Privacy Policy

1. Who we are

Nibware("we", "us") sells SwiftUI component kits and source code at https://nibware.dev. For anything privacy-related, contact us at help@nibware.dev. We are the data controller for the information described below.

2. What we collect, and why

• Account data - your email address and name, if you provide one. Sign-in is handled by WorkOS AuthKit; we store your email so your purchases stay attached to you. Legal basis: performing our contract with you.
• Purchase records - what you bought, when, and the order ID from our payment processor. We never receive or store your card number; payment details go directly to the payment processor (e.g. Lemon Squeezy / Stripe), which acts as merchant of record for tax purposes. Legal basis: contract and legal obligations (tax, accounting).
• Download logs - which kit versions you download, to enforce our refund policy and detect abuse. Legal basis: legitimate interest.
• Site analytics - anonymous, aggregated page views (via privacy-respecting analytics, no cross-site tracking, no ad pixels). Legal basis: legitimate interest in understanding what people use.
• Support email - if you write to us, we keep the thread so we can help you. Legal basis: legitimate interest.

3. What we do not do

• We do not sell, rent, or trade your personal data. Ever.
• We do not run third-party advertising trackers or pixels.
• We do not send marketing email unless you opt in - and every email has a working unsubscribe link.
• We do not collect anything from the code you write with our kits. The kits are source files; they phone home to no one.

4. Cookies

We use one kind of cookie: a session cookie that keeps you signed in. No advertising cookies, no cross-site tracking cookies. Your theme preference (light/dark) is stored locally in your browser and never sent to us.

5. Who processes data on our behalf

• WorkOS - authentication (your email and sign-in method).
• Neon - our database (accounts, purchases, download logs), hosted in the US.
• Cloudflare - content delivery and file downloads.
• Lemon Squeezy / Stripe - payments, invoicing and sales tax, as merchant of record.

Each processor only receives what it needs to do its job, under its own data-processing agreement.

6. How long we keep things

Account and purchase records: as long as your account exists, plus what tax law requires for order records (typically 7 years). Support email: 2 years. Analytics: aggregated, indefinitely - it contains no personal data.

7. Your rights

Wherever you live, we honor the GDPR/CCPA set of rights: access a copy of your data, correct it, delete it, export it, or object to a use of it. Email help@nibware.devand we'll resolve it within 30 days. Deleting your account removes your personal data; anonymized order records are kept only where tax law requires.

8. Security

Traffic is TLS-encrypted end to end. Data is encrypted at rest. Sign-in secrets never touch our servers (WorkOS handles credentials). Access to production data is limited to the people who operate the service.

9. Children

Nibwareis a developer tool, not directed at children under 13, and we don't knowingly collect their data.

10. Changes

If this policy changes in a way that matters, we'll note it here and - for material changes - email account holders. The date at the top always reflects the current version.