ProgInsight ("we", "us", or "our") is an independent software studio at proginsight.com. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data. By using our software, website, or services, you agree to the practices described in this policy.
Our software automatically collects anonymous usage statistics (which features you use, errors, app version, OS) to help us improve our products. We protect your identity: data is keyed to an irreversible hardware hash, never your name or email. You can opt out in any app's settings. We collect your email address only if you explicitly provide it when submitting feedback. We do not sell your data.
1. Who We Are and What We Do
ProgInsight is an independent software studio that develops and distributes applications for Windows, macOS, Linux, Android, iOS, and the web — available free of charge on GitHub and SourceForge. We build over 20 products across productivity, AI assistance, file management, content tools, and more, used by over 100,000 people in 14 languages.
We also operate the website at proginsight.com, which provides information about our products, news, security disclosures, and documentation.
Most of our applications run locally on your device and do not require an account or internet connection to use their core features. However, our software does include an in-house telemetry system (described in detail in Section 2) that collects anonymous usage statistics to help us improve our products. You can opt out of this at any time.
2. Information We Collect
2a. Usage Statistics — In-App Telemetry (Automatic, Opt-Out)
Our desktop, mobile, and web applications include an in-house telemetry system that automatically collects anonymous usage statistics to help us understand how our software is used, detect crashes and errors, and prioritise improvements. This runs by default but you can opt out at any time in the application settings.
What our telemetry system collects:
- Named usage events — which features or actions you use inside the app (e.g. "export clicked", "search performed"), along with optional structured metadata about that action (e.g. file type, word count). No file contents, personal text, or user-created data is included.
- A stable anonymous machine ID — a 16-character hash derived from hardware properties (CPU model, total RAM, volume serial number, MAC address, OS version on Windows; machine-id or hostname on Linux/macOS). This hash is computed locally and cannot be reversed to identify you or your hardware. It is used solely to distinguish devices in aggregate statistics and persists across sessions to avoid counting the same device twice.
- App identity — the product name, app version, and OS version, so we know which version of which app generated each event.
- Session information — a session ID generated fresh at each app launch, used to group events from the same session.
- Log pattern signals — if log analysis is enabled, our software monitors its own internal log file (not your personal files) to detect recurring error patterns that exceed a threshold, and surfaces suggestions to you in the UI. Detected pattern signals are included with telemetry batches.
- Download tracking — we record which files our software has uploaded or processed (filenames only, stored locally in a ledger) to avoid duplicate operations. This list stays on your device.
What our telemetry system does not collect:
- Your name, email address, or any account credentials.
- The contents of any files you open, create, or edit.
- Keystrokes, clipboard contents, screenshots, or screen recordings.
- Your location (beyond what the OS version implies).
- Any data from other applications running on your device.
If you enable anonymous mode in app settings, any user identifier is stripped from all events before they leave your device. Events are recorded with only the machine hash and session ID — no account linkage of any kind.
2b. Feedback and Complaints (Explicit, Opt-In)
Our applications include an optional in-app feedback and complaint submission feature. If you choose to submit feedback:
- Your message text is sent to our servers along with the product name, app version, OS info, machine ID hash, session ID, and the last 5 usage events (to give us context for your report).
- Your email address is never collected automatically. You may optionally provide it after submitting feedback if you want us to follow up with you. This is strictly opt-in.
- A cooldown period prevents repeated prompts — the system will not ask you to submit feedback more often than once per configured interval (typically 24 hours).
2c. Google Sign-In (Optional Account Features)
Some ProgInsight services offer optional account features. For these, we use Google Sign-In (OAuth 2.0). We request only:
- openid — to confirm your identity and open a secure session.
- email — to identify your account by email address.
- profile — to display your name in the application interface.
Signing in is entirely optional. All core features work without an account.
2d. Email Contact (Explicit)
If you email us directly at team@proginsight.com or submit a message through our feedback platform at market.proginsight.com, we store your email address and message content to respond to your inquiry.
2e. Website Server Logs (Automatic)
When you visit proginsight.com, our web servers automatically record standard log data including your IP address, browser type, operating system, referring URL, and pages visited. This data is used to maintain site security, diagnose issues, and understand aggregate traffic. It is not linked to your personal identity and is retained for a maximum of 90 days.
2f. What We Do Not Collect
ProgInsight does not:
- Require account registration to download or use our software.
- Read, access, or transmit the contents of your personal files.
