Legal
Privacy Policy
Last updated 14 October 2026 · matches the Privacy Notice in our apps, terms version 2026-10-14
Pangalin (“we”, “us”), a trading name of KGB Equity (Pty) Ltd (registration 2023/520439/07, 44A Bonnie Doon Place, East London, South Africa), makes software. We collect as little personal information as we can, and we never sell it. This policy covers this website and our apps, including Pangalin Space Manager and Pangalin Uninstaller, and is written to meet South Africa's Protection of Personal Information Act (POPIA) and, where it applies to you, the EU/UK GDPR.
This website
- No tracking: this site uses no advertising or tracking scripts and no third-party analytics, sets no cookies, and we don't sell your information. Our emails don't track whether you open them or click their links either.
- Anonymous counts: so we know whether the site is working, we count how many times an app page is opened, a download starts and “Send to my Mac” is tapped. Your browser sends only what happened and for which app (and, on the Pangalin Space Manager page, which of two button wordings it showed) to our licence service, which adds one to that day's total. We don't store your IP address or any identifier with the counts, and they can't be linked to you. To stop one device flooding the totals, our licence service briefly keeps a scrambled (hashed) form of the IP address, never the address itself, and deletes it within two days. If you arrived from a link with a source tag (for example from our post on Product Hunt) or from another website, we count that source, as a short name like “reddit” or “search”, with the visit, and pass the same short name to Polar's checkout so purchases can be counted by source. We never store the full address you came from. We also count visits to our help articles, whether readers found an article helpful (if you tap Yes or No at the end of it), and, if you choose to tap one, your answer to “How did you find us?”. Your browser's session storage, cleared when you close the tab, stops a reload from counting twice and keeps the button wording the same during your visit.
- When you buy, Polar tells us that a checkout was started or left unfinished, and we keep only a count per product and day, not your email address.
- If you use the light/dark switch, your choice is saved in your own browser (not a cookie) so the site remembers it. It is never sent to us.
- Fonts and images are served from this site; our pages load nothing from anyone else. When you choose to buy, you go to Polar's checkout (below).
- Our hosting provider keeps standard server logs (such as IP address, time and page requested) for security and reliability, and deletes them on its normal schedule.
Pangalin Space Manager
Your scans and file contents stay on your Mac. Pangalin Space Manager has no analytics, telemetry or crash reporting.
What never leaves your Mac
File contents, file paths, scan results, Explain answers, account credentials and advertising identifiers, unless you choose to email us a support bundle (see below). The app reads storage information from the Mac itself: the drives and folders you choose to scan, and the cloud-file placeholders macOS already keeps locally. Space Watch and History work on your Mac.
Explain
Explain answers are written on your Mac by Apple's on-device model (Apple Intelligence). The model is given only facts the app has already measured: the item's name, its kind, the folder it's in (your home folder shown as "~", not your user name), its size, and the app's own rating and note. It is never given the contents of your files. Nothing is sent to us, to Apple's cloud or to any other AI service, and Explain makes no network requests. Answers are kept in memory while the app is open and discarded when you quit. Where Apple Intelligence isn't available, the feature doesn't appear.
What stays in your Keychain
Pangalin Space Manager keeps your licence key, two counters (free space freed, and free explanations used) and a licence date check (which stops a licence being extended by changing the Mac's clock) in your Mac's Keychain. Uninstall Pangalin Space Manager… deliberately leaves these four items, so reinstalling doesn't need the key again or restart the free allowance. They never leave your Mac, and you can delete them in Keychain Access.
The network requests it does make
- Update check: once per launch, the app asks whether a newer version exists. If one does, it opens the download page in your browser; it doesn't download or install itself. Turn this off in Settings › Privacy.
- Ask Apple too (only if you choose it): in the Genuine? check, macOS's own services ask Apple's servers whether an app's certificate or notarisation was revoked, may look up its notarisation ticket, and run Gatekeeper's own check. Apple receives details that identify the app's signature, not your files.
- Uninstall with Homebrew (only if you choose it): this runs Homebrew's own program, which may go online.
- Links you click: developers' guides, pangalin.com and Buy open in your browser only when you click them.
The Genuine? check and apps in the Trash
To check an app, Pangalin Space Manager reads on your Mac who signed it, whether its signature is intact, whether Apple's notarisation ticket is attached or already stored on your Mac, its download tags and the matching entry in macOS's download history. To find removed apps that still have background items, it reads the names of the apps at the top level of your Trash and the background-item settings inside them (this needs Full Disk Access). None of this is sent anywhere.
Licences
Licence keys are checked offline on your Mac: the app never contacts us to verify one.
Support bundles
A support bundle, exported from the Help menu, is written only to a location you choose. Nothing is uploaded or emailed automatically. It contains scan timings, settings and recent actions and paths, never file contents. It reaches us only if you attach it to an email.
