Privacy

Privacy Policy

Effective July 25, 2026 · Kalman Software LLC

Who we are

Kalman Software LLC is a Colorado limited liability company based in Fort Collins, Colorado. We make and sell desktop applications. "We" and "us" mean Kalman Software LLC; "you" means whoever is reading this — a visitor, a trial user, or a customer.

This policy covers kalmansoftware.com, crucibletrade.com, and buying a license. Each app also has its own privacy policy describing what that app does on your machine: RangefinderInvest · CrucibleTrade.

The apps collect nothing

This is the important part, so it goes first. Every app we sell is local-first: your accounts, holdings, trades, imported statements, plans, and settings live in a database file on your own computer. There is no Kalman Software server holding any of it. We have no copy, no access, and no way to see it.

The apps have no analytics, no crash reporter, no auto-update pinger, and no usage tracking. Licenses are verified offline — activating contacts no server, and the app never reports its trial status, its usage, or anything else back to us. Delete the app and its data folder and your data is gone, because it was never anywhere else.

Network traffic an app does generate — market-data lookups, for example — is described in that app's own policy, linked above. Those requests carry ticker symbols, never your holdings or balances.

Buying a license

Checkout runs on Stripe, which acts as our merchant of record — it is the seller on the transaction, so it collects what a purchase requires (your name, email address, billing address and payment details) as a controller of that data under its own privacy policy, and it owns the tax side. Your card number goes to Stripe and never to us. We cannot see it and do not store it.

From a completed order, we receive and keep a much smaller set:

• your name and email address — to generate your license key and email it to you;
• your billing country and state — which arrives with the order;
• the order reference and amount — for our accounting records and to find your order if you write to us.

We use that information to fulfil your order, meet our tax and accounting obligations, and answer you if you need support. We do not use it for marketing, and we do not build a profile from it. License emails are delivered by Resend, which handles the message in transit.

Stripe is the seller of record, so the transaction record is primarily Stripe's; what we keep is the smaller order record above, for accounting and support. See the Terms of Sale for what you're buying and who from.

Your license key is also stored, keyed to your checkout session, so the page you land on after paying can show it to you — email filters being what they are. That entry expires after 30 days and holds your name, the product, and the key; not your email address, and never anything about payment.

This website

Our sites are static pages served by Cloudflare, whose infrastructure keeps standard, short-lived server logs (IP address, user agent) as any web host does.

We count page views with Cloudflare Web Analytics. It is enabled at the edge rather than by a script in these pages, and it reports to the same domain you are already visiting — so you may see a request to /cdn-cgi/rum in your browser's developer tools. It is cookieless, does not fingerprint you, and does not track you across sites. We see aggregate counts, never individuals. These sites set no cookies at all, and there is nothing to consent to because nothing is being collected about you personally.

Fonts are served from our own domain rather than a font CDN, so loading a page makes no third-party requests at all.

Download buttons pass through a /dl/… link on the site you are already on before redirecting to the file, which lets us count how many people take each build. All that is stored is a running total per file per day — no IP address, no user agent, nothing that could point back to you, and again no cookie. We cannot tell one downloader from another, or a downloader from a visitor.

If you join a waitlist, the email address you enter is stored on our Cloudflare infrastructure and used solely to send the one launch note you asked for. If you email us, we keep the message so we can reply and so we have context if you write again. No list is ever shared or sold, and asking to be removed is enough — no form, no confirmation loop.

Who your information goes to

This is the complete list. We have no advertising partners, no data brokers, no analytics resellers, and no tracking pixels.

• Stripe — payment processing. Receives your payment and billing details directly.
• Resend — delivers your license email. Receives your email address and the message.
• Cloudflare — hosting, edge analytics, and waitlist storage.
• Microsoft — only if you install from the Microsoft Store, which handles that download and shows us aggregate acquisition counts.

We may also disclose information if the law requires it, or if it's necessary to establish or defend a legal claim — for example, responding to a card dispute you file with your bank. We will not hand over customer information voluntarily beyond that.

How we protect it

The strongest protection here is structural: the data we don't hold cannot leak. Your financial data never reaches us, and card numbers never reach us. What remains is a small set of order records and email correspondence.

For that remainder: all our sites and services are served over HTTPS; secrets and API credentials are stored in encrypted secret storage rather than in code or configuration files; access to order records and email is limited to the one person who runs the company and is protected by two-factor authentication; and license keys are signed with a private key that is never transmitted and never leaves encrypted storage. No system is perfect, and we won't claim otherwise — but there is deliberately very little here worth stealing.

How long we keep it

Order records are kept as long as tax and accounting rules require — generally several years — and then they go. Email correspondence is kept while it's useful for supporting you. Waitlist addresses are deleted once the launch note they were collected for has been sent, or sooner if you ask. Server logs and aggregate analytics are short-lived and hold nothing that identifies you.

Children

Our apps are financial tools for adults. They are not directed at children under 13, and we do not knowingly collect information from them.

Your rights

Because your financial data never reaches us, access and deletion of it are yours by construction — it's on your own machine. For the little we do hold, email us and we'll show you what exists, correct it, or delete it, subject to records we must keep for tax and accounting. You will never be charged for asking, and asking won't affect your license.

Colorado residents have specific rights under the Colorado Privacy Act, and other states have comparable laws. Rather than gate those behind a portal, we handle every request the same way: email us and we'll do it. Stripe retains its own transaction records as our payment processor, under its own policy.

Changes to this policy

If our data practices change, we'll update this page and change the effective date at the top. We won't quietly widen what's collected — if something material changes for existing customers, we'll say so plainly rather than relying on you to re-read this page.

Contact

Privacy questions go to the person who built the software and runs the company:

Kalman Software LLC · Fort Collins, Colorado · [email protected]