Privacy Policy

01Scope and contact

This policy covers the Koma app, its official website, downloads, licensing service and support provided by the independent developer Tit1e. We are responsible for the personal information we receive for those purposes. Contact [email protected] with privacy questions or requests. External tools and payment services also have their own privacy policies.

02Recordings stay in local projects

Screen or connected-device recordings, microphone and system or device audio, camera video, cursor data, captions, edit timelines, thumbnails and imported background images are processed and stored locally. Exported videos are saved to the location you choose. The app does not automatically upload these recordings or project files to our servers.

Screen and audio capture may include personal or confidential information visible or audible in the selected source. Choose the source carefully and review recordings before sharing. If you place projects in a synchronized folder, send files to support or give another tool access, that sharing is separate from Koma’s local recording workflow.

03System permissions

Koma requests permissions according to the recording source and features you select. You can review or revoke them in macOS System Settings; denying a permission can prevent its associated feature from working.

• Screen recording permits capture of the selected display, window or area and supported system audio.
• Microphone and camera access provide the audio and picture-in-picture tracks you enable.
• Input Monitoring supports cursor movement and click data for cursor effects and automatic camera edits. Koma does not use this permission to log typed text.
• File access is used for local projects, media you select and exported files.

04Licensing and update requests

The app contacts api.koma.evolly.one for trial status, available offers, activation, authorization renewal and deactivation. Public trial activation sends a randomly generated installation ID and app version. That trial flow does not require an email address and does not create a trial-user record in the licensing database.

Paid activation sends the license key, installation ID, device display name and app version. Renewal and deactivation use the installation ID and the corresponding authorization credential or token. The service stores license and activation records, installation allowances, app versions, relevant timestamps and administrative audit records to validate access, release device slots and prevent abuse.

The installation ID is randomly generated, not derived from hardware serial numbers, network adapters or an Apple ID. Device names can contain a person’s name, so they should not be treated as anonymous. Local authorization credentials are stored in the app’s sandbox and are not synchronized through iCloud by Koma.

Automatic or manual update checks request release information from koma.evolly.one. After you confirm an update, Koma opens the download in your browser; the app does not silently replace itself. These requests transmit ordinary network information, including an IP address, to the delivery infrastructure, but do not include your recording files.

05Purchase and refund information

Online checkout sends the selected plan and order identifier to Waffo. You enter your email at Waffo; we obtain it from the verified order to establish license ownership. We receive and verify payment and refund notifications, store order and delivery status, and use them to issue or revoke licenses. Payment details are entered at the provider’s checkout, not in the Koma app.

Manual license purchases require the email address used for ownership and recovery, the selected offer, paid amount, currency and WeChat Pay transaction ID. Order, license, refund and support records can also include purchase or refund times, status and the reason for a refund or administrative action.

The purchase email is stored encrypted, with a separate lookup digest and a masked display value. It is used for license ownership, purchase-related contact and recovery, not an automatic marketing subscription. Transaction IDs support payment verification, reconciliation and duplicate-order prevention; they are not published in public logs.

WeChat handles payment and the purchase conversation under its own policies. We do not receive or store payment passwords or bank-card details through Koma. A refund does not automatically erase the records needed to document the transaction.

06Support and diagnostic information

When you contact us, we receive your email or messaging identity, the message and any attachments you choose to send. Koma’s bug-feedback command opens your mail app with diagnostic information prepared for review and sending. It is not a background reporting service.

The prepared report contains app and macOS versions, processor architecture, app and entitlement state, permission status, and technical capture metrics when available, such as frame and dropped-frame counts. It excludes project names, file paths, license keys and device identifiers. Review the message and attachments before sending them; screenshots or files you add yourself may contain information beyond that report.

07External AI and transcription tools

Koma’s AI-assisted editing workflow uses external agents and tools that you choose. Koma does not provide a built-in cloud model service that automatically receives all recordings. An agent you authorize may read project metadata, captions, frames or audio and may send them to its own service provider, depending on its configuration.

Check those tools’ permissions, network behavior and privacy policies before use. Do not assume that a local Koma project stays offline after you grant an external tool access. Sharing with those providers is governed by your choices and their own policies.

