Patchd Deck Privacy Policy

Last updated: November 4, 2026

Patchd Deck turns your phone into a control surface for Patchd and for your PC. You build your buttons and sliders in Patchd Deck on your PC, and press them on your phone. They can control Patchd, your PC itself, and other apps and services you choose to add. It is made by Dickey Media LLC, doing business as Patchd ("we" or "us"). We are responsible for decisions about how your personal information is processed. This Privacy Policy describes what Patchd Deck does with information, and what we do with what reaches us.

This policy covers:

the Patchd Deck app on iPhone, iPad and Android;
Patchd Deck on your PC: the app on your Windows PC that your phone pairs with, where you build your deck, and which carries out what your buttons do;
a Patchd account in the app, if you choose to use one, as described under Your Patchd account below; and
what you send us about Patchd Deck, such as emails, request forms and letters.

In this policy, "your PC" means the Windows computer Patchd Deck runs on. A Mac version is being built, and this policy will describe it when it is released.

This policy does not cover other apps and services you connect Patchd Deck to, such as Twitch, OBS Studio or Home Assistant. Their own privacy policies cover what they do with what Patchd Deck sends them.

The Privacy Policy and Support buttons in the app's Settings screen open pages on patchd.studio in your phone's browser. That is a visit to our website, which our website's Privacy Policy covers.

In short

Patchd Deck works without an account, and without one it sends no information to us. If you choose to sign in to a Patchd account in the app, or make one there, it contacts patchd.studio for that, as described under Your Patchd account below. It has no advertising, no tracking and no analytics software. If you sign in, we count accounts and signed-in devices in our own reports, as described under Your Patchd account below. The deck works only between your phone and the PC you pair it with, directly and never through our servers. Patchd Deck on your PC also connects to other apps and services, but only the ones you add or set a button to reach, such as OBS Studio on your PC or Twitch on the internet. What it sends them goes to them, not to us, as described under Patchd Deck on your PC below. On Android, the QR code scanner is Google software that sends Google diagnostic and usage information, described under The camera below. Apart from an account, the only information about Patchd Deck that reaches us is what you choose to send us, any rating or review you post on the App Store or Google Play, and statistics and crash reports from Apple or Google, some of them only if you have allowed that in your phone's settings.

Pairing your phone with your PC

When you scan the QR code that Patchd Deck on your PC shows, your phone and your PC exchange security certificates, so that each can recognize the other from then on. Both screens show the same six characters and you click Allow on your PC, so having the QR code alone is never enough to pair. The certificates contain nothing about you or your phone.

Your phone keeps a key and certificate it made for itself, your PC's certificate fingerprint, and your PC's network addresses, from the QR code and from your PC's announcement on your network, with the one that last worked first.
Your PC keeps its own key and certificate. For each phone you allow, it keeps that phone's certificate fingerprint, the date and time you paired, and a name for your phone that the app chooses: "Patchd Deck on iPhone", "Patchd Deck on iPad" or "Patchd Deck on Android". The app never reads or sends your phone's own name.

This stays on your phone and your PC. On your phone it is kept where backups do not reach, so restoring a backup onto another phone does not carry the pairing with it.

While Patchd Deck runs on your PC, it accepts phones, and it announces itself on your local network so that devices there can find it. The announcement carries your PC's network addresses, the port it listens on, the start of its certificate fingerprint, and a name for your PC. That name is Patchd followed by four characters, such as Patchd-3f9a, and never your computer's name or your user name. Your paired phone listens for this announcement, and uses only your own PC's, to find your PC again when its network address changes.

Using the deck

While you use the deck, your phone sends your presses and fader moves to your PC, and your PC sends back what Patchd is doing, such as levels, whether something is muted, and the names of your controls. Your phone receives level readings to draw its meters, never audio. Your PC also sends what your buttons show, which can come from other apps you added: for example an OBS scene's name, whether a light is on, the title of what is playing, or your latest Twitch follower's name, if you put it on a button. When an app you chose comes to the front on your PC, your PC tells your phone which page to show, not which app it was. Each time it connects, your phone also tells your PC the app's version and build number, whether it runs on iOS or Android, which deck features it supports, and the name above. While connected, it checks in every two seconds so both sides know the connection is alive.

This goes directly between your phone and your PC, encrypted, and never through our servers. For the deck, your phone connects only to your own PC: at the addresses in the QR code, or, on iPhone and iPad, at an address your PC announces on your local network. It checks your PC's certificate every time, so it never connects to another computer.

