Privacy Policy · ShareClone

ShareClone is made by Davidovski GmbH, a company registered in Switzerland, trading as KARPINITY. This policy has two parts: the Mac app, and this website.

The app

This part covers the ShareClone app, which carries the App Store privacy label “Data Not Collected”. This website is covered in the next part.

The short version

ShareClone does not collect any data about you. It has no analytics, no advertising, no tracking and no user accounts with us. Your files, your sign-in and your settings stay on your Mac. The only network connections ShareClone makes are to your own organization’s SharePoint, to Microsoft’s sign-in service so you can log in, and to Apple for purchases. Nothing about you or your files is sent to us.

What stays on your Mac

The files you download, the list of your libraries and folders, sync history, run statistics, the Activity log and your settings are stored on your Mac only. ShareClone runs in Apple’s App Sandbox and can only write to folders you select. We never receive this information and have no means of accessing it.

Signing in and credentials

You sign in on your organization’s own Microsoft sign-in page, shown inside ShareClone in a built-in window that uses Apple’s WebKit. You type your credentials only into that Microsoft page. ShareClone does not see or store your password. The sign-in session that ShareClone uses to read your SharePoint is kept in the macOS Keychain on your Mac. The sign-in window’s own on-device storage may also remember your Microsoft login so that you are not asked to sign in again every time. None of this is transmitted to us or to any third party. You can remove it by removing a library, signing out, or deleting the app and its data.

Network connections

ShareClone connects only to:

your organization’s SharePoint Online (to list and download the libraries you have access to);
Microsoft’s sign-in service, as part of your organization’s login (including multi-factor authentication);
Apple, to process and verify purchases and subscriptions.

It never connects to servers operated by us. ShareClone only reads from SharePoint. It never uploads, edits or deletes anything in SharePoint. Those connections are made directly between your Mac and those services. Your organization and Microsoft process data about your use of SharePoint under their own terms and privacy policies, which are separate from this one.

Analytics, tracking and advertising

ShareClone contains no analytics, no advertising and no third-party tracking code. It does not track you across other companies’ apps or websites.

Logs and support

ShareClone keeps an Activity log on your Mac so that you can see what happened. It can contain file and folder names and the web address of your SharePoint library. It stays on your Mac. Nothing is sent unless you choose to share it, for example by emailing a log to us for support. If you do, please check it first and remove anything you do not want to share. We use such correspondence only to help you and keep it only as long as needed for that.

Purchases

ShareClone Pro is sold through the Mac App Store, and the free trial and purchases are handled by Apple. We do not receive your payment details, card numbers or billing address. Apple provides us with aggregate sales reporting only. Apple’s handling of your purchase is governed by Apple’s Privacy Policy.

We do not sell, rent or share personal data, because we do not collect any through the app.

This website

The website you are reading, shareclone.karpinity.com, is separate from the app. It has no accounts, no forms, no advertising and no shop: purchases happen in the Mac App Store. It measures how it is used in two ways, one of which needs your consent.

Hosting

The website is hosted by Cloudflare. To deliver the pages and protect them from abuse, Cloudflare processes technical request data such as your IP address.

Cloudflare Web Analytics (always on, cookieless)

Cloudflare Web Analytics measures page views and page performance. It sets no cookies, uses no client-side storage to collect usage metrics, and does not fingerprint visitors by IP address, user agent or any other data point. No individual visitor can be identified from this data, so no consent is required and none is asked for.

Google Analytics 4 is not loaded when you first visit. Your browser makes no request to Google for analytics until you press “Accept” in the cookie notice. If you press “Decline”, or ignore the notice, Google Analytics is not loaded and nothing is sent to Google for analytics.

If you accept, Google Analytics sets two first-party cookies in your browser:

_ga, which distinguishes visitors, valid for up to 2 years;
_ga_<container id>, which keeps session state, valid for up to 2 years.

Google Analytics then processes your pseudonymous online identifier, the pages you view, approximate location and device and browser information, to show us which pages are read. Google Analytics 4 does not log or store IP addresses: it uses the IP address of your request to derive an approximate location and discards it. We do not use it for advertising, and advertising storage and personalisation signals stay denied.

Legal basis (GDPR): Art. 6(1)(a) GDPR, your consent, together with the consent requirement for cookies and similar technologies.
Legal basis (Swiss FADP): your consent, given by pressing “Accept”.
Retention: Google Analytics keeps event data for 2 months, the default retention of our property, after which Google deletes it.
Recipient and transfer: the provider is Google Ireland Limited, with Google LLC in the United States as its processor. Data may therefore be transferred to the United States. The safeguard is the Swiss-US Data Privacy Framework and the EU-US Data Privacy Framework, to which Google LLC is certified, supplemented by standard contractual clauses where needed.
Withdrawing consent: choose “Cookie settings” in the footer of any page and press “Decline”. Google Analytics stops, and the _ga cookies are removed from your browser. You can also delete them in your browser settings at any time. You can change your choice as often as you like.

Choices kept in your browser only

Your cookie choice is stored in your browser’s local storage, not in a cookie. Until you choose a language, an English page opens in German when your browser prefers German to English. When you choose “EN” or “DE” in the header, that choice is stored in your browser’s local storage as well, so the site keeps to it. Neither leaves your device, and you can remove them by clearing this site’s data in your browser.

Email to us

If you write to us, we use your email address and message only to answer you and keep them only as long as needed for that.

Who processes this data on our behalf

Cloudflare, for hosting and for Cloudflare Web Analytics.
Google, for Google Analytics 4, only if you accept analytics cookies.

Neither is authorized to use this data for its own purposes beyond providing the service.

International transfers

Cloudflare operates a global network and Google is headquartered in the United States, so data processed by either may leave Switzerland and the European Economic Area. Where that happens, the safeguard for Cloudflare is the standard contractual clauses in its data processing agreement, and for Google Analytics the Data Privacy Framework described above. The European Commission recognises Switzerland as providing an adequate level of data protection.

Your rights

Under the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR), you have the right to ask for access to, correction of and deletion of personal data we hold about you. In practice, the personal data we could hold is an email you chose to send us and, if you accepted analytics on this website, the pseudonymous analytics data described above. Write to the address below and we will act on it. If you are in the EU or EEA you may also complain to your local data protection authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).

Children

ShareClone is a business and productivity tool and is not directed at children. It collects no data from anyone, of any age.

Changes

If this policy changes, the revised version is published here with a new date at the top. Material changes will also be noted in the app’s release notes.

Controller and contact

Davidovski GmbH, trading as KARPINITY

Wehntalerstrasse 283A

8046 Zurich

Switzerland

UID CHE-483.604.189

innovation [at] karpinity.com