How ROYVIRA handles security

Audio and backups

The app stores managed audio files and settings locally on your Mac. Older clips may still refer to files elsewhere on your Mac. A backup archive you export manually is not encrypted by the app; keep it in a protected place.

Keyboard shortcuts

The app processes global key press and release events to match shortcuts you configure. Selected clip and stop shortcuts are stored in local settings.

Account and updates

The reviewed sign-in code uses a browser flow with PKCE and stores session tokens in the macOS Keychain. The update code checks signed packages using a public key.

Sign-in service and limits

The licence check in the source code limits requests per confirmed account: checks at 60 per minute and 600 per hour, profile registration at 6 per minute and 30 per hour.

Operations and backups

In the test project, a synthetic backup was restored into a separate local database. Row counts and content hashes matched for all 31 account and licence tables checked. For the live project, the operator saw daily backups in the provider dashboard (eight visible, the latest from 28 September 2026). This is an observation, not a stated retention period.

The signing keys for app and updates are kept in the operator’s macOS Keychain.

Company customers

ROYVIRA 1.x is offered as a Mac app with personal accounts. There is not yet a finished offer for company customers.

Privacy and legal texts

The privacy information for the website is published. Statements on this page about data protection and contracts are subject to professional legal review and must not be read as reviewed.

What is not promised

• No security certificate or audit report (for example ISO 27001 or SOC 2).
• No external penetration test.
• No service level, availability figure, 24/7 support or fixed incident response time.
• No commitment on where data is processed or stored.