Privacy Policy

Convoy — Film Archive
Last updated: July 2026

Overview

Convoy is designed around a simple principle: your archive is yours. The app stores everything locally on your Mac and does not collect, transmit, or share your personal information. This policy explains in plain terms what data exists when you use Convoy, where it lives, and what we do (and don't do) with it.

Information We Do Not Collect

Convoy does not collect personal information. Specifically:

  • No account or registration is required to use the app
  • No analytics or usage data is sent to any server
  • No crash reports are transmitted automatically
  • No advertising identifiers or tracking technologies are used
  • No third-party SDKs that collect behavioural or personal data are included in the app

Data Stored Locally on Your Device

All data created by Convoy lives entirely on your Mac. This includes:

Roll and image metadata — titles, notes, dates, film stock, camera, scanner, location tags, and people tags you add to your rolls and images. This is stored in a SQLite database in your Mac's Application Support folder (~/Library/Application Support/Convoy).

Thumbnails — small JPEG previews generated from your image files, stored in the same Application Support folder. These are derived from files you import and are never transmitted anywhere.

Sidecar files — when you use certain features, Convoy may write a .convoy/metadata.json file inside your roll's folder on disk. This contains the same roll metadata described above and exists so your records travel with your files if you move them.

Preferences — your theme and window settings, stored locally via Electron's standard preferences mechanism.

None of this data ever leaves your device unless you explicitly choose to export or back it up to a location you select.

File System Access

Convoy accesses only the folders and files you explicitly select through macOS file dialogs. The app reads your image files to generate thumbnails and display your archive. It writes sidecar files to roll folders you have imported, and writes backup copies only to destinations you choose. Convoy is non-destructive by design and never modifies your original image files.

No Network Communication

Convoy does not make network requests as part of its normal operation. The only outbound action the app can take is opening external URLs in your browser — for example, the Privacy Policy link on the About screen. This is handled by your system browser and no data is sent by Convoy itself.

Third-Party Services

Apple — if you purchase Convoy through the Mac App Store, your transaction is handled entirely by Apple under Apple's own Privacy Policy (apple.com/legal/privacy). Convoy does not receive or store your payment information.

Gumroad — if you purchase Convoy directly through Gumroad, your transaction is handled by Gumroad under their own Privacy Policy (gumroad.com/privacy). Convoy does not receive or store your payment information.

Neither purchase channel requires Convoy to process or retain any personal data.

Children's Privacy

Convoy is not directed at children under the age of 13 and does not knowingly collect information from children. As the app collects no personal information from any user, no special provisions are required.

Your Rights

Because Convoy does not collect or store personal data on any server, there is no personal data held by the developer to access, correct, or delete. All data in Convoy exists on your own device and is entirely under your control. You can delete it at any time by removing the app and its associated Application Support folder.

If you have questions about your data or this policy, you can contact us directly at the address below.

Changes to This Policy

If this policy changes materially, the updated version will be posted at convoy.film/privacy-policy/ with a revised date. Continued use of the app after any changes constitutes acceptance of the updated policy.

Contact

Alain William van Heerden
alain@convoy.film
convoy.film