Reso9+ Privacy Policy

Overview

This Privacy Policy explains how Reso9+ handles personal data and personal information when you use the Reso9+ mobile application on iOS or Android (the "App").

Reso9+ is operated by Harmo|Ny/(i)-ght Labs (also referred to in project materials as Harmonight Labs), Sweden ("Reso9+", "we", "us", or "our"). If the public developer identity changes, this Policy will be updated to match the active legal entity.

Privacy contact: harmonight.labs@gmail.com

Reso9+ is designed as a local-first pocket instrument for light, signal, rhythm, resonance visuals, tuning, Morse playback, metronome output, local music analysis, personal hearing checks, and optional user-initiated feedback reports. "Local-first" means the core App features process on your device and the current App does not require a user account or login wall for its feature set. It does not mean every optional support, export, platform, or future sync action must be offline forever.

The current App does not require a user account, does not contain advertising SDKs, does not contain third-party analytics SDKs, does not sell personal data, and does not share personal information for cross-context behavioral advertising. The current App does not provide account sync. If a future version adds optional login or cloud sync for settings or saved items, that feature will require updated privacy disclosures, store disclosures, backend retention rules, and user controls before release.

Short Version

• Core Reso9+ processing stays on your device by default.
• The microphone is used for local analysis and control. Raw audio is not recorded, stored, or sent to us by default.
• The Android camera permission is used to control the flashlight/torch. Reso9+ does not capture photos or videos with the camera.
• Motion data is used locally for Candle flame movement and snuff behavior.
• Generated share cards are saved to Photos or Pictures only when you choose Save to Photos.
• Android declares network access for optional HTTPS Report delivery. There is no cloud microphone, camera, photo, or music-analysis processing in the current App.
• Report submissions stay local unless the App is built with a private HTTPS report endpoint and you choose to submit a report.
• If report delivery is enabled, the App sends only the fixing-focused report payload described below. The App does not ask for or attach your name, email, account identifier, photos, audio, contacts, or precise location.
• The current App has no account sync. Future optional login or sync must be disclosed before it ships.
• Do not type personal, medical, financial, account, location, contact, password, token, or other sensitive information into free-form report fields.
• We do not sell personal data and do not share personal information for cross-context behavioral advertising.
• You can contact harmonight.labs@gmail.com for privacy rights, deletion requests, California privacy requests, accessibility-related privacy concerns, or complaints.

Who This Policy Applies To

This Policy applies to people who install, open, browse, or use Reso9+, including people who:

• use Torch, Screen, SOS, Moon, Candle, Rhythm, Resonance, Forge, Morse, Metronome, Tune, Hear, Sonic DNA, or Report;
• save local settings, presets, test results, analysis snapshots, reports, or share cards;
• contact us for support, privacy, accessibility, or legal requests; or
• buy, download, restore, update, review, or test the App through Apple App Store, Google Play, TestFlight, internal testing, or another approved distribution channel.

This Policy does not replace the privacy policies of Apple, Google, your device manufacturer, your operating system, your email provider, your app store account provider, or any backend provider used for report delivery.

Controller And Contact

For GDPR, UK GDPR, Swiss data protection law, and similar laws, the controller for App-side data we decide to process is:

Harmo|Ny/(i)-ght Labs / Reso9+

Sweden

Email: harmonight.labs@gmail.com

We have not appointed a Data Protection Officer for the current local-first App design. If a DPO, EU representative, UK representative, or other formal privacy representative becomes required, this Policy will be updated with the correct contact details.

Information Stored Locally On Your Device

Reso9+ stores app state locally so the App can work without an account. Local data may include:

• selected color, intensity, dock order, language choice, and visual settings;
• Torch, Screen, SOS, Moon, Candle, Rhythm, Resonance, Morse, Metronome, Tune, Hear, Sonic DNA, and Forge preferences;
• custom tuner strings, A4 reference, and routing settings;
• Morse message history and generated Morse text;
• saved Resonance patterns and titles;
• saved Hear test sessions, reference calibration, relative results, and titles;
• saved Sonic DNA sessions, local analysis summaries, fingerprints, and titles;
• local Report history and exported report JSON;
• generated share-card content when you choose to create or save it; and
• local flags such as dismissed warnings or remembered setup choices.

This local data is not automatically sent to us. It may remain on your device until you delete it in the App, clear app data, uninstall the App, or your operating system removes it. Your operating system or device backup settings may keep backup copies outside the App's control.

Microphone

Reso9+ uses the microphone for local audio features such as Tune, Rhythm, Resonance, Candle blow detection, and Sonic DNA.

