Privacy Policy

1.Who this covers

Routecore LLC publishes MeshRoute and decides how the data described here is handled. This policy covers the MeshRoute apps for Mac, iPhone and iPad, the meshroute.app website and its subdomains, the MeshRoute Pro licence service, and our support inbox.

2.What stays on your devices

We do not collect, store or transmit the contents of your network traffic, the files you send through Drop Box, the names of the devices on your mesh, or a record of who you connect to. That traffic goes device to device over the local radio link. It never reaches a server of ours, so there is nothing for us to hand over, lose or read.

You do not need an account to create or join a mesh. There are no advertising trackers in the apps, we run no analytics SDK in either app, and we do not sell personal information or share it for cross-context behavioural advertising.

To do its job, MeshRoute uses Apple’s local networking on your devices: peer-to-peer wireless, local network discovery (macOS and iOS ask the first time), and a private IPv4 subnet. On the Mac, a background helper creates the virtual network interface. It runs locally, with your admin approval, and it uninstalls itself when you delete the app. None of this is reported to us.

3.MeshRoute for Mac

The Mac app contacts our servers for two things, and nothing else.

• The licence service, when you buy Pro, unlock it, move it between Macs, or when the app periodically refreshes your entitlement. It receives your purchase email address or licence key, and a one-way identifier derived on your Mac that is used to enforce the device limit.
• The update feed, when the app checks for a new version. Like any download, that request carries your IP address and the version you are on, which our hosting provider logs for a short period for security and abuse prevention.

The device identifier is one-way: it cannot be reversed into your hardware, and it is not used to read files, follow your browsing or see anything on your mesh.

Pro keeps working offline. An internet connection is needed to buy, unlock or occasionally refresh Pro, and never to use the mesh itself.

4.MeshRoute for iPhone and iPad

The App Store version is bought through Apple, not through us. Apple takes the payment, and we never see your card details or your full billing address. Apple gives us the usual sales and tax reports, which are aggregated and do not identify you.

To keep track of whether a purchase is active, the app uses StoreKit together with RevenueCat. RevenueCat receives an app user identifier, the App Store receipt, and basic technical details such as the device model, operating-system version and country. It does not receive your name, your email address or anything about your mesh.

If you unlock a purchase you made on the web, the app exchanges your unlock link or licence key with our licence service in the same way the Mac app does.

5.Buying MeshRoute Pro

Direct Mac purchases are processed by Stripe. Stripe handles the card details and the billing information under its own privacy policy, and we never receive or store your full card number.

To issue a licence, let you restore it and protect it from abuse, we keep the purchaser email address, the order and licence records, the purchase status, and the one-way device identifiers currently holding the licence.

When the licence service is contacted we temporarily keep a shortened cryptographic hash of the connecting IP address, and a record of device moves, to spot abuse. Those activity records are deleted automatically after 30 days.

6.The website

The site is a set of static pages served through Cloudflare. It sets no analytics or advertising cookies, and it does not profile visitors. Cloudflare logs requests, including IP addresses, for a limited time to keep the site up and to block attacks.

The support form uses Google reCAPTCHA to keep out spam. Google receives your IP address, some information about your browser and how you interacted with the page, and may set cookies. Google uses that under its own privacy policy. If you would rather not use it, email us instead and skip the form.

7.Support requests

When you write to support, or send the form, we receive your name, your email address, your message and the page you sent it from, through our email provider. We use it to answer you and to work out whether something in the app needs fixing.

Please leave your full licence key and any sensitive mesh traffic out of a support message. The address you paid with is enough.

We keep support correspondence while it is useful for follow-up questions and for spotting recurring bugs, normally no longer than 24 months.

8.Crash reports

MeshRoute contains no crash-reporting SDK of its own. If Apple’s standard crash and analytics sharing is switched on for your device, Apple may pass us aggregated, anonymised diagnostic reports. You control that under Privacy and Security in your device settings, and turning it off does not change how the app works.

9.Companies that handle data for us

Each of these companies gets only what it needs for its part of the job. Most act as our processors. A few also act on their own account under their own published terms, which we note next to the name.

• Stripe, for Mac payments. Stripe is our processor for the purchase, and also uses data for fraud prevention and its duties as a payments company, under its own privacy policy.
• Apple, for App Store purchases, app delivery, notarization and optional crash reports. Apple is the seller for an App Store purchase and handles that under its own policy.
• RevenueCat, for keeping track of App Store purchases on iPhone and iPad. It acts as our processor.
• Cloudflare, for the website, downloads, updates and the support form endpoint. Cloudflare is our processor for hosting, and also uses what it sees across its network for its own security, under its own privacy policy.
• Google, for the reCAPTCHA check on the support form, under its own privacy policy. Emailing us skips it.
• Our email provider, for purchase emails, unlock links and support replies. It acts as our processor.

10.How long we keep things

• Purchase and licence records: while your licence is valid, and afterwards for as long as tax and accounting law requires.
• Licence-service activity records, including the shortened IP hash and device moves: 30 days.
• Unlock links: 60 minutes.
• Support correspondence: normally up to 24 months.
• Web and download request logs held by Cloudflare: a short period set by that service.

11.Why we are allowed to hold it

For people in the European Economic Area and the United Kingdom, our legal bases are: performing our contract with you, for purchase and licence records; our legitimate interest in a working, non-abused service, for the device limit, the shortened IP hash and the spam check; your consent, where Apple asks for it before sharing diagnostics; and legal obligation, for tax and accounting records.

12.Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask for it in a portable form, or object to a particular use. In the European Economic Area and the United Kingdom these are rights under the GDPR, and you may also complain to your local data protection authority.

If you are in California, you have the right to know what we collect, to delete it, to correct it, and not to be treated differently for asking. We do not sell personal information, and we do not share it for cross-context behavioural advertising, as the CCPA and CPRA define those terms, so there is nothing to opt out of.

Write to us from the address you bought with, so we can find your records without asking you for more personal information than we already have. We answer within 30 days. Deleting your purchase record also ends the licence it issued, so we will say so before we do it.

13.Where data is handled

We are based in the United States, and the companies listed above operate globally. Data may be processed in the United States and in other countries where those companies run infrastructure. Where personal data moves out of the European Economic Area or the United Kingdom, it moves under the safeguards those providers offer, such as standard contractual clauses.

14.Security

15.Children

MeshRoute is not directed at children under 13, or under the digital-consent age where you live, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, write to us and we will delete it.

16.Changes to this policy

We update this policy when what we do changes. The current version always lives at this address with its date at the top, and where a change matters we will point it out on the site rather than leaving you to spot it.

17.Contact

Routecore LLC publishes MeshRoute. Write to support@meshroute.app or use the support form. We usually answer within one working day.

Routecore LLC 30 N Gould St, Ste N Sheridan, WY 82801 United States