EQUA / LEGAL
PRIVACY
POLICY.
Effective September 15, 2026 · EQUA: Music Visuals
EQUA is built around local media processing. This policy explains the information processed by the EQUA: Music Visuals iPhone app and equalab.app, why it is used, where it goes, and how it can be deleted.
01
On-device media
Tracks, artwork, waveform and rhythm analysis, rendered videos, export history, and the free-export counter are processed and stored on your iPhone. EQUA does not upload source audio, artwork, analysis arrays, or rendered videos to EQUA, Supabase, or RevenueCat. Deleting a local project removes its local record and unshared app-managed files; videos already saved to Photos remain there.
02
Optional account and sync
You can use the app without an account. If you request an email sign-in link, Supabase processes your email address, account ID, authentication records, and security metadata. Automatic sync stores project configuration JSON: project name, selected visual and version, canvas format, duration and trim settings, visual color settings, timestamps, and non-public local asset identifiers or hashes. File paths, source media, analysis arrays, and exported videos are excluded. Row Level Security limits synced rows to their account owner.
03
Purchases
Apple processes App Store payments. RevenueCat receives an anonymous app user ID or, after optional sign-in, the Supabase account UUID, together with purchase, receipt, entitlement, app, device, and service diagnostics required to sell and restore EQUA Pro. EQUA does not receive full payment-card details. Apple and RevenueCat keep transaction records under their own policies and legal obligations.
04
Website analytics
equalab.app uses Google Analytics and Vercel Web Analytics to understand page usage and reliability. Google Analytics may use the first-party _ga identifier and process page activity, session statistics, approximate location, referrer, and browser or device information. Vercel Web Analytics processes limited page, referrer, coarse location, browser, operating-system, and device-type data as aggregated analytics. Do not put personal information in website URL parameters.
05
Updates and operations
The app contacts the EQUA configuration service to check whether a binary update is required and may contact Expo services to obtain compatible over-the-air updates. Vercel, Supabase, Expo, Apple, RevenueCat, and email-delivery infrastructure may process ordinary request data such as IP address, timestamp, app or browser version, and error or security information. EQUA does not use an advertising SDK in the iPhone app.
06
Support requests
If you contact EQUA through equalab.app/support, we process the name, email address, message, source page, delivery status, and timestamps you submit. The request is stored in the protected EQUA Supabase project and a notification copy is sent to the private support chat through the Telegram Bot API. This information is used only to answer and manage your request. Do not include passwords, payment-card data, or private source media.
07
Sharing and international processing
EQUA does not sell personal information or use it for cross-context behavioral advertising. Data is disclosed only to the processors needed for authentication and JSON sync, email delivery, subscriptions, updates, hosting, analytics, security, and support; to a successor operating the service; or when required by law. Those providers may process data in countries other than yours under their own contractual and legal safeguards.
08
Retention and deletion
Local data remains until you delete a project, remove exported files, or uninstall the app. Optional Supabase account and synced configuration data remain until the account is deleted or the service must remove them. Support requests are retained while needed to answer the request, maintain service records, prevent abuse, or meet legal obligations, then deleted or anonymized. In Profile → Account, account deletion permanently removes the Auth user and cascades to its profile, synced project settings, and entitlement snapshots; support requests submitted through the public form are not automatically linked to an account and may require a separate verified deletion request. Local projects remain usable and become local-only. EQUA does not use Supabase Storage for user media. Deleting an account does not cancel an Apple subscription, which must be managed separately in the App Store.
09
Choices and requests
You may decline account creation and keep using local creation. You can delete individual projects in the editor, delete the optional account in the app, manage or cancel subscriptions through Apple, clear browser cookies, use browser tracking controls, or remove the app to erase app-managed local data. Privacy access, correction, deletion, objection, or portability requests can be sent through the EQUA support form; identity verification may be required.
10
Security, children, and changes
EQUA uses access controls, encrypted transport, and least-privilege service credentials, but no service can guarantee absolute security. EQUA is not directed to children under 13 and does not knowingly collect their personal information. Material policy changes will be published here with a revised effective date.
For privacy or support requests, use the EQUA support form.