Your data, treated with restraint.

This policy is issued by Useful Made, an independent software company (“Useful Made”, “we”, “us”). It applies to our website, our applications including Wavebender, and any other service that links to it — together, the “Services”.

For the personal data described here, Useful Made acts as the data controller — the party that decides why and how your information is processed. Where we rely on other companies to help run the Services, they act as our processors under written agreements. This policy does not cover third‑party products or sites we link to, which have their own policies.

We collect only what a feature actually needs. Depending on how you use the Services, that falls into three groups.

Information you give us

• — Contact details. Your name and email when you write to us, subscribe to updates, or request support.
• — Account & purchase data. If a product offers an account or paid features, the information needed to provide them. Payments are handled by the app store or a payment processor; we do not receive or store your full card number.
• — Content you send. The contents of messages, feedback, and bug reports you choose to share.

Information collected automatically

• — Device & app data. Device model, operating‑system version, app version, language, and similar technical details needed to run and support the app.
• — Usage & diagnostics. Aggregated, non‑identifying signals about how features are used and about crashes, so we can find and fix problems.
• — Log & approximate location. When you visit our website, standard server logs such as IP address, browser type, and pages viewed. IP address gives only a coarse, city‑level location; we do not collect precise GPS location.

Sensor data that stays on your device

Some products use device sensors — for example, Wavebender uses the camera to track hand movement. This processing happens entirely on your device. Camera frames are never uploaded, stored, or sent to us or anyone else. Only your own settings, presets, and calibration are saved, and those are saved locally.

Information from third parties

We may receive limited information from services we rely on — for instance, an app store confirming a purchase or subscription status, or an email provider confirming a delivery. We do not buy personal data from data brokers.

We use the information above only for the purposes below. We do not use it to build advertising profiles, and we do not sell it.

• — Provide the Services. Run the app and website, deliver features you request, and remember your settings.
• — Support you. Answer your questions, diagnose issues, and follow up on feedback.
• — Improve and secure. Understand which features help, fix bugs and crashes, and protect the Services against abuse and fraud.
• — Communicate. Send you service messages you need, and — only if you ask for them — occasional product updates.
• — Meet legal obligations. Keep records and respond where the law requires it.

If you are in the United Kingdom or the European Economic Area, we process personal data only where we have a legal basis under the GDPR:

• — Contract. To provide a product or feature you have asked for.
• — Legitimate interests. To secure, maintain, and improve the Services, balanced against your rights.
• — Consent. For optional things like marketing emails or non‑essential cookies. You can withdraw consent at any time.
• — Legal obligation. Where processing is required to comply with the law.

We do not sell your personal information, and we do not share it for cross‑context behavioural advertising.

We disclose information only in these limited cases:

• — Service providers. Trusted vendors who process data on our behalf — hosting, error reporting, email delivery, and payment processing — bound by contract to use it only as we instruct.
• — Legal & safety. When required by law, or to protect the rights, safety, and property of users, the public, or Useful Made.
• — Business transfer. If the company or a product is ever reorganised, merged, or acquired, information may transfer as part of that deal, subject to this policy.
• — With your direction. When you ask us to share something, or make it public yourself.

Our website uses only what it needs to function, and keeps tracking to a minimum. We use two kinds of technology:

• — Essential storage. Cookies or local storage required for the site to work and to remember your preferences. These cannot be switched off.
• — Optional analytics. Privacy‑respecting, aggregated measurement to understand traffic. Where the law requires it, we ask for your consent first.

You can block or delete cookies in your browser settings, and most browsers offer a “do not track” or global privacy control signal, which we honour where applicable. Blocking essential storage may stop parts of the site from working.

We keep personal data only for as long as it is needed for the purpose it was collected, and then delete or anonymise it. In practice that means support correspondence is kept while it may be useful and for a reasonable period after; diagnostic data is kept in aggregate for short retention windows; and records we are legally required to hold, such as transaction records, are kept for the period the law sets. When you close an account or ask us to delete your data, we remove it unless we must retain something to meet a legal obligation.

We use technical and organisational measures appropriate to the risk — encryption in transit, access controls, and the principle of collecting as little as possible so there is less to protect. On‑device processing, as in Wavebender, is our strongest safeguard: data that never leaves your device cannot be exposed by us. No method of transmission or storage is ever completely secure, so we cannot promise absolute security, but we work to protect your information and, where the law requires, will notify you and the relevant regulator of a breach that affects you.

Depending on where you live, you have some or all of the following rights over your personal information:

• — Access & portability. Ask what we hold about you and receive a copy in a usable format.
• — Correction. Fix information that is wrong or out of date.
• — Deletion. Ask us to erase your data, subject to legal exceptions.
• — Objection & restriction. Object to or limit certain processing, including direct marketing.
• — Withdraw consent. Where we rely on consent, withdraw it at any time without affecting past processing.
• — Non‑discrimination. We will not treat you differently for exercising any of these rights.

To exercise any right, email hello@usefulmade.com . We will verify your request and respond within the time the law allows, at no charge. You may use an authorised agent where permitted. If you are in the EEA or UK you also have the right to complain to your local data protection authority.

We are a small, independent company, and some of the providers we rely on operate in other countries, including the United States. When we transfer personal data across borders, we use safeguards recognised under applicable law — such as the European Commission’s Standard Contractual Clauses — so your information keeps a comparable level of protection wherever it is processed.

Our Services are meant for a general audience and are not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

The Services rely on a few third parties — an app store to distribute our apps, a payment processor for purchases, hosting for our website, and links to places like our social profiles. These parties handle your data under their own privacy policies, which we encourage you to read. We are not responsible for the practices of sites and services we do not operate.

As our products evolve, this policy may change. When it does, we will update the date at the top and, for material changes, give clearer notice — for example, in the app or by email where appropriate. Continuing to use the Services after an update means you accept the revised policy.