The App processes microphone input on your device to derive technical values such as amplitude, pitch, spectral energy, rhythm cues, or blow strength. Raw audio is not recorded, saved, or transmitted to us by default.

If microphone permission is denied, microphone-based features may not work or may run in a reduced state.

Camera And Flashlight

On Android, Reso9+ requests camera-related permission to control the hardware torch. The App uses the camera system only to turn the flashlight on or off and, where supported by the device and operating system, adjust torch strength.

Reso9+ does not use the camera to take photos, record video, scan faces, scan documents, or identify people.

On iOS, Reso9+ uses the system torch APIs for flashlight output where available.

Motion And Accelerometer

Reso9+ may use accelerometer data locally for Candle flame sway, tilt stress, and shake/snuff behavior. The App uses this data as live control input. It is not sent to us by default.

Photos And Media Saving

Reso9+ can create generated share cards for features such as Sonic DNA, Resonance, Hear, and Forge. When you choose Save to Photos, the App writes that generated image to your Photos library or Pictures folder.

The App does not need to read your photo library to create these cards, and it does not import your existing photos or videos.

Network Access

The Android release manifest includes Internet/network access so that optional Report delivery can use HTTPS when a release build is configured with a report endpoint. The current App has no account sync, advertising, third-party analytics, cloud audio processing, cloud camera processing, cloud photo processing, or cloud music recognition.

Network access is used by the current App only if a release build is configured with an HTTPS report endpoint and you choose to submit a report. Apple, Google, app stores, operating systems, email providers, and device services may also process store, purchase, review, update, testing, backup, or distribution activity outside the App under their own policies.

If a future version adds optional login or cloud sync for settings or saved items, that feature should remain separate from the current no-login core experience and must be covered by updated App controls, Privacy Policy wording, store privacy answers, backend retention rules, and deletion handling before release.

Report Delivery

The Report feature is designed for bug reports, improvement requests, suggestions, crashes, performance issues, design feedback, content feedback, accessibility feedback, and similar fixing-focused messages.

If no report endpoint is configured, reports stay in local App history and can be copied or exported as JSON by you.

If an HTTPS report endpoint is configured in a release build and you choose to submit a report, the App may send:

• report category and label;
• impact level and label;
• selected surface or scene;
• free-form report message;
• local report identifier;
• App name and version;
• device type such as phone, tablet, or desktop;
• platform and operating system version;
• selected accent color and intensity;
• entry scene;
• creation and submission timestamps;
• local delivery status; and
• server report identifier, if the server returns one.

The App-side report payload is designed not to ask for or automatically attach your name, email address, account identifier, precise location, contacts, photos, audio files, raw microphone audio, payment details, advertising identifier, or platform account identifier.

Because the report message is a free-form text field, you control what you type. If you type personal or sensitive information into the message, that text may be included in the saved or submitted report. Please do not include personal, sensitive, medical, financial, location, contact, password, token, account, or private information in report messages.

When a report is sent to a server, normal HTTPS delivery may expose technical network metadata such as IP address and request timing to the hosting provider or server infrastructure. We do not include IP address inside the report JSON payload. If hosted report delivery is enabled, server log handling will depend on the chosen backend provider and should be kept to what is reasonably needed for security, debugging, abuse prevention, and legal needs.

Support, Privacy, Legal, And Accessibility Communications

If you contact us by email or another support channel, we may receive:

• your email address or contact handle;
• your message content;
• screenshots, logs, report JSON, accessibility details, or files you choose to send; and
• support history needed to respond to your request.

Do not send passwords, API keys, payment card details, private medical records, government identifiers, precise location, or other secrets in support messages.

App Store Purchases And Platform Data

If Reso9+ is sold, downloaded, updated, restored, refunded, reviewed, or tested through Apple, Google, or another platform, that platform may process purchase, device, account, tax, region, crash, review, fraud-prevention, and distribution data under its own terms and privacy policy.

We do not receive or store your full payment card number, bank account number, or platform authentication credentials from the App.

Health-Adjacent And Safety-Adjacent Features

Hear is a personal hearing check and tracking feature. It is not a medical device, not a clinical audiogram, and not a diagnosis. Hear data is stored locally unless you choose to export it, save a share card, send it to support, or include it in a report message.

Sonic DNA, Resonance, Tune, Morse, Metronome, Candle, Moon, Screen, SOS, and Torch are utility or creative tools. They may involve light, sound, haptics, microphone input, motion input, or device hardware output. They are not safety, medical, emergency, rescue, or professional measurement services.

