High Caliber Applications — store legal
Last updated: 19 August 2026. This policy covers this website and every app sold on it.
Our apps are local-first desktop software. Whatever you open in one — a mind map, a set of financial records, a form archive, a home inventory, old messages or photos — is treated as your private data and stays on your own computer. It is not uploaded by default, and your original files are not overwritten.
The apps on this store are published by High Caliber Trading Ltd, a company registered in England and Wales (company no. 13118124), registered office 86-90 Paul Street, London, England, EC2A 4NE, VAT GB 376 5944 46. High Caliber Trading Ltd is the data controller for any personal data described in this policy, and is registered with the UK Information Commissioner’s Office (ICO) under registration number ZC187831. We process personal data in line with UK GDPR and the Data Protection Act 2018. Privacy questions: support@highcaliberapplications.com.
When you open a supported file, the app reads the structure and content it needs to show or recover your data — on your device. Depending on the app, that may be map nodes, notes and layout; accounts and transactions; form fields; inventory items; or message history. This processing happens on your own computer, not on our servers.
Our apps do not automatically upload your original files, recovered content, notes, links, filenames, or private data. Where an app offers an optional online feature (such as diagnostic support), it asks you clearly and shows you what would be sent before anything leaves your machine.
If you choose to send a diagnostic report or support ticket, the app shows you what is included before sending it. You can remove private details, and you decide separately whether to attach any original file.
Email sign-up forms on this website are handled by EmailOctopus, a UK-based email service. When you submit a form, the email address you enter and the option you choose are stored there so we can send you the product news and guidance you asked for. You can unsubscribe at any time. We never sell or share your address with third-party marketers or data brokers. If a product, product line, or the business itself changes ownership, your details may transfer to the new owner so they can keep serving you — see “Business transfers / change of ownership” below.
“Tell us you want this” forms. Some pages ask you to tell us you want a tool we have not yet decided to build. For those, we keep only the address you enter, and we use it for one thing: to email you once when we decide — to say we are building the tool, or that we are not. We send nothing else from that list, and once that one email has gone we delete your address from it.
Lawful basis: your consent (UK GDPR Art 6(1)(a)) — you asked us for these emails, and you can withdraw that consent at any time using the unsubscribe link in any email or by writing to us. Retention: we keep your address until you unsubscribe or ask us to delete it (for a “tell us you want this” form, only until we have sent that one email); an unsubscribed address is then held only on the suppression list, so that we do not email you again.
From time to time we contact organisations that may hold data in a file format one of our tools recovers — for example a public body that used Microsoft InfoPath before it was retired. Where we do this, the personal data involved is limited to business contact details in a professional capacity: a name, a job title, a work email address or a work telephone number, and the organisation they work for.
Where we got it, since you did not give it to us. We obtain these details from sources that are already public: an organisation’s own website or published staff directory, a public register (for example NHS Organisation Data Service records, GOV.UK organisation records, Companies House, or a professional regulator’s register), or a public professional networking profile. We do not buy lists, and we do not use data brokers.
We only contact organisations, not individuals in a personal capacity. An organisation is only added where a public register positively identifies it as a corporate body — a company, a limited liability partnership, or a public authority. We do not send marketing email to sole traders or to traditional partnerships.
Lawful basis: our legitimate interests (UK GDPR Art 6(1)(f)) in telling an organisation about software that recovers a file format widely used by organisations of its type before that format was retired. To be clear about what that means: we infer from the sector an organisation is in, not from any published statement that your particular organisation used the software. We do not know that, and we are not claiming to. We have carried out and recorded an assessment weighing that interest against your interests and rights. You can object at any time and we will stop — see “Your rights” below.
Retention: if you do not reply, we delete your personal details within 6 months of the last time we contacted you. We may keep the organisation’s name after that, because an organisation is not personal data. If you ask us not to contact you again, we keep the minimum needed to honour that — normally just your email address on a suppression list, kept indefinitely, because it is the only way we can be sure not to contact you again.
Who else sees it: nobody, with one exception we set out below. These details stay with us. We do not share, sell or rent them to marketers, data brokers or advertising networks, they are not used to build a profile of you, and they sit on our own systems and are used for one thing — sending you the message described above, and recognising you if you tell us to stop. The one exception is a business transfer: if a product or the business changes hands, this data may pass to the new owner so they can keep serving you — see “Business transfers / change of ownership” below, which sets out the safeguards that apply.
Every message we send identifies High Caliber Trading Ltd, says how we got your details, links to this section so you can read the rest of it, and carries a way to tell us to stop that works without you having to reply to a person.
