Privacy Policy

Last updated: October 15, 2026

1. Controller. Stemhand ("we"). Contact: info@stemhand.app. Sales are made by Creem (Armitage Labs OÜ, Estonia), the merchant of record: it takes the payment, issues the receipt and handles payments and refunds; it processes purchase data under its terms.

2. Short version. Stemhand runs on your Mac. Your Ableton Live sets and audio files stay on your Mac unless you choose to upload them to your Google Drive or play/download them from your phone. To make the phone work from anywhere we run a relay server on Cloudflare; requests between your phone and your Mac pass through it. We do not store your audio or project data; we store only what is needed to pair your phone. The app has no analytics, no tracking cookies and no ads; this website counts visits with Cloudflare Web Analytics, without cookies (see 11). We do not sell data.

3. Data we process. Project data and exported files (your Mac; to perform exports; contract). Settings, history, local access keys (your Mac; contract). A random Mac identifier and a hash of its secret (relay; to connect your Mac and phones; contract; while you use the service). Hashes of paired-phone tokens, max. 20 (relay; contract; until you unpair). 6-digit pairing code (relay; ~11 minutes). IP address of pairing attempts, as a hash, and attempt count (relay; legitimate interest; 1 hour). The IP is only used to limit failed PIN attempts; it is stored only as an irreversible hash, never in clear text, and deleted after one hour. The relay also keeps daily usage counters with no personal data. Content in transit between phone and Mac — song/track names, folder paths, options, audio you play or download (relay; not stored). Google tokens if you connect Google (your Mac; consent). Push subscription (your Mac; consent). Purchase data — name, email, country (our merchant of record, Creem — Armitage Labs OÜ, Estonia; contract and legal obligation; as long as tax law requires). Support emails (24 months). Beta usage events without content, only with your opt-in (consent; stored on the tester's Mac, not on our servers; until the end of the beta + 90 days). Waitlist email, language, source and optional answer (private Google Sheet; consent; see 11).

4. Security. TLS between phone, Cloudflare and Mac. The relay can currently see in-transit content in clear text (no end-to-end encryption yet); we neither store nor inspect it. Tokens are stored as hashes. Push notifications are end-to-end encrypted.

5. Processors and third parties. Cloudflare, Inc. (relay, web app and this website, USA/global); Google (only if you connect it, and for the waitlist sheet); Apple/Google/Mozilla/Microsoft push services; Creem (Armitage Labs OÜ), our merchant of record (Estonia, EU). We do not sell or rent personal data.

6. Google Limited Use. Stemhand's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Scope: drive.file only (create and upload the files it exports, in its own folder; it does not read your other files). Tokens stay on your Mac; revoke any time at myaccount.google.com/permissions. The Drive folder Stemhand creates is shared as "anyone with the link can view".

7. International transfers. Providers process data outside Argentina and the EEA (mainly the USA) under their contractual safeguards (e.g. Standard Contractual Clauses).

8. Your rights. Access, rectification, erasure; in the EEA/UK also objection, restriction, portability and withdrawal of consent. Email info@stemhand.app; we reply within 30 days. You may complain to your local data protection authority (in Argentina, the Agencia de Acceso a la Información Pública).

9. Children. Not directed to children under 16.

10. Changes. We will post changes here and email buyers.

11. Waitlist and this website. For the early access list we keep your email, the page language, where you came from (for example TikTok) if the link says so, and your answer to the optional question if you send one. We use it to send you one email when your spot opens and to understand who the product is for; we don't sell or share it. It is stored in a private Google Sheet (Google LLC, United States) until the beta ends or until you ask us to delete it, whichever comes first. Every email we send has a way to unsubscribe. The site is hosted on Cloudflare (United States and global network), which counts visits without cookies.