Diagnostic messages

Patchd Deck on your PC writes diagnostic messages to a log file on your PC, described under Patchd Deck on your PC below. Each time your phone connects, the log notes your phone app's version, build number and platform, and the name of your phone (the one above). Patchd Deck does not send the log anywhere.

The app on your phone writes technical details to its diagnostic output on your phone: each press it sends, what your PC answers, and, if pairing fails, details that can include network addresses. It does not send them to us or anywhere else.

The camera

The app uses the camera only to scan the QR code on your PC. It reads the QR code on your phone, and it does not save or send any pictures. Your phone asks your permission before the camera is used, and you can change your answer in your phone's Settings.

On iPhone and iPad, the QR code is read by scanning built into iOS.

On Android, the scanning is done by ML Kit, Google software built into the app. ML Kit sends Google diagnostic and usage information about its use. Google's ML Kit data disclosure lists what it collects:

about your phone: its manufacturer, model, Android version and build, and the machine learning hardware available on it;
about the app: its package name and version;
identifiers for the app's installation on your phone, which Google says are not intended to uniquely identify you or your phone;
how long scanning takes, and the settings it runs with, such as image format and resolution;
the size of what goes into and comes out of the scanner, and the scanner's version;
the kind of event, such as the scanner starting, downloading a model, detecting a QR code or releasing its resources, and any error codes.

Google says ML Kit encrypts this information in transit using HTTPS and does not transfer it to third parties. It goes to Google, not to us.

Your local network

On iPhone and iPad, the app asks permission to find and connect to devices on your local network. It uses that permission only to find and reach the PC you paired with. You can change your answer in Settings > Privacy & Security > Local Network.

On Android, the app uses network access to reach your PC and, if you use a Patchd account, patchd.studio. Android grants network access when the app is installed, without asking.

Patchd Deck on your PC

Patchd Deck on your PC is where you build your deck, and it carries out what your buttons and automations do. It works on your PC and your local network. It reaches the internet only for what you set up, described below. Nothing it keeps or reads is sent to us.

What it keeps on your PC

Patchd Deck keeps these in a folder named patchd-deck. To open it, type %APPDATA%\patchd-deck into the address bar of File Explorer.

Your PC's own key and certificate, and the phones you paired, as described under Pairing your phone with your PC.
Your deck: your pages and everything on them. That includes labels, text a button types, web addresses a button sends requests to or reads a value from, chat messages and stream titles, categories, polls, predictions and channels to raid or shout out that you wrote for Twitch buttons, the names of apps, scenes and lights, and your automations and saved lists. Each time you change your deck, it keeps the version before as a backup. It keeps the newest 20 backups.
Which integrations you added.
The sound files you add to the soundboard, and the output they play on.
For each app you add under Integrations, where it is (its network address), and the password, token or key it needs, if any: the one you gave Patchd Deck, or the one the app gave it.
For your lights: each light's name, kind and network address, any key or token a light gave Patchd Deck, and a light's hardware address where it needs one.
If you sign in to Twitch: the keys Twitch gave Patchd Deck (an access token and a refresh token), your Twitch user ID, and your Twitch user name.
Which MIDI inputs you turned on, and the port you chose for receiving OSC.
The numbers and texts your buttons count and set (your variables), so a count is still there after a restart.
A note that Patchd has run on this PC.

Patchd Deck encrypts the files that hold the passwords, tokens and keys you give it for the apps you add, your variables, and your PC's own key, with a key that Windows keeps for your Windows account. Another Windows account, another PC, or a copy of the folder can't read them. A program running in your Windows account while you're signed in could still open them through Windows. Patchd Deck never puts those in your deck or an export, and never sends them to a phone.

If the folder is moved to another PC or Windows account, or your Windows password is reset rather than changed by you, Patchd Deck may not be able to read what it saved. It keeps those files and starts again: you type each app's password again, and pair your phones again.

The window you build your deck in also remembers a few display choices on your PC, such as which parts of the library are open, your favorite and recently placed controls, and whether its preview shows a phone or a tablet.

Everything else Patchd Deck keeps only while it runs, and none of it after it closes, except what its log notes (below). That includes what Patchd and your other apps tell it, what it reads on your PC, your Twitch events, and the values your buttons count or set.

What it connects to on your PC and your network

Patchd Deck connects to Patchd by itself, and to any other app only after you add it and set it up.

