Privacy policy

Data controller: SLOVE Sp. z o.o., ul. Kwiska 194, 54-210 Wrocław, Poland. NIP 8943264082 · KRS 0001182349. Contact: [email protected]. Last updated: 4 August 2026.

Machete DGX is a management app for the NVIDIA DGX Spark. This policy states what the app handles, where it is stored, and what we do not collect.

In short

• Your server credentials never leave your device. They are held in the platform secure enclave — iOS Keychain, or Android Keystore-backed encrypted storage.
• Your account data — e-mail and synced app settings — is stored in Supabase, hosted in the EU.
• No analytics, no advertising, no trackers, no sale of data. Ever.

Held on your device only

This data is never transmitted to us. SSH sessions, terminal output, container data, GPU metrics, and every conversation with the language model on your Spark travel directly between your device and your machine over your own network. We have no server in that path and no access to that traffic.

Held in your account

Only if you choose to create one. An account exists so your setup follows you to a second device.

• Sign-in identity: e-mail address, or an Apple or Google identifier.
• Server profiles: host, port, username, display name. Never the password or private key.
• App settings: appearance, language, energy price, dashboard preferences.
• Alert rules and their history, backup plans, report settings.
• Model download history and run configurations; anything you publish to the community library.
• Subscription entitlement records: which plan is active and until when.
• Hugging Face access token, if you add one: held encrypted in the device keychain, and — when you are signed in — additionally in Supabase Vault so it follows you to a second device. It is decrypted only to authenticate your own downloads against Hugging Face, and is never sent anywhere else.

Stored in Supabase (EU region). Row-level security limits every row to the account that owns it.

Purchases

Subscriptions are processed by Apple and Google. We never see your payment details. We receive a purchase receipt identifier from the store in order to confirm that a subscription is active, and store the resulting entitlement against your account.

Notifications

If you enable alerts, a device push token is stored so the alert can reach you. It is used for nothing else.

What we do not do

• No analytics or telemetry SDK. No crash reporting that carries your content.
• No advertising identifiers, no ad networks, no profiling.
• No sale or sharing of personal data with third parties for their own purposes.

Where your data is processed

Account data is stored by Supabase in the European Union. Push notifications are delivered through Apple (APNs) and Google (FCM), and subscription receipts are verified with Apple and Google; those companies process the data outside the EEA under the European Commission's standard contractual clauses. Requests you send to a model running on your own Spark do not pass through us at all — the app talks to your machine directly.

Retention

Account data is kept while the account exists. Delete the account and it is removed — see Delete your account. Deletion inside the app is immediate; by e-mail we complete it within 30 days.

Your rights

Under the GDPR you may request access, correction, erasure, restriction, portability, and object to processing. Write to [email protected]. You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

Children

Machete DGX is a tool for operating server hardware and is not directed at children.

Changes

Material changes will be announced in the app before they take effect. The date at the top of this page always states the current version.