Privacy policy
Last updated 31 October 2026
This policy explains what personal data Kinetic DSP processes when you visit kineticdsp.com, use the RELAY app, or host or join a RELAY session, and what you can do about it. The short version: we collect as little as RELAY needs to work, we don't record your audio, we don't use cookies or analytics, and we don't sell or share data for advertising.
Who we are
Kinetic DSP is a business based in India. We are the data fiduciary for the processing described here. You can reach us at support@kineticdsp.com.
This website
kineticdsp.com is a set of static pages. It sets no cookies and runs no analytics, advertising or tracking scripts.
- Hosting. The site is served by Netlify, Inc. (United States), which processes your IP address and request details (such as the page requested and your browser's user agent) to deliver the site and protect it from abuse.
- Downloads. The download page asks GitHub's public API from your browser which version is the latest, and the files themselves are downloaded from GitHub. GitHub receives your IP address for these requests; see GitHub's privacy statement.
The RELAY app
- Stored on your computer. The app keeps its settings in your user profile (on a Mac, in
~/Library/Application Support/Kinetic DSP/RELAY): the last session names you used, your quality and volume choices, and a random key that proves a session name is yours. They never leave your computer, except as described under Sessions. - Update checks. When it starts, and when you press Check for updates, the app asks GitHub for the latest release. GitHub receives your IP address and the app's version.
- No telemetry. The app sends no usage statistics, crash reports or identifiers to us.
- DAW to System Sound happens entirely on your computer. We receive nothing.
Sessions
When you host or join a session, the RELAY app or the browser listener page connects to our session server (listen.kineticdsp.com) and our media server (media.kineticdsp.com). Both run on servers rented from Hetzner Online GmbH in Germany. To run the session, we process:
- The session name, so listeners can find the session. It is held while the session is live and for 10 minutes after it ends, and appears in server logs.
- The passcode, if you set one. It is never stored in readable form: we keep only a salted hash of it, in memory, for as long as the session exists.
- Your app's owner key, as a hash in memory only, so that you, and nobody else, can take your session name back after a restart.
- Your IP address, to connect you, to deliver audio, and to limit how many requests one address can make. The rate limit keeps it in memory for about a minute. The media server needs it for as long as you're connected.
- Your app's version, which the app sends with each request, so we can ask outdated versions to update.
- The audio itself, which passes through the media server on its way to listeners. It is not recorded or stored.
Listeners join without an account. Each listener is given a random, temporary identifier for the length of their visit.
Server logs. Our servers keep technical logs, which can include session names, IP addresses and error messages, to keep the service running and secure. Logs are deleted automatically after 30 days.
The browser listener page stores your volume, buffer, quality and the last session name in your browser's local storage, so they're remembered next time. They are not sent to us, and you can clear them in your browser's settings.
When you email us
If you write to support@kineticdsp.com, we receive your email address, your message and anything you attach, and use them only to answer you and to deal with what you raised. Our mailbox is hosted by Zoho in the European Union. We delete support emails once they're no longer needed to help you, and you can ask us to delete yours at any time.
Why we process this data
We process the data above only to provide what you ask for (hosting or joining a session, downloading or updating RELAY, answering your messages), to keep the service secure and working, and to comply with the law. Where Indian law requires your consent, you give it by choosing to use these features; you can withdraw it at any time by stopping using them, which ends the processing described above.
Who else receives data
We don't sell personal data or share it for advertising. It reaches only the service providers we need, each processing it on our behalf or under their own policies:
- Hetzner Online GmbH (Germany): hosting of the session and media servers.
- Netlify, Inc. (United States): hosting of this website.
- GitHub, Inc. (United States): hosting of downloads and update checks.
- Zoho (European Union data centre): our support mailbox.
We may also disclose data where Indian law requires it, for example to comply with a lawful order. Some of this processing takes place outside India, in the European Union and the United States.
How long we keep it
Session data lives in memory and is gone when the session ends, or 10 minutes after; restarting the server erases it as well. Rate-limit records last about a minute. Server logs are deleted after 30 days. Support emails are kept only as long as needed to help you. We keep no other personal data about you, so there is no account to delete.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us for a summary of the personal data we process about you, ask us to correct or erase it, nominate someone to exercise these rights for you, and have a grievance addressed. Because we keep almost nothing that identifies you, please tell us which session name or time a request is about, so we can find it. Write to our grievance officer (below); we reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Children
RELAY is meant for people aged 18 and over. If you're under 18, please use it only with the involvement of a parent or guardian.
Security
Connections to our servers are encrypted (HTTPS and secure WebSockets), passcodes and owner keys are stored only as hashes, and the media server's credentials stay on our servers, never in the app. No system is perfectly secure, but we keep what we hold to the minimum.
Changes
RELAY is in open beta. When we add features that process more data, such as accounts or paid plans, we'll update this policy before they launch and change the date at the top.
Grievance officer and contact
- Grievance officer
- Reachable at support@kineticdsp.com
- support@kineticdsp.com
- Business
- Kinetic DSP, India