Privacy policy

How Provaz B.V. handles personal data on usedux.app and in dux.

Updated October 2026

This policy explains what personal data Provaz B.V. handles when you use the dux app and the website usedux.app, and why. It is written to be read. If something is unclear, ask us.

Who is responsible

Provaz B.V., the Netherlands, is the controller of the personal data described here. For privacy questions, write to hello@provaz.eu or use the contact form.

CompanyProvaz B.V.
Postal addressP.O. Box 9663
3506 GR Utrecht
The Netherlands
Emailhello@provaz.eu
Phone+31 6 22 80 66 52
Chamber of Commerce (KvK)84954264
VAT IDNL863438337B01
Websiteprovaz.eu

The dux app

The app does not collect personal data. It has no account and sends no analytics. Scans, history, suggestions and your cleanup stay on your Mac. Details are on the privacy and safety page.

Two network requests exist in the direct download: a check for a new version, which fetches a public file from this website, and the refresh of a yearly or Business license near its end date. Neither sends information about your files. Like any request on the internet, they reveal your IP address to the server that answers.

The website

  • No cookies. The website sets no cookies and shows no cookie banner.
  • Analytics. We use Exquex, a cookieless analytics service, to see which pages are read. It does not use cookies. Exact data fields: to be confirmed by the owner.
  • Hosting. The site is served by Cloudflare. Cloudflare processes technical data such as your IP address to deliver pages and protect them from abuse.
  • Fonts. Fonts are served from this site. No request goes to a font provider.
  • Your appearance setting. If you choose light or dark in the footer, your browser stores that choice locally. It is never sent to us.

Forms and email

When you use the contact form or request a business trial, we receive the details you type: your name, email address, topic and message. We use them only to answer you, and we keep them as long as needed to handle your request and any follow up, and then delete them. The contact form is handled by mail818, the form service we use: it stores your message and forwards it to us by email. The page with the contact form loads mail818’s script from cdn.mail818.com; other pages do not. The form also has a hidden field that catches automated spam. Legal basis: our legitimate interest in answering you, or taking steps you ask for before a contract.

Please do not put file names or other private data in your message.

Purchases

  • Mac App Store. Apple sells and processes the purchase under its own terms and privacy policy. We receive aggregated sales reports, not your payment details.
  • Direct download. Stripe, Inc. acts as the seller of record (reseller) through Stripe Managed Payments. Stripe collects your payment details, calculates and collects tax, sends your receipt and invoice and handles payment support, under its own privacy policy. We receive what we need to issue a license: your email address, the plan, the number of seats, the organization name if you give one, and the license dates. Legal basis: performing the contract, and our legal obligations such as bookkeeping.
  • Moving an App Store purchase to the direct download. When the direct download finds a Pro purchase from the App Store version on your Mac, it sends Apple’s record of that purchase (transaction number, product and dates, no name or payment details) to usedux.app, and we ask Apple to confirm it. We then issue a license key and keep the transaction number, the plan, the license dates and, only if you give it, your email address. We use them to keep the license working, to count licenses and to help you when you contact support. Legal basis: performing the contract.

How long we keep data

Support messages are kept as long as needed to help you. License records are kept while the license is valid and as long as the law requires us to keep accounting records. Exact periods: to be confirmed by the owner.

Sharing

We do not sell personal data. We share it only with the processors named above (Cloudflare for hosting, mail818 for the contact form, Stripe for direct purchases, our email provider for answering you) and where the law requires.

Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on our legitimate interest. Write to us and we answer within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

When we change this policy we update the date at the top of the page.