KoalaCue Privacy Policy

KoalaCue Companion for iPhone and iPad does not collect, transmit to the developer, sell, or share personal data. There are no ads, no analytics, no tracking, no account system and no developer-operated cloud service in the Companion app. The app works by discovering and connecting directly to the KoalaCue for macOS app running on your own Mac, over your own local network.

KoalaCue for macOS keeps your show content, recordings and photographs on your own Mac. The only places personal information is involved are paid licence activation, hosted checkout and customer portal run by our reseller, ordinary website hosting logs, and the optional fault report form on this website. Each of those is described below.

• No names, email addresses, phone numbers or account credentials.
• No advertising identifiers, analytics events, crash telemetry or usage tracking.
• No location data, contacts, calendars, photos library or microphone access.
• No data is sent to servers operated by the developer of KoalaCue.

KoalaCue Companion looks for your Mac on the same local Wi-Fi or LAN and communicates with the KoalaCue for macOS app directly. That connection stays inside your network; it is not relayed through a service run by us. If your Mac is not reachable, the Companion app simply has nothing to connect to.

iOS and iPadOS require your explicit permission before an app can discover and communicate with devices on your local network. KoalaCue Companion requests this permission solely to find your Mac and exchange cue, show and note information with KoalaCue for macOS. The permission is not used for scanning, profiling or advertising, and you can revoke it at any time in Settings → Privacy & Security → Local Network. Without it, pairing and live cue following cannot work.

When you pair the Companion app with a Mac, the resulting pairing credentials are stored in the iOS Keychain on your device. They stay on your device and are used only to re-establish the connection to the Mac you paired with.

Cue data, show information, notes and handwriting remain under your control on your own devices and inside KoalaCue on your Mac and its show package. The Companion app acts as a view and input surface for that content; it does not upload it anywhere.

KoalaCue for macOS writes what you create to local files on your Mac — the .koala show package, recordings made with Recorder, imported photographs and media, notes, and cue and preset documentation. This content is yours. It is stored on your own storage and, unless you deliberately copy or share it yourself, it is not uploaded to KoalaCue, to any developer-operated cloud, or to any third party.

Deleting the file, folder or show package on your Mac deletes that content. Backups you make yourself, including Time Machine or studio backups, are under your control.

Recorder features can use a camera, a capture device and selected audio inputs. macOS asks for Camera and Microphone permission the first time a feature needs it, and KoalaCue only requests a permission for a feature you are actually using. If speech or dictation transcription is offered, it is optional and used only to turn what you say into notes for your own show documentation.

Captured video, audio and any resulting text stay in your local recordings and show files. You can withdraw any of these permissions in System Settings → Privacy & Security; the feature that relies on them then stops working, and nothing else is affected.

Free use requires no account and no activation. If you buy a paid plan, KoalaCue must check that the licence is valid, which involves a small amount of information:

• Your licence key is used transiently to validate and refresh entitlement. The raw paid licence key is not retained in KoalaCue's own licensing database or logs.
• A random installation identifier generated on your Mac, so that a paid licence can be limited to exactly one active Mac and so you can deactivate that Mac and activate a replacement.
• A user-readable Mac name (the computer name you chose), shown only so you can tell your own activations apart.
• Provider identifiers, entitlement status and timestamps returned by our reseller — for example an order or subscription reference, the plan, and whether the licence is active — plus the time of the last successful check.

This information exists to make licensing work and to prevent abuse. It is not used for advertising, profiling or marketing.

Purchases and subscription management are handled by Lemon Squeezy as merchant of record. When you buy or manage a plan you deal with Lemon Squeezy's hosted checkout and customer portal, and the information you give there — name, email address, billing and tax details and payment data — is collected and processed by Lemon Squeezy under its own privacy policy and its payment processors' policies. Full card numbers never reach KoalaCue.

We receive only what we need to fulfil and support an order, such as the purchaser's email address, the plan bought, order and subscription references and licence status. We do not control Lemon Squeezy's systems and cannot delete records it is required to keep, for example for tax and accounting law.

