Privacy Policy

Last updated: June 15, 2026

Ultimidi ("we", "us", or "our") is a MIDI controller app. This Privacy Policy explains what information we collect when you use the Ultimidi app and website, how we use it, and your rights regarding that information.

1. Information We Collect

When you create an account, we collect:

Email address — used to identify your account, send transactional emails (verification, password reset), and optionally for our newsletter if you opt in.
Password — stored as a salted cryptographic hash. We never store your plain-text password and cannot read it.
Newsletter opt-in preference — stored as a boolean flag on your account.
Purchase records — which packs or subscriptions you have purchased, their source (Stripe, RevenueCat, etc.), and when they were purchased.
Patreon connection — if you link your Patreon account, we store your Patreon user ID and linked name to verify patron status. We do not store Patreon access tokens beyond the OAuth session.

We do not collect or store:

MIDI data, notes, or controller layouts you create — these remain on your device or in your browser's local storage.
Audio recordings — microphone audio is processed entirely on your device and is never recorded, stored, or transmitted to our servers.
Location data.
Device identifiers or advertising IDs.

2. Device Permissions

Microphone — Ultimidi requests access to your device's microphone to power two optional features:

Voice Commands — When you enable Voice Commands, the app listens for spoken instructions that control your MIDI controller interface in real time. For example, you might say "set channel to 3" or "mute" to trigger a corresponding MIDI action without touching the screen. Audio is processed on-device for speech recognition only.
Envelope Follower — When you enable the Envelope Follower, the app analyzes the amplitude (loudness) of incoming audio in real time to generate MIDI control values. For example, you can map a microphone's volume to a CC parameter so that louder sounds open a filter or raise a fader automatically. Audio is analyzed on-device in real time and is never recorded or buffered beyond the current moment.

The microphone is only active while one of these features is enabled by you. No audio is recorded, stored, or transmitted to our servers or any third party.

3. How We Use Your Information

To create and maintain your account.
To verify your email address and enable password resets.
To grant access to purchased content.
To send transactional emails (account verification, password reset). These are not marketing emails and cannot be opted out of as long as you have an account.
To send newsletter updates, only if you opted in. You can opt out at any time by contacting us.

4. Third-Party Services

We use the following third-party services to operate Ultimidi:

Stripe — payment processing for one-time purchases made in the desktop web view. When you purchase through Stripe, your payment details are handled entirely by Stripe and are never transmitted to or stored on our servers. Stripe's privacy policy is available at stripe.com/privacy.
RevenueCat — in-app purchase management on iOS and Android. RevenueCat processes your Apple or Google purchase receipts to verify entitlements. Their privacy policy is at revenuecat.com/privacy.
Resend — transactional email delivery (verification and password reset emails). Resend receives your email address only to deliver these messages. Their privacy policy is at resend.com/legal/privacy-policy.
Patreon — optional patron status verification via OAuth. If you connect Patreon, we receive your Patreon user ID and display name only. Their privacy policy is at patreon.com/policy/privacy.

We do not sell your personal information to any third party.

5. Data Storage and Security

Your account data is stored in a PostgreSQL database hosted on Replit's infrastructure. We use industry-standard practices including password hashing (scrypt) and HTTPS for all data in transit.

Session tokens are stored in your browser's local storage and are not transmitted to third parties.

6. Data Retention

We retain your account information for as long as your account is active. If you wish to delete your account and all associated data, please contact us at ultimidi@zebraforce.love and we will delete it within 30 days.

7. Children's Privacy

Ultimidi is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes your acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy or your data, please contact us at:
ultimidi@zebraforce.love