Pangalin Uninstaller
Pangalin Uninstaller has no account, analytics, telemetry or crash reporting. The list of your apps, their leftover files and everything you choose to remove stay on your Mac. Its automatic Genuine? check reads on your Mac who signed each app, whether its signature is intact, whether Apple's notarisation ticket is attached or already stored on your Mac, its download tags and the matching entry in macOS's download history; to find removed apps that still have background items, it reads the names of the apps at the top level of your Trash and the background-item settings inside them (with Full Disk Access). None of this is sent anywhere. Explain answers and app summaries are written on your Mac by Apple's on-device model and never sent anywhere. The model is given a file's name, kind, size and the app it belongs to, or, for an app summary, the app's name, category, developer and version; never file contents. Uninstall Pangalin Uninstaller… removes its settings and any licence key from an earlier version; a small counter item from earlier versions may stay in your Keychain. The app keeps a log of what it removed, refused or did with administrator rights in ~/Library/Application Support/Pangalin Uninstaller, on your Mac only.
- Update check (off by default): if you turn it on in Settings › Updates, or choose Check Now or Check for Updates…, the app reads two small files hosted on GitHub (the update notice and its signature) to see whether a newer version exists. GitHub sees the request like any web server (such as the IP address and time); it sends nothing else about you or your Mac, not even the app or macOS version.
- Ask Apple too (only if you choose it): in the Genuine? check, macOS's own services ask Apple's servers whether an app's certificate or notarisation was revoked, may look up its notarisation ticket, and run Gatekeeper's own check. Apple receives details that identify the app's signature, not your files.
- Uninstall with Homebrew (only if you choose it): Homebrew runs with its automatic updates and analytics switched off, but it's Homebrew's own program and may still go online.
- Otherwise the app makes no network requests, apart from links you click, which open in your browser.
From version 1.6 Pangalin Uninstaller is free and has no licence. Its Support us and Pangalin Space Manager links open pangalin.com in your browser; a support payment is handled by Polar, like a purchase.
Purchases
Our subscriptions are sold through Polar Software, Inc. (polar.sh), our reseller and merchant of record, which takes the payment (through its payment partner, Stripe) and calculates and collects sales tax. Polar receives your name, email, billing country and payment details under its own privacy policy, and lets you sign in with your email to see receipts and manage or cancel your subscription; we never see your card details. Polar shares your name, email and order details with us so we can issue your licence key and support you.
When a purchase or renewal completes, our licence service (which runs on Cloudflare) receives the order from Polar, creates your licence key and emails it to you through our email provider, Resend. We keep a register of the keys we've issued: each key's ID, your name and email, the order references and the dates the key is valid. We use it to help you if you lose a key, to email you reminders about 11 weeks, 30 days and 7 days before each yearly renewal (with how to cancel), to send two short tips on getting started with the app you bought (2 and 10 days after purchase; use the link in the first one, or reply "stop", and we won't send the second), and for our business records. The key itself is kept only in encrypted form that just we can open, so the register alone can't be used to unlock our apps.
So we can check that your key and reminders reach you, our email provider tells us whether each of these emails was delivered, bounced or marked as spam. We don't track whether you open our emails or click their links. We keep these delivery records with your licence register, and we don't use them for marketing.
If you ask us for your licence key again, we check the address against our order records and send the key only to that address.
News emails
If you sign up for news (the form at the bottom of our pages), we email you a link to confirm first, and add you to the list only once you click it. We then email you about new apps, big updates and the occasional offer, a few times a year at most. We keep your email address, the date you signed up and confirmed, and where on the site you signed up, in our own database (on Cloudflare). To stop the form being abused, we also briefly keep a scrambled (hashed) form of your email address and IP address, never the addresses themselves, and delete them within two days. The emails are sent through Resend. Every news email has an unsubscribe link, and unsubscribing takes effect straight away; you can also reply “unsubscribe” to any of them.
If you've bought from us
If you buy one of our apps, we may also email you occasional news about our other apps and big updates, because they're similar to what you bought. Every such email has an unsubscribe link, and you can ask us to stop at any time, including when you buy. Unsubscribing from news never stops your licence keys, receipts or messages about your subscription.
We don't email people who started a checkout but didn't buy, unless they've signed up for news themselves. We never sell or share our list, and we don't add you to anyone else's.
Support email
When you email us for support or anything else, we use your email address and what you send us only to reply and help you. We keep that correspondence for as long as it's useful for your support and for our business records, and delete it on request unless the law requires us to keep it.
Kala's arcade
The games on our arcade page and our 404 page run in your browser. Your best score is kept in your own browser. If you choose to put a score on the public high-score table, we store the name you type, the game, the score and the date in our database (on Cloudflare), and show the name and score publicly. Don't use your real name if you'd rather not. To stop people flooding the table we briefly keep a scrambled (hashed) form of your IP address, never the address itself, and delete it within two days. Ask us at hello@pangalin.com and we'll remove a score.
Your rights
You can ask us to confirm what personal information we hold about you, to correct or delete it, or to object to how we use it. We'll respond within 30 days. We don't make automated decisions about you, and we don't share your information except with the service providers named above.
Contact & complaints
Pangalin is run from South Africa by KGB Equity (Pty) Ltd, the responsible party for your personal information. Our Information Officer is a director of KGB Equity (Pty) Ltd. Email hello@pangalin.com with “Privacy request” in the subject. If you're not satisfied with our response, you may complain to South Africa's Information Regulator (inforegulator.org.za) or your local data-protection authority.