Privacy

Who is responsible for your data

, sole trader Federal Taxpayer Registry . For anything about privacy, write to hola@ekhio.com.

The payment is processed by Paddle.com Market Ltd as merchant of record, and for your payment data Paddle is responsible on its own account, with its own privacy notice.

Your audio and your measurement do not leave your Mac

Ekhio processes system audio locally. It does not record, does not store and does not send audio anywhere.

Auto-tuning uses your Mac microphone to measure how your room responds. That recording is processed on the spot, turned into a correction curve and discarded. Neither the recording nor the curve is uploaded to any server.

The rules the app learns (which profile to use with which app), your presets and your measurements live on your Mac.

What we store when you buy

Buying does generate data, because we have to issue you a license and send it to you. This is everything we store, what for, and for how long:

• Your email, and your name and country if the payment gateway gives them to us. To send you the key and to answer you. Basis: performing the contract. Kept for as long as the license is alive.
• The purchase record: amount, tax, currency and transaction identifier. Basis: legal and tax obligation. Kept for as long as the law requires.
• Your license key and which Macs it is active on. Basis: performing the contract. For as long as the license is alive.
• For each activated Mac, an irreversible fingerprint: the machine identifier run through SHA-256, plus the name you gave it and the app version. The original identifier never leaves your Mac. Basis: legitimate interest in the license being respected.
• A log of events (purchase received, license issued, email sent, activation) so we can help you if something goes wrong. Basis: legitimate interest. Deleted after 24 months.

Your Mac name may carry your name

Plenty of Macs are called “Ana’s MacBook Pro” because that is how macOS names them. If yours is like that, that name is stored alongside the activation.

You can change it in System Settings → General → About before activating, or write to us and we remove it on our side.

What we use your data for

We separate what is indispensable from what is not, because they are not the same thing and you have a right to know.

• Necessary. Issuing your key and sending it to you, activating it on your Macs, handling your support, processing a refund and meeting our tax obligations. Without this we cannot sell you the license.
• Optional. None. We do not profile, we do not send advertising and we do not use your data for anything other than delivering what you bought.

There is no account

Not in the app and not on the site. There is no password to create and no profile to fill in. Your email is the only identifier, and we only use it to send you the key and to answer you if you write.

We do not send you advertising and we do not sell or share your personal data with anyone for marketing.

Who else touches it, and in what country

To operate we use these services, and they only see what is necessary. All of them are outside Mexico, so your data is transferred abroad covered by their data processing agreements and by standard contractual clauses:

• Paddle.com Market Ltd, United Kingdom — processes the payment as merchant of record. Your card details are handled by Paddle; we never see them.
• Supabase, Canada — the database where the licenses live and the functions that issue them.
• Vercel, United States — the hosting for this site.
• Resend, United States — sending the email with your key.

This site

We do not use tracking cookies, third-party analytics or advertising pixels. The site does not follow you between pages or between sites.

That is why you will not see a cookie banner: there is no non-essential cookie to consent to.

When you open the purchase page, the payment form is loaded by Paddle from their servers; their own privacy notice applies there too.

Your rights, depending on where you live

Write to hola@ekhio.com from the email you bought with and we answer you in under 20 business days. We do not charge for this.

If you ask us to delete your data, keep in mind that you would lose the ability to recover your key.

• Mexico. The ARCO rights of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP): access, rectification, cancellation and opposition, plus withdrawing your consent. You can go to the Secretaría Anticorrupción y Buen Gobierno.
• European Union and United Kingdom. Articles 15 to 22 of the GDPR: access, rectification, erasure, restriction, portability and objection. You can lodge a complaint with the supervisory authority in your country.
• Brazil. The rights in article 18 of the LGPD.
• Japan. Disclosure, correction and suspension of use under the APPI.
• South Korea. The PIPA rights, including the information about the transfer abroad that is above.
• Canada. Access and correction under PIPEDA.

If something leaks

If there were a security breach that could affect you, we tell you by email and notify the relevant authority within 72 hours of becoming aware of it.