Kishi Notch

Privacy Policy

Last updated 3 October 2026

In short: the app has no account, analytics, ads or tracking. Only weather, synced lyrics if you turn it on, and licence activation go online, and each sends just what it needs. This website counts visits on our own server, without cookies.

Who we are

Kishi Notch is made by an independent developer based in Turkey (“we”, “us”). We are the data controller for the personal data described here. Write to support@kishinotch.com about anything in this policy, including requests about your data.

The Kishi Notch app

Kishi Notch has no account, no analytics or telemetry, no ads, no tracking and no cloud sync. Almost everything it does happens on your Mac and stays there:

• Calendar: your upcoming events are read on your Mac, only to show them in the notch. They are never changed or sent anywhere.
• Bluetooth: device names and battery levels come from macOS on your Mac.
• Focus: the active Focus is read from the file where macOS keeps it, using Full Disk Access. Switching Focus uses Shortcuts on your Mac.
• Media: to pause the previous player, Kishi Notch sends Apple Events to media apps on your Mac.
• Shelf: files you put on the shelf are referenced where they are. They are not copied or uploaded.
• Settings are stored on your Mac.

None of this reaches us.

The two features that go online

These requests go straight from your Mac to the service named. We don’t see them. Like any internet request, they also show the service your IP address.

Weather is on by default. You can turn it off, or type a city instead of using your location.

• Your approximate coordinates, rounded to about 100 m, or the city name you typed, are sent to MET Norway (api.met.no) for the forecast.
• To find the place name for your coordinates, or the coordinates of a city you typed, macOS uses Apple’s geocoding service (CLGeocoder). Apple handles this under its own privacy policy.
• Location is only used after you allow it in macOS.

Synced lyrics is off by default. Only if you turn it on, the title and artist of the song that’s playing are sent to lrclib.net to fetch the lyrics.

Legal basis: providing the features you use under our licence terms (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).

Permissions

Every permission is optional and explained in the app: Calendar, Location (for weather), Full Disk Access (to read the Focus), Accessibility (a fallback way to switch Focus) and Automation / Apple Events (to pause other players). You can withdraw any of them in System Settings → Privacy & Security.

Free trial and licence activation

The free trial works offline. The day you first opened the app is kept in your Mac’s Keychain and never sent anywhere.

When you enter a licence key, the app sends the following to Polar, our reseller (polar.sh), to activate the licence on this Mac:

• the licence key;
• your Mac’s name, as set in System Settings, so you can tell your Macs apart when you manage your licence;
• a one-way hash of your Mac’s hardware ID, used to recognise the same Mac. The ID itself is never sent;
• the app version.

About once a week the app asks Polar whether the licence is still valid, sending the licence key and the activation’s ID. When you remove the licence from a Mac in Settings, the same two are sent to free up that Mac. The app doesn’t check for updates.

Legal basis: performing our contract with you (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).

This website

• Hosting: the site is served from our own server through Cloudflare, which provides content delivery and security protection. Cloudflare processes your IP address and request details to deliver pages and block attacks, under its own privacy policy.
• Server logs: our web server records your IP address, browser user agent, the address you requested and the time. We use them only to run the site and keep it secure.
• No cookies. The only thing stored in your browser is your language choice (in localStorage). It never leaves your browser.
• Visit statistics: we count visits with Umami, which runs on our own server, so this data goes to no one else. It uses no cookies and doesn’t store your IP address. For each visit it records the page, the site you came from, your browser, operating system, device type, screen size, language and country (from Cloudflare), and a few actions on the page: pressing a download or header button, reaching the price and opening a question. Visits are grouped with a code made from your IP address and browser that changes every month, so we can’t recognise you over time or across sites. If your browser sends Do Not Track, you aren’t counted. We only look at the totals.
• No advertising trackers, and no Google scripts. We use Google Search Console, verified through a DNS record, to see how the site appears in Google Search. It relies on Google’s own search data, not on anything collected here.

Legal basis: our legitimate interest in running a secure website and in understanding, from totals, how it is used (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).

Buying a licence

Kishi Notch is sold through Polar (Polar Software, Inc.), an authorised reseller acting as Merchant of Record. Polar processes your payment, invoice and taxes under its own terms and privacy policy, together with its payment processors. We never see your card details.

From Polar we receive only what we need to issue and support your licence: your name, email address, billing country, and order and licence details, including the Macs your licence is active on.

Legal basis: performing our contract with you (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)) and keeping records the law requires (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).

When you email us

We use your email address and what you write to answer you and support your licence. Our inbox is hosted by an email provider that processes messages on our behalf.

Legal basis: handling your request and our contract with you (KVKK Art. 5(2)(c) and (f); GDPR Art. 6(1)(b) and (f)).

Who receives data

• Cloudflare: delivers and protects this website.
• MET Norway: weather forecasts.
• Apple: place names and coordinates for weather, through macOS.
• lrclib.net: synced lyrics, only if you turn it on.
• Polar: sells and activates licences as our reseller, and handles payment, invoices and taxes.
• Our email provider: messages you send us.

We don’t sell personal data or share it for advertising.

Transfers outside Turkey

Some of these services process data outside Turkey, and some outside the European Economic Area. For example, Cloudflare serves the site from its global network, MET Norway is in Norway and Polar is based in the United States. These transfers happen because they are needed for what you are doing, such as loading the site, getting a forecast, fetching lyrics or buying and activating a licence. Where the law requires, they rely on the safeguards it provides (KVKK Art. 9; GDPR Chapter V).

How long we keep data

• Server logs: only as long as needed to run the site and keep it secure, then deleted regularly.
• Visit statistics: up to 2 years, then deleted automatically.
• Emails: as long as needed to handle your request and any follow-up.
• Licence records: while your licence is active and for as long as the law requires.
• Data held by the services above is kept under their own policies.
• Data on your Mac, such as settings, stays under your control.

Your rights

Under Article 11 of KVKK (Law No. 6698) and, where it applies, the GDPR, you can:

• ask whether we process your personal data, get information about it and a copy of it;
• learn why we process it, whether it is used for that purpose, and who it is shared with in Turkey or abroad;
• have it corrected if it is incomplete or wrong, or deleted;
• ask us to tell the recipients about a correction or deletion;
• object to a result against you that comes only from automated analysis (we don’t make such decisions);
• claim compensation if unlawful processing causes you damage;
• under the GDPR, also restrict processing, receive your data in a portable format, and object to processing based on legitimate interest.

To use these rights, email support@kishinotch.com, ideally from an address you have already used with us. We may ask you to confirm your identity. We answer within 30 days at the latest.

If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). If you live in the EU, you can also complain to the data protection authority in your country.

Children

Kishi Notch and this website are not directed at children under 16, and we don’t knowingly collect their data. If you think a child has sent us personal data, write to us and we will delete it.

Changes

When something changes, we update this page and the date at the top. If a change affects what the app sends, we update this policy before that version ships.

Contact

support@kishinotch.com. See also the Contact page.