Privacy Policy

Effective Date: July 30, 2026 · Last Updated: July 10, 2026

This Privacy Policy explains how Micha Kiel LLC, a Florida limited liability company doing business as CoWorkRunner ("CoWorkRunner," "we," "us," "our"), collects, uses, and protects information when you use CoWorkRunner, our macOS productivity application for real-estate professionals (the "Service"), and our website at coworkrunner.com.

1. Summary (Plain English)

CoWorkRunner is built so your client data stays on your Mac. We do not collect or store the contents of your real-estate deals, contracts, MLS data, or client communications. AI features are included with your subscription: requests travel transiently through CoWorkRunner's managed gateway to Anthropic for processing, and we meter usage volume for billing - never the contents. (Where the app supports it, you may instead connect your own Anthropic API key, in which case requests go to Anthropic on your own account.) We only collect what we need to operate your subscription and license: your email, your subscription status, a hashed identifier for the Mac you activated on, and basic website analytics.

2. What We Collect

2.1 Account Information

When you purchase a subscription, we (via our payment processor Stripe and our licensing provider Keygen) collect:

• ·Your email address
• ·Your name (if you provide it at checkout)
• ·Your country (for tax purposes)
• ·A Stripe customer ID
• ·A Keygen license code we issue to you
• ·Subscription status (trialing, active, past due, canceled)
• ·Subscription start, renewal, and end dates

We do not collect or store:

• ·Credit card numbers, CVVs, or expiration dates (these go directly to Stripe; we never see them)
• ·Bank account numbers
• ·Your tax identification number

2.2 Machine Activation Information

When you activate CoWorkRunner on your Mac, we collect:

• ·A SHA-256 hash of your Mac's hardware identifier (used to enforce the one-Mac-per-subscription limit)
• ·The version of CoWorkRunner you have installed
• ·The date and time of activation

We do not collect:

• ·Your Mac's name or geographic location
• ·A list of other software installed on your Mac
• ·Files or documents on your Mac
• ·Browser history or web activity

CoWorkRunner includes crash and error reporting from Sentry, and it is currently switched off. No crash or diagnostic data leaves your Mac today. We may enable it in a future release to find and fix faults that customers would otherwise have to report by hand; if we do, it will be described in that release's notes. When enabled, it would send technical information such as the app version, operating-system version, error messages, app-state breadcrumbs, and the network/IP information that accompanies any internet request (which may indicate your approximate region). It is configured to strip file paths and user names before anything is sent, and it never sends the contents of your transactions, documents, or client data.

2.3 Your Deal Data, Client Data, and AI Processing

This is the most important section.

CoWorkRunner does not collect, transmit, or store the contents of your real-estate transactions. This includes but is not limited to:

• ·Buyer, seller, lender, title-company names or contact information
• ·Contracts, addenda, disclosures, inspection reports, closing statements, or any PDFs you process through the application
• ·Purchase prices, financing terms, or any financial figures
• ·Client personal information, SSNs, or banking information
• ·MLS data, listing information, comp data
• ·Client communications drafted or sent through the Service

All such data is stored locally on your Mac in a folder owned and managed by you.

Your AI features are powered by Anthropic (Claude), included with your subscription. When you use the included access, a request travels transiently through CoWorkRunner's managed gateway to the Anthropic API for processing under our provider agreements. The content of the request, which may include text and images of the documents you are working with, passes through the gateway in transit only: we meter usage volume for billing and abuse prevention, and we do not store, log, or review the contents. If you instead connect your own Anthropic API key (where the app supports it), the request is transmitted to Anthropic under your own account and governed by your terms with Anthropic. We recommend reviewing Anthropic's data handling at anthropic.com/privacy and choosing the Anthropic plan and settings appropriate for the sensitivity of your client data.

2.4 Email and Messaging You Run Through the App

CoWorkRunner can read your Mail.app inbox and send messages (for example, through the Showing Planner) by automating applications already on your Mac, namely Mail and Messages, using your own accounts. This activity happens on your device with your own accounts; we do not operate an email or SMS server, and message content is not transmitted to or stored by us. When you use the Showing Planner to schedule and organize showings, CoWorkRunner performs, under your own accounts, the same actions you or an assistant would take in the tools you already use; we are not affiliated with those third-party tools and do not operate them, and nothing you submit through them is transmitted to or stored by us. If a feature applies AI to that content (for example, to classify a message or draft a reply), that AI step follows Section 2.3.