- Access your camera, microphone, or contacts without your explicit action.
- Use our own advertising trackers, analytics pixels, or fingerprinting scripts. (Note: Google AdSense, active on proginsight.com, uses cookies for ad serving — see Section 8.)
- Sell, rent, or share your data with third parties for commercial purposes.
3. Google API Services — Detailed Disclosure
Some ProgInsight services use Google Sign-In (OAuth 2.0) for optional account authentication. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you choose to sign in with Google, we request only the following OAuth scopes:
- openid — to confirm your identity and establish a secure session.
- email — to identify your account by email address.
- profile — to display your name within the application interface.
We explicitly do not request and do not receive access to:
- Your Google Drive files or storage.
- Your Gmail messages or contacts.
- Your Google Calendar events.
- Your Google Photos.
- Any other Google service data beyond the basic profile listed above.
Your Google credentials (passwords and tokens) are never stored by ProgInsight. Authentication tokens are used only for the duration of your active session and are discarded when you sign out. We do not share your Google account information with any third party. We do not use Google user data for advertising or marketing purposes. We do not transfer Google user data to AI or machine learning training pipelines.
ProgInsight's use of data obtained via Google APIs is limited to providing and improving the user-facing features of the service the user is actively using. We do not use this data for any purpose unrelated to providing the service.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Product improvement: Anonymous usage events and pattern signals help us understand which features are used most, where errors occur, and what to prioritise in future versions.
- Crash and error detection: Log pattern analysis and telemetry events help us identify recurring problems in our software so we can fix them.
- Aggregate statistics: We analyse usage data in aggregate (not per individual) to understand how our software is performing across platforms and regions.
- Responding to feedback: When you submit a complaint or contact us by email, we use your message and the automatically attached context (app version, OS, last events) to diagnose and respond to your issue.
- Authentication: When you sign in with Google, we use your name and email to identify your account within ProgInsight services.
- Security and integrity: To detect and prevent abuse or unauthorised access to our systems.
- Site improvement: To understand aggregate traffic patterns on proginsight.com.
We do not use your personal data (such as your name or email) for advertising or profiling. Our website displays ads through Google AdSense and other networks, but these use their own systems and cookies independently — not your ProgInsight account or telemetry data. See Section 8 for full details.
5. Data Sharing and Third Parties
ProgInsight does not sell, rent, trade, or share your personal information with third parties for commercial purposes. We may share your information only in the following limited circumstances:
- With your consent: We will share information with third parties only when you have explicitly asked us to do so.
- Legal obligations: We may disclose information if required to do so by law, court order, or government authority, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Service providers: We may use trusted third-party infrastructure providers (such as hosting providers) who process data on our behalf, subject to confidentiality agreements. These providers are not permitted to use your data for any purpose other than providing services to us.
6. Data Retention and Deletion
We retain basic account information (name and email address obtained via Google Sign-In) only for as long as your account is active or as needed to provide our services. We retain server log data for a maximum of 90 days, after which it is automatically deleted.
You may request deletion of your account and all associated personal data at any time by contacting us at team@proginsight.com. We will fulfill all deletion requests within 30 days and will confirm completion. After deletion, we will not retain any personally identifiable information about you.
7. Cookies and Local Storage
Our website and applications use browser local storage to remember your preferences, such as your chosen display theme, accent colour, and language. This data is stored only on your device and is never transmitted to our servers.
We do not set our own advertising or analytics cookies. However, our website uses Google AdSense (see Section 8 below), which may set third-party cookies on your device to serve and measure advertising. You can manage or disable these cookies through your browser settings or via Google's Ads Settings. Disabling advertising cookies does not affect your ability to use our software.
8. Advertising
ProgInsight displays advertisements across our website and applications to support free distribution of our software. We work with several advertising networks depending on the platform (web or mobile/desktop app). Each network operates under its own privacy policy and may use cookies, device identifiers, or similar technologies to serve and measure ads.
ProgInsight does not pass your ProgInsight account data (such as your name or email address) to any advertising network. Ad networks receive only what your device transmits automatically when loading an ad — typically your IP address, device type, browser or app version, and general location derived from IP.
Our internal ad infrastructure (ads.proginsight.com) is a universal revenue tracking and ad-unit configuration layer that sits between our products and the networks below. It logs impressions, clicks, and revenue reports from all networks in a unified format, but this data is kept strictly internal and is never shared with third parties.
