Your workspace. Your information.

The essentials

This policy covers the DeskOS iPhone app and deskos.live, provided by Mazen AlAshbi. It was last updated on October 10, 2026.

Websites you open, cloud file providers you use, Apple's services, and support services have their own privacy practices. Data handled by those services is described separately below.

Information on your device

DeskOS stores app settings, workspace state, local documents, browser settings, website data, bookmarks, and editing-project information on your device as needed for the features you use.

Your browser may keep cookies and supported sign-in sessions so websites can recognize you later. This data can include information supplied by those websites. It is not sent to the DeskOS developer. Clearing relevant browser data may sign you out or reset website preferences.

Video projects may reference original media rather than duplicating every file. Project metadata, thumbnails, temporary media, and exports can still occupy storage. Device backups, iCloud, and file-provider services may handle information according to your device settings and those providers' policies.

Files, Photos & permissions

You control which files, folders, and Photos items DeskOS can access through iOS permissions and pickers. The app uses this access to show your chosen media, open documents, edit, and export.

Photos changes or deletions follow the permissions and confirmations provided by iOS. You can manage app permissions in iPhone Settings. DeskOS does not gain access to other apps' private storage.

Files in iCloud or another provider may be downloaded or synchronized by that provider. Uploading a file to a website from the DeskOS browser shares it with that website at your direction.

Captions & media processing

Built-in caption generation uses on-device speech processing. Your selected audio is not uploaded to the DeskOS developer for transcription. Some caption options depend on your iOS version, supported languages, and available speech models.

Speech models may need to download from Apple or the relevant model host before local processing can run. Those hosts receive ordinary network-request information, such as an IP address, when your device downloads a model.

Using an external transcription service or another website in the browser is governed by that service's policy.

Websites & third-party services

When you use the browser or a web-app shortcut, the website receives normal web traffic. That may include your IP address, browser information, cookies, and anything you sign in, type, upload, or submit there.

Google, YouTube, WhatsApp, and other services independently determine how they process information and whether they support DeskOS's browser. Review their policies before signing in or sharing files. DeskOS does not control those services.

App Store and TestFlight installation, purchases, and optional diagnostics are handled by Apple under its policies and your settings. Apple may make testing or crash reports available to developers through its platform.

Optional AI assistance (in testing)

The upcoming DeskOS Assistant connects directly to the AI provider you choose using your personal API key. Keys are stored in the device Keychain. After you allow sharing, your request and the supported context needed for your selected app are sent to that provider. The DeskOS developer does not supply a shared API account or receive your API key.

Provider processing, retention and usage charges follow your agreement and settings with that provider. Browser password fields, cookies and existing form values are excluded from the assistant's context. Do not include information you do not want sent to your chosen provider in a request. You can disconnect the provider and stop a task from the app.

This website

deskos.live has no advertising trackers or analytics scripts and does not set tracking cookies. Images, fonts, styles and scripts are served with the site. Its optional email-verification giveaway is described below; it does not create a DeskOS app account.

Hosting and network providers may process standard request logs, such as IP address, requested page, time, browser information and errors, to deliver and secure this website. Their infrastructure and backup practices apply. Links to Apple, GitHub and other services are governed by those providers' policies.

Free-code signup & email verification

If you request a promo code, we process your email address, selected App Store country or region, acceptance of the giveaway terms, request time, verification status and assigned promo code. We use this information to verify your address, deliver or recover your code, prevent duplicate claims and respond to giveaway support requests. The code form also offers an unchecked choice to receive DeskOS news, features, tips and offers. If selected, the same verification link confirms that email subscription. Without that choice, code verification does not create a marketing subscription.

Your email and the transactional message are processed by Purelymail, our email delivery provider. Giveaway messages are sent from hello@deskos.live. Our Hostinger server stores the campaign data privately. Apple receives the selected country code when we check app availability; we do not send Apple your email address in that check. Apple separately processes redemption when you use a code.

Verification links expire after 20 minutes. The service stores a hash of each link token; pending outgoing messages may temporarily contain the link. Sent message bodies are cleared from our queue. Pending, unverified signup records are removed after 24 hours without a new request. We use keyed hashes of normalized email addresses to prevent duplicate codes and keyed hashes of IP addresses for rate limits and to restrict giveaway requests to one email per IP address, including shared Wi-Fi. IPv6 addresses within the same /64 network are grouped together. Rate-limit entries expire after 24 hours. The separate IP-to-email hash binding is retained until 30 days after the campaign expires, even if an unverified signup is removed. We do not store raw IP addresses in the giveaway database.

