Privacy Policy

RiskOS is a risk register that runs entirely on your Mac. There is no account to create, no sign-in, no server behind it and nothing to synchronise. This policy is the long, plain explanation of that: what stays with you, what we never receive, the single place a network is involved at all, and the rights you hold even though we hold nothing of yours.

1. The short version

If you read only this section, you will have the whole of it:

• We collect no personal data from you. None, in any category.
• There is no account, no sign-in, no email address and no licence key.
• Your register, settings, profiles and report branding stay on your Mac.
• There is no analytics, no telemetry, no crash reporting, no advertising and no tracking of any kind.
• We operate no servers, so there is nowhere for your work to be sent even in principle.
• Purchases go through Apple. Apple never receives your register, and we never receive your payment details.
• Exports and backups are written only where you choose to put them.
• For Apple's App Privacy framework, RiskOS declares Data Not Collected in every category.

The rest of this page explains those lines, and sets out who is responsible for what when a register names real people.

2. Who this policy applies to

This policy is published by MAHTCA GLOBAL, Bechetului Nr. 26, Malu Mare, Dolj, Romania, registered with the Romanian Trade Register under J16/663/2018, CUI 39070729. "We" means MAHTCA GLOBAL; "you" means the person using the app or reading this site.

It covers RiskOS — Risk Management for macOS 14.0 or later, sold only on the Mac App Store, and this website at www.riskregister.mahtca.com, which sets no advertising or analytics cookies and asks you for nothing.

It does not cover Apple, who acts as the shop when you buy the app or restore a purchase; section 6 explains that boundary. Nor does it cover anywhere you choose to send a report you have exported. You can reach us at riskos@mahtca.com or through the support page.

3. Data we collect

Nothing. There is no data collection in RiskOS to describe, configure or opt out of.

The app does not ask for your name, email address, organisation, location or age. It creates no account and no profile of you, generates no identifier for your device or your copy of the app, and contains no analytics, usage measurement, performance reporting, crash reporting or diagnostics that leave your Mac. Nothing you type, score, import or export is transmitted to us.

This is not a promise about how carefully we look after a collection of customer information — it is the absence of one. We run no servers and keep no copy of anyone's register, so there is nothing of yours to lose, sell, share or be compelled to produce.

Under Apple's App Privacy framework, RiskOS declares Data Not Collected in every category, and the privacy manifest included with the app declares that it does not track you. Section 15 sets that out in full.

4. What lives on your Mac and never leaves it

Everything RiskOS holds, it holds on your Mac, for you alone.

Branding deserves a mention of its own: it holds your contact details, and in a consultancy a client's. Those appear on the reports you produce and are never sent to us.

A risk register almost always names people — the owner accountable for a risk, the person assigned an action, a contact at a vendor, an individual mentioned in a description or a piece of evidence. That is personal data about someone else, and it is one reason the register stays where it is: whatever you record about people remains on your Mac, under your control and your responsibility. Section 8 explains what that means in law.

5. What you export, import and back up

RiskOS produces branded PDF reports, self-contained HTML reports, live Excel workbooks and CSV files, and it can print. Each is written to the location you choose, at the moment you ask for it. There is no upload step and no cloud destination of ours — the destination is always yours.

Once a report exists as a file, it lives by the rules of wherever you put it: a PDF on a shared drive is as private as that drive, and a workbook emailed to a client is in the client's hands. That is worth a thought before a register naming owners or incidents is attached to a message.

Imports work the same way in reverse: RiskOS reads only what you pick, and scores are always recalculated from your own methodology rather than trusted from the file you brought in.

Backups are yours to keep. Your register exists in exactly one place, so a backup is the only thing standing between you and a lost machine; RiskOS will remind you, but it cannot guarantee that one exists. Restoring replaces your register rather than merging into it, and RiskOS says so and asks you to confirm first. A backup written by a newer version of RiskOS is refused rather than partially read.

6. What Apple may see and we never do

There is exactly one point at which RiskOS touches a network, and it is Apple's: the App Store and Apple's in-app purchase service, used to sell the app and the profile tiers and to restore purchases you already own. Nothing else in the app connects to anything.

Apple is the merchant of record. All billing, receipts, refunds and cancellations are handled by Apple under Apple's own terms, and Apple's privacy policy governs what Apple sees and keeps. We cannot issue refunds; a refund request goes to Apple.

From that transaction we receive no payment data at all — never your card number, billing address, Apple Account or name. What Apple receives is a purchase: never your register, never a risk, never a report, never your branding.

For completeness, since it explains why the App Store appears here at all: RiskOS is a paid, one-time purchase including one profile, and three further purchases — Small Business, Enterprise and Consultant — raise the number of profiles you can keep. Nothing is a subscription and nothing renews, the limit that applies is the highest tier you own, and profiles beyond a limit are locked rather than deleted.

7. No third-party services, no analytics, no advertising, no tracking

RiskOS includes no analytics toolkit, no crash-reporting service, no advertising network, no attribution or install-measurement service, no tracking pixels and no fingerprinting. It does not profile you and makes no automated decisions about you. Nothing about your use of the app is shared with any company, including us.

Because no personal information is collected, none is sold or shared. Under the California Consumer Privacy Act and comparable laws elsewhere, we do not sell or share personal information, and never have. There is no sync service either: moving work between machines is something you do deliberately, with a backup or an export you control.

