Summary
We do not track you. We do not collect your data. We do not set cookies. No analytics, ads, pixels, or fingerprinting.
Full privacy policy
Controller
HK Softworks AB is the data controller for our software and this website. Privacy questions: robin@hksw.io.
Data we collect
We do not run analytics, ads, pixels or fingerprinting, and we do not create profiles. Contact and product waitlists collect the email you type, plus a name and message on the contact form, and which product a waitlist signup is for. Project inquiries also include the selected service. Formspree processes those submissions on our behalf (formspree.io). We use them only to reply or to tell you when a product ships. Swiftflip's Cloud AI feature is described below.
Cookies and trackers
None. We set no cookies and run no analytics, ads, pixels, or fingerprinting.
Logs
This website stores no logs. When Cloud AI generates your cards, the servers behind it record operational errors: error types and timing. Card content is not logged.
Hold That Tab
Hold That Tab stores your blocklist in iCloud, in your own account. We cannot see it. The app does not send domains or browsing history to HK Softworks.
Swiftflip
Swiftflip stores your flashcards in iCloud, in your own account. We cannot see them.
AI generation is a Premium feature with two engines. Apple Intelligence generates on your device and sends nothing to us. Cloud AI sends card text to our servers. It is on iPhone and iPad, where it is the default, and Swiftflip asks before the first request. Settings switches back to on-device generation.
The rest of this section applies to Cloud AI only.
What Cloud AI sends
The topic you entered, your instructions and the existing cards in that deck so new ones do not repeat them. Not your images, not your audio and nothing from other decks.
Who processes it
OpenAI writes the cards and returns them to your device. Training and data sharing are off for our account, and we send every request with storage disabled. OpenAI deletes what it holds for a brief misuse check.
How requests are identified
App Attest and your App Store subscription authenticate each request. We store a keyed hash of your App Store transaction ID. Apple does not give us your name or email, and the hash cannot be reversed to you. It is also the identifier we send to OpenAI.
What we keep
Rate-limit counters, spending budgets and duplicate-request records against that hash, each with a short expiry. Card content is never written to our database.
Otherdesk
Otherdesk stores saved connections on this device. If you choose Save Password, it also stores the Mac user name and password in this app’s Keychain. A device passcode is required to keep a password. Those credentials leave the device only when you connect, and only to the computer you choose. HK Softworks cannot see your screen, passwords, or saved connections.
When you choose Add Mac, the app uses Bonjour to find nearby Screen Sharing services. Discovery results stay on this device.
The app has no accounts, analytics, ads, or cloud sync. Deleting a computer in Otherdesk removes its saved credentials from this device.
Privacy questions: robin@hksw.io.
Selling or sharing
We do not sell or share personal information as defined under the CCPA, and we do not use data for targeted advertising. When Cloud AI generates your cards, OpenAI processes those requests on our behalf, as described above.
If you contact us
Email to robin@hksw.io, the contact form, and product waitlists go through Formspree. We use what you send only to reply or to notify a launch, and we keep it only as long as needed.
Your rights
Laws like the GDPR and CCPA grant rights such as access and deletion. If you used the contact or waitlist form, we can provide or delete that record. If you want to exercise a right, email robin@hksw.io and we will help.
Changes
If we ever plan to collect data, we will update this page and give notice before any change takes effect.
Change history
- : Clarified that project inquiries include the selected service. Contact and launch notifications continue to use Formspree; no website analytics were added.
- : Updated Otherdesk for Bonjour discovery. Nearby results stay on the device and credentials go only to the computer you choose.
- : Named Otherdesk. Server names and optional passwords stay on the device; HK Softworks cannot see the screen, passwords or server list.
- : Named Hold That Tab. The blocklist stays in the user’s iCloud; HK Softworks cannot see it.
- : Named Formspree as the processor for contact and waitlist forms, published robin@hksw.io, and narrowed the website no-data claim to tracking, cookies and analytics.
- : Rewrote the Swiftflip section. AI generation is a Premium feature with two engines, and each Cloud AI disclosure now has its own heading. What we collect, send and keep did not change.
- : Added the Swiftflip section for Cloud AI: what it sends, OpenAI as the processor, how requests are identified and what we keep. Scoped the no-data claims under Data we collect and Logs to this website.
Contact
If you have privacy questions, email robin@hksw.io or use the contact page.