Your audio never leaves your Mac.

Effective 7 August 2026

Chorus routes sound between the devices already attached to your Mac. It does not record, and it does not upload. This page sets out the little we do hold, why, and what you can ask us to do about it.

The short version

Chorus never records or transmits any audio. Ever.
There is no account and no sign-in.
Your settings stay on your Mac. Your licence key stays in your Mac's Keychain.
The app sends a small number of anonymous usage counts to a server we run ourselves.
We only learn your email address if you buy a licence or write to us.

Who is the data controller?

The controller for any personal data we hold about you is TJH/CO LIMITED, trading as THEODORE HQ, a company registered in England and Wales, company number 16589593, at Fairway House, Links Business, Fortran Rd, St. Mellons, Cardiff, CF3 0LT, United Kingdom. You can reach us at support@theodorehq.com.

Given the small scale and low risk of what we do, we are not required to appoint a Data Protection Officer and have not done so. Any data question goes to the address above.

What Chorus does with your audio

Nothing leaves your Mac. Chorus groups the outputs you already have, chooses your input, and sends individual apps to different devices. All of that is macOS's own audio system, running locally.

To send one app's sound to a different output, or give it its own volume, macOS asks you to grant access to that app's audio. Chorus uses that access solely to move the sound and to draw the level meters you see in the panel. Audio is never written to disk, never buffered for later, and never sent anywhere.

What Chorus stores on your Mac

Your preferences - your groups, per-app assignments, keyboard shortcuts and volumes - in the standard macOS preferences store for the app.
Your licence key and activation ID in the macOS Keychain, so they are protected by the system rather than sitting in a plain file.

Both are removed when you drag Chorus to the Trash and delete its preferences. We cannot see either of them.

Permissions the app asks for, and why

Both are optional, both are requested by macOS at the moment you first use the feature, and both can be withdrawn at any time in System Settings.

Audio capture - needed only for per-app routing and per-app volume. Without it, everything else still works.
Accessibility - needed only so your keyboard's volume keys control a group rather than a single device.

The network requests Chorus makes

Three, and no others.

Update checks to theodorehq.com, roughly hourly, to see whether a newer version exists. This is a request for a file; it carries no information about you.
Licence activation and validation to Polar (api.polar.sh), when you enter a key or when your licence is re-checked. This sends your licence key and an identifier for the device so we can enforce the three-Mac limit.
Anonymous usage counts to aptabase.theodorehq.com, a small analytics server we run ourselves rather than handing to an analytics company. It records a handful of plain events, such as the app being opened for the first time or a licence being activated, so we can tell whether Chorus is being used. It carries no name, no email, no audio, no device names and nothing about what you listen to.

What personal data we hold, and on what basis

Your email address and purchase record, if you buy a licence. Basis: performance of our contract with you, and a legal obligation to keep tax records.
Your licence key and the devices it is active on. Basis: performance of our contract, and our legitimate interest in preventing a single licence being shared without limit.
Anything you write to us. Basis: our legitimate interest in answering you.

We do not profile you, and we make no automated decisions about you.

How long we keep it

Purchase and tax records are kept for six years after the end of the relevant financial year, as HMRC requires. Support emails are kept for two years. Anonymous usage counts carry nothing that identifies you, so there is nothing in them to delete.

Cookies and this website

This site sets no cookies and asks you to consent to nothing, because there is nothing to consent to. We count page views with Umami, an analytics server we run ourselves at analytics.theodorehq.com rather than handing your visit to an analytics company. It stores no cookies, records nothing that identifies you, and builds no profile. Your IP address is used in passing to derive a country and is never stored.

Beyond our own analytics server, loading a page here fetches nothing from anyone else. The one exception is deliberate: if you move towards the Buy button, we fetch Polar's checkout so the payment window can open on the page rather than sending you elsewhere. Nothing is fetched from Polar until you show that intent.

Who else handles your data

We keep suppliers to a minimum. Where one is outside the UK, an approved UK transfer safeguard is in place.

Polar (United States) is the Merchant of Record and the seller for your purchase. For the details it collects at its own checkout, including your email, country and tax details, Polar acts as a separate, independent controller under its own terms. Polar uses Stripe to process payments. We never see or receive your card details.
Vercel (United States) hosts this website. It is not used for analytics: the page counts described above come from Umami, on our own server.

Your rights under UK GDPR

Access - ask for a copy of what we hold (Art 15).
Rectification - correct anything inaccurate (Art 16).
Erasure - ask us to delete it, subject to the tax retention above (Art 17).
Restriction - pause our processing while a dispute is resolved (Art 18).
Portability - receive it in a structured, common format (Art 20).
Object - object to processing based on legitimate interests (Art 21).
No automated decisions - we make none about you (Art 22).

To exercise any of these, email support@theodorehq.com. We answer within 30 days, free of charge.

Complaints

If you are unhappy with how we have handled your personal data you can complain to us directly, a right under section 164A of the Data Protection Act 2018. Email support@theodorehq.com and we will acknowledge it within 30 days, look into it, and tell you the outcome.

You can also complain to the UK Information Commissioner's Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, on 0303 123 1113, or at ico.org.uk/make-a-complaint. You may contact the ICO at any time, though we would like the chance to put things right first.

Children

Chorus is a general-purpose utility and is not directed at children under 13, the UK age of digital consent under section 9 of the Data Protection Act 2018. We do not knowingly collect personal data from anyone under 13. If you believe we hold any in error, email us and we will delete it promptly.

Changes to this policy

If we change this policy we will update the date at the top. For any change that materially affects you, we will email customers a plain-English summary at least fourteen days before it takes effect. We will not start collecting more from people who have already bought Chorus.

Contact

Any question at all, write to support@theodorehq.com. A real person reads it.