Patchd, on your PC, to read your mixer and carry out your presses. Patchd also tells it your channel and output names, the Persona voices and which ones you can use, and what your plan allows in Patchd Deck. Patchd Deck does not keep these.
Your phones, as described above. Patchd Deck accepts connections from your network for this, and the phone must be one you paired.
The apps you add under Integrations, where you told Patchd Deck they are: on your PC unless you typed another address. Patchd Deck on your PC lists every app it can connect to under Add an integration. For each app you add, it reads what it needs to show and light your buttons, such as the app's scenes, sources, commands, counters or tracks, and whether it is streaming or recording, and it sends what your buttons ask for. Some apps ask you first, in the app itself, whether Patchd Deck may control them. If you typed an internet address for an app, Patchd Deck connects there, and what it sends goes to that service.
Your lights, if you add Lights. When you search for lights, Patchd Deck sends discovery messages on your local network to find the kinds of lights it supports. It then checks the lights you added every 3 seconds.
MIDI ports on your PC. It sends to the ports your buttons name, and listens only to the inputs you turn on.
OSC. A button sends an OSC message to the address and port you typed. If you turn on receiving OSC, Patchd Deck listens on the port you chose, from your PC only unless you allow your network. It uses what it hears only to light buttons and show values.

What it sends to the internet, and to whom

Patchd Deck on your PC reaches the internet only in these cases, and none of them involve us.

Twitch, if you sign in. You sign in with Twitch's own sign-in. Patchd Deck shows a code and opens twitch.tv/activate in your browser, where you sign in to Twitch and authorize Patchd Deck. Twitch's page lists what Patchd Deck may do: manage your stream's title, category and markers, make clips, send chat messages as you, run ads, manage your chat's settings, Shield Mode, polls, predictions, raids and shoutouts, delete your chat's messages, and read your followers, subscriptions, Bits and channel point redemptions. Twitch then gives Patchd Deck keys for your channel, which stay on your PC.

While you are signed in and Patchd Deck is running, it:

asks Twitch every 30 seconds whether you are live, how many people are watching, your chat's modes, whether Shield Mode is on, and whether a poll or prediction is running;
keeps a connection open to Twitch to hear your channel's follows, subscriptions, gifted subscriptions, cheers, raids, channel point redemptions, and going live or offline, and reads the names of your channel point rewards;
sends what your buttons ask for: a stream marker with its description, a clip, a chat message, an ad, a new stream title or category, a change to your chat's modes or Shield Mode, clearing your chat, a poll or prediction you wrote and its end, or a raid or shoutout to the channel you named (whose name it looks up on Twitch first).

Twitch receives each request with your Twitch keys, Patchd Deck's Twitch app ID and your PC's IP address. So Twitch can tell when Patchd Deck is running for your channel. Twitch's privacy policy covers what Twitch does with this.

From each event, Patchd Deck keeps only the latest: who followed, subscribed, gifted, cheered, raided or redeemed, how many, and which reward. It also keeps your chat's modes, Shield Mode, and whether a poll or prediction is running, the same way. That way a button or automation can use them. It keeps them only while it runs, and shows them on your phone only where you put them on a button.

To sign out, open Twitch under Integrations in Patchd Deck on your PC and click Sign out, or remove Twitch. Patchd Deck deletes Twitch's keys from your PC and asks Twitch to end its access. If your PC is offline at that moment, you can end it yourself at twitch.tv/settings/connections, under Other Connections.

Web requests you set up. A button can send a web request to an address you type, such as a webhook. Patchd Deck sends the address, any text and headers you wrote for it (with the live values you put in them), and the name PatchdDeck, and reads back whether it worked; if you asked it to keep a value of the answer, it keeps that one value as a text in your deck. The site receives your PC's IP address, and its own policies apply. An address that starts with http:// is sent without encryption. A header you type into a web request, such as a key for a service, is part of that button: it is kept in your deck as you typed it, not encrypted, and goes with the deck if you export it. Patchd Deck says so when you export one.

Addresses you choose. If an app you added, or an OSC button, is at an internet address you typed, Patchd Deck connects there, as described above.

Websites your buttons open. A button can open a website. Your browser opens it, as if you had clicked a link.

