Version 1.1 · Effective August 13, 2026

DeskTap Privacy Notice

Effective date: August 13, 2026
Document version: 1.1
Controller: Goussi, trading as GridWave DSP
Contact: contact@gridwavedsp.com

For purchase-policy routing, Version 1.1 applies when the transaction completed at or after the recorded Version 1.1 activation time and the order stores desktap_eula_v1_1_acceptance = true, regardless of Checkout Session creation time. Purchases completed earlier, or with missing or ambiguous assent, retain Version 1.0 or the term more favorable to the customer.

DeskTap processes motion-sensor data locally to detect vibration and trigger sound. GridWave DSP does not receive the raw motion stream, calibration captures, loaded audio or saved detection profile through the application.

Data sent for licence activation

When you activate or while DeskTap validates a licence, the app sends the following to Polar Software, Inc.:

• the licence key and Polar activation/benefit identifiers;
• GridWave DSP’s Polar organization identifier;
• a device-description activation label and one-way hashed device identifier;
• fixed DeskTap app and major-version metadata.

The purchase email entered in DeskTap is not included in the activation or validation request. Polar’s response may contain the customer email associated with the licence; DeskTap compares that value with the entered email locally.

DeskTap checks licence status when a cached licence is available at launch and approximately every five minutes while the app is running. This is necessary to enforce the one-device licence and respond when Polar reports the benefit or key as granted, revoked or disabled. Polar acts as merchant of record and processes its records under its Privacy Policy and Buyer Terms.

Data stored on the Mac

DeskTap stores these records in its entitlement-scoped macOS Data Protection Keychain access group under service com.gridwavedsp.desktap.secure.v3:

• trial start and last-seen timestamps, plus a refund/revocation lock marker when applicable;
• purchase email, licence key, Polar activation ID, hashed device identifier and last successful validation time.

The cached licence permits up to 72 hours of offline use after a successful validation. Trial timestamps are retained so reinstalling the app does not normally restart the trial. Removing or resetting Keychain items can affect trial and licence state.

Opaque .desktapsetup files created with Save Setup are selected by the user and may include absolute paths to a custom pack folder/container or legacy individual sample paths. The binary format prevents ordinary text viewing of calibration numbers but is not encryption; a setup file should not be shared publicly when its account name or folder structure is private. Diagnostic CSV controls are not exposed in the retail build. Files are not uploaded by DeskTap.

Updates

DeskTap has no automatic updater. A manual update check, once enabled, fetches a small version file from the GridWave DSP website. The hosting provider may receive ordinary connection data such as IP address and browser/network headers.

Support and refund requests

When you contact GridWave DSP for support or a refund, we may process your email address, Polar order reference, DeskTap version and About build, Mac model, macOS version, audio settings, calibration state, reproduction steps and the messages in the support case. If reasonably needed and voluntarily supplied, we may also process a short diagnostic recording, screenshot, video or log.

We use this information to authenticate the requester, locate the transaction, provide product support, investigate cause and reproducibility, decide and process a qualifying product-issue remedy or an individual discretionary goodwill request, prevent duplicate recovery or fraud, and meet legal, accounting, dispute and card-network obligations. An order reference is used for lookup and does not authenticate the requester by itself. Do not send a complete licence key through ordinary email.

GridWave DSP personnel handling the case may access this information. We may send the order reference, decision and information reasonably required to process or reconcile the transaction to Polar, the merchant of record. Email, hosting and security providers may process the information only to provide their services. We do not sell support-case information.

Ordinary support correspondence and the case decision are retained while the case is open and for up to 24 months after closure for continuity, dispute and abuse prevention, unless a longer period is required by law or an unresolved claim. Optional diagnostic attachments are deleted within 90 days after case closure unless the customer asks for earlier deletion or they are reasonably needed for an unresolved claim or legal obligation. We may retain a minimal record of the order reference, decision, refund amount and benefit-revocation result for the period required for accounting, tax, fraud and dispute records.

You may ask the contact above for access, correction or deletion where the applicable law provides those rights. Deletion may be limited while information is required for a transaction, dispute, fraud-prevention or legal obligation.

Retention and rights

Local Keychain data remains until the app or user removes it. When DeskTap receives a revoked or disabled licence status, it removes its cached lease, blocks remaining trial access in that session and attempts to retain a local lock marker. A Keychain write failure can prevent persistence. If only the offline lease expires before that status is received, an otherwise unexpired trial may temporarily be available. A later fresh Polar grant clears a retained marker without resetting elapsed trial time. Polar controls retention for purchase and licence records processed by its service. Contact the address above for DeskTap privacy questions; use Polar’s published privacy contact for data controlled by Polar.