2.5 Website Analytics

When you visit coworkrunner.com, we collect basic analytics:

• ·Page views, referring URL, browser type
• ·IP address (truncated for privacy)
• ·Date and time of visit

These statistics are provided by Cloudflare, our website host, as part of its standard server-side traffic reporting. We do not run any third-party analytics tracker, and we do not set analytics cookies or use cross-site tracking.

2.6 The Demo Video

Our product demo is hosted on YouTube and embedded through youtube-nocookie.com. Nothing is requested from YouTube and no cookie is set until you press play - the page shows only our own artwork until then. If you do play it, YouTube receives your IP address and device information under Google's privacy policy, exactly as if you had watched it on YouTube directly. We receive no analytics from the player.

2.7 Your Acceptance of Our Terms

When you accept the Terms of Service inside the application, we create a record of that acceptance so that both of us can later establish what you agreed to and when. That record contains the version of the Terms you accepted, the date and time in Coordinated Universal Time, the full IP address the acceptance was sent from, your application version and platform, a one-way cryptographic hash of a device identifier (the same value used to bind your license to your Mac - never the raw hardware identifier), and your license identifier where one exists at that time. Unlike the truncated address used for website analytics, this address is kept in full, because a partial address would not serve as evidence. We use this record only to establish and defend the agreement between us; we do not use it for advertising, profiling, or analytics, and we do not sell it. It is retained for as long as you have a relationship with us and for a reasonable period afterwards. Because this record exists to establish and defend a legal agreement, we retain it even if you ask us to delete your other information, as permitted by privacy law for the establishment, exercise, or defense of legal claims; we will tell you when that is the reason we have kept something. When you accept our Terms during checkout instead, our payment processor keeps its own equivalent record.

2.8 Settings Cards and Backups You Create

CoWorkRunner can write two kinds of file for you, and we never receive either one. Both are written locally, to a folder you choose, and neither is transmitted to us or to anyone else.

A settings card holds the things you configured: your name, phone, email, real-estate license number, brokerage details and address, your review-profile links, your inspection-vendor lists, your compliance index, and your Contract Studio setup. It does not contain your deals, your documents, your clients, or your CoWorkRunner license key.

A backup holds everything in your CoWorkRunner data folder, including your deals and the documents you have filed against them.

Both files are encrypted before they are written, using a passphrase you choose (PBKDF2-HMAC-SHA256 at 600,000 iterations, AES-GCM). We do not hold a copy of your passphrase and we cannot reset it or recover the file for you. If you keep these files in a synced folder such as iCloud Drive or Dropbox, that is your arrangement with that provider; the file that goes there is encrypted.

Once you have saved a settings card, CoWorkRunner keeps it up to date automatically whenever you change one of the settings it holds, writing to the same file in the same place. You can stop this at any time by deleting the file and its passphrase entry from your Keychain.

2.9 Support Communications

If you email us for support, we collect your email content and any attachments you send. We retain support tickets for up to two years.

3. How We Use Information

We use the information we collect to:

• ·Operate, maintain, and improve the Service
• ·Process your subscription, validate your license, and enforce the one-Mac-per-subscription limit
• ·Send you transactional emails (license codes, receipts, expiration notices, security alerts)
• ·Respond to your support requests
• ·Comply with legal obligations (tax reporting, fraud prevention)
• ·Detect and prevent abuse of the Service

We do not:

• ·Sell your information to anyone
• ·Share your information with advertisers
• ·Use your data to train AI models
• ·Profile you for marketing purposes
• ·Use cross-site tracking

4. How We Share Information

We share information only with the third-party service providers strictly necessary to operate the Service:

