Privacy Policy

1. Who we are

KastDrive is a product of Vohux Inc., a federally incorporated Ontario company (Corporation #1001635083). Contact: privacy@kastdrive.com.

2. What we collect — and what we don't

We never collect

• Your remote server credentials (passwords, SSH keys, API keys). These are stored exclusively in your macOS Keychain and never transmitted to Vohux servers.
• The names, paths, or contents of files on your remote storage.
• Personal identifiers (name, email, IP address) without your explicit consent.

We collect only if you opt in (disabled by default)

• Crash reports: anonymised stack traces to help us fix bugs. No file paths or server addresses are included.
• Usage counts: which protocol types are used (SMB, WebDAV, SFTP, S3) and which features are activated. Counts only — never content.
• App version and macOS version: to prioritise compatibility work.

You can enable or disable telemetry at any time in KastDrive → Preferences → Privacy. Opt-in is presented on first launch and never toggled without your action.

Licence validation (Pro tier only)

When you activate a Pro licence, your licence key and a pseudonymous device fingerprint are sent to LemonSqueezy's licence validation API to confirm entitlement. No other personal data is transmitted. LemonSqueezy's privacy policy applies to that interaction.

3. How data is stored

All connection profiles, mount configurations, and cached metadata are stored locally in ~/Library/Application Support/KastDrive/ on your Mac. Anonymised telemetry (if enabled) is transmitted over TLS to a self-hosted PostHog instance on Hetzner infrastructure in Germany (EU). We do not use third-party analytics platforms that profile users.

4. Your rights under PIPEDA

As a Canadian company subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), we acknowledge your right to:

• Know what personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent at any time (without retroactive effect)
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, email privacy@kastdrive.com. We will respond within 30 days.

5. Data retention

Anonymised telemetry events are retained for 12 months, then automatically deleted. Licence transaction records are retained for 7 years as required by Canadian accounting regulations. No other personal data is retained by Vohux Inc.

6. Children

KastDrive is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided information to us, contact us immediately.

7. Changes to this policy

Material changes will be announced via in-app notification at least 30 days before taking effect. The effective date at the top of this page is always current.

8. Contact

Privacy inquiries: privacy@kastdrive.com
Vohux Inc., Ontario, Canada