What it reads on your PC

The app in front. If a page of yours follows an app, Patchd Deck checks which app is in front on your PC about four times a second. It also checks for a minute after you open its list of apps. It reads the app's program name and the name the program gives itself, such as OBS Studio, and never what is in its windows or their titles. It keeps the last 12 apps in a list for you to choose from, only while it runs. The apps you choose for a page are saved in your deck. To bring an app to the front for a button, it looks through the names of the programs that have windows open.
What is playing. Only while a button shows it, Patchd Deck reads what Windows says is playing, once a second: the title, the artist, the app playing it, whether it is playing, and whether shuffle and repeat are on. The title can be a video's or a web page's title if your browser is playing it. It keeps only the latest, only while it runs, and shows it on your phone only where you put it on a button. It changes shuffle or repeat only when you press a button that does.
Sound. Only while a button uses it, and when you open the library to build your deck, Patchd Deck reads your PC's speakers, headphones and microphones, which ones are in use, their volume and mute, and on Windows the apps playing sound and each one's volume. It keeps only the latest, only while it runs, and changes them only when you press a button that does.
Web values. Only while a button shows one, Patchd Deck asks each web address you put under Web values, as often as you chose (at most once every 10 seconds), or for a ping only opens a connection to it and closes it. That site receives your PC's IP address, as any site you visit does. Patchd Deck keeps only the latest value, only while it runs, and shows it on your phone only where you put it on a button.
PC stats. Only while a button shows one, Patchd Deck reads your PC's processor and memory load, its graphics card's load (and an NVIDIA card's temperature, from NVIDIA's own driver), how many bytes your network cards have sent and received, and the free space on your system drive, every 2 seconds. It never reads what was sent or where. It keeps only the latest, only while it runs, and shows it on your phone only where you put it on a button.
Apps running. Only while a button lights for an app being open, Patchd Deck reads the names of the programs running on your PC every 2 seconds and checks them for the apps your buttons name. It reads only names, never what is in a window, and keeps only whether each of those apps is open, only while it runs.
X-Plane. While a button shows your plane, Patchd Deck connects to X-Plane on this PC and reads your plane's state (gear, lights, altitude and the like), and runs X-Plane's own command when you press a button. Nothing leaves your PC.
iRacing. While a button shows your car, Patchd Deck reads the data iRacing shares for tools on your PC (your position, laps, fuel, the flags, your pit settings) four times a second, and sends iRacing its own commands (pit service, a chat macro, a screenshot) when you press a button. It keeps only the latest, only while it runs; nothing leaves your PC.
Assetto Corsa Competizione. While a button shows your car, Patchd Deck reads the data ACC shares for tools on your PC (your position, laps, fuel, the flags, your car's lights and driving aids) four times a second. It keeps only the latest, only while it runs; nothing leaves your PC.
Elite Dangerous. While a button shows your ship, Patchd Deck checks whether Elite is running and reads the status file Elite writes for tools (your ship's lights, fuel, cargo and the like) every half second, and reads Elite's key bindings file when you press a button, to press the key you chose. It keeps only the latest status, only while it runs.
Calendar. When you add a calendar's private address, Patchd Deck keeps that address locked on your PC and reads your calendar from it every 5 minutes. It works out your meetings for the next week in memory only, shows your next meetings' titles and times only where you put them on a button or a calendar view, and opens a meeting's own link when you press Join or tap it. Remove the calendar and the address is forgotten.
Webcams. When you add Webcams, Patchd Deck reads the names of the USB webcams on your PC and their settings (such as zoom and focus) every 10 seconds, every 2 while a button shows one, and changes a setting when you press its button. It never reads or records video.
Files. When you press a button that writes or reads a file, Patchd Deck writes or reads only that file, on your PC; a line it reads is kept as a text in your deck. It never writes a program or a script.
Popups. A button can show a popup on your PC. It shows only on your PC, through your system's own notifications.
Windows. When you press a button that moves a window, Patchd Deck reads where that window and your screens are, moves it, and keeps nothing.
Keys. Patchd Deck presses keys, types text, and moves and clicks the mouse on your PC when a button asks it to. It never reads what you type, except the keys you press in its own window to record a hotkey. When a button pastes text, Patchd Deck holds what you had copied in memory for half a second while it pastes, then puts it back on your clipboard. It never writes it down or sends it anywhere.

