Privacy Policy

HSX CrystalunaOS has no account, no sign-in and no server of its own. It does not collect, sell or share your personal information. Your notes, vault, Scenes, clipboard pins, screen time and settings are created on your PC and stay there. On its own, the app only asks for the weather at the location you chose, a public exchange-rate table, and your Microsoft Store licence.

HSX CrystalunaOS is developed and published by Hasnain Butt Akhtar, trading as Hasnain Studio X (referred to as "we", "us" or "the developer").

• Publisher: Hasnain Studio X
• Developer: Hasnain Butt Akhtar
• Contact: [email protected]
• Website: www.hasnainstudiox.com
• Distribution: Microsoft Store

This policy covers the HSX CrystalunaOS desktop application for Windows. It does not cover the apps you launch from it or the websites you open from it; their own privacy policies apply.

Everything below is read or created on your device. Unless section 7 says otherwise, none of it is transmitted to us or anyone else.

Apps, windows and files

The app reads your Start menu shortcuts to list installed apps, the titles of open windows to show running apps and the overview, and the names of files in your user folders so the command bar can find them and list recent files. File contents are never read.

Your own content

Notes, habits, Scenes, App Hub pins, downloads history, clipboard history (pinned items are saved; unpinned items are kept in memory), world clocks, the places you drag desk instruments to, and every setting you choose.

The vault

Logins, notes and two-factor secrets you add are encrypted with Windows Data Protection for your Windows account and protected by a PIN that is stored only as a salted PBKDF2 hash. We cannot read or recover the vault.

Screen time

The app records which app is in the foreground and for how long, per day, to show screen time and Focus statistics. This is a local diary, not analytics.

Notifications

Only after you press Allow access and Windows asks you, the app reads your current Windows notifications to show them in its tray. They are displayed, never saved or sent.

Audio, hardware and screen

The music visualiser analyses the sound your PC is playing as frequency levels in memory; no audio is recorded or stored. Processor, graphics, memory, battery and network readings are read for the on-screen gauges and kept in memory. Screen captures are taken only when you ask and are saved to Pictures\CrystalunaOS. Accent from wallpaper samples screen colours in memory once.

Error log

If the app recovers from an error, it writes the error type and a short message to a local log, capped in size. It is never sent anywhere; Settings opens its folder.

• No account, profile, email address, username or password for us. There is no sign-in.
• No advertising identifiers and no advertising code.
• No analytics, crash-reporting or telemetry SDK of any kind.
• No contacts, calendar, camera, microphone recording, messages or browsing history collection.
• No payment information. Purchases are handled entirely by the Microsoft Store.
• No keystroke logging and no uploading of your files.

Local information is used only to make the features described on the Store listing work: to show and launch your apps, find files, display widgets and notifications, apply Scenes, generate two-factor codes and remember your preferences. It is never profiled, sold, shared or used for advertising.

HSX CrystalunaOS stores its files in your Windows profile under %APPDATA%\HorizonOS (settings, notes, Scenes, habits, clipboard pins, screen time, wallpapers you add and the encrypted vault) and %LOCALAPPDATA%\HorizonOS (exchange-rate cache, downloads list and error log). A browser profile folder left there by versions before 2.3.0 can be deleted by hand. The folder names come from the app's original code name and keep your data across updates.

• Reset all data in Settings deletes everything in the first folder and closes the app.
• Delete the folders above to remove everything by hand.
• Uninstall through Windows Settings. No data exists on any server, because none was ever placed on one.

The app makes three kinds of background request:

• Weather. The coordinates of the location you set (rounded to four decimals) are sent to the MET Norway forecast service about every 30 minutes while the app runs. Typing a city name never goes online; it is matched against a list built into the app. MET Norway's own terms and privacy notice apply to that request.
• Exchange rates. At most twice a day the app downloads a public rate table from ExchangeRate-API. The request contains no user data.
• Microsoft Store licence check. Windows tells the app whether your copy is a trial or a full purchase, under the Microsoft Privacy Statement.

Other network activity happens only when you start it: downloads you start in the download manager, web searches you run from the command bar (sent to Bing), and links you click. Those go to that site under its own policy.

We use no third-party analytics, advertising, attribution or crash-reporting service.

• Run as a full-trust desktop app: To act as a desktop shell: list and launch apps, manage windows, hide and restore the Windows taskbar, read hardware counters and control volume and brightness.
• Internet client: Weather, exchange rates, the Store licence check, and the downloads and links you start.
• Notification listener: To show your Windows notifications in the tray, only after you allow it. You can withdraw access in Windows Settings > Privacy & security > Notifications.
• Startup task (optional, off by default): Only if you turn on Launch at startup or desktop mode. Turn it off in the app or in Windows Settings at any time.

HSX CrystalunaOS is a general-audience utility and is not directed at children under 13. It has no account, social features, chat or advertising, and it does not knowingly collect information from anyone.

Privacy laws including the UK GDPR, the EU GDPR and the CCPA give you rights over personal information a company holds about you. We hold no personal information about you: there is no database, server or account, so there is nothing for us to look up, export or erase. You control all app data directly on your device using the options in section 6. We do not sell or share personal information.

If you believe otherwise, contact us and we will respond within 30 days. You may also complain to your local data protection authority.

If this policy changes in a way that affects you, the dates at the top will change and the updated policy will be published at this address before the change ships. Version 2.2.0 redesigns the desk and interface and changes no data practice described here. Questions or requests: [email protected].