Privacy Policy

Last updated: 2026-04-30

DeckBlast is published by Three Poplars LLC ("we," "us," "our"). This privacy policy explains what information DeckBlast handles when you use it, what we do with that information, and which third parties receive it. The short version: DeckBlast is designed to minimize data collection. We do not require an account, we do not collect personal information, and the only data that leaves your Mac is what's strictly necessary to deliver the AI summary feature you've subscribed to.

What DeckBlast does

DeckBlast is a Mac menu bar utility that captures a region of your screen during a meeting or presentation and exports the captured slides as a PDF file. The free version runs entirely on your device. The paid Pro tier additionally records audio, transcribes it locally on your Mac, and sends slide images plus transcripts to our servers to generate AI-powered summaries embedded in the PDF.

What we collect (free tier)

If you use the free, capture-only flow, nothing leaves your Mac. The free flow makes no network calls. There are no servers, no accounts, no analytics, and no tracking on the free path.

What we collect (Pro tier)

When you subscribe to DeckBlast Pro and use the AI summary feature, the following data is transmitted to our servers:

• A hardware UUID derived from your Mac (Apple's IOPlatformUUID). This is a stable identifier for your device but contains no personally-identifying information. We do not link it to your name, email, Apple ID, or any other identity. It is the only identifier we use.
• Signed StoreKit receipts from Apple confirming your active subscription. Apple, not us, handles your payment. We never see your credit card, billing address, name, or Apple ID. We only see the cryptographic proof of subscription that Apple issues.
• Slide images and audio transcripts from each presentation you choose to summarize. Audio is transcribed locally on your Mac using on-device speech recognition (we never receive raw audio); the resulting text is sent alongside slide images to generate the summary. Slide images and transcripts are processed in memory to generate your summary, then discarded — we do not retain them.
• Operational metadata: the time of each request, the duration of the presentation, your DeckBlast app version, and your macOS version. We use this to operate the service, detect bugs, and bill quotas correctly.

Where Pro tier data goes

The data described above is processed by these services:

• Our servers store your hardware UUID and subscription status in a secure database, plus per-request operational metadata for billing and abuse prevention.
• Our AI provider (an enterprise AI service) receives your slide images and transcripts to generate the summary text. The provider is configured for one-shot processing without retention or training on your inputs.
• Apple's App Store Server sends us cryptographically-signed notifications about subscription state changes (renewals, cancellations, refunds). We never receive your Apple ID or payment information from Apple — only the subscription state.
• Our error tracking system (server-side only) captures server-side exceptions and request metadata for debugging. Slide content is not sent to error tracking. The Mac client does not send any telemetry.

What we do not collect

• Your name, email, phone number, postal address, or any other contact information.
• Your Apple ID, your iCloud account, or any account-derived identifier.
• Your payment information. Apple processes payment; we receive only the cryptographic subscription proof.
• Raw audio. Speech-to-text runs locally on your Mac; only the resulting text is sent.
• Browsing history, search history, location, contacts, calendar, photos, or any data outside the slide region you've selected.
• Marketing or advertising profiles. We do not sell or share data with advertisers.

Website analytics

The DeckBlast website (deckblast.app) uses Google Analytics 4 to measure aggregate traffic — total page views, referring sources (e.g., search engines, social posts), country-level location, browser, and OS. Google Analytics sets cookies on your browser to distinguish unique visitors. We use this only to understand how people find DeckBlast and which pages they read; we do not link website analytics to any individual or to the app.

The DeckBlast app does not use Google Analytics. The free tier of the app continues to make no network calls and collect no telemetry. The privacy guarantees described elsewhere in this policy apply to the app and are unaffected by website analytics.

To opt out of Google Analytics across all sites that use it, install the Google Analytics Opt-out Browser Add-on.

Permissions DeckBlast requests

DeckBlast asks macOS for these permissions:

• Screen Recording — required for both free and Pro tiers. Used to read the pixels of the screen region you select. Granted via System Settings → Privacy & Security → Screen Recording.
• Microphone — required only for the Pro tier's audio transcription feature, and only when you toggle "Record & Transcribe Audio" on. The free tier does not access the microphone. Granted via System Settings → Privacy & Security → Microphone.
• Network access — required only for the Pro tier to communicate with our servers for AI summaries. macOS does not surface network access as a user-toggleable permission, but DeckBlast's app sandbox declares the network.client entitlement so the OS knows it makes outbound HTTPS connections.

DeckBlast does NOT request access to your camera, contacts, calendar, photos, location, Apple Music library, or any other protected macOS resource.

What happens to your captured slides

Your captured slides live temporarily on your Mac's disk during a capture session. When you click Stop Capturing, a save dialog appears and DeckBlast writes the assembled PDF to the file location you choose. We have no copy of the saved PDF. No cloud upload. No backup server. If you delete the PDF file from your Mac, there is no other copy anywhere.

For Pro users with AI summaries enabled, the slide images and transcript text are sent to our servers (and forwarded to our AI provider) during summary generation. After the summary is generated and returned to your Mac, the slide images and transcripts are discarded by us. We do NOT retain a copy of your slides or transcripts after the summary is delivered.

Data retention

For Pro users, we retain:

• Your hardware UUID and subscription status: as long as your subscription is active, plus a reasonable archival period after cancellation (currently 12 months) for refund handling and chargeback dispute support.
• Per-request operational metadata (timestamps, presentation durations, app versions): 90 days, then automatically deleted by a daily cleanup job. Used for quota enforcement and aggregate operational metrics.
• Server-side error logs: 90 days.

We do NOT retain slide images or transcripts beyond the duration of a single summary generation request (typically a few seconds).

Required-reason API declaration

Apple requires apps to declare their reason for using certain system APIs. DeckBlast uses the File Timestamp API (reason code 0A2A.1) when writing the exported PDF. Pro additionally uses the UserDefaults API (reason code CA92.1) to persist user preferences locally on your Mac. Both reason codes are declared in DeckBlast's privacy manifest (PrivacyInfo.xcprivacy). No other reason codes are declared because no other restricted APIs are used.

Children's privacy

DeckBlast is not directed at children under 13. We do not collect personal information from anyone, including children. DeckBlast has no age-gate because its data handling does not vary based on age. If you are a parent and believe your child has subscribed without your consent, contact us at the email below; subscription cancellation is also available directly through Apple's App Store family settings.

Your rights

You can stop using DeckBlast and delete the app at any time. To delete your data from our servers:

• Cancel your subscription (App Store → your account → Subscriptions → DeckBlast → Cancel) to stop generating new data.
• Email support@deckblast.app with your hardware UUID (visible in DeckBlast's Settings) to request deletion of your subscription record and any associated operational metadata. We will fulfill verified requests within 30 days.

International users

Three Poplars LLC is based in Kentucky, United States. By using DeckBlast, you consent to the transfer of the data described above to the United States and its processing there. We do not currently advertise DeckBlast in jurisdictions where this is prohibited. If you have questions about cross-border data flows from your jurisdiction (e.g., EU/UK GDPR data subject rights), email us — we will respond within 30 days.

Changes to this policy

We may update this policy from time to time, particularly when DeckBlast adds new features that change the data flow. The "Last updated" date at the top of this page reflects the most recent revision. Material changes (new categories of data, new sub-processors, expanded retention periods) will be announced in the app via a one-time in-app notice before they take effect.

Contact

Questions, data deletion requests, or any privacy concern: support@deckblast.app