Privacy

Last updated: 31 October 2026

ToneCue is a macOS app made by Ingo Jurz, Graz, Austria. This page explains what data the app touches, what leaves your Mac, and what never does.

The short version

ToneCue changes which audio devices macOS uses. It does not record, store or process your sound. The app has no account, no analytics and no tracking. Its only network calls are license validation (Lemon Squeezy) and update checks (Sparkle, via GitHub). Also, only if you choose to, the diagnostic report (see below).

Mac App Store version

If you get ToneCue from the Mac App Store, the app makes no network calls of its own. It has no license key, no update checker and no diagnostic report. The sections on license activation, updates, payments and the diagnostic report below apply only to the version from didact.digital.

In the App Store version, the 14-day trial and the purchase run through Apple’s in-app purchase system. Apple processes the payment and keeps the purchase record; we do not receive your name or email address from it. Apple’s privacy policy applies. Your scenes, device names and settings stay in the app’s container on your Mac. The optional calendar access works as described above and stays on your Mac.

Audio devices

ToneCue reads the list of audio input and output devices and their names, and switches the system defaults. Your scenes, device names and settings are stored in a file on your Mac.

Calendar access (optional)

If you add a meeting trigger, macOS asks for calendar access. ToneCue reads event times and whether an event contains a meeting link, on your Mac, to decide when a meeting is running.

Other triggers

The app trigger checks which apps are running or in front. The microphone trigger checks whether any app has a microphone open. Neither reads what you do inside those apps.

License activation and validation

When you enter a license key, ToneCue contacts Lemon Squeezy to activate and validate it. The key is stored in the macOS Keychain. The 14-day trial start date is kept in the Keychain too. A network error never locks out a paying customer.

Updates

ToneCue checks for updates through the Sparkle framework, which fetches an appcast file hosted on GitHub. GitHub may log your IP address as part of serving that file; see GitHub's privacy statement.

Payments

Purchases are handled by Lemon Squeezy as merchant of record. We receive the information Lemon Squeezy passes on for your order, such as your email address and country. Their privacy policy applies to the payment.

This website

The site is hosted on GitHub Pages, so GitHub processes server logs such as your IP address. Fonts are served from this site, not from a third party. We count visits with GoatCounter (see “Visit statistics” below); apart from that script, this site loads no third-party scripts. If you arrive through a partner's link (a URL containing ?aff=), we add the partner's ID to the Buy links on that page, so Lemon Squeezy, our payment provider, can credit the partner if you buy. Reading the ID from the link stores nothing on your device. If you also agree in the notice, we keep the ID in your browser's local storage for 60 days, so the partner is credited for a later purchase too. When you start the app for the first time, it opens a welcome page on didact.digital once. If you had agreed, that page hands the ID to the app, which stores it in the macOS Keychain and adds it only to its Buy link. A click on a Buy link takes you to Lemon Squeezy, where their privacy policy applies. The legal basis for keeping the ID is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw it at any time with the button below, which removes the stored ID from your browser. To have it removed from the app as well, write to hello@didact.digital. The app itself never loads a tracking script.

Withdraw consent for partner tracking

This website remembers whether you chose light or dark mode, in an entry called didact-theme in your browser's local storage. It holds only that choice, stays on your device and is never sent to us. Because it only serves the switch you pressed, no consent is needed (§ 165(3) TKG 2021); clearing your browser data removes it. The animations on the home page use GSAP, which we host on this site ourselves, so no other server is contacted.

Visit statistics

This website counts visits with GoatCounter, an analytics service that works without cookies. We use it to see which pages are read, which links bring visitors here, and how often the download and purchase buttons are clicked. The data is not used for advertising and not to build profiles of individual people. When you open a page, your browser sends GoatCounter the page address, the referring site, the campaign tags in the link (for example utm_source), your browser and screen size, and your approximate location. According to GoatCounter, it stores no IP addresses or user-agent strings and sets no cookies, so you are not recognised across visits or across sites. A click on a download or purchase link is counted as an event with a fixed name, without anything about you. GoatCounter is run by Martin Tournoij (Ireland); its servers are at Hetzner Online GmbH in Finland and Germany. The legal basis is our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR). You can object at any time: hello@didact.digital. Blocking the script in your browser also works, and the site stays fully usable. The apps are separate: they contain no analytics and send no usage data.

Diagnostic report

In the app you can send a diagnostic report to didact. This only happens when you click “Send to didact” in the “Send diagnostic report” window. You see the complete text first. Nothing is transmitted without your click, and your consent covers that one report only.

What it contains: App, version, macOS version, Mac model, language, time, some app settings without secrets, the last lines of the app’s log and, if you enter them, your note and your email address. Your home folder appears as “~” in paths. The app does not write license keys, calendar titles, file contents or notes to its log.

What reports do not contain: No device or install ID, no account, no IP address. The report gets a random report ID, which you see after sending.

Purpose and legal basis: We use the report to find and fix the problem you reported, and we reply if you gave an address. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by clicking “Send to didact”.

Retention: Reports are deleted automatically after 90 days.

Deletion on request: Write to hello@didact.digital and name the report ID. We delete the report and confirm it. Without a report ID we cannot match a report to you, because we store no identifier.

Where the data is kept: With Cloudflare, Inc. (Workers and D1). The database is located in the EU. Cloudflare may process the request itself on its servers worldwide, at the network edge; the standard contractual clauses in the data processing agreement with Cloudflare apply. Cloudflare may keep request records in its own operating logs.

Your rights

You can ask for access to, correction of, or deletion of data we hold about you by writing to hello@didact.digital. You can also complain to the Austrian data protection authority (Datenschutzbehörde, dsb.gv.at).

Controller

Ingo Jurz, Unterer Breitenweg 9, 8042 Graz, Austria. hello@didact.digital