Privacy policy
JP the Cat is built around a simple privacy boundary: app usage math happens on your Mac, while the website, downloads, updates, licensing, checkout, newsletter, and support use the limited services described here.
Last updated July 7, 2026. For license rules, read the terms of service.
Skip to privacy sectionsJP the Cat reads local session logs and usage files written by supported AI coding tools. The app uses that local data to calculate usage, cost, and official or estimated plan-window percentages on your Mac. To label your Claude plan tier, the app may show a one-time macOS Keychain prompt to read only the subscription tier from Claude Code's stored credentials; it never reads, stores, or transmits the underlying access or refresh tokens.
There is no JP the Cat cloud sync account for usage data. Prompts, code, transcripts, token history, computed costs, local usage database contents, and provider credentials are not uploaded to JP.
This website uses Vercel Web Analytics and Speed Insights for aggregate page traffic, CTA click events, and performance telemetry. Website telemetry does not include prompts, code, transcripts, token history, computed costs, provider credentials, or local usage database contents from the Mac app.
The public DMG, update feed, and release files may be served through Vercel and the Supabase-backed api.jpthecat.com release host. Successful non-bot downloads may send an owner notification through Resend or another email provider with the release filename, download source, referrer, user agent, timestamp, and coarse Vercel edge location context (city, region, country, postal code, and timezone; never latitude/longitude). Download redirects are also stored in an INSERT-only Supabase table for aggregate growth review, including your IP address (kept to detect automated and same-network burst downloads), approximate geo fields, network/ASN and hosting/anonymizer signals, and bot rows so bot pressure can be measured. For network intelligence, JP may send the download IP address to ipapi.is to identify the network operator and whether the address appears to be hosting, VPN, proxy, or other anonymous infrastructure. The download newsletter prompt uses double opt-in: it emails you a one-time confirmation link, and only after you click it do we store your newsletter email address in the JP the Cat Resend segment so we can send broadcast product updates; unsubscribe controls are handled by Resend broadcasts. Confirmed newsletter signups may send an owner/admin notice with the email address and confirmation mode. To prevent abuse, newsletter signups and download requests are rate-limited using a short-lived record of your IP address. Sparkle update checks may request the update feed and release files. JP's trial, current-price, checkout, activation, validation, and deactivation endpoints run on Supabase Edge Functions and Postgres at api.jpthecat.com. The free 7-day trial is server-anchored: on first launch, and re-anchored about once a week while the trial is active — for every user, before any purchase — the app sends a salted, one-way device hash and app version, and the server records timestamps and returns a signed timestamp. This lets JP keep the trial honest against a local clock that has drifted, so reinstalling or clearing local state cannot reset the trial and a clock glitch cannot wrongly expire it. First trial starts may send an owner/admin notice with app version, trial dates, and a shortened tail of the salted device hash. License activation sends the license key, salted device hash, app version, and optional device label (the name you have given this Mac). License validation and deactivation send the license key plus salted device hash. The server records activation, validation, and deactivation timestamps. Successful activations and seat deactivations may send owner/admin notices with customer email if known, app version, device label, shortened salted device-hash tail, license id tail, license source, and active/allowed seat counts. No owner/admin lifecycle notice includes the raw license key or full device hash. No raw hardware identifiers (serial number or platform UUID) ever leave your Mac. License checks do not include prompts, code, transcripts, token history, computed costs, provider credentials, or local usage database contents.
The Buy button asks api.jpthecat.com to start a Stripe-hosted Checkout Session. The browser sends the requested device count and a random checkout-attempt UUID; returning-buyer add-on checkout also sends the existing license key so the server can verify the discounted rate. The price is computed server-side. Stripe Tax is wired for Checkout but currently disabled in production; JP is not calculating or collecting tax in Checkout until exact Stripe registrations or threshold obligations justify enabling it. Stripe processes payment details and may collect your checkout email, invoices, receipts, and refund information. JP does not receive your card number. Stripe webhooks may create a JP license record with the Stripe session, customer, and payment identifiers; buyer email if Stripe provides it; max device count; license status; a one-way hash of the license key; and license-email delivery status. Purchase, repeat-purchase, and refund events may send owner/admin notices with checkout mode, live/test mode, license source, key-email status, and shortened Stripe/license identifiers. Support records may include the email address you use to contact us, license status, purchase status, and the messages you send.
JP the Cat is not affiliated with Anthropic, OpenAI, Google, GitHub, Cursor, or other listed AI providers. Their products, APIs, invoices, websites, and privacy policies are separate from JP.
You can stop using the app, delete local app data, remove the app, unsubscribe from newsletter broadcasts, or contact us about license and purchase records. Mac app product analytics are off by default. If opt-in diagnostics or crash reporting ship later, the control will be clearly labeled and will not include prompts, code, transcripts, or token history.
JP the Cat is a developer tool and is not directed to children under 13. We do not knowingly collect children's personal information.
These services may touch the website, release path, checkout, updates, newsletter, license flow, or support. They are not a path for app usage history.
Website hosting, Web Analytics, Speed Insights, security, and operations.
Release downloads, update hosting, download-growth rows, and the trial, checkout, current-price, and license API on api.jpthecat.com, including server-anchored trial and activation rows keyed to salted device hashes.
The macOS update framework that checks the public update feed and downloads app updates.
Hosted checkout, payment details, tax wiring if enabled later, receipts, refunds, and payment webhooks.
Newsletter signup, broadcast product updates, owner download/billing/lifecycle notifications, license email, and support email if transactional mail is enabled.
Download-network intelligence: ASN/network operator plus hosting, VPN, proxy, or anonymizer signals for owner review.
Questions about privacy? Email support@jpthecat.com.