How We Use Information

We use information only as needed to:

• provide App functionality on your device;
• save and restore local settings, presets, sessions, and reports;
• generate local light, sound, rhythm, tuning, analysis, hearing-check, and share-card experiences;
• process optional report submissions if a report endpoint is configured;
• respond to support, privacy, legal, or accessibility requests;
• debug problems reported by users;
• maintain security, prevent abuse, and protect the App and users;
• comply with app store, tax, accounting, legal, accessibility, and platform obligations; and
• enforce our End User License Agreement (EULA).

We do not use microphone input for advertising. We do not sell personal data. We do not use Reso9+ to track you across third-party apps or websites.

Legal Bases For EEA, UK, And Swiss Users

If GDPR, UK GDPR, Swiss data protection law, or similar law applies, our legal bases may include:

• Contract: to provide the App, local features, support, downloads, purchases, updates, refunds, and platform distribution you request.
• Legitimate interests: to maintain security, debug problems, prevent abuse, handle support, handle accessibility requests, protect legal rights, and improve reliability in ways that do not override your rights.
• Consent: for operating system permissions such as microphone or Photos access, and for optional report or support submissions where applicable.
• Legal obligation: to comply with laws, app store rules, accounting, tax, consumer protection, accessibility, privacy, and lawful requests.
• Vital interests: only in rare cases where necessary to protect someone from serious harm.

You may withdraw consent where processing is based on consent. Withdrawing consent may disable the related feature.

California Privacy Notice

This section is intended for California residents and uses terms from the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). It also gives a practical transparency baseline even if Reso9+ does not meet CCPA business thresholds at a given time.

Categories Of Personal Information

In the last 12 months, the App may handle these categories:

• Identifiers: email address or contact handle if you contact us; local report identifiers or server report identifiers if report delivery is configured.
• Customer records or commercial information: app store purchase, refund, review, or platform account information handled by Apple, Google, or another platform, and any limited records they make available to the developer console.
• Internet, electronic, or device activity: app version, device type, operating system version, timestamps, delivery status, and normal server metadata if you submit a hosted report or contact support.
• Audio, visual, sensory, or motion-related data: microphone input, motion input, haptics, torch output, screen output, and generated share cards are processed locally by default. Raw audio, camera images, and motion streams are not sent to us by default.
• Health-adjacent or sensitive content: Hear results and related notes are local personal tracking data by default. They are not clinical records and are not sent to us unless you choose to export, share, email, or type them into a report or support message.
• User-provided content: report messages, support messages, custom titles, exported JSON, screenshots, share cards, and files you choose to send.
• Inferences or analysis summaries: Sonic DNA, Hear, Resonance, or other local analysis summaries are stored locally by default and are not sent to us unless you choose to export, share, email, or include them in a report.

Sources

Sources may include:

• you and your device;
• the App's local processing;
• Apple, Google, TestFlight, Google Play, or another app distribution platform;
• your email or support provider if you contact us; and
• a report backend provider if report delivery is configured.

Purposes

Purposes may include:

• providing the App and local features;
• saving local preferences and sessions;
• processing reports or support messages you choose to send;
• debugging, security, abuse prevention, and product reliability;
• handling privacy, legal, accessibility, or deletion requests;
• app store distribution, purchase, refund, review, and compliance operations; and
• legal, tax, accounting, safety, consumer-protection, and platform obligations.

Disclosure, Sale, And Sharing

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.

We may disclose limited information to service providers or contractors only for the purposes described in this Policy, such as report hosting, email support, security, storage, app distribution, or legal compliance.

If a future version sells personal information, shares personal information for cross-context behavioral advertising, uses targeted advertising, or uses sensitive personal information beyond permitted service purposes, this Policy and the App controls will be updated before that practice begins.

Sensitive Personal Information

The App is not designed to collect precise location, government identifiers, account passwords, payment card numbers, raw audio recordings, camera images, biometric identifiers, or medical records.

Free-form reports and support messages can contain whatever you type. Please do not submit sensitive personal information unless it is necessary for your request. If you submit sensitive personal information, we will use it only as needed to respond, investigate, comply with law, protect safety/security, or delete/limit it where appropriate.

California Rights

Where CCPA/CPRA applies, California residents may have rights to:

• know what personal information we collect, use, disclose, sell, or share;
• access specific pieces of personal information where required and verifiable;
• delete personal information, subject to exceptions;
• correct inaccurate personal information;
• opt out of sale or sharing of personal information;
• limit certain uses or disclosures of sensitive personal information;
• use an authorized agent where law allows;
• appeal or challenge certain privacy decisions where available; and
• not be discriminated against for exercising privacy rights.

