Privacy Policy

The Short Version

Your data stays on your computer. Exhibit A is a local-first desktop application — your call history, messages, and case data are never uploaded to any server. We don't have access to your data and couldn't read it even if we wanted to.

Desktop Application

• Data access:Exhibit A reads your Mac's CallHistory.db and iMessage chat.db databases locally. This requires Full Disk Access, which you grant through System Settings.
• Data storage: All data is stored locally on your Mac in ~/Library/Application Support/Exhibit A/. Nothing is uploaded to any server.
• Network requests:The only network request the app makes is to validate your license key with our own server at getexhibita.com over HTTPS. Only the license key is sent — never your call history or messages.
• No telemetry: Analytics are off by default and opt-in only. Unless you turn them on, zero data is sent to us or any third party.

Web App (getexhibita.com/app)

• Everything runs in your browser.When you open an iPhone backup, Exhibit A reads it entirely on your own computer using in-browser code (WebAssembly). Your calls and messages are never uploaded— there is no account and no server that receives them. You can disconnect from the internet after the page loads and it still works.
• Data storage:Your parsed exhibit is kept only in your browser's local storage on this device, so you can come back to it. Clearing your browser data removes it.
• Network requests: The only requests are to load the app itself and, if you enter a license key, to validate it with our server. The license key is the only thing sent.

This Website

• Analytics: We use Vercel Analytics and Speed Insights to measure page views and performance. These tools are privacy-focused, do not use cookies, and do not collect personally identifiable information (PII). They are GDPR-compliant.
• Download tracking: We track download button clicks (which button was clicked) to understand how visitors interact with the site. No personal information is collected.
• No cookies: This website does not use cookies.

Third-Party Services

• Vercel: Website hosting and analytics (Vercel Privacy Policy)
• Stripe: Payment processing at checkout. Card details go directly to Stripe; we never see or store them (Stripe Privacy Policy)
• Resend: Sends your license-key email after purchase (Resend Privacy Policy)
• GitHub: Application distribution via GitHub Releases (GitHub Privacy Statement)

Contact

Questions about this policy? Email us at support@getexhibita.com.