Privacy Policy

Effective Date: June 15, 2026 · Last Updated: July 10, 2026

This Privacy Policy explains how Micha Kiel LLC, a Florida limited liability company doing business as CoWorkRunner ("CoWorkRunner," "we," "us," "our"), collects, uses, and protects information when you use CoWorkRunner, our macOS productivity application for real-estate professionals (the "Service"), and our website at coworkrunner.com.

1. Summary (Plain English)

CoWorkRunner is built so your client data stays on your Mac. We do not collect or store the contents of your real-estate deals, contracts, MLS data, or client communications. AI features are included with your subscription: requests travel transiently through CoWorkRunner's managed gateway to Anthropic for processing, and we meter usage volume for billing - never the contents. (Where the app supports it, you may instead connect your own Anthropic API key, in which case requests go to Anthropic on your own account.) We only collect what we need to operate your subscription and license: your email, your subscription status, a hashed identifier for the Mac you activated on, and basic website analytics.

2. What We Collect

2.1 Account Information

When you purchase a subscription, we (via our payment processor Stripe and our licensing provider Keygen) collect:

• ·Your email address
• ·Your name (if you provide it at checkout)
• ·Your country (for tax purposes)
• ·A Stripe customer ID
• ·A Keygen license code we issue to you
• ·Subscription status (trialing, active, past due, canceled)
• ·Subscription start, renewal, and end dates

We do not collect or store:

• ·Credit card numbers, CVVs, or expiration dates (these go directly to Stripe; we never see them)
• ·Bank account numbers
• ·Your tax identification number

2.2 Machine Activation Information

When you activate CoWorkRunner on your Mac, we collect:

• ·A SHA-256 hash of your Mac's hardware identifier (used to enforce the two-device-per-license limit)
• ·The version of CoWorkRunner you have installed
• ·The date and time of activation

We do not collect:

• ·Your Mac's name or geographic location
• ·A list of other software installed on your Mac
• ·Files or documents on your Mac
• ·Browser history or web activity

To keep the app reliable, CoWorkRunner also sends crash reports and limited diagnostic data to our error-monitoring provider, Sentry. This can include technical information such as the app version, operating-system version, error messages, app-state breadcrumbs, and the network/IP information that accompanies any internet request (which may indicate your approximate region). We configure diagnostics to avoid transmitting the contents of your transactions and redact sensitive fields.

2.3 Your Deal Data, Client Data, and AI Processing

This is the most important section.

CoWorkRunner does not collect, transmit, or store the contents of your real-estate transactions. This includes but is not limited to:

• ·Buyer, seller, lender, title-company names or contact information
• ·Contracts, addenda, disclosures, inspection reports, closing statements, or any PDFs you process through the application
• ·Purchase prices, financing terms, or any financial figures
• ·Client personal information, SSNs, or banking information
• ·MLS data, listing information, comp data
• ·Client communications drafted or sent through the Service

All such data is stored locally on your Mac in a folder owned and managed by you.

Your AI features are powered by Anthropic (Claude), included with your subscription. When you use the included access, a request travels transiently through CoWorkRunner's managed gateway to the Anthropic API for processing under our provider agreements. The content of the request, which may include text and images of the documents you are working with, passes through the gateway in transit only: we meter usage volume for billing and abuse prevention, and we do not store, log, or review the contents. If you instead connect your own Anthropic API key (where the app supports it), the request is transmitted to Anthropic under your own account and governed by your terms with Anthropic. We recommend reviewing Anthropic's data handling at anthropic.com/privacy and choosing the Anthropic plan and settings appropriate for the sensitivity of your client data.

2.4 Email and Messaging You Run Through the App

CoWorkRunner can read your Mail.app inbox and send messages (for example, through the Showing Planner) by automating applications already on your Mac, namely Mail and Messages, using your own accounts. This activity happens on your device with your own accounts; we do not operate an email or SMS server, and message content is not transmitted to or stored by us. When you use the Showing Planner to schedule and organize showings, CoWorkRunner performs, under your own accounts, the same actions you or an assistant would take in the tools you already use; we are not affiliated with those third-party tools and do not operate them, and nothing you submit through them is transmitted to or stored by us. If a feature applies AI to that content (for example, to classify a message or draft a reply), that AI step follows Section 2.3.

2.5 Website Analytics

When you visit coworkrunner.com, we collect basic analytics:

• ·Page views, referring URL, browser type
• ·IP address (truncated for privacy)
• ·Date and time of visit

These statistics are provided by Cloudflare, our website host, as part of its standard server-side traffic reporting. We do not run any third-party analytics tracker, and we do not set analytics cookies or use cross-site tracking.

2.6 Support Communications

If you email us for support, we collect your email content and any attachments you send. We retain support tickets for up to two years.