8a. Google AdSense (Website)
Our website (proginsight.com) uses Google AdSense, operated by Google LLC. Google AdSense may set cookies or use similar technologies to serve ads relevant to you based on your past visits to this and other websites.
- Google may use cookies and device signals to personalise ads based on your browsing history across the web.
- Google may collect your IP address, browser type, and general location for ad targeting and fraud prevention.
Google's use of advertising cookies is governed by the Google Privacy Policy. You can manage Google ad personalisation at google.com/settings/ads.
8b. Unity Ads (Mobile and Desktop Apps)
Our mobile and desktop applications may display ads served by Unity Ads, operated by Unity Technologies. Unity Ads uses a device advertising identifier (such as IDFA on iOS or GAID on Android) and contextual signals to serve and measure ads.
- Unity may collect your device advertising ID, IP address, device model, OS version, and app usage signals.
- On iOS, Unity Ads respects Apple's App Tracking Transparency (ATT) framework — personalised ads are only served if you grant tracking permission.
- On Android, you can reset or opt out of ad personalisation via your device's advertising settings.
Unity's data practices are governed by the Unity Privacy Policy.
8c. Additional Advertising Networks
Depending on the product and platform, ProgInsight may also work with additional advertising partners including but not limited to mediation platforms, programmatic ad exchanges, and affiliate networks. These partners may similarly use device identifiers, cookies, or contextual signals to serve and measure ads.
All advertising partners we work with are required to comply with applicable privacy laws and industry standards, including GDPR, CCPA, and IAB frameworks where applicable.
8d. Your Ad Choices
You have several options to limit interest-based advertising:
- Google: google.com/settings/ads
- Unity: Opt out via your device's advertising settings (iOS: Settings → Privacy → Tracking; Android: Settings → Google → Ads).
- All networks: aboutads.info/choices (US) or youronlinechoices.com (EU) let you opt out of participating networks in one place.
- NAI opt-out: networkadvertising.org/choices
- Browser-level: You can block or clear advertising cookies through your browser settings at any time.
Opting out of personalised ads means you may still see ads, but they will be less relevant to your interests. It does not affect your ability to use ProgInsight software.
9. Third-Party Cloud Storage
Some ProgInsight applications offer optional features that let you save, sync, or back up your data to a cloud storage provider of your choice. This is entirely optional — all core features of our software work without connecting any cloud storage. When you choose to connect a cloud account, we access only the specific files and folders our application needs to perform the function you requested.
ProgInsight never stores the contents of your cloud files on our own servers. Files are read from or written to your chosen provider directly. We do not index, analyse, or retain the content of your cloud-stored files beyond the duration of the active operation.
9a. Google Drive (Google LLC)
Where our applications support Google Drive integration, we use the Google Drive API via OAuth 2.0. We request only the minimum scopes required for the specific feature — accessing only files and folders you explicitly select or that our app creates on your behalf. We do not request broad access to your entire Google Drive, and Drive tokens are stored on your device only. This use complies with the Google API Services User Data Policy, including Limited Use requirements. Your Google Drive data is never used for advertising, profiling, or AI training.
9b. Microsoft OneDrive (Microsoft Corporation)
Where our applications support OneDrive integration, we use the Microsoft Graph API via OAuth 2.0. We request only the scopes needed for the specific storage feature you activate, accessing only files you select or an app-specific folder. We do not access your email, calendar, contacts, or any other Microsoft 365 data. OneDrive tokens are stored on your device only. Microsoft's data practices are governed by the Microsoft Privacy Statement.
9c. Dropbox (Dropbox, Inc.)
Where our applications support Dropbox integration, we use scoped Dropbox API v2 tokens to access only a designated app folder (/Apps/ProgInsight/) or individual files you choose to open. We do not request access to your entire Dropbox. Tokens are stored on your device and never transmitted to ProgInsight servers. Dropbox's data practices are governed by the Dropbox Privacy Policy.
9d. Apple iCloud (Apple Inc.)
On macOS and iOS, our applications may use Apple iCloud (via CloudKit or iCloud Drive) to sync your data across your Apple devices. iCloud storage is handled entirely by Apple and is subject to Apple's privacy practices. ProgInsight does not have access to your iCloud credentials, and Apple end-to-end encrypts most iCloud data — ProgInsight cannot access it even if compelled. Apple's data practices are governed by the Apple Privacy Policy.
