provider accounts. Transfers covered by SCCs under our agreements where applicable.
• Apple / Google — identity providers if you sign in with Apple or Google.

Desksquattaz is distributed as a direct Windows download. We do not sell subscriptions through the Microsoft Store, Apple App Store, or Google Play.

6. Data retention

On-device data remains until you clear app data or uninstall. Website account and subscription records are retained while your account exists and as needed for billing / legal obligations. You may request account deletion by emailing hello@desksquattaz.com; we aim to process within 30 days.

7. Your rights

You may request access, deletion, correction, restriction, portability, or objection where applicable. Contact hello@desksquattaz.com. We respond within 30 days.

8. Data breach notification

Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg) within 72 hours where required, and affected users without undue delay where the risk is high.

9. Supervisory authority

You may lodge a complaint with your local supervisory authority. For us in Germany: LfDI Baden-Württemberg, Königstraße 10a, 70173 Stuttgart — baden-wuerttemberg.datenschutz.de.

10. Children

Desksquattaz is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. Contact us if you believe a minor has created an account.

11. AI transparency

Chat features use artificial intelligence. The in-app chat UI shows a persistent AI indicator (EU AI Act Art. 50).

12. Changes

We may update this policy. Significant changes will be noted on this page or by email. Continued use after the update constitutes acceptance.

13. Contact

Email: hello@desksquattaz.com
Post: Willy Lu Wang, Hermann-Müller-Würtz-Straße 36, 76189 Karlsruhe, Germany