3. How We Use Information

We use the information we collect to:

• ·Operate, maintain, and improve the Service
• ·Process your subscription, validate your license, and enforce the two-device limit
• ·Send you transactional emails (license codes, receipts, expiration notices, security alerts)
• ·Respond to your support requests
• ·Comply with legal obligations (tax reporting, fraud prevention)
• ·Detect and prevent abuse of the Service

We do not:

• ·Sell your information to anyone
• ·Share your information with advertisers
• ·Use your data to train AI models
• ·Profile you for marketing purposes
• ·Use cross-site tracking

4. How We Share Information

We share information only with the third-party service providers strictly necessary to operate the Service:

• ·Stripe (Stripe, Inc.) processes your payments. We share your email and subscription details with Stripe. Stripe's privacy policy governs their handling.
• ·Keygen (Keygen Sh, Inc.) issues and validates your license code. We share your email and subscription tier with Keygen.
• ·Anthropic (Anthropic, PBC) processes your AI requests. With the included access, request contents transit our managed gateway to Anthropic in real time; we meter volume, not content. If you connect your own API key, Anthropic processes requests on your account under your own Anthropic terms.
• ·RentCast provides comparable-sales and property data for the CMA feature. It receives the property addresses and details you look up.
• ·MapBox (Mapbox, Inc.) provides geocoding and showing-route optimization. It receives the addresses you enter.
• ·Sentry (Functional Software, Inc.) provides crash and diagnostic monitoring. It receives the technical and diagnostic data described in Section 2.2.
• ·Resend (Resend, Inc.) relays your message to us when you use our website contact form. We share your email address and the contents of your message.
• ·Website traffic statistics are provided by Cloudflare (above) as part of standard server-side hosting; we use no separate third-party analytics service.
• ·Cloudflare hosts coworkrunner.com and may receive standard server logs.
• ·Legal requirements. We may disclose information when required by law, subpoena, or court order, or to protect our legal rights.

5. Data Retention

• ·Account records (email, subscription history): Retained while your subscription is active and for up to 30 days after cancellation, then purged, except where retention is required by law (e.g., tax records, which we retain for the statutory period).
• ·Support tickets: Up to 2 years.
• ·Website analytics: Up to 14 months.
• ·Stripe records: Retained by Stripe per their retention policy.
• ·Your locally stored deal data: You control this. We have no copy and no ability to access, recover, or delete it.

6. Your Rights

Depending on where you live, you may have rights regarding your personal information:

6.1 All Users

• ·Access: Request a copy of the data we hold about you (account email, subscription history, license codes).
• ·Correction: Ask us to correct inaccurate information.
• ·Deletion: Ask us to delete your account-level information (subject to legal retention requirements).
• ·Export: Receive your data in a machine-readable format.

To exercise these rights, email privacy@coworkrunner.com from the email address associated with your account. We respond within the timeframes required by applicable law (generally within 45 days).

6.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what categories of personal information we collect and how we use them, the right to access and delete that information, and the right to non-discrimination for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We also do not collect "sensitive personal information" as the CPRA defines it. Because we do not sell or share personal information, we do not provide a "Do Not Sell or Share My Personal Information" link; none is required.

6.3 European Users (GDPR)

If you are in the European Economic Area or United Kingdom, you have rights under the GDPR including access, rectification, erasure, restriction, portability, and objection. The legal basis for our processing is contract performance (operating your subscription) and legitimate interests (fraud prevention, product improvement). Where we process the personal data of EEA or UK users, any transfer to the United States is made under appropriate safeguards such as the Standard Contractual Clauses.

Note: CoWorkRunner is currently targeted at US-based real-estate professionals. We do not actively market to EU users. If you are an EU user and have concerns, contact privacy@coworkrunner.com.

6.4 Other U.S. State Privacy Rights

Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, Utah, Oregon, and Montana) may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, the sale of personal information, or certain profiling. We do not sell personal information, conduct targeted advertising, or profile you. To exercise any of these rights, email privacy@coworkrunner.com. If we deny your request, you may appeal by replying to our decision, and we will respond to your appeal within the time your state's law requires.

7. Data Security

We implement reasonable technical and organizational measures to protect the information we hold:

• ·License codes stored encrypted at rest by Keygen
• ·All API traffic over HTTPS / TLS
• ·Stripe handles all payment data under PCI-DSS Level 1 compliance
• ·Two-factor authentication on our administrative accounts
• ·Principle of least privilege for our team's access to systems

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you in accordance with applicable law.

8. Children's Privacy

CoWorkRunner is intended for licensed real-estate professionals. We do not knowingly collect information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact privacy@coworkrunner.com and we will delete it.

9. Third-Party Platforms You Access Through CoWorkRunner

When you use CoWorkRunner with third-party platforms you choose to connect, such as your MLS or your brokerage's tools, those platforms have their own privacy policies that govern your data on those platforms. We do not control and are not responsible for those policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. For material changes, we will notify active subscribers by email at least 30 days in advance.

11. Contact

Questions about this Privacy Policy or our data practices:

Micha Kiel LLC (d/b/a CoWorkRunner)

7801 Point Meadows Drive, Unit 1307, Jacksonville, FL 32256

privacy@coworkrunner.com

Interim version. CoWorkRunner is in Beta / Early Access; these terms may be updated as the product and company formalize.