Privacy policy

Scope and contact

Sonano is operated by an independent developer. Contact the Sonano developer at [email protected] for privacy questions and personal-data requests. This notice covers website and Mac App Store users: the website, local App, purchases and entitlement checks for each channel, and support material you choose to provide. Browsing this site does not require a purchase-email login or device activation.

Local content and external capabilities

Default local speech processing uses models on your Mac. Input text, audio, voice assets, generated results, projects, history and local audit data are stored locally. The website licensing service does not need your creative work to verify Pro. Manage local storage, history and audit retention in the relevant App settings.

If you choose to configure external Text AI or other services, selected text, prompts and necessary task data are sent to that provider under its policy. Model and runtime downloads contact the actual resource host, which normally sees the request IP and resource identifier. Sharing content with a remote Agent or host also follows that host’s processing rules.

Purchases and entitlement checks

Website purchase: Purchasing and license recovery use your purchase email. Website licensing stores email verification, order and payment status, delivery notifications, device activation/deactivation and records needed to prevent duplicate transactions or issuance. It does not store full payment-card numbers.
Mac App Store purchase: Apple handles purchase and payment information. The App checks signed transaction information to verify Pro and restore purchases. This does not require the website purchase-email or device-activation flow.

Website license device checks use a product-separated device digest and an independent activation identifier, without uploading the raw hardware UUID. The digest can still link the same Mac and is not anonymous data. It supports the two-device limit, renewal and recovery, rather than analysis of local audio content.

The website customer page uses a necessary email-session cookie. The website edition’s email-management session stays in local engine memory; device credentials and activation state are stored separately on the Mac. Signing out of email does not automatically deactivate the Mac.

Access, security and logs

Hosting, security and payment providers process access and network metadata. Licensing endpoints derive short-lived rate-limit digests from the request IP and do not trust client-supplied proxy headers. App logs and local request audits may include diagnostic and invocation metadata managed through local settings.

Sonano licensing business logs are designed to exclude verification codes, access tokens, signed credentials, raw request bodies, email addresses and provider exception details. This does not mean hosting or payment providers process no network information. The website currently loads fonts through Google Fonts, whose provider processes those requests too.

Necessary service providers

Cloudflare hosts the website, licensing service and D1 database, and forwards [email protected] mail to the operator’s QQ mailbox. Waffo Pancake processes website payments and transaction records; Apple processes Mac App Store purchases. Resend sends verification codes and order notifications. QQ Mail receives support mail. These providers process information needed for those purposes and may process or store it outside your country or region.

Depending on the features and purchase channel you use, see the privacy notices of Apple, Cloudflare, Waffo Pancake, Resend, Tencent and Google. Your local creative work is not an input to website license verification. We do not sell personal information to advertisers.

Retention and cleanup

Website email codes expire after 10 minutes, and email-management sessions generally expire after 30 minutes. Bounded service cleanup reclaims expired temporary records; expiry is not a promise of physical deletion at that exact second. Short-lived rate-limit records are also cleaned up after expiry.

Order, payment replay-prevention, device-activation and issuance facts support continuing licensing, recovery, refunds/disputes and audits; they are not automatically deleted on the short email-session schedule. Support mail has no uniform automatic deletion period either. Contact support for access, correction or deletion. We will check what can be handled and what must remain for a valid license, a dispute or applicable law, rather than promise to erase every transaction fact.

Local history, voices, work and logs follow local settings and actual references. Deleting local data does not automatically delete a payment provider’s records. Signing out or uninstalling is not itself a deletion request to a provider.

Your choices and requests

You can manage local data and retention, deactivate license devices, stop using external providers, and request review, access, correction or deletion through [email protected]. We verify the necessary identity or purchase ownership before disclosing orders or licenses to another person. Rights to complain or seek remedies under applicable law remain available.

Do not submit another person’s voice, recordings or personal information without the necessary permission. Data held directly by external providers also follows their policies and request procedures. Material changes to this notice will identify updates and provide required notice where applicable.