Legal

Privacy Policy

Effective date: May 31, 2026

This Privacy Policy describes how Native First Beograd-Zemun (“Native First”, “we”), a sole proprietorship registered in the Republic of Serbia (registration number 68127254, tax ID 115136822), with its registered seat at Ivana Delnegra Engleza 42, 11080 Zemun, Belgrade, Serbia, collects and processes personal data in connection with the website asomium.com (the “Site”) and the Asomium macOS application (the “Software”).

Native First is the data controller for the processing described below. For any privacy question or request, contact info@nativefirstapp.com.

1. What we collect

1.1 When you visit the Site

The Site uses Cloudflare Web Analytics, a privacy-friendly analytics service that does not set cookies, does not collect IP addresses for tracking purposes, and does not build cross-site profiles. Cloudflare counts aggregate page views, referrer and country so we can understand which content is useful. No personal data is sold or shared with advertisers.

The Site is served by Cloudflare Pages, which keeps short-lived server-side logs (IP address, user agent, request path) for security and anti-abuse purposes in accordance with Cloudflare’s privacy policy.

1.2 When you contact us

If you email us at info@nativefirstapp.com, we receive your email address, name (if provided) and the contents of your message. We use that information only to respond to you and to keep a record of the conversation.

1.3 When you purchase Asomium

All payments are processed by Lemon Squeezy (lemonsqueezy.com), which acts as the Merchant of Record. Lemon Squeezy collects the billing details necessary to complete the transaction (typically: name, email address, billing country, partial payment method details and, where required, VAT identifier). Native First receives a transaction record from Lemon Squeezy that includes your name, email, license key, country, plan and the net payout amount, but does not receive your full payment-card number. Lemon Squeezy’s handling of your data is governed by its privacy policy.

1.4 When you use the Asomium application

Asomium collects a small amount of anonymous, privacy-preserving product analytics through TelemetryDeck (telemetrydeck.com), a GDPR-compliant analytics provider based in the European Union. We use it only to understand how the app is used at an aggregate level — for example, how many users complete onboarding, connect App Store Connect, pull metadata, or activate a license — so we can find and fix the steps where the product is confusing or broken.

These signals are not tied to your identity. TelemetryDeck uses no advertising identifier (no IDFA), shows no App Tracking Transparency prompt, sets no cookies, and does not build a cross-app profile of you. We never send the contents of your work: your app names, metadata, screenshots, keywords, license key and API credentials are never included in analytics — only coarse “a step happened” events are recorded. The data is processed and stored within the EU.

Apart from this anonymous usage analytics, the Software communicates with the following systems on your behalf, using credentials you provide:

• App Store Connect (Apple) — to read and write metadata, screenshots, builds, reviews and analytics for your apps. Your ASC API key is stored encrypted in the macOS Keychain on your Mac. The key never leaves your machine; requests go directly from your Mac to Apple’s servers.
• Anthropic API (Claude) — used for AI translations, keyword expansion and release-note drafting. Your Anthropic API key is stored encrypted in the macOS Keychain. Requests go directly from your Mac to Anthropic’s servers under your own Anthropic account.
• Lemon Squeezy license API — used at app launch and periodically thereafter to validate that your license key is still active. Asomium sends your license key and an instance identifier; Lemon Squeezy responds with the license status. No usage data is included in this request.

Asomium also creates local files under ~/Library/Application Support/ReleaseKit/ on your Mac to cache configuration, snapshots, keyword tracking data and a translation counter. These files stay on your device.

2. Legal basis (GDPR)

Where the EU General Data Protection Regulation applies, our legal bases for processing are:

• Performance of a contract — to provide you with the Software and your license (Art. 6(1)(b) GDPR).
• Legitimate interest — to operate the Site securely, prevent abuse and respond to your enquiries (Art. 6(1)(f) GDPR).
• Legal obligation — to keep accounting records and tax documentation as required by Serbian law (Art. 6(1)(c) GDPR).

3. Sharing and third parties

We do not sell personal data. We share data only with the service providers we rely on to run our business:

• Lemon Squeezy — payments, billing, licensing.
• Cloudflare — site hosting and aggregate analytics.
• TelemetryDeck — anonymous, privacy-preserving product analytics for the macOS application (EU-based, no personal data).
• Apple and Anthropic — only when you, through Asomium, use your own credentials to call their APIs.
• Our accountant and applicable Serbian tax authorities, to the extent required by law.

4. International transfers

Our service providers may process data outside of Serbia and the EEA, including in the United States. These providers offer appropriate safeguards (standard contractual clauses or equivalent measures) for such transfers.

5. Retention

We retain transaction records for as long as required by Serbian tax and accounting law (currently ten years). Email correspondence is kept for as long as it is useful to support you and then deleted. License records are kept while the license is active and for a reasonable period afterwards to handle reactivation or refund requests.

6. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with the supervisory authority in your country of residence (in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection).

To exercise any of these rights, email info@nativefirstapp.com. We will respond within thirty (30) days.

7. Security

We use industry-standard measures to protect the limited personal data we hold: TLS for all network traffic, encrypted credentials stored in the macOS Keychain on your device, and access controls on our internal systems. No method of transmission or storage is perfectly secure; we can’t guarantee absolute security but we will notify affected users without undue delay if a breach involving their personal data occurs.

8. Children

Asomium is a professional developer tool and is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes

We may update this Privacy Policy from time to time. Material changes will be announced on the Site. The “Effective date” above indicates when this version took effect.

10. Contact

Native First Beograd-Zemun
Ivana Delnegra Engleza 42, 11080 Zemun, Belgrade, Serbia
Registration number 68127254 · Tax ID 115136822
Email: info@nativefirstapp.com