SoundDesk Privacy Policy

The short version

We have no accounts, no advertising and no data brokers, and we do not sell or share personal information. SoundDesk can see which programs on your PC are playing sound; that list stays on your devices.

• Everything the apps need to work is stored on your own PC and phone.
• The PC app contacts our server only to check for updates (on by default, can be turned off). Anonymous usage reports and notices are off until you turn them on.
• The phone remote is off by default. Once you turn it on, it works only inside your own network, only for phones you have paired.
• The Android app talks to your PC and to nobody else.

What stays on your own devices

PC app: your settings file (profiles, shortcuts, rules, remembered volumes) and a log file are stored in your Windows user profile. SoundDesk reads the names of the programs playing sound and of your audio devices in order to show and control them. This information is not sent to us.

Android app: the PC you paired (its name, its network addresses, the fingerprint of its certificate) and the pairing token are stored on the phone. The token is encrypted with a key held in the Android Keystore. App data is excluded from Android backups.

The phone remote (PC app and Android app)

The phone remote lets a paired phone on the same local network control the PC's volume, mute state, output devices and profiles. It is off by default and turned on only by you in the PC app.

While it is on, the PC app listens on a network port, and only for connections from private networks (home, office, or a private VPN mesh). Connections from the public internet are refused. Traffic is encrypted with TLS, and the phone accepts only the certificate whose fingerprint was in the pairing QR code.

• What a paired phone receives from the PC: the volume and mute state, the names of the output and input devices, the names of the programs currently playing sound, and your profile names. It also sees whether automation is on and how many rules there are, but not the rules themselves. A paired phone can switch automation on or off, save the current mix as a new profile and clear the remembered volume of one program; it cannot change settings, shortcuts or automation rules, and it cannot delete or overwrite a profile.
• What the PC stores about a paired phone: the phone's name, a hash of its token (never the token), when it was last seen and the local network address it connected from. This stays on the PC.
• Nothing in the phone remote is sent to us. You can remove any phone, or reset everything with a new certificate, in the PC app at any time.

What the PC app sends to our server

The PC app has three optional internet features. Each has its own switch in the panel's Settings.

• Update check (on by default): sends the app version and your language, and receives the newest version. If you accept an update, the installer is downloaded from sounddesk.win and its signature is verified. No identifier is sent.
• Anonymous usage report (off by default): once a day, a random installation ID created on your PC when you turn the switch on, the app version, the Windows build, your language, how many profiles, remembered apps and rules you have, and whether per-app routing works on your PC. Never the names of your programs or devices, file paths or your Windows account name. The ID is deleted when you turn the switch off.
• Developer notices (off by default): fetches short notices to show in the panel. Sends no identifier.
• Like any internet connection, our servers see the IP address you connect from. We do not store IP addresses.

The website sounddesk.win

The website counts visits without cookies and without identifiers: the language page that was opened, the country (worked out by our hosting provider), whether the visit started a session, and the host name of the site that linked to us. Downloads are counted per file and per country. If your browser sends Do Not Track or Global Privacy Control, the page does not count you.

Cloudflare Web Analytics also runs on the site. It uses no cookies and does not track individuals across sites. The website is served by Cloudflare, Inc., which acts on our behalf as a hosting provider.

The Android app, Google Play and the QR scanner

The Android app contains no analytics, advertising or crash-reporting tools of our own. It asks for only two permissions: Internet and network state. It does not ask for camera access. The app also shows one line at the top that links to our company website, projectteamforyou.com; tapping it opens your browser, and the app itself sends nothing.

To read the pairing QR code it uses Google's code scanner, which is provided by Google Play services. The camera image is processed on your device by Google Play services; we never receive it. Google Play itself handles installation and updates under Google's own policies, independently of us.

Google's code scanner is built on Google's ML Kit. Under Google's published terms, ML Kit sends technical diagnostics to Google while the scanner runs: device and app information, identifiers and performance data. We do not receive this data and the app cannot switch it off; it is described in Google's ML Kit data disclosure, and the Data safety section of our Google Play listing declares it. Everything else the app handles - volumes, program names, device names - goes only to your own PC over your local network.

Who else is involved

We do not sell personal information and we do not share it for advertising. Two providers process data when you use the services, and only as described above: Cloudflare, Inc. (hosting, delivery and cookie-free web statistics) and Google LLC (Google Play and the code scanner).

How long data is kept and how to delete it

Data on your PC and phone is yours: uninstall the apps or delete their settings to remove it. In the PC app you can remove paired phones one by one or all at once.

Website and report statistics are kept as daily counts. The identifier in an anonymous report is changed every day on our side and cannot be traced back to you, so there is normally nothing to look up. If you want us to remove something anyway, write to us.

Your rights

Depending on where you live, you may have the right to ask whether we hold information about you, to see it, correct it, delete it, or object to its use, and to complain to your data protection authority. Because our records are not tied to a person, we may need your help to find them, such as the installation ID shown in the PC app. Write to the address below and we will answer.

Security

Connections to our server and between your phone and PC use TLS. Phone tokens are random 256-bit values stored only as hashes on the PC; pairing codes are single-use and expire in two minutes; repeated wrong attempts are blocked. Updates must carry our code-signing certificate and a matching checksum before they are installed. No system is perfectly secure, and if you find a weakness please tell us at the address below.

Children

SoundDesk is not directed at children under 14 and we do not knowingly collect personal information from them.

Changes to this policy

If this policy changes, we will update the date at the top and, for changes that matter, say so in the app or on the website. Earlier versions are available on request.

Contact

Projectteamforyou (프로젝트팀포유), represented by Lee Yoosang. Email: projectteamforyou@gmail.com. Address: 1166-68 Yebong-ro, Sangun-myeon, Bonghwa-gun, Gyeongsangbuk-do, Republic of Korea.