08Website, storage and network logs

The website serves static pages and assets, and the product and pricing pages request current trial or offer information from the licensing API. We do not include advertising trackers in the Koma app or website. The website stores a session-only preference in your browser when you dismiss the language suggestion; it is not an advertising identifier.

Hosting and network providers may process ordinary request information, such as IP address, user agent, requested URL, time and response status, to deliver pages and downloads, diagnose errors and protect the service. Infrastructure security features may also use cookies or similar mechanisms. Local recording does not mean that website visits and activation requests are invisible to these providers.

The license-collection panel uses a session-only claim token and order information in the original purchase tab when an online order exists; it does not save the license key in browser storage. You can explicitly copy the key to your clipboard or download a plain-text TXT file generated in your browser, without an additional server upload. Keep the file and clipboard contents private. An encrypted browser-delivery copy is available on our server for 24 hours. Queued email content is encrypted and cleared after provider acceptance, cancellation or the retry deadline (at most 23 hours); sending-status records remain for troubleshooting. Resend and your mailbox retain their copies under their own policies, so the 24-hour browser limit does not delete a delivered email. Save the key securely after collection. Losing the original tab or clearing its storage may require support to verify the order.

You can clear browser storage or restrict cookies in browser settings. Closing a browser session clears the session preference according to the browser’s behavior. Blocking network requests may prevent live offer information, downloads or licensing functions from working.

09Purposes and service providers

We use the information described here to provide the software and licensing service, fulfill purchases, answer support requests, maintain security, resolve disputes and meet legal obligations. Where applicable, processing relies on performing a contract, legitimate interests in operating and securing the service, legal obligations, or consent for an optional activity. You may withdraw consent where processing relies on it.

Cloudflare provides website and download delivery and the Workers/D1 infrastructure used by the licensing service. Resend delivers license emails and processes the recipient address, license key, message content and sending metadata for this purpose. Waffo provides online checkout and payment/refund notifications; WeChat provides manual payment and purchase communications. Email you send to the published Outlook address is handled by Microsoft’s email service and your own email provider. We share information with these providers as needed for those functions, and may disclose information when legally required or necessary to address fraud, security incidents or legal claims.

We do not sell your personal information or use recordings to train our own AI models. Providers may process information outside your country, subject to their service arrangements and applicable data-protection requirements. This policy does not claim that all data is stored in one country or that any unverified certification applies.

10Storage, retention and protection

Local projects remain on your device or at the location you select until you delete them or another local process removes them. Manage and back up those files yourself; we cannot recover a project that was never sent to us.

We retain license, order and related records for as long as needed to maintain your purchased rights, provide support, document transactions, resolve disputes and satisfy applicable retention duties. Network and diagnostic information is handled for service operation and security. Uninstalling the app or deactivating an installation does not automatically erase server-side purchase or audit records. Contact us to request deletion or an explanation of what must be retained.

Safeguards include HTTPS for service requests, encrypted purchase email storage, restricted administrative access and local authorization files with limited file permissions. No storage or transmission method is risk-free; keep your license key private and avoid sending unnecessary sensitive information.

11Your choices and rights

Depending on applicable law, you may request access to, correction or deletion of personal information we hold, a copy in a portable format, or restriction of or objection to certain processing. Contact the support address below. We may ask for information reasonably needed to verify that a request relates to your purchase; do not send identity documents unless specifically needed and requested.

We will respond within the time required by applicable law. Some information may need to be retained for legal duties, disputes or continued license administration; we will explain relevant limits. You may also complain to the competent data-protection authority where that right applies. Deleting necessary activation information can affect Pro access, but does not give us access to delete your local recordings.

12Children and policy changes

Koma is not directed at children. Where a minor may lawfully use it, a parent or guardian should supervise and provide any required consent. Contact us if you believe a child’s personal information was sent to us without the required authorization so we can assess the request and take appropriate action.

If data practices change, we will update this page and its revision date. Material changes will be communicated, and consent requested, where required by applicable law. This policy describes current practices and does not authorize new uses of your recordings simply because a future feature is added.