9e. User-Controlled Cloud Buckets (Amazon S3, Cloudflare R2, and Others)
Some ProgInsight applications support backing up or storing your data directly to a cloud object storage bucket that you own and control — such as Amazon S3, Cloudflare R2, Backblaze B2, or any S3-compatible provider. This is a bring-your-own-bucket (BYOB) model:
- You provide your own bucket credentials (access key, secret key, bucket name, and endpoint URL). These credentials are stored locally on your device in encrypted form and are used only to write to and read from your bucket.
- ProgInsight does not have access to your bucket, your credentials, or the data stored within it. All transfers go directly between your device and your bucket provider.
- We do not store, log, or transmit your bucket credentials or the contents of files you back up to your bucket.
- You are responsible for your bucket's access controls, permissions, and costs charged by your provider.
- Supported providers may include Amazon Web Services (S3), Cloudflare R2, Backblaze B2, Wasabi, MinIO, and any other S3-compatible endpoint. ProgInsight makes no warranty regarding the availability or suitability of any specific provider.
9f. Other Cloud Providers
ProgInsight may add support for additional cloud storage providers in future product versions. When new providers are added, this policy will be updated accordingly. In all cases the same principles apply: minimum necessary permissions, no storage of your file contents on ProgInsight servers, and no use of your cloud data for any purpose beyond the storage feature you activated.
9g. Revoking Cloud Access
You can disconnect any cloud storage integration at any time from within the application settings. You can also revoke access directly from the provider's own security settings:
- Google: myaccount.google.com/permissions
- Microsoft: account.live.com/consent/Manage
- Dropbox: dropbox.com/account/connected_apps
- Apple iCloud: Settings → [Your Name] → iCloud → [App Name] on your device.
- Your own bucket: Delete or rotate your credentials from your provider's console, then remove them from the app settings.
10. Bring Your Own Key (BYOK) — AI Services
Several ProgInsight applications include AI-powered features — available across our product categories including the Intelligent Suite and select Standalone Applications. For these features, ProgInsight may operate AI model endpoints on your behalf using our own infrastructure, or we may offer a Bring Your Own Key (BYOK) mode that lets you supply your own API key from a third-party AI provider so that requests are made directly under your account rather than ours.
10a. How BYOK Works
When you provide your own API key:
- Your key is stored locally on your device in encrypted form and is never transmitted to ProgInsight servers.
- AI requests are sent directly from your device (or via a thin proxy that does not log content) to the AI provider you specified, authenticated with your key.
- You are billed directly by the AI provider according to your own account's pricing and usage terms.
- ProgInsight does not see, log, or retain the content of AI prompts or responses processed under your own key.
10b. Supported AI Providers (BYOK)
Depending on the application, BYOK mode may support providers including but not limited to:
- OpenAI — API keys for GPT models (governed by the OpenAI Privacy Policy)
- Anthropic — API keys for Claude models (governed by the Anthropic Privacy Policy)
- Google — Gemini API keys (governed by the Google Privacy Policy)
- Cloudflare AI — Workers AI endpoints (governed by the Cloudflare Privacy Policy)
- Amazon Bedrock — AWS AI model access (governed by the AWS Privacy Notice)
- Other compatible providers and self-hosted models via configurable endpoints.
When you use BYOK, the AI provider's own privacy policy governs how your prompts and data are handled on their side. ProgInsight is not responsible for the data practices of any AI provider you choose to connect.
10c. ProgInsight-Operated AI Services
Where you use AI features powered by ProgInsight's own infrastructure (without supplying a personal key), your prompts and AI responses may pass through our backend. In these cases:
- We process your prompts solely to return the AI response to you.
- We do not use the content of your AI prompts or responses to train AI models.
- We do not log or store your AI conversation content beyond the duration needed to serve the response, unless you explicitly save a conversation within the app.
- Requests may be routed through AI infrastructure providers such as Cloudflare AI, Amazon Bedrock, or others. These providers process your request under their own data processing agreements with ProgInsight and are not permitted to use your data for their own purposes.
11. Payments, Subscriptions, and Licensing
Some ProgInsight products are paid. We offer several purchase models including subscriptions, one-time purchases, and voucher-based access. Payment processing is handled by trusted third-party payment processors — ProgInsight does not store your full card number, CVV, or bank account details.
