← Back to Rhythmotive

Privacy Policy

Effective 15 November 2026 · Applies to Rhythmotive on Mac, Apple TV, iPhone, iPad, rhythmotive.app, and skins.rhythmotive.app.

The short version Rhythmotive has no user accounts, no third-party analytics SDKs, no advertising trackers, and never records or uploads your audio.

1. On-Device Audio & Microphone Processing

Mac live system audio tap: When you enable live audio visualisation on macOS, Rhythmotive reads real-time PCM audio frames strictly in volatile memory (RAM) to compute beat timing, tempo, and frequency spectrum envelopes for the Metal visualiser. Audio samples are discarded immediately after each hop (~10 ms) and are never written to disk or transmitted over the network.
iPhone & iPad Room Beat Sync: When you opt into Room Beat Sync to drive Apple TV visuals from ambient room sound, microphone samples are analysed strictly on-device in RAM to extract anonymous tempo/beat scalars streamed over your local home network (Bonjour/LAN) to your Apple TV. Raw audio is never recorded, stored, or sent to any server.
Music library & local files: Track playback, playlists, local audio folders, and artwork palette extraction happen directly on your device using native system frameworks. We do not collect or receive your listening history.

2. Beat-Map Catalogue Service (`api.rhythmotive.app`)

On platforms where direct PCM audio taps are unavailable for streamed tracks (such as tvOS and iOS), Rhythmotive can fetch compact, encrypted beat-timing maps from cdn.rhythmotive.app and api.rhythmotive.app:

Your device authenticates genuine app installs anonymously using Apple’s hardware-backed App Attest mechanism without linking to your Apple Account, name, or email address.
Worker request and IP logging (observability) is disabled on our edge services. Short-lived rate-limit counters exist only in transient edge memory.
Catalogue lookups transmit only non-personal track timing identifiers needed to retrieve sealed beat-map keys and count aggregate anonymous demand for unmapped tracks.

3. Community Mac Skin Gallery (`skins.rhythmotive.app`)

Browsing & installing skins: Fetching catalogue.json, SVG previews, and .rmskin packages from skins.rhythmotive.app and skins-cdn.rhythmotive.app requires no account and sets no tracking cookies.
Publishing or reporting a skin: When you voluntarily publish a .rmskin package or submit a moderation report, our Worker computes a one-way salted SHA-256 digest of the connecting network address solely to enforce abuse rate limits and prevent duplicate report spam. Raw IP addresses are never stored in our database.
Texture sanitization: Optional PNG textures embedded in a submitted .rmskin file are decoded to raw sRGB pixels and re-encoded into a fresh PNG stripped of EXIF, GPS, ICC, and text metadata before publication.

4. Website & Local Preferences

rhythmotive.app uses zero analytics scripts, zero marketing pixels, and zero cookies. If you toggle Light or Dark mode on the website, that single preference is stored locally in your browser’s localStorage.

5. Data Retention, Takedowns & Contact

Creators who have published a community skin on skins.rhythmotive.app may request removal at any time, and any user may flag unsuitable skins directly in the Mac app or web gallery. For privacy questions or skin removal requests, please visit our Support page or email support@rhythmotive.app.