Privacy Policy

Last updated: 2026-09-03

The short version. Phospho does not track you. It contains no analytics, no usage tracking, no advertising and no third-party SDKs, and your screen contents never leave your Mac. The app contains no telemetry at all and sends us nothing.

Phospho is sold through the Mac App Store, so Apple handles the purchase. We do not receive your name, email address, postal address or payment details from Apple, and we keep no customer database. The only personal data we ever hold is whatever you choose to put in an email to us. Our web host sees standard request data, such as your IP address, when you visit the site. The rest of this policy sets out each of those points in detail.

Who is responsible

Data controller for everything described here:

Rafael Nogueira (sole proprietor)
Case Postale
1000 Lausanne
Switzerland
phospho.ch/contact

This policy covers both the EU GDPR and the Swiss Federal Act on Data Protection (FADP).

Part 1. The app

Phospho has no analytics, no usage tracking, no advertising and no third-party SDKs. We cannot see how you use the app. It talks to no server of ours about you, with no exceptions: there is no opt-in telemetry and no endpoint of ours for it to talk to.

Your screen. Phospho samples your screen’s colours to drive your lights. Screen content is processed in memory on your Mac. It is never stored, never written to disk and never transmitted. The only thing that leaves the app is the resulting colour values, sent across your own local network to your own Hue bridge.

Data stored locally on your Mac (never transmitted to us):

• Keychain: your Hue bridge credentials and the bridge’s pinned certificate hash, and the trial state.
• Preferences (UserDefaults): app settings, including your consent flags.

This data stays on your Mac and is removed if you delete the app and its data.

Network traffic. The app’s only network traffic is on your local network: finding your Hue bridge over mDNS/Bonjour and streaming to it directly. It contacts no server of ours. Updates arrive through the Mac App Store, handled by Apple under Apple’s privacy policy, so there is no update check that reports back to us.

Part 2. Buying a license

The Mac App Store (Apple). Phospho is sold through the Mac App Store, where Apple is the seller of record. Apple processes your purchase, payment, billing details, and tax as its own data controller, under Apple’s privacy policy. We do not receive your name, email address, postal address, or payment details from the App Store. The app confirms your unlock through Apple’s on-device StoreKit framework; that confirmation stays on your Mac and is not reported to us.

We keep no customer database. There is no license server, no purchase record on our side, and no email pipeline for sales. Because the unlock follows your Apple ID, there is nothing we need to store about you to deliver or restore it.

The contact form. If you write to us through phospho.ch/contact, we receive the name and email address you give, the topic you pick, your message, your browser’s user agent string and the time it was sent. The form is delivered by a Cloudflare Worker, which keeps a copy for up to 90 days so an unanswered thread is not lost, and forwards it to our mailbox through Resend, an email delivery service; both act as our processors and see nothing else. To limit abuse, the Worker counts messages per connection for one hour using a salted, non-reversible hash of the address; the address itself is not stored with your message. We use what you send only to help you. You are not added to any mailing list.

The spam check on that form. Before the form will send, your browser solves a small puzzle our own backend hands it — a few hundred thousand hash calculations, done in the background while you type, which costs you about a second and costs anyone sending in bulk that much per message. It is the reason there is no “I am not a robot” box here. No third-party service is involved, nothing is stored in your browser, no cookies are set, and nothing about you leaves us to be checked by anyone else. It needs JavaScript: with JavaScript turned off, the form cannot be sent.

That is the complete list. There is no marketing database, no newsletter by default, and no sharing or selling of any of this to anyone.

Your rights

Under the GDPR and the Swiss FADP you can request access, correction, deletion, restriction of processing or data portability, and you can object to processing. Write through the contact form and we will handle it manually. Apple is the controller for anything tied to your purchase or payment, so send those requests to Apple.

In practice we hold almost nothing about you. Your purchase record sits with Apple rather than us, so there is nothing on our side to retrieve or delete. What we do hold is whatever you have emailed us, which we can send you or delete on request.

You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU/EEA, with your local supervisory authority.

Crash reports

Phospho contains no telemetry, no analytics and no crash-reporting SDK. It has no endpoint of ours to send anything to and it collects no diagnostics itself. There is no setting for this, because there is nothing to switch off.

If your Mac is set to share analytics with app developers, a macOS setting you control under System Settings › Privacy & Security › Analytics & Improvements, Apple may include Phospho crash and energy reports in the aggregated diagnostics it makes available to us through Xcode. Apple carries out that collection under Apple’s privacy policy. We receive it already aggregated and never tied to you, and it is governed by your macOS setting rather than by anything in the app. Turning that setting off stops it.

The website

phospho.ch serves static pages with no cookies, no analytics and no trackers. Every script and style it loads is served from phospho.ch itself; no page requests anything from a third party. The hosting infrastructure sees standard web-server request data, such as your IP address, as any host does.

Changes

If this policy changes, the current version is published at phospho.ch with an updated date. We will not quietly weaken the guarantees in Part 1: no tracking, no analytics, and your screen contents never leaving your Mac. Any change to those would be stated plainly and would require your consent.

Language

If this policy is translated into another language, the translation is provided for convenience only; the English version is the authoritative text and governs in the event of any discrepancy.

Contact

the contact form (phospho.ch/contact), or by post at the address above.