Privacy Policy

CodeNocturne is built around a simple principle: your code stays on your machine, and we collect only what is necessary to provide the Service. This Privacy Policy explains what we collect, why, and what choices you have. It applies to the CodeNocturne macOS application (the “App”) and the website at codenocturne.app.

1. What We Collect

1.1 Account information

When you sign in with Sign in with Apple, Apple provides us with a stable user identifier and an email address (or a private Apple relay address, at your choice). We do not receive or store your Apple ID password. This identifier is used solely to recognize your account and to sync settings across your devices if you opt in to cloud sync.

1.2 Agent prompts and approved tool calls

When you run a coding task, the prompts you type and the contents the agent reads after you approve a tool call are sent to Anthropic (the Claude Agent SDK provider) using your own Anthropic credentials. CodeNocturne does not resell or relay AI inference. We do not upload the contents of files you have not explicitly included in a task or approved the agent to read. We do not store the full body of those prompts on our servers; transient metadata (e.g. timestamps, model used, token counts) may be retained for debugging and abuse prevention.

1.3 Workspace metadata

The App computes local file fingerprints (hashes, sizes, paths) inside the workspace you point it at, so it can show you what the agent changed during a session. These fingerprints stay on your device. We do not upload the file contents themselves.

1.4 Music provider data

• Apple Music — playback, search, library, and radio actions use Apple’s native MusicKit. Those interactions go directly between your device and Apple. We do not see your Apple Music history.
• 网易云音乐 (NetEase Cloud Music) — when enabled, requests are proxied through a Cloudflare Worker we operate. The proxy forwards your request to NetEase and returns the response. We do not retain your NetEase listening history beyond short-lived operational logs.

1.5 Payment and subscription data

Pro subscriptions are sold through two channels with different payment processors. In both cases, we do not receive your full card number or banking credentials; we only receive the order metadata necessary to associate a successful subscription with your account.

Website checkout — Paddle. If you subscribe from codenocturne.app, Paddle.com Market Limited (“Paddle”) acts as our merchant of record. Paddle collects and processes the data required to complete the transaction — including your name, email address, billing address, country, payment method details, and VAT/tax identifiers where applicable. Paddle is the data controller for that information; their privacy policy is at paddle.com/legal/privacy. From Paddle we receive: order ID, plan identifier, billing email, subscription status, renewal date, and country.

Mac App Store — Apple. If you subscribe through the Mac App Store version of the App, Apple is the seller of record. Apple processes the payment under your Apple ID, collects applicable taxes, and is the data controller for the billing relationship. From Apple we receive only an opaque transaction identifier, the product ID, the subscription period, and renewal/expiry signals — we do not receive your name, billing address, or payment method details. Apple’s privacy practices are described at apple.com/legal/privacy.

1.6 Location and weather context

If you enable the optional ambient weather feature, the App may request your macOS-level location to fetch local weather context from Apple’s WeatherKit and to seed time-of-day cues. Your coordinates are used on-device only and are not transmitted to our servers. You can disable this feature at any time in the App and in macOS System Settings.

1.7 Diagnostics

If you opt in, the App may send anonymized crash reports and performance traces to help us fix bugs. These reports include technical context (OS version, App version, stack traces) and do not include your source code, prompts, music history, location, or payment data. You can opt out at any time in the App’s settings.

1.8 Website analytics

The marketing website at codenocturne.app is a static site hosted on Cloudflare Pages. We do not run third-party advertising trackers. Cloudflare may collect minimal request-level information (such as IP address and user-agent) for security and abuse-prevention purposes; see Cloudflare’s privacy policy for details.

2. How We Use Your Information

We use the information described above to:

• Provide, maintain, and improve the Service;
• Authenticate you and sync settings (when you opt in to cloud sync);
• Generate agent responses through the Claude Agent SDK, on your explicit request and using your Anthropic credentials;
• Provision and renew Pro subscriptions, send billing receipts, process refunds, and respond to subscription-related inquiries;
• Diagnose crashes and performance issues;
• Detect, investigate, and prevent abuse, fraud, and security incidents;
• Comply with legal obligations.

3. What We Do Not Do

• We do not sell your personal data.
• We do not upload your source files in the background. Files are only sent to Anthropic after you explicitly include them or approve a tool call.
• We do not share your data with third-party advertisers.
• We do not receive or store your full payment card number — that information stays with Paddle.

4. Third-Party Processors

We rely on a small set of vendors to operate the Service. Each receives only the data necessary for its function:

• Apple — Sign in with Apple, Apple Music (native MusicKit playback), WeatherKit (optional ambient weather), and (for Mac App Store subscribers) seller of record and controller for the billing data described in §1.5.
• Anthropic — Claude Agent SDK for coding agent inference, accessed with your own credentials.
• Paddle — payment processing and merchant of record for website subscriptions; controller for the billing data described in §1.5.
• Cloudflare — website hosting (Pages), update delivery (R2), and the NetEase request proxy (Workers).
• Neon — managed Postgres for opt-in cloud sync of settings and session metadata.

We do not transfer your personal data to any vendor not listed here without updating this policy first.

5. Data Retention

Account records are kept for as long as your account exists. Subscription and billing records — order IDs and renewal dates provided to us by Paddle (for website purchases) or by Apple through App Store Server Notifications (for App Store purchases) — are retained for as long as required to support your subscription and to satisfy applicable tax and accounting obligations. Operational logs (proxy requests, diagnostic events) are retained for a short window (typically 30 days) and then deleted or anonymized. You can request deletion of your account and associated data at any time by contacting support@codenocturne.app.

6. Your Choices

• Disable cloud sync. Cloud sync is off by default and can be toggled in Settings. With cloud sync off, your account ID is the only data we retain on our infrastructure.
• Turn off diagnostics. Crash and performance reporting can be disabled in Settings.
• Disable a music provider. You can disable either Apple Music or NetEase integration; the other will continue to work independently.
• Disable location & weather. The ambient weather feature is opt-in and can be turned off in the App or in macOS System Settings.
• Cancel or refund a subscription. For website subscriptions, manage through the Paddle link in your receipt email. For App Store subscriptions, manage through System Settings → [Apple ID] → Subscriptions. See our Refund Policy for refund paths on each channel.
• Delete your account. Email support@codenocturne.app and we will delete your account and associated cloud data within 30 days. Records that Paddle or Apple are required to retain for tax or anti-fraud purposes remain subject to their respective retention policies.

7. Security

We use industry-standard encryption (TLS in transit, encryption at rest with our hosting providers) and apply least-privilege access controls to operational data. Payment data is handled by Paddle (PCI-DSS compliant) for website purchases and by Apple for App Store purchases; we never see your full payment credentials on either channel. No system is perfectly secure; if you discover a vulnerability, please report it to support@codenocturne.app before disclosing it publicly.

8. Children

The Service is not directed to children under 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International Users

Depending on the region you are in, additional rights may apply (for example, under the GDPR, CCPA, or PIPL). To exercise those rights, email support@codenocturne.app.

For billing data held in connection with a transaction:

• Website / Paddle purchases — contact Paddle’s data protection team via paddle.com/legal/privacy.
• Mac App Store purchases — contact Apple’s privacy team via apple.com/legal/privacy/contact.

[REVIEW: confirm region-specific addenda and the data controller entity before public launch.]

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. For material changes, we will make reasonable efforts to notify you in the App or via the website.

11. Contact

Questions about this Privacy Policy or your data? Reach us at support@codenocturne.app.

Related documents: Terms of Use · Refund Policy.