This website uses our own first-party analytics, built and hosted by us on our own domain — nothing is sent to any third-party analytics service. It is cookieless: it stores nothing on your device, never tracks you across other websites, and shares nothing with anyone. To be precise about what it does record, rather than round it down: for each page view or click it writes one event record holding the time, the page path, the referring site, your browser’s viewport width, and — where a link carries them — the campaign parameters in the URL. Our analytics never stores your IP address. In its place we store a one-way SHA-256 hash of your IP address, your browser’s user-agent string and a secret we replace every day. That lets us count one person reading three pages as one visitor rather than three within a single day, while making it infeasible to recognise you from one day to the next. We treat that hash as personal data even though it cannot be reversed.
Lawful basis: our legitimate interests (UK GDPR Article 6(1)(f)) in understanding whether the site works and which pages are useful — pursued in the least intrusive way we could find, which is why there is no cookie, no third party and no raw IP. Retention: event records are deleted once they are 14 months old; each day’s secret is discarded when that day ends.
Paid apps may record licence activation data such as licence key, activation count, product version, purchase status, coarse usage counters, and a device identifier (a one-way hash of your computer’s name and its operating system and processor type, not your name and not your file names), to operate your licence. That check is made with Lemon Squeezy, our merchant of record, who receive the data above for that purpose. We do not collect your private file content for licensing.
Lawful basis: performance of our contract with you (UK GDPR Art 6(1)(b)) — operating and supporting the licence you bought. Retention: for the life of your licence; our licences are buy-once, so we hold this data for as long as the product is supported, after which it is deleted or anonymised.
Our telephone line is answered by an automated assistant provided by Retell AI, Inc. (United States). Calls are recorded and transcribed so that a member of our team can follow up by email. We keep the recording and transcript for 30 days and then delete them; the email address and message you give us are kept in our support mailbox under the retention set out above. Our lawful basis is our legitimate interest in answering enquiries. Retell processes this data on our behalf under a data-processing agreement, and the transfer to the United States is covered by the UK International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for the transcript of your call or for its deletion at support@highcaliberapplications.com.
On Windows, the installer may download Microsoft’s WebView2 runtime from Microsoft once if your PC does not already have it. This is Microsoft’s component, fetched from Microsoft, and involves none of your files.
Some of our apps can learn the column layout of a bank statement on your computer. If you choose to send us that layout — by pressing a button, each time, never automatically — we receive the column headings and positions and the bank’s name, and nothing from the statement itself: no dates, amounts, descriptions, names, account or sort-code numbers. The send carries no licence key, email address, order number or device identifier; a transport log holding the connection’s address is deleted within seven days. Layout templates are kept while the product is sold. Because a template contains nothing of yours and is not linked to you, we cannot identify which template came from you.
Purchases are processed by our Merchant of Record, Lemon Squeezy, which handles checkout, payment details, and sales-tax/VAT. We do not receive or store your card details. We do receive the order record itself — name, email, product and amount — so that we can deliver your licence and keep the accounting record.
Lawful basis: performance of our contract with you (UK GDPR Art 6(1)(b)) for fulfilling your order, and our legal obligation (Art 6(1)(c)) for the accounting record. Retention: order and accounting records are kept 6 years from the end of the relevant financial year, as UK company and tax law requires; Lemon Squeezy holds the payment data itself under its own policy.
Under UK data protection law you have rights over any personal data we hold about you — including the right to be informed, and to access, correct, erase, restrict or object to our use of your data, and to data portability. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. To exercise any of these rights, contact us at support@highcaliberapplications.com.
If High Caliber Trading Ltd — or a product, product line, or part of our business — is sold, transferred, merged, or reorganised, or its assets (including a product and its associated customer accounts, enquiry lists and records) are acquired by another organisation, your personal data may be disclosed to and transferred to the prospective or actual new owner and their professional advisers so that they can continue to provide the product and its support to you. Any new owner will be required to honour the commitments in this privacy policy for the data transferred to them. We will tell you if the data controller responsible for your personal data changes, and of any material change in how your data is used. During any due-diligence process before such a transaction, only the minimum personal data necessary is disclosed, under confidentiality obligations.
This website is hosted by Fasthosts (UK), whose servers keep standard request logs (such as IP address and browser type) to deliver and protect the site. Email capture uses EmailOctopus and payments use Lemon Squeezy, as described above. Any further providers or cookie details will be named here.
Lawful basis: our legitimate interests (UK GDPR Art 6(1)(f)) in delivering the site and protecting it from abuse. Retention: those request logs sit on a short rotation set by Fasthosts (typically weeks) and we do not copy them anywhere else.
Our apps are built to be genuinely useful to a wide range of people — including students and learners — and to be accessible. Purchases and licences are intended to be made by an adult (18 or over); where a younger person will use the software, a parent, guardian, teacher, or school makes the purchase on their behalf. Because our apps run locally and we collect very little personal data, we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at support@highcaliberapplications.com and we will delete it.