Its log

Patchd Deck writes a log of what it does, to help find problems. It is at %LOCALAPPDATA%\studio.patchd.deck.desktop\logs\deck-host.log. The log includes:

each phone that connects, with its name, app version, build and platform;
every command Patchd Deck sends to Patchd, such as a mute, a volume or a voice;
how each app you added is doing, which can include its network address, and the Twitch user name you signed in with;
buttons that failed and why, which can name the site a web request went to;
the names of apps that moved your phones to a page;
folder names on your PC, such as where your deck and exports are kept, which usually include your Windows user name;
problems Patchd Deck's own window ran into.

It does not include your passwords, tokens or keys. When the log reaches 5 MB, Patchd Deck starts a new one and keeps the one before, so it keeps about 10 MB at most. It never sends the log anywhere. You can delete it while Patchd Deck is closed. If you send it to us for support, we treat it like anything else you send us.

Exports

When you export your deck or a page, Patchd Deck saves it as a file in your Downloads folder. The file holds what your deck holds, described above, but never your passwords, tokens or keys. If you put a secret in a button, such as a key in a web address or a password in text a button types, the file holds it too. Patchd Deck does not send the file anywhere; what you do with it is up to you. Importing reads only the file you choose.

None of it reaches us

Patchd Deck on your PC has no account of its own and sends nothing to patchd.studio or to any server of ours. We do not hold what it keeps on your PC, so we cannot see it or delete it. You can, as described under How long information is kept, and how to delete it.

Your Patchd account (optional)

Patchd Deck works without an account. If you want, you can sign in to your Patchd account in the app, or make one there. Your phone controls your PC directly, never through our servers. Your account is the only reason the app contacts us, at patchd.studio, and it does so only after you start to sign in or make an account.

Your Patchd account is run by Dickey Media LLC, doing business as Patchd, which also makes this app. The Patchd privacy policy, at patchd.studio/privacy, covers your account wherever you use it. This section says what Patchd Deck sends and keeps. Questions: privacy@patchd.studio.

What the app sends, and when

Making an account. When you tap Create an account, the app asks patchd.studio for the sign-up form, saying it is Patchd Deck, and our server answers with the email box's sentence and a code naming that sentence. It stores nothing from that request. In the app, the email box always starts unchecked. When you tap Create account, the app sends your email address, the username you chose, your password, whether the email box is checked, and that you checked the required box (you are 16 or older, you agree to the Patchd License Agreement and the Terms of Service, and you have read the Privacy Policy), with the License Agreement's version, the word "deck", and that code, so we record the sentence you were shown.
Signing in. The app sends your email address and password, a name for your device ("Patchd Deck on iPhone", "on iPad", or "on Android"), the app's version and build number, and the word "deck", so the record shows it came from Patchd Deck. The app never keeps your password.
Confirming your email. A new account must be confirmed from the link we email you. While it waits (after you make the account, or sign in to one not yet confirmed), the app asks patchd.studio whether you have confirmed it. It asks every 4 seconds while the Confirm your email screen is open, every 15 seconds after the first five minutes, when you come back to the app on that screen, and once when you open the app. Each ask sends a single-use code for that wait, with the same device name, version, and "deck". Once you confirm, the next ask signs you in. Send it again asks us to email the link again, three times a day at most. Wrong address? Change it removes the account you just made, and what its sign-up added to our mailing list.
Staying signed in. When you open the app or come back to it, and it has not checked in for 12 hours, it sends its sign-in key to patchd.studio. Each check keeps the sign-in from running out, so it happens about twice a day at most. If a check does not get through, the app tries again the next time you open it.
Signing out. The app sends its sign-in key once more, so we can mark the record as signed out.
Deleting your account. The app sends its sign-in key, the password you type, and the word DELETE you type, and, if we warned you first and you went ahead, that you read the warning.
Get help. Settings, Get help, is the Patchd community forum inside the app, and it works only while you are signed in. When you open it, and when you open its lists, the app sends its sign-in key and asks for your Patchd Deck questions, everybody's Patchd Deck questions, or one question with its replies. A search is sent only when you tap Search, with the words you typed. When you post a question, the app sends the topic, the title and details you wrote, whether you chose to post without your username, the app's version, and a random code for that post (so a post whose answer was lost is never posted twice). When you reply, it sends your reply, that choice, the question it answers and, for a reply to a reply, which one, with such a code. A thumbs up or down sends which question or reply and which thumb. Open on patchd.studio asks our server for a single-use link that signs your browser in to that question, and hands it to your browser. Before anything is posted, the app checks your words for an email address or a folder path with your Windows user name and offers to take them out; nothing about that check is sent. When you report a question or reply, the app sends which one (whether a question or a reply, and its number), the reason you chose (Spam, Abusive, Off topic, or Something else with the line you wrote), and its sign-in key, so the report is counted against your account; Patchd's moderators see it with the post. When you block someone, nothing is sent: the app keeps, on this phone, the name the post carries and the code our server shows with it for whoever wrote it (the same code to every reader, which does not say who they are), and hides that person's questions and replies here, even under a new name, but not ones they post without a username, which carry a different code; they are not told. Your reply counts and patchd.studio's reply emails come from our server, which does not know whom you blocked, so they still count and send a blocked person's replies to your questions.