• ·Stripe (Stripe, Inc.) processes your payments. We share your email and subscription details with Stripe. Stripe's privacy policy governs their handling.
• ·Keygen (Keygen Sh, Inc.) issues and validates your license code. We share your email and subscription tier with Keygen.
• ·Anthropic (Anthropic, PBC) processes your AI requests. With the included access, request contents transit our managed gateway to Anthropic in real time; we meter volume, not content. If you connect your own API key, Anthropic processes requests on your account under your own Anthropic terms.
• ·RentCast provides comparable-sales and property data for the CMA feature. It receives the property addresses and details you look up.
• ·MapBox (Mapbox, Inc.) provides geocoding and showing-route optimization. It receives the addresses you enter.
• ·Sentry (Functional Software, Inc.) provides crash and error monitoring. It is currently switched off and receives nothing. If we enable it, it would receive the technical and diagnostic data described in Section 2.2.
• ·Resend (Resend, Inc.) relays your message to us when you use our website contact form. We share your email address and the contents of your message.
• ·Website traffic statistics are provided by Cloudflare (above) as part of standard server-side hosting; we use no separate third-party analytics service.
• ·Cloudflare hosts coworkrunner.com and may receive standard server logs.
• ·Legal requirements. We may disclose information when required by law, subpoena, or court order, or to protect our legal rights.

5. Data Retention

• ·Account records (email, subscription history): Retained while your subscription is active and for up to 30 days after cancellation, then purged, except where retention is required by law (e.g., tax records, which we retain for the statutory period).
• ·Support tickets: Up to 2 years.
• ·Website analytics: Up to 14 months.
• ·Stripe records: Retained by Stripe per their retention policy.
• ·Your locally stored deal data: You control this. We have no copy and no ability to access, recover, or delete it.

6. Your Rights

Depending on where you live, you may have rights regarding your personal information:

6.1 All Users

• ·Access: Request a copy of the data we hold about you (account email, subscription history, license codes).
• ·Correction: Ask us to correct inaccurate information.
• ·Deletion: Ask us to delete your account-level information (subject to legal retention requirements).
• ·Export: Receive your data in a machine-readable format.

To exercise these rights, email support@coworkrunner.com from the email address associated with your account. We respond within the timeframes required by applicable law (generally within 45 days).

6.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what categories of personal information we collect and how we use them, the right to access and delete that information, and the right to non-discrimination for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We also do not collect "sensitive personal information" as the CPRA defines it. Because we do not sell or share personal information, we do not provide a "Do Not Sell or Share My Personal Information" link; none is required.

6.3 European Users (GDPR)

If you are in the European Economic Area or United Kingdom, you have rights under the GDPR including access, rectification, erasure, restriction, portability, and objection. The legal basis for our processing is contract performance (operating your subscription) and legitimate interests (fraud prevention, product improvement). Where we process the personal data of EEA or UK users, any transfer to the United States is made under appropriate safeguards such as the Standard Contractual Clauses.

Note: CoWorkRunner is currently targeted at US-based real-estate professionals. We do not actively market to EU users. If you are an EU user and have concerns, contact support@coworkrunner.com.

6.4 Other U.S. State Privacy Rights

Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, Utah, Oregon, and Montana) may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, the sale of personal information, or certain profiling. We do not sell personal information, conduct targeted advertising, or profile you. To exercise any of these rights, email support@coworkrunner.com. If we deny your request, you may appeal by replying to our decision, and we will respond to your appeal within the time your state's law requires.

7. Data Security

We implement reasonable technical and organizational measures to protect the information we hold:

• ·License codes stored encrypted at rest by Keygen
• ·All API traffic over HTTPS / TLS
• ·Stripe handles all payment data under PCI-DSS Level 1 compliance
• ·Two-factor authentication on our administrative accounts
• ·Principle of least privilege for our team's access to systems

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you in accordance with applicable law.

8. Children's Privacy

CoWorkRunner is intended for licensed real-estate professionals. We do not knowingly collect information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact support@coworkrunner.com and we will delete it.

9. Third-Party Platforms You Access Through CoWorkRunner

When you use CoWorkRunner with third-party platforms you choose to connect, such as your MLS or your brokerage's tools, those platforms have their own privacy policies that govern your data on those platforms. We do not control and are not responsible for those policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. For material changes, we will notify active subscribers by email at least 30 days in advance.

11. Contact

Questions about this Privacy Policy or our data practices:

Micha Kiel LLC (d/b/a CoWorkRunner)

7801 Point Meadows Drive, Unit 1307, Jacksonville, FL 32256

support@coworkrunner.com

Interim version. CoWorkRunner is in Beta / Early Access; these terms may be updated as the product and company formalize.