Legal

Privacy policy

Last updated: 28 July 2026

The short version: DNIe for Mac processes your DNIe only on your Mac, and the app has no telemetry. This website uses Google Analytics optionally, only if you accept it in the cookie notice — and we neither sell nor share anything, because there is nothing to sell or share. What follows is the long version.

1.Data controller

Controller: NEXO APEX S.L. ("nexoapex"), publisher of DNIe for Mac
Spanish tax ID (NIF): B55467146
Registered address: Edificio Camí Reial, c/ Camí Reial 13-17, 3a planta, 43700 El Vendrell, Tarragona, Spain
Contact: macdnie@nexoapex.com · +34 659 696 741
Data protection: rgpd@nexoapex.com
Scope: The DNIe for Mac application for macOS and the macdnie.com website

2.The principle: on-device processing

DNIe for Mac reads your DNIe through a card reader, over the secure channel the card itself defines. The data on the chip — your identity record (name, DNI number, date and place of birth, address, parents' names…), your photograph and your certificates — is read, shown on your screen, and never leaves your Mac. It is not transmitted to nexoapex or to any third party, and the app does not keep it permanently: the documents you sign are saved only where you choose.

Your PIN is entered locally, travels encrypted inside the secure channel between the app and the card, and is never stored, logged or sent to any server.

3.Telemetry and analytics

The application includes no telemetry, advertising identifiers or tracking SDKs of any kind: we do not know how often you open the app, what you do with it, or who you are. This website does offer analytics — Google Analytics — but it is strictly optional: see section 6 for details; it only activates if you give explicit consent in the cookie notice.

4.The app's network connections

The app connects to the Internet for three things only, each in service of an action you start:

Certificate verification (OCSP). To check that a DNIe certificate has not been revoked, the app queries the OCSP service of the DNIe infrastructure (ocsp.dnie.es). That query contains the identifier of the certificate being checked (not your full document) and, like any connection, exposes your IP address to the queried server, which belongs to the public DNIe infrastructure.
Timestamping (TSA), optional. If you enable timestamping when signing, the app sends the timestamping service only the cryptographic hash of the document — a mathematical fingerprint from which the content cannot be reconstructed. The document itself is never sent.
Purchases (Apple and RevenueCat). See section 5.

5.Purchases: Apple and RevenueCat

DNIe for Mac is sold through native Apple In-App Purchases. Payment is processed entirely by Apple: we never see your name, your address or your payment details. Apple's processing is governed by its own policy: apple.com/legal/privacy.

To validate purchases and know whether your license is active we use RevenueCat, which receives the transaction information from Apple (product purchased, dates, renewal status) tied to an anonymous identifier generated by the app — not to your name or email. Their policy: revenuecat.com/privacy.

6.This website

macdnie.com is a static site. By default it sets no cookies, includes no analytics and loads no third-party resources. The hosting provider may record accesses (IP address, date, page requested) in its standard technical logs for security and operation of the service; nexoapex does not use them to identify you or cross-reference them with anything.

Optional analytics (Google Analytics). When you enter the site we ask whether you want to turn on Google Analytics. Until you answer, or if you decline, no Google script or resource loads and no analytics cookie is set — your choice is remembered locally in your browser, not on a server of ours. If you accept, Google Analytics 4 loads and records page views and basic technical data (browser, device, approximate location) via Google's own cookies; GA4 does not store your full IP address. This data is processed by Google LLC as a data processor, under its own privacy policy, which may involve a transfer of data outside the European Economic Area. The legal basis for this processing is your consent (GDPR art. 6.1.a), which you can withdraw at any time from the "Cookie preferences" link in the footer, without affecting the lawfulness of processing carried out before its withdrawal.

7.Email

If you write to macdnie@nexoapex.com, we will process your address and the content of your message for the sole purpose of replying and following up on your query (legal basis: your consent and our legitimate interest in providing support). We keep the correspondence for as long as needed for that purpose and to evidence the support provided.

8.Your rights (GDPR and LOPDGDD)

Under Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD), you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability and to withdraw consent. Since DNIe for Mac collects no personal data, in practice these rights mostly concern email correspondence. You can exercise them by writing to macdnie@nexoapex.com.

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos): aepd.es.

9.Changes to this policy

If this policy changes, we will publish the new version here with its date. If a change materially affected how the app handles data, we would also flag it in the corresponding release notes.