Every request also shows patchd.studio your IP address and the app's identifying header (user agent), which on iPhone and iPad names the app, its build number, and the system's version. Forgot password? and the links to our documents open in your browser, which makes its own request; the app sends nothing with them.

What patchd.studio keeps

Your account: your email address, your username, your password in a scrambled form (a hash) held by our sign-in provider, and your plan with a history of changes to it.
Your email choice: whether the box was checked, the exact sentence beside it, whether it was shown to you checked or unchecked, the time, and the country your internet connection was in. If you checked it, your address goes on our mailing list.
Your agreement: which versions of the License Agreement, the Terms of Service, and the Privacy Policy you agreed to, and when.
A sign-in record for each device: a scrambled form of its key, the device name, the app's version, "deck", when it was made, when it runs out, when the app last checked in and from which IP address, and whether it was signed out.
While a wait is open: a scrambled form of its single-use code.
Records that count how often sign-in and sign-up are tried, made from your IP address and email address in a scrambled form, to stop abuse.
What you post in Get help: each question and reply, its topic, the time, the app's version, whether it came from the app, and your username or, if you chose to post without it, a generated name in its place; your thumbs up and down; and which questions you have read, so the app can show new replies. Questions and replies are public on patchd.studio's community pages, where anyone, and search engines, can read them, and other members can reply to them. Each post's code is kept with it, and records that count how many questions this device and your account post each day, to stop abuse. Each report you send: which post, your reason, your account and when, kept for Patchd's moderators; three reports from different people hide a post until it is reviewed.

What we use it for

To make your account, confirm your email address, sign you in, keep you signed in, and sign you out. This is the account you asked for (our contract with you).
To post what you write in Get help to the community and show you the answers, which is what you asked for when you posted it (our contract with you).
On our website and in the Patchd desktop app, the country decides whether the email box starts checked, as the law where you are requires; in Patchd Deck it always starts unchecked. In the Patchd desktop app, it also decides whether your account can use AI voices (not in the European Union) and send diagnostic reports (accounts made in the United States only).
The IP addresses and the counts above keep sign-in safe from abuse (our legitimate interest in security).
We count accounts and signed-in devices in our own reports, for example how many use Patchd Deck and which version (our legitimate interest in running and improving Patchd). The app contains no analytics software and does not record what you do in it.
We send you news about Patchd and Patchd Deck by email only if you checked the box (your consent). Every one of those emails unsubscribes in one click. Emails about the account itself, such as the confirmation link, are sent either way.

We do not sell your information or share it for targeted advertising, and nothing here tracks you across other companies' apps or websites.

Who handles it for us

Vercel hosts patchd.studio. Supabase holds your account and our database. Resend delivers the confirmation email. Loops runs our mailing list, if you checked the email box. Each works under a contract with us, uses your information only as we instruct, and commits to protect it. Your account and our servers are in the United States. Sections 4 and 8 of the Patchd privacy policy say what each provider receives and how we protect information that leaves your country.

How long we keep it

Your account, your email choice, your agreement, and the sign-in record of every device, signed out or not: until you delete the account.
What you post in Get help: as "The Patchd community" in the Patchd privacy policy says, the same as a post made on patchd.studio.
An account whose email is never confirmed: 30 days, then we delete it.
A wait's single-use code: until it is used or you sign in, and never more than a day.
The records that count attempts: about a day, and longer when the site is quiet.
Our host's request logs, with your IP address and the app's user agent: 30 days.

Section 9 of the Patchd privacy policy has the rest, including copies our providers keep.

