Privacy Notice

1. Who we are

This notice covers audiout.app and the Audiout / Audiout Remote apps. The controller for the personal data described below is Alexander Henderson Hamilton, trading as "Audiout," a sole trader based in Germany.

Business address: [TODO — business address]

Privacy contact: support@audiout.app.

2. What this notice doesn't cover

When you buy Audiout, payment is handled by Paddle.com Market Limited, our merchant of record. Paddle is an independent controller for your payment and billing data (card details, billing address, tax information). See Paddle's Privacy Policy for that.

3. What we collect, and why

Website (audiout.app). We don't use cookies or web analytics. The only thing your browser stores is a light/dark theme preference, saved locally in your browser's storage — it never reaches our servers.

License and activation. When you buy Audiout, we issue and store a license key linked to your purchase email, so we can validate your copy of the app and help you recover a lost key. When you activate Audiout on a Mac, we store a device identifier for that installation, so we can enforce the number of devices per license.

Anti-abuse. We store a salted, hashed form of the IP address behind requests to our license server, to rate-limit abuse — not to identify you personally.

Support. If you email support@audiout.app, we keep that correspondence to help you and improve our support.

4. Legal basis

We process this data to perform our contract with you (issuing and validating your license), for our legitimate interest in preventing fraud and abuse of the license system, and, for support emails, because you contacted us.

5. Who we share it with

• Paddle.com Market Limited, as merchant of record, for the sale, payment processing, tax/invoicing, and refunds.
• Cloudflare, our infrastructure provider, which hosts this website and our license server, and processes email delivery on our behalf, as a data processor.
• Authorities, where we're legally required to disclose data, or to protect our rights or someone's safety.

We don't sell your data, and we don't share it for advertising.

6. International transfers

Cloudflare operates a global network, so data may be processed outside the EEA/UK. Cloudflare's data processing terms include Standard Contractual Clauses to cover these transfers.

7. Retention

We keep license and device records for as long as your license is valid, plus a reasonable period afterward for support and fraud-prevention purposes. Hashed IP data used for rate-limiting is kept only briefly, then deleted. Support correspondence is kept as long as needed to resolve your query, plus a reasonable period after.

8. Your rights

Under GDPR, you can ask us to access, correct, delete, or export your data, and to object to or restrict our processing. You can also complain to your local data protection authority — in Germany, the relevant Landesdatenschutzbehörde — if you think we've mishandled your data. To exercise any of these, email support@audiout.app — we'll respond within one month.

9. Security

We use encryption in transit (HTTPS) for the website and license server, and access to stored data is limited to what's needed to run the service.

10. Changes

We'll update the date at the top of this page if this notice changes materially.