Overview
Thank you for using the services of LynxOffice provided by KDAN Mobile Software Ltd. (“KDAN”). Please read the following information to understand KDAN’s Security Policy:
We understand how important the security and privacy of your data is. LynxOffice works on documents on your Mac: KDAN does not store your documents, and LynxOffice does not upload them. The information on this page is intended to provide transparency about how LynxOffice protects your documents, and the diagnostics it sends, when you use the services of LynxOffice.
We continue to perform security checks on a regular basis, including monitoring the infrastructure for suspicious activities or potential threats, examining the company's information security risks, updating the security model, and addressing new security issues. With this management process, we ensure that the security controls continue to meet the company's evolving information security needs.
Network Security
LynxOffice sends data to KDAN only as the diagnostics described in our Privacy Policy, which you can turn off in its Settings. They go to Google’s Firebase services over encrypted connections.
The Mac App Store version of LynxOffice runs in Apple’s App Sandbox, which allows it to make outgoing connections but not to accept incoming ones. The command line tool and MCP server make no network connections of their own.
Account Security
LynxOffice has no accounts, and never asks you to sign in. It may ask for a password you set on a PDF, or for the passphrase of a signing certificate you import. These are used on your Mac to open, protect, or sign that file, and are not sent to KDAN.
Please keep your password and or any personal information safe and do not provide any personal information, especially your password, to anyone.
Email Security
KDAN uses several email domains to run services. Each domain serves a different purpose, such as sending system notifications, providing communications, or sharing marketing information.
LynxOffice itself does not send email. When you receive an email from KDAN or our products, we want you to be sure it's from us instead of from hackers or phishing websites. If you receive an email about LynxOffice from this address or domain, you can trust that it is from us:
- email with the @comofficekit.com domain
Product Security
The code of LynxOffice is kept in a Git version control repository, and an automated suite of more than 3,000 tests runs on every proposed change.
Every copy of LynxOffice is code-signed, so macOS can confirm where it comes from and that it has not been altered. Apple reviews the Mac App Store version before it is published, and the command line tool and MCP server are signed with KDAN’s Developer ID certificate and notarized by Apple. The Mac App Store version runs in Apple’s App Sandbox, which limits LynxOffice to the files and folders you choose to open or save.
Customer Data Security
(1) KDAN will limit the collection, storage and use of your Personal Data to only that which is necessary for the intended purposes.
(2) KDAN does not store your documents. The diagnostics LynxOffice sends are processed by Google’s Firebase services, which run on Google Cloud infrastructure. Google Cloud is a trustworthy service in the industry and has a detailed explanation of its security measures. You may find more information at the following links:
Authorizing Access
We know the documents you work on are private and confidential. LynxOffice never gives KDAN access to them. Access to the diagnostics KDAN receives is limited to authorized KDAN staff, and happens only when it is necessary to solve problems or improve LynxOffice.
Transport Encryption
Diagnostics are sent to Firebase over encrypted connections (TLS). Your documents stay where you save them, protected by macOS. To encrypt everything on your Mac’s disk, turn on FileVault in System Settings.
Backup
KDAN does not keep copies of your documents, so it cannot restore them for you. Keep your own backups, for example with Time Machine.
Modifications to Security Policy
Considering the rapid development of technology, KDAN may update this Security Policy from time to time to reflect changes in law, technology or business development in accordance with relevant legal requirements. You agree that you will be responsible for examining this Security Policy on a regular basis. By continuing the use of KDAN’s products or services, you are deemed to accept the updated Security Policy. If you disagree with the updated Security Policy, please cease using KDAN’s products or services.
When this Security Policy is updated, we will forthwith publish the updated version on KDAN’s website, and will notify our users via a KDAN App or email as soon as possible.
Privacy and Compliance
Please see our Privacy Policy(https://lynxoffice.com/privacy-policy/) for more information.
Language and Translations
KDAN may provide certain translated versions of this Security Policy for international users. If there is a discrepancy between the translation version and the Traditional Chinese version, the Traditional Chinese version shall prevail.