Privacy policy

The short version

• Outhaul LLC collects no personal data through Rosin or Epicycle. Neither app sends personal data to us.
• We operate no accounts, analytics, advertising, tracking or telemetry services for either app.
• Rosin has been verified to make no network requests and to contain no analytics, crash reporting, DeviceCheck or third-party tracking code.
• Apple processes App Store downloads and purchases under its own privacy policy. We receive no payment details.
• A third-party hosting provider processes ordinary website request logs. If you email us, we receive the information you choose to send.
• We do not sell personal information or share it for cross-context behavioural advertising.

Who this policy is from, and what it covers

Outhaul LLC operates Wiregrove and is the controller responsible for the limited personal information described in this policy.

This policy covers Rosin, Epicycle, www.wiregrove.com and support correspondence. Apple controls the information it processes through the App Store and its other services under Apple's own privacy terms.

Rosin

Rosin runs locally as an app and as a plugin. It has no networking, analytics, crash reporting, DeviceCheck, account, login or telemetry. Rosin makes no network requests.

Rosin's PrivacyInfo.xcprivacy manifest declares NSPrivacyTracking=false and an empty collected-data-types list. It lists four required-reason API categories, all used only on the device: SystemBootTime, DiskSpace, FileTimestamp and app-group UserDefaults. Use of those local system facilities does not send data to Outhaul LLC or anyone else.

Rosin keeps the following information locally so the app can work:

• A first-run marker and app preferences.
• A trial-duration counter with no identifier, timestamps or record of what you played.
• Whether an App Store unlock has been verified.
• Patches and parameter settings saved in the app or in your host's project.

This local information is not personal data collected by Outhaul LLC because it never leaves your device. Rosin does not upload your patches, settings or audio.

Epicycle

Epicycle is covered by the same company practice: Outhaul LLC collects no personal data through Epicycle and provides no account, analytics, advertising, tracking or telemetry service for it. Epicycle does not send personal data to Outhaul LLC. Apple separately handles any App Store activity under its own privacy terms.

Apple, the App Store and purchases

Apple processes App Store downloads, purchases, unlocks and restores through services it controls. Payment information and your Apple Account go to Apple, not to Outhaul LLC. Apple's handling of that information is governed by Apple's Privacy Policy.

Rosin receives only the transaction result needed to unlock the app and stores the verified unlock locally. Outhaul LLC may receive aggregated App Store reports from Apple, but Rosin does not send analytics, diagnostics or other telemetry to us.

This website

www.wiregrove.com is a set of static pages with no accounts, checkout or working sign-up form. We set no advertising or cross-site tracking cookies and load no advertising or tracking pixels.

A third-party hosting provider processes ordinary request logs on our behalf so it can deliver and secure the site. Those logs can contain your IP address, browser or user-agent information, the page requested, and the date and time of the request. The provider may produce anonymous aggregate traffic statistics and may set a functional security cookie. We do not use this information to identify you, profile you or advertise to you.

Our legal basis for this limited processing, where the GDPR or UK GDPR applies, is our legitimate interest in providing and protecting the website.

Support and privacy correspondence

If you email us, we receive your email address, any name you give, your message and any device, operating-system, app or host details you choose to include. We use that information only to answer the request, investigate the issue, keep necessary business records and meet legal obligations. We do not use support correspondence for marketing.

Providing this information is voluntary. We need a return address and enough detail to answer you, but you should not send personal information that is not needed for your request.

Where the GDPR or UK GDPR applies, our legal bases are taking steps at your request, our legitimate interests in supporting our products and protecting legal rights, and compliance with legal obligations where relevant.

Service providers and disclosure

Outhaul LLC does not disclose personal information collected through the apps because the apps send none to us. Apple processes App Store activity under its own privacy policy.

Our hosting, security and email providers may process website request logs or correspondence only to provide those services to us. We require providers acting on our behalf to protect personal information consistently with applicable law and this policy. We may also disclose information if required by law or reasonably necessary to protect legal rights, safety or the security of our services.

We do not sell personal information, share it for cross-context behavioural advertising, use it for targeted advertising or disclose it to data brokers.

How long anything is kept

Outhaul LLC has no app-user profile or app telemetry to retain. Information Rosin keeps locally remains under your control. Deleting the app removes its container, although operating-system keychain items and Apple's purchase record can persist so an unlock can be restored.

We keep correspondence only for as long as needed to answer the request, maintain necessary support or legal records, resolve disputes and enforce agreements. We then delete or anonymise it. Our hosting provider keeps request logs under its own limited retention schedule; we do not export or keep separate copies.

Apple retains App Store information under its own policy.

Security

We reduce privacy risk chiefly by not collecting app data. For the limited website logs and correspondence described above, we and our service providers use reasonable technical and organisational safeguards appropriate to the information and the service. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

International transfers

The apps send no personal data to Outhaul LLC, so there is no company transfer of app data. Website and email providers may process request logs or correspondence in countries other than the one where you live. Where applicable law requires a transfer mechanism, we rely on an adequacy decision or legally recognised safeguards used by the relevant provider. Contact us if you want information about safeguards relevant to your information.

Children

Rosin and Epicycle are general-audience music tools and are not directed to children under 13. Rosin's 4+ App Store age rating describes the suitability of its content; it does not mean the app is directed to children. The apps send no personal data to Outhaul LLC, and we do not knowingly collect personal information through them from children.

If we learn that a child under 13 has sent personal information to our support address without appropriate parental involvement, we will delete it after taking any steps reasonably needed to protect the child or answer the parent. A parent or guardian may contact us to ask whether we hold such information and request its deletion. We do not sell or share the personal information of anyone, including people under 16.

Your rights

Depending on where you live, you may have rights to know or access the personal information we hold about you, correct it, delete it, restrict or object to its processing, and receive a portable copy. You may also have the right to withdraw consent where processing relies on consent and to complain to your local data-protection authority. We do not use automated decision-making or profiling.

California residents may have rights to know, delete and correct personal information, to opt out of its sale or sharing, to limit certain uses of sensitive personal information and not to receive discriminatory treatment for exercising a privacy right. We do not sell or share personal information and do not use sensitive personal information to infer characteristics, so there is nothing to opt out of or limit.

For the preceding 12 months, the categories of personal information collected outside the apps have been identifiers and customer records, such as an email address, optional name and information in support correspondence; and internet or other electronic network activity, such as an IP address, requested page, user agent and request time. These come directly from your email or automatically from a website request. We use them for support, site delivery and security. We may disclose them for those business purposes to hosting, security and email service providers. We have not sold or shared any category of personal information and have no actual knowledge of selling or sharing information about anyone under 16.

To exercise a right, email [email protected] with the subject "Privacy request" and describe what you need. Because we have no user accounts, we may ask for enough information to find relevant correspondence and verify that the request concerns you, but we will not ask for more than reasonably necessary. An authorised agent may make a request where the law permits. We will respond within the period required by applicable law.

Most requests will have little or nothing to act on because the apps send us no personal data and we retain no app-user profile. Requests concerning an Apple Account, purchase or refund must go to Apple because Apple controls those records.

Changes to this policy

We will update this policy before materially changing what the apps or website collect or how we use personal information. We will post the revised policy here and change the effective date at the top. Where law requires another form of notice or consent, we will provide it before the change takes effect.

Contact

Questions, requests and complaints about this policy or either app go to the responsible company, Outhaul LLC, at:

[email protected]

The contact page has the same business email address.

Open-source credit

Rosin's synthesis engine is based on open-source code by Émilie Gillet / Mutable Instruments, used under the MIT licence. That code's own licence terms apply to that portion of the software independently of this policy.