Privacy Policy
NIAC is built to know as little as possible. This notice explains what information the product may hold, what may leave your devices, and how to reach Forlais about it.
This is the product privacy notice for NIAC. It is published by Forlais Group Ltd. It is not the EvaEsi privacy notice and it does not cover other Forlais websites or products unless they are named here.
1. Who is responsible
The controller for NIAC is Forlais Group Ltd, a company registered in England and Wales with company number 16835488. The registered office is 45 Albemarle Street, Mayfair, London W1S 4JL, United Kingdom.
Write to operations@forlais.com for privacy questions, access requests or complaints. Replies about NIAC come from Forlais.
2. The design principle
NIAC is a continuation and security utility for Mac, with an optional iPhone companion. Prompts, terminal output, source, repository names, file paths, clipboard contents and precise location are not part of the product by default and must not leave the device unless you later choose a feature that needs them and that feature is described here.
We do not claim that NIAC collects no data. A hosted page, a paired phone, an optional account or a relay all involve some information. This notice states what that is, as the product stands today.
3. Information that stays on your devices
The Mac app and, where installed, the iPhone app may keep locally:
- session history and why NIAC is active;
- your chosen modes, timers and safety settings;
- pairing material and device identifiers needed to talk to a paired phone;
- optional diagnostics you export;
- if you sign in, tokens stored in the device Keychain.
That material stays on the device unless you export it, send it to support, or use a feature that must send a related item over the network.
4. Information that may leave your devices
Only where the feature is in use:
- a random installation or pairing identifier;
- a routing identifier for a paired device;
- encrypted command and status envelopes (the relay is not meant to read the contents);
- app version and protocol version;
- coarse delivery metadata needed to route a message;
- if you enable remote session alerts in an eligible signed build, an Apple Push Notification token and its sandbox or production environment;
- optional diagnostics, only after you choose to send them.
NIAC asks for notification permission only after you enable alerts. A development-signed build may then obtain an Apple sandbox push token, but it registers that token with the NIAC relay only while you are signed in and the iPhone has a confirmed active pairing. The token is scoped to that paired phone and is removed when the pairing is revoked or Apple reports it invalid. NIAC's remote payload is only a generic silent “update available” hint. It contains no Mac state, label, command result, process detail or alert text; the iPhone fetches the paired encrypted envelope before showing any state. Production APNs delivery is not armed or claimed in the current release state.
This website is served from Cloudflare. Requesting a page will produce ordinary edge logs such as IP address, user agent, path and time, used to operate and protect the site.
5. Optional NIAC account
If you create a NIAC username, Forlais holds the username, a password hash, session records and an audit of sign in events for that NIAC account. If you continue with Apple or Google, Forlais receives the email address those providers confirm, creates or links a NIAC identity only, and stores a session. That identity is not a staff account and it is not EvaEsi.
You do not need an account to use Stay Awake on a single Mac. An account is only for the features that require one.
5a. Google user data used by Niac by Forlais
Niac by Forlais uses Sign in with Google only to identify you and open a Niac by Forlais account. The Google data used is the account identifier and email address Google confirms at sign in. Niac by Forlais does not read Gmail, contacts, Calendar, Drive or photos. It does not store Google tokens for any other Google product, and it does not use Google user data for advertising, sale or unrelated profiling. That use is limited to providing the Niac by Forlais account you asked for.
6. What we do not collect by default
- agent prompts or replies;
- source code, repository names or filenames;
- terminal output or screenshots;
- clipboard contents;
- API keys;
- browsing history;
- precise location;
- your contacts;
- an inventory of unrelated processes.
There is no advertising SDK, no tracking across other apps and no behavioural analytics from other companies in NIAC. Apple may collect App Store analytics under Apple’s own terms when you download the app from Apple.
7. Why we process information
Where UK GDPR applies, we rely on:
- performance of a contract, to provide the product you asked for;
- legitimate interests, to operate, secure and support the product and this site, in a way that does not override your rights;
- consent, where you send optional diagnostics or contact us and we need that consent;
- legal obligation, where the law requires us to keep or disclose a record.
8. How long we keep it
Local history stays under your control on the device until you delete it or remove the app. Relay routing records and account records are kept only for as long as they are needed to operate pairing, sign in and support, then deleted or anonymised. We do not publish a fixed day count until those stores have been audited in production. If you ask us to delete an account, we will do so unless a legal duty requires a limited record to remain.
9. Who we share it with
We do not sell personal data. We may use processors who host or transmit the site or, when a production relay is live, the routing service. The current public site is hosted on Cloudflare. Apple provides App Store distribution. We may disclose information if the law requires it, or to protect a person or the product from serious harm.
A Forlais relay, when used, is designed to see opaque identifiers and encrypted envelopes. It is not designed to decrypt session contents or to run commands on your Mac.
10. Your rights
If UK data protection law applies to you, you may ask us to access, correct, delete or restrict personal data we hold, to object to some processing, and to receive a copy of data you provided. You may complain to the Information Commissioner’s Office at ico.org.uk. Please write to us first so we can try to put it right.
11. Children
NIAC is not directed at children under 16. We do not knowingly collect personal data from children.
12. Changes
If this notice changes in a material way, we will publish the new text here with a new effective date. The address https://niac.forlais.com/privacy will remain the canonical URL.
13. Contact
Forlais Group Ltd
45 Albemarle Street, Mayfair
London W1S 4JL
United Kingdom