11a. Data Collected During Purchase
When you make a purchase, we or our payment processor may collect:
- Your name and email address (to issue your licence or receipt and manage your account).
- Billing country and postcode (for tax and fraud prevention purposes).
- Transaction ID, purchase date, product purchased, and licence type.
- Payment method type (e.g. card, mobile money) — but not the full card number, which is held only by the payment processor.
This information is retained for as long as your account or licence is active and for the period required by applicable tax and accounting law thereafter.
11b. Subscriptions
Where you purchase a subscription, we store your subscription status, renewal date, and plan tier to manage access to paid features. If you cancel, your subscription remains active until the end of the paid period and is then downgraded. We do not charge you after cancellation.
11c. One-Time Purchases
One-time purchases grant a perpetual licence to the version purchased (or as otherwise specified at the time of sale). Your purchase record and licence key are stored in our systems so we can verify and restore your licence if needed.
11d. Vouchers and Redemption Codes
We issue voucher codes and redemption codes for promotional, gifting, or distribution purposes. When you redeem a voucher, we record the redemption against the code and your account to prevent reuse. Voucher codes themselves do not contain or reveal personal data.
11e. Pricing Bonuses and Discounts
ProgInsight may offer automatic or claimed discounts and bonuses in certain circumstances, including:
- Referral and agent bonuses: Reduced pricing when you access our store or app via a qualifying referral link, partner agent, or affiliated platform. The referring agent identifier is logged against your purchase for commission and audit purposes.
- Promotional sales: Time-limited price reductions applied automatically at checkout.
- Loyalty or tier discounts: Reductions based on your account history or subscription tier.
- Claimed discounts: Reductions you claim by providing qualifying information (such as an educational email address or organisation membership). Claimed discount data is stored alongside your purchase record for verification.
We do not sell or share your purchase or discount data with third parties for marketing purposes. Referral agent identifiers are shared only with the qualifying partner for commission settlement.
11f. Third-Party Payment Processors
Payment processing may be handled by third-party processors. These processors operate under their own privacy policies and are PCI-DSS compliant. We will identify the relevant processor at the point of purchase. ProgInsight receives only a transaction confirmation and the data listed in Section 11a above — we never receive your raw card data.
12. SDK and Library Licensing to Third Parties
ProgInsight develops and may license certain software libraries, SDKs, and components — including data processing libraries, AI integration components, and other internal tools — to third-party developers and organisations for use in their own products.
12a. What This Means for End Users
If you use a third-party application that has integrated a ProgInsight SDK or library, that application's own privacy policy governs how data is collected and handled within it. The third-party developer, not ProgInsight, is the data controller for data collected through their application.
ProgInsight does not receive personal data from end users of third-party applications that use our SDKs, unless the third-party developer has explicitly configured their integration to report to ProgInsight infrastructure (which would be disclosed in their own privacy policy).
12b. SDK Licensee Obligations
Third-party developers who license ProgInsight SDKs are contractually required to:
- Provide their own users with accurate privacy disclosures describing how our SDK operates within their application.
- Not use ProgInsight SDK components to collect data in ways that violate applicable privacy law.
- Not misrepresent the origin or ownership of ProgInsight SDK components to their users.
13. Data Security
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These measures include:
- HTTPS encryption for all data transmitted to and from our website and services.
- Limiting access to personal data to team members who need it to provide our services.
- Using secure, industry-standard OAuth 2.0 flows for Google authentication.
- Regular review of our security practices.
However, no method of transmission over the internet or method of electronic storage is 100% secure. We encourage users to contact us immediately at team@proginsight.com if they suspect any unauthorized access or security vulnerability.
14. Children's Privacy
Our software and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at team@proginsight.com and we will promptly delete it.
15. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure: You can request that we delete your personal data.
- Right to data portability: You can request your data in a structured, machine-readable format.
- Right to object: You can object to our processing of your data in certain circumstances.
To exercise any of these rights, contact us at team@proginsight.com. We will respond within 30 days.
16. Third-Party Services and Links
Our website and applications may link to third-party services including GitHub and SourceForge for software distribution, and our feedback platform at market.proginsight.com. These services operate under their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices or content of any third-party websites or services.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we will provide a more prominent notice. Continued use of our software or website after any changes constitutes your acceptance of the revised policy. We recommend reviewing this page periodically.
18. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: team@proginsight.com
Website: proginsight.com
We are committed to working with you to resolve any privacy concerns promptly and transparently.