Active campaign records containing email addresses are removed within 30 days after the codes expire, unless a separate support or legal obligation requires retention. Provider logs and backups may remain until their normal rotation. We do not sell your email address. You may request access, correction or deletion by replying to a DeskOS giveaway email; do not post your email, verification link or code in the public support tracker. Deleting a record does not create entitlement to another code.

Winner-card claims

When you claim a physical DeskOS winner card, we process its identifier, your email, selected Apple Account region, verification time and assigned App Store code. Card secrets and email-verification tokens are stored as keyed hashes. Each card can be bound to one verified email; verification links expire after 20 minutes. This separate card flow allows multiple winners on shared event Wi-Fi, with keyed IP hashes used for rate limits.

If no code is available, we retain your verified claim and email until it is fulfilled or you ask us to remove it. We send verification, claim-status and code-delivery emails through Purelymail and keep Sent copies for support. These are transactional emails; claiming a card does not subscribe you to marketing. Once fulfilled, the claim email and region are removed from the winner-card table 30 days after that code expires. Minimal hashed card and email records remain to prevent reuse. An existing email subscription or support correspondence follows its own retention policy. Expired verification tokens are deleted.

Our private Hostinger database holds the claim records. The actual country code is sent to Apple only to check app availability. Contact hello@deskos.live for access, correction, cancellation or deletion. Do not publish your card or verification link. Provider logs, Sent messages and backups follow the providers’ retention and backup practices.

Support & your choices

If you contact support, the information you choose to provide is used to respond to your question and investigate the issue. Our GitHub issue tracker is public: posts, attachments, and profile details may be visible to anyone.

Do not submit passwords, financial details, private files, or sensitive personal information. GitHub controls storage and account-related requests on its service.

You can revoke permissions in iOS Settings, clear browser data in DeskOS, remove app documents, and delete the app's local data by deleting the app. Exports, Photos items, backups, and files stored with other providers may remain in those locations.

For questions about this policy, use the support page. If a privacy request involves sensitive details, begin with a general request without posting those details publicly. We will update this page when our practices change.

DeskOS email updates

DeskOS news, features, tips and offers, including free-code announcements, are an email subscription operated by Mazen Ash LLC for DeskOS. New public promo-code claims from November 1, 2026 require joining this subscription. Recovering an existing code does not. Select the unchecked subscription box and confirm your email to join. You may also subscribe without claiming a code. We ask you to select an unchecked consent box and then confirm through an email link before sending the emails you selected. The code form uses one verification link for both choices. The confirmation link expires after 24 hours. Subscribing does not reserve a code or guarantee a future giveaway.

We store your email, subscription status, consent wording version, request and confirmation times, and keyed IP hashes documenting the request and confirmation. The optional “I have iPhone Duo” checkbox records your device preference so we can make updates more relevant. It does not affect code eligibility. We save that choice only after email verification. Older registrations without a device choice remain unrecorded. These messages use our existing Purelymail delivery service and private Hostinger database. Pending confirmation message bodies are cleared after delivery; expired messages are removed. We do not sell the list or use tracking pixels.

Use the unsubscribe link in any future-code email or reply with “unsubscribe”. You do not need an account or password. The website applies your unsubscribe preference immediately and cancels unsent DeskOS marketing emails. Your contact stays on the list marked unsubscribed, with the minimum record needed to respect your preference. You will not be subscribed again unless you request and confirm a new opt-in. Unsubscribing does not invalidate a previously issued promo code or prevent code recovery you request.

Unconfirmed new notification signups are removed after seven days. Confirmed subscriptions are retained while active; opt-out and consent records are retained to document and respect your choice. Existing giveaway-only contacts remain not subscribed and follow the giveaway retention schedule above unless they separately opt in or request an opt-out. You can request access, correction or deletion by emailing hello@deskos.live; an unsubscribe request alone does not delete your record.

Contact: DeskOS — Mazen Ash LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Email: hello@deskos.live.

Subscriptions previously confirmed only for free-code announcements keep that narrower preference. Earlier code recipients are not retroactively enrolled. We record the consent wording version, request and confirmation times, and keyed IP hashes. An unsubscribe remains effective unless you make and confirm a new request.