Privacy

Who is responsible for your data

Oscar Adrian Luevano Cadena, sole trader. Ceylan 541, Col. Industrial Vallejo, Azcapotzalco, Ciudad de México, C.P. 02300, México. For anything about privacy, write to support@akouvara.com.

The payment is processed by Paddle.com Market Ltd as merchant of record, and for your payment data Paddle is responsible on its own account, with its own privacy notice.

Your audio and your measurement do not leave your Mac

Ekhio processes system audio locally. It does not record, does not store and does not send audio anywhere.

Auto-tuning uses your Mac microphone to measure how your room responds. That recording is processed on the spot, turned into a correction curve and discarded. Neither the recording nor the curve is uploaded to any server.

The rules the app learns (which profile to use with which app), your presets and your measurements live on your Mac.

What we store when you buy

Buying does generate data, because we have to issue you a license and send it to you. This is everything we store, what for, and for how long:

• Your email, and your name and country if the payment gateway gives them to us. To send you the key and to answer you. Basis: performing the contract. Kept for as long as the license is alive.
• The purchase record: amount, tax, currency and transaction identifier. Basis: legal and tax obligation. Kept for as long as the law requires.
• Your license key and which Macs it is active on. Basis: performing the contract. For as long as the license is alive.
• For each activated Mac, an irreversible fingerprint: the machine identifier run through SHA-256, plus the name you gave it and the app version. The original identifier never leaves your Mac. Basis: legitimate interest in the license being respected.
• A log of events (purchase received, license issued, email sent, activation) so we can help you if something goes wrong. Basis: legitimate interest. Deleted after 24 months.

Crash reports, only if you want them

When Ekhio closes on its own, or something breaks inside it, it saves a note of what happened on your Mac. That note does not leave it. The first time there is one, the app shows you the exact text it would send and asks; if you say no, it never asks again.

It starts switched off. In Settings you can switch it on or off whenever you like, read the text before it goes out, and delete your identifier.

• What is sent. The Ekhio version, the macOS version, which signal closed the app and what function it was in, and audio engine failures with their error code.
• What is not sent. No audio at all. Not your measurement, not your presets, not your rules, not your Mac name, not which apps you have open, not file paths. The text is cleaned before it leaves your Mac and again when it arrives.
• With what identifier. A random number the app creates. It is not your license key nor your Mac fingerprint, and it does not resemble either. In our database there is no column that joins a report to your email or to your purchase.
• How long it lasts. Ninety days, then it deletes itself. Basis: your consent, which you can withdraw whenever you like without explaining yourself.
• If you switch it off or delete the identifier, what was already sent is left ownerless: it can no longer be linked to you or to anything you send later.

Usage count, only if you want it

Ekhio and Verberio can report once a day that they were opened, so we know how many Macs use them, whether they buy or not. The trial never touches our server, so without this there is no way to know.

It starts switched off for everyone. The app asks you once, after a few days of use, and shows you the exact text before you decide. In Settings you can switch it on or off whenever you like, read that text and delete your identifier.

• What is sent. The app version, the macOS version, whether it is on trial or licensed, and the identifier. At most once a day.
• What is not sent. No audio, not your measurements, not your projects or clients, not your Mac name, not your key, not your email.
• With what identifier. Another random number, different from the crash reports one, so switching one on does not link what the other sends. It is not your license key nor your Mac fingerprint. We do not store your IP address.
• How long it lasts. Each Mac’s record is deleted after ninety days. What remains afterwards is only the total of Macs per day, which no longer tells anyone apart. Basis: your consent, which you can withdraw whenever you like.
• If you press “Forget”, the app asks our server to delete what arrived with that number and discards it.

Your Mac name may carry your name

Plenty of Macs are called “Ana’s MacBook Pro” because that is how macOS names them. If yours is like that, that name is stored alongside the activation.

You can change it in System Settings → General → About before activating, or write to us and we remove it on our side.

What we use your data for

We separate what is indispensable from what is not, because they are not the same thing and you have a right to know.

• Necessary. Issuing your key and sending it to you, activating it on your Macs, handling your support, processing a refund and meeting our tax obligations. Without this we cannot sell you the license.
• Optional. Only crash reports and the usage count, and both start switched off. We do not profile, we do not send advertising and we do not use your data for anything other than delivering what you bought and fixing what breaks.

There is no account

Not in the app and not on the site. There is no password to create and no profile to fill in. Your email is the only identifier, and we only use it to send you the key and to answer you if you write.

We do not send you advertising and we do not sell or share your personal data with anyone for marketing.

Who else touches it, and in what country

To operate we use these services, and they only see what is necessary. All of them are outside Mexico, so your data is transferred abroad covered by their data processing agreements and by standard contractual clauses:

• Paddle.com Market Ltd, United Kingdom — processes the payment as merchant of record. Your card details are handled by Paddle; we never see them.
• Supabase, Canada — the database where the licenses live and the functions that issue them, and where crash reports and the usage count land if you switch them on.
• Vercel, United States — the hosting for this site.
• Resend, United States — sending the email with your key.

This site

We do not use tracking cookies, third-party analytics or advertising pixels. The site does not follow you between pages or between sites.

That is why you will not see a cookie banner: there is no non-essential cookie to consent to.

There is one exception, and it is Paddle. Wherever the price is shown —here and on the Akouvara home page— we ask them what you specifically will pay —in Mexico that is pesos, not dollars— and to work that out Paddle locates your country from your IP address. On the purchase page, the payment form is also loaded from their servers. Their own privacy notice applies in both cases.

Your rights, depending on where you live

Write to support@akouvara.com from the email you bought with and we answer you in under 20 business days. We do not charge for this.

If you ask us to delete your data, keep in mind that you would lose the ability to recover your key.

• Mexico. The ARCO rights of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP): access, rectification, cancellation and opposition, plus withdrawing your consent. You can go to the Secretaría Anticorrupción y Buen Gobierno.
• European Union and United Kingdom. Articles 15 to 22 of the GDPR: access, rectification, erasure, restriction, portability and objection. You can lodge a complaint with the supervisory authority in your country.
• Brazil. The rights in article 18 of the LGPD.
• Japan. Disclosure, correction and suspension of use under the APPI.
• South Korea. The PIPA rights, including the information about the transfer abroad that is above.
• Canada. Access and correction under PIPEDA.

If something leaks

If there were a security breach that could affect you, we tell you by email and notify the relevant authority within 72 hours of becoming aware of it.