What stays on your phone

What you are writing in Get help stays in the app's memory, not on the phone's storage, until it is posted, and is gone when the app is closed. The names of the people you blocked in Get help, and the codes that come with them, are kept in the app's own folder on this phone (not the Keychain) until you unblock them or delete the app. Patchd Deck never sends them anywhere; like the rest of that folder, they are in your phone's own backup (iCloud or your computer) when you back it up. When you sign in, the app keeps its sign-in key, your email address, your username, the number of its sign-in record, when the sign-in runs out, and when it last checked in. While a new account waits, the app keeps that wait's single-use code and the email address. All of it is in your phone's secure storage. On iPhone and iPad that is the Keychain, on this device only: it is not synced to your other devices or restored onto a new one. Patchd Deck never sends any of it to your PC, and it does not keep your password or your plan.

Signing out

In Settings, tap Sign out. The app removes the key, your email address, and your username from your phone, then tells patchd.studio, which marks the record as signed out. If your phone is offline at that moment, the record is not marked, and it stops working 90 days after the app last checked in. Either way, we keep the record with your account until you delete the account.

iPhone and iPad keep an app's Keychain items after the app is deleted. To remove them, sign out before you delete the app. If you install the app again, it clears them the first time you open it, and starts signed out. Deleting the app does not sign out its record on our side; the record stops working 90 days after the app last checked in.

Deleting your account

While you are signed in, tap Delete account in Settings, type your password and DELETE, and tap Delete my account. Deleting your account removes it, your email choice, and the sign-in record of every device at once, and takes your address off our mailing list. The app then removes the key, your email address, and your username from your phone. Copies in our providers' logs and backups expire on the schedules in section 9 of the Patchd privacy policy. If our server can't delete it from the app, Delete account opens patchd.studio in your browser instead: sign in there if asked, then confirm with your password, and Patchd Deck checks your sign-in when you come back to it and then shows you signed out.

If you made an account and never confirmed it, tap Wrong address? Change it on the Confirm your email screen to remove it now, or leave it and we delete it after 30 days. You can also email privacy@patchd.studio from the address on your account.

Your choices and rights

Making an account is up to you; Patchd Deck works the same without one. You can unsubscribe from our news in one click from any of those emails, and sign out at any time. Depending on where you live, you may have the right to see, correct, delete, or take a copy of your information, to object to or restrict how we use it, to withdraw your consent, and to complain to your data protection authority. Section 12 of the Patchd privacy policy explains how. Or email privacy@patchd.studio.

Age

To make an account, you confirm you are 16 or older, and, if you are under 18, that your parent or guardian agrees. If we learn an account belongs to someone under 16, we close it and delete its information.

What Apple and Google may share with us

If you have allowed your phone to share diagnostics and usage information, and on iPhone and iPad to share it with app developers, Apple or Google may send us crash reports and statistics about how the app performs, under their own privacy policies. We use them only to find and fix problems in Patchd Deck. You can change that choice in your phone's settings.

If you rate or review Patchd Deck on the App Store or Google Play, we see your review. Google Play also shows us the name on your review, and may show your device and app version.

When you email us

If you email us about Patchd Deck, for example at privacy@patchd.studio or support@patchd.studio, we receive your email address and whatever you choose to tell us. We use it to answer you and to fix what you report.

How we use and share information

We use the information that reaches us only for the purposes on this page: answering what you send us, finding and fixing problems in Patchd Deck, and running your Patchd account if you use one. We do not sell it. We do not use it for advertising, apart from the news by email you can choose under Your Patchd account.

We share it with service providers that do work for us, such as our email provider. We have contracts in place with them, designed to help safeguard it, and they may use it only as we instruct. We may also share or transfer it in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

What Patchd Deck does not collect

Patchd Deck does not use your location, contacts, photos or microphone, on your phone or your PC. On your PC it does not record your screen or read what you type, and it reads only what is described under Patchd Deck on your PC. It has no crash reporting of its own.

How long information is kept, and how to delete it

On your phone

What Patchd Deck stores on your phone stays there until you remove it. To stop your phone connecting to your PC, open Settings in the app, then tap Forget this PC. That removes your PC's fingerprint and addresses from your phone. It keeps the key and certificate your phone made for itself, and it does not remove your phone from your PC.

Deleting Patchd Deck from your phone removes what it stored there, except that iPhone and iPad keep an app's Keychain items, as described under Your Patchd account. It does not remove your phone from your PC, your Patchd account, or information ML Kit has already sent to Google. We do not hold that information, and Google's ML Kit data disclosure does not say how long Google keeps it or how to delete it.

On your PC

Patchd Deck on your PC keeps what is described under Patchd Deck on your PC until you remove it.

A phone