To exercise these rights, contact harmonight.labs@gmail.com. You do not need to create an account to submit a request. We may need to verify that you are the person connected to the request before acting on it. Where CCPA/CPRA applies, we aim to respond within the legally required timeline.

Because Reso9+ does not currently sell or share personal information for cross-context behavioral advertising, a "Do Not Sell or Share" flow is not currently needed inside the App. If this changes, the App and public policy will be updated before that practice begins.

When Information Is Shared

We do not sell personal data for money.

Information may be shared only in limited cases:

• Apple, Google, and platform providers: for app distribution, purchases, refunds, reviews, testing, crash or platform diagnostics, fraud prevention, and platform services outside our direct control.
• Report backend providers: only if report delivery is configured, and only to process the report payload and related HTTPS/server metadata.
• Support providers: if you email us or use another support channel.
• Service providers or contractors: if future hosting, storage, security, support, accessibility, or legal tools are added, they must process data on our behalf and according to this Policy.
• Legal, safety, and business reasons: if needed to comply with law, respond to lawful requests, investigate abuse, protect rights and safety, enforce our EULA, or handle a merger, acquisition, financing, restructuring, or sale of assets with appropriate safeguards.

If you save a share card to Photos or Pictures, copy JSON to the clipboard, or send exported data to another app or person, that is your action and may be handled by your device, operating system, receiving app, or recipient.

International Transfers

Reso9+ is operated from Sweden. Apple, Google, email providers, support providers, hosting providers, or future report infrastructure may process data in the EEA, the United States, or other countries.

Where required, international transfers should rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, Data Processing Agreements, Data Privacy Framework participation, or equivalent provider mechanisms.

Retention And Deletion

Local App data remains on your device until you delete it, clear app data, uninstall the App, or your operating system removes it. Local reports can be deleted from the Report history. Saved feature sessions can be deleted where the App provides that control.

Support emails and privacy/accessibility request records are kept only as long as reasonably needed to handle the request, maintain business records, protect legal rights, and comply with law.

If report delivery is configured, server-side report retention should keep report payloads only as long as needed for triage, debugging, security, product improvement, accessibility improvement, and legal needs.

Deleting the App from your device may delete local App data from the device, but it may not delete operating-system backups, app store records, support emails, or server-side reports already submitted.

To request deletion of information we control, contact harmonight.labs@gmail.com.

Your Privacy Rights

Depending on where you live, you may have the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests or direct marketing;
• request a portable copy of data you provided;
• withdraw consent where processing is based on consent;
• opt out of sale, sharing, targeted advertising, or certain profiling where local law provides that right;
• limit certain uses of sensitive personal information where local law provides that right;
• complain to a data protection authority; and
• appeal or challenge certain privacy decisions where local law provides that right.

To exercise rights, contact harmonight.labs@gmail.com. We may need to verify that you are the person connected to the request before acting on it.

If your request relates to Apple, Google, your operating system, your device manufacturer, your email provider, or another independent provider, you may need to contact that provider directly.

If you are in Sweden or the EEA, you may contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or your local supervisory authority. We encourage you to contact us first so we can try to resolve the issue.

Children's Privacy

Reso9+ is not directed to children under 13. We do not knowingly collect personal data from children under 13.

If the law in your country requires a higher age or parental consent for digital services, you may use Reso9+ only if you meet that requirement or have permission from a parent or legal guardian.

If you believe a child has provided personal data without appropriate consent, contact harmonight.labs@gmail.com.

Security

We use reasonable technical and organizational measures appropriate to the current local-first App design. If report delivery is enabled, reports should be sent only over HTTPS and stored by a backend configured with appropriate access controls and retention limits.

No app, device, network, or storage system is completely secure. You are responsible for keeping your device, operating system, app store account, email account, and backups secure.

Accessibility And Privacy

Accessibility requests may include information about your device, operating system, assistive technology, access need, or the App area that caused a barrier. We use that information only to respond, investigate, improve accessibility, comply with law, and protect the App and users.

Do not send sensitive medical details unless they are necessary for the request. If you need an alternate format for this Policy, the EULA, or the Accessibility Statement, contact harmonight.labs@gmail.com.

Changes To This Policy

We may update this Policy from time to time. When changes are material, we will update the "Last updated" date and, where required, provide notice through the App, app store release notes, the legal URL, or another reasonable method.

If a Privacy Policy update changes the legal review version in the App, you may be asked to review the updated legal documents again.

Contact

For privacy questions, rights requests, deletion requests, accessibility-related privacy requests, or complaints, contact:

Harmo|Ny/(i)-ght Labs / Reso9+

Sweden

Email: harmonight.labs@gmail.com