Last updated: Jun 20, 2025

Chromatose App
Chromatose Website

Privacy Policy (Chromatose App)

The Company Hekuli (Edward Rooth) (“we”, “our”, or “us”) operates the Chromatose video-synthesiser (“the App”) on iOS and macOS platforms. This Privacy Policy explains how we collect, use, and protect your information when you use our App.

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words whose initial letter is capitalised have meanings defined below. The definitions apply to singular and plural.

Definitions

For the purposes of this Privacy Policy:

• App refers to Chromatose, the software program provided by the Company.
• Company refers to Hekuli (Edward Rooth).
• Device means any device that can access the App, such as a computer, smartphone, or tablet.
• Personal Data is any information relating to an identified or identifiable individual.
• Usage Data refers to anonymous data collected automatically, either generated by the use of the App or from the service infrastructure itself (e.g. feature usage, session duration).
• Crash Logs are anonymous diagnostics created when the App encounters an error (e.g. stack trace, OS version, Device model).
• You means the individual using the App, or the legal entity on whose behalf such individual is acting.

1. Information We Do Not Collect

Our App does not require or collect account credentials or contact lists. Content you create in the App stays on your Device unless you export or share it.

Photos from your library

If you load a photo into the App, the image is processed only on your Device and is not transmitted to us or any third party, except when you explicitly export or share a project or file that contains the photo.

Optional microphone access

When you enable the Audio Engine feature, the App requests microphone permission. The live audio stream is analysed locally solely for driving audio modulations. Audio is never recorded, stored, or sent off the Device. You can always:

• disable the Audio Engine in the App settings, or
• revoke microphone access in iOS/macOS privacy settings.

2. Data Collection

* GDPR Art. 6 (1)(a–f), as stated.

3. User Consent

• Analytics & Crash Logs – consent prompt on first launch; withdraw any time under Settings → Privacy.
• Microphone – granted when activating Audio Engine; revoke in system settings.
• Beta program – leave at any time via TestFlight or by contacting us ; we delete your tester record within 7 days.
• Push notifications – opt-in; disable in system settings.

4. Data Storage and Deletion

• Local storage – Projects, files, and settings remain on your Device and are deleted when you remove the App.
• Remote storage –
  • Usage Data: 14 months
  • Crash Logs: 90 days
    afterwards deleted automatically from Google Cloud (EU/USA).

5. Data Sharing

We do not sell or rent any data. Data is shared only with the processors in section 7 under contracts that include EU Standard Contractual Clauses where required.

6. Data Transmission and Processing

7. Third-Party Services

• Firebase Analytics – collects aggregated anonymous Usage Data.
• Firebase Crashlytics – collects anonymised Crash Logs.
• Apple services – manage subscriptions, beta testing and push notifications

8. Your Rights

EU residents may access, rectify, erase, restrict, object to or export their Personal Data and may lodge a complaint with a supervisory authority (GDPR Art. 77). Contact information is in section 12; we reply within one month.

9. Children’s Privacy

The App does not address anyone under the age of 13. We do not knowingly collect information from children under 13. Parents may request deletion.

10. Links to Other Websites

The App may contain links to third-party sites. We have no control over their content or privacy practices.

11. Changes to This Privacy Policy

We may update this Policy. Changes are effective when posted on this page.

12. Contact Us

If you have questions about this Privacy Policy, please use our contact form or write to:

Hekuli (Edward Rooth)
Eberhard-Roters-Platz 12
10965 Berlin, Germany

Privacy Policy (chromatose.app website)

The following section applies only to visitors of our public website www.chromatose.app .

1. Data Protection

The operators of this website take the protection of your data very seriously. We treat your data confidentially and in accordance with the statutory data-protection regulations (GDPR, BDSG, TTDSG) and this Privacy Policy. Appropriate technical and organisational measures are in place to safeguard your information (GDPR Art. 32).

2. Data Collection on Our Website

Cookies

Our website uses cookies in some areas.

• Essential cookies store your language choice and whether you have dismissed the cookie banner.
• Analytics cookies are placed only if you click “Accept” on the banner; they help us understand site usage with Google Analytics (IP anonymised).
• YouTube embeds – playing an embedded video allows YouTube/Google to set its own cookies.

You can revoke consent at any time via the banner or your browser settings.

Server Log Files

The hosting provider automatically collects and stores the following information in server log files that your browser transmits to us:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address (anonymised after 7 days)

These data are processed for security purposes (GDPR Art. 6 (1)(f)) and deleted after 30 days.

Website Analytics

If you accept analytics cookies, Google Analytics stores anonymised usage statistics. Data are retained for 14 months and then deleted.

Beta-Tester Sign-Up Form

If you register for our TestFlight beta, we collect your name and e-mail address solely to send the TestFlight invitation and manage the tester list. You may leave the beta at any time via TestFlight or by contacting us; your tester data will be deleted within 7 days of withdrawal.

Contact Form

When you submit an enquiry via our contact form , the information you provide—including your contact details—is used only to process your request and any follow-up questions. These data are not shared without your consent and are deleted once the enquiry is resolved.

3. Legal Basis for Processing

Data are processed on one of the following bases:

• Consent (GDPR Art. 6 (1)(a)) – analytics cookies, YouTube embeds, beta sign-up
• Contract / pre-contractual measures (Art. 6 (1)(b)) – replies to contact-form enquiries
• Legal obligation (Art. 6 (1)(c)) – e.g. retention required by tax law
• Legitimate interest (Art. 6 (1)(f)) – website security (server logs)

4. Data Retention

We retain personal data only as long as necessary for the stated purposes or statutory retention periods. Server log files are deleted after 30 days; analytics data after 14 months; beta-tester data within 7 days after you leave the program.

5. Data Security

All traffic between your browser and our website is protected by TLS encryption. Firewalls, access controls and regular backups are in place to prevent unauthorised access or loss.

6. Your Rights

You have the right to obtain information about your stored data, to rectify inaccurate data, to delete or restrict processing, to data portability, and to object to processing. You may also lodge a complaint with the competent supervisory authority. To exercise any right, please contact us via our contact form .