8. Privacy roles: controller and processor

Under the General Data Protection Regulation, a controller decides why and how personal data is used and a processor handles it on a controller's behalf. Both words are worth stating precisely here, because the usual assumption about software does not apply.

We are not a processor of your register. A processor must receive, hold or have access to the data it processes. We never receive your register, hold no copy and have no means of access to your Mac. Supplying an app that runs on your own machine is not processing, so no controller-to-processor relationship arises for the contents of your register and no data processing agreement is needed for it. If a procurement or security review asks for one, this section is the answer to give.

You are the controller of whatever you record about people. Risk owners, action assignees, vendor contacts, an individual named in a description or an evidence note — each is a real person with rights, and recording them makes your organisation the controller of that data. The obligations that follow are yours: a lawful basis for holding it, accuracy, keeping it no longer than you need it, answering access or erasure requests, and keeping exports out of the wrong hands. RiskOS gives you the practical means, since the data is entirely in your possession and editable or deletable at any moment, but the legal responsibility is yours rather than ours.

We are a controller only for what you send us directly, such as an email to riskos@mahtca.com. We use it to answer you, keep it no longer than is useful and never add it to a marketing list.

9. Children

RiskOS is a professional tool for recording and reviewing organisational risk, intended for adults using it at work. It is not directed at children and is not marketed to them.

Because the app collects no data from anyone, it collects none from children. Where a purchase is involved, Apple's account rules and any parental controls in place govern it.

10. International users

RiskOS is sold worldwide through the Mac App Store and can be used anywhere. Because nothing is collected, there is no international transfer of your data by us: your register crosses a border only if you carry it across one yourself.

We are established in Romania, in the European Union, and this policy is written to the standard of the GDPR. Where the law of your own country grants you stronger rights than are described here, those rights apply too. Apple's handling of a purchase, including any transfer of transaction data between countries, is governed by Apple's own policy rather than ours.

11. Your rights and how to exercise them

Under the GDPR and similar laws you have the right to be told what personal data an organisation holds about you, to obtain a copy, to have it corrected or erased, to restrict or object to its use, to receive it in a portable form and to withdraw consent.

Against us, those rights have an unusually simple answer: we hold nothing to give you, correct or erase. There is no account to close, no profile to download and no record to delete. The practical version of every one of them is already in your hands — you can read everything in your register, change any of it, export it in open formats and delete it at any time, without asking us or waiting on a request. Removing RiskOS from your Mac removes what it keeps there; exports and backups you have already made remain wherever you saved them.

If you still wish to make a request — including about an email you have sent us, the only thing we ever hold — write to riskos@mahtca.com. We will reply within one month, free of charge. If you are unhappy with the answer you may complain to a supervisory authority. Ours is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro; if you live elsewhere in the European Economic Area or the United Kingdom, you may complain to the authority for your own country.

One caution: if the request you have received concerns a person named in your register, it is a request to your organisation rather than to us. We cannot answer it, because we cannot see it.

12. Security, and the honest limits of it

The security of your register is the security of the Mac it sits on: your account password, whether full-disk encryption is turned on, who else can sit at the machine, and what you do with the reports you export. The app is distributed only through the Mac App Store, so each version is signed and reviewed by Apple before it reaches you.

Keeping everything local removes a whole class of risk. We hold no customer records to be breached and no credentials of yours to be stolen, and no request made to us could reach your register; a failure on our side cannot expose work that was never with us.

The honest limits follow from the same fact. We cannot recover anything for you: if the Mac is lost, stolen or wiped and no backup exists, the register is gone, and we have no copy to restore from. Nor can any software promise absolute security — an attacker with access to your unlocked machine, or a report forwarded to the wrong recipient, is outside what an app can prevent. What we can say is narrower and more useful: we never take custody of your data, so the decisions that protect it stay with you.

13. Changes to this policy

This is version 1.0 of the RiskOS privacy policy, effective 21 September 2026. If it changes, the revised policy will be published on this page with a new version number and a new effective date, and will take effect from that date.

Because we have never collected anything, no later version could reach backwards over data we did not have. If a future version of RiskOS ever introduced anything that collected data, it would be described plainly before it happened rather than switched on silently. Using a version of the app you already own is not acceptance of a policy written afterwards; the version in force when you obtained the app governs what happened then.

14. Trader information and language

The trader and publisher of RiskOS is MAHTCA GLOBAL, of Bechetului Nr. 26, Malu Mare, Dolj, Romania, registered with the Romanian Trade Register under J16/663/2018, CUI 39070729. Contact: riskos@mahtca.com. The app is sold on the Mac App Store, and support is at www.riskregister.mahtca.com/support/.

This policy and any dispute arising from it are governed by the law of Romania, excluding the United Nations Convention on Contracts for the International Sale of Goods (Vienna, 11 April 1980). If you are a consumer, this does not deprive you of the protection of any mandatory rule of the country in which you live.

This policy is written in English, and the English text is the authoritative one. Any translation is offered as a convenience; where a translation and the English differ, the English governs.

15. The App Privacy label declaration

Apple requires every app to declare what it collects, category by category, and shows that declaration on the App Store listing. The declaration for RiskOS is the same in every row.

Used to track you: no. Data linked to you: none. Data not linked to you: none. The privacy manifest included with the app carries the same declaration, and it is accurate for the reason given throughout this page — your risk register is yours, it stays on your Mac, and we never see it.