This website is built and hosted using Lovable and served through Cloudflare infrastructure. Like any web host, those services process ordinary request information — IP address, timestamp, requested URL, user agent, and response status — in short-lived operational and security logs so pages can be delivered and abuse and outages can be detected. Those logs are handled by the hosting providers under their own terms and policies; we do not control their retention and cannot erase records they keep for security or statutory reasons.

At present this website and the KoalaCue apps carry no advertising, no cross-site tracking and no third-party behavioural analytics. If that ever changes, this policy will be updated before the change takes effect and the effective date revised.

The statements above are about the KoalaCue Companion app itself, which collects no personal data. This website has one separate exception: the fault report form at Report a fault. If you choose to send a report, what you type is stored so it can be reviewed.

• What is stored. The name and email address you enter, whether you allow contact, the technical details you provide (KoalaCue version, Mac model, macOS version, and any iPad, Eos and connection details), and the fault text you write — title, steps, expected and actual behaviour, plus any optional workaround, show or venue context and evidence links. Evidence links are stored as the plain text you paste; nothing at those links is fetched or copied by this website.
• Where it is stored. In a restricted, unpublished KoalaCue fault-intake list held in Notion, accessible only to the KoalaCue maintainers who triage faults. It is not published, sold or shared, and it is not used for marketing.
• Contact is optional. Choosing not to be contacted still logs the report; it simply means no follow-up. There is no guarantee of a reply, a fix or a timeframe either way.
• Abuse protection. To stop duplicate and automated submissions, this site stores two short-lived one-way (salted SHA-256) fingerprints — one derived from your network address and one from the content of the report — with timestamps, in its Lovable Cloud database for at most 48 hours. Each record is given a 47-hour expiry and an automatic hourly database job deletes expired records, so removal does not depend on later traffic. Your raw IP address is not stored, and those fingerprint records contain no name, email address or report text.
• Removal. Email info@koalacue.com quoting the reference shown when you submitted the report, and it will be deleted from the intake list.

Please do not put passwords, licence keys, private show files, client paperwork, unrestricted logs or other confidential documents into the form.

If you obtain the Companion app from the App Store, Apple may independently process purchase, download and diagnostic information under Apple's own policies. That processing is between you and Apple; we do not control it, and we do not receive personal data about you from it. If you opt in to sharing crash or analytics data with Apple, any information we can see through Apple's developer tools is aggregated and does not identify you.

• Show, recording and photo data: on your devices, for as long as you keep it.
• Licence activation records: while the licence exists, plus a short period afterwards so renewals, transfers and support questions can be resolved.
• Website abuse-protection fingerprints: at most 48 hours, as described above.
• Fault reports: until they are resolved and no longer needed for triage, or until you ask for removal.
• Order, billing and tax records held by Lemon Squeezy: for the period its own policies and Australian tax and accounting law require.

You can ask what information about you we hold, ask for it to be corrected, or ask for it to be deleted where we are not required to keep it. Email info@koalacue.com and describe your request; we will respond within a reasonable time. For billing records and App Store records you may also need to contact Lemon Squeezy or Apple directly, since those are their records and their statutory obligations.

Some of the services described above — hosted checkout and the customer portal, website hosting and content delivery, and the restricted fault-intake list — operate from servers outside Australia, including in the United States and the European Union. Using them means limited information may be stored or processed overseas by those providers under their own terms and applicable law.

Traffic to this website and to licensing endpoints uses encrypted connections. Access to the restricted fault-intake list and to licensing records is limited to the KoalaCue maintainers who need it. Local show content is protected by your own Mac's security — a screen lock, FileVault and sensible backups are the most effective protections for it. No system can be guaranteed perfectly secure, so please do not send confidential material that does not need to be sent.

KoalaCue is a professional production tool and is not directed at children. The Companion app collects no personal data from anyone, and purchases must be made by someone able to enter a binding contract.

If behaviour changes in a way that affects privacy, this policy will be updated and the effective date above revised. Material changes will be described here so you can see what changed and when.

Privacy questions can be sent to info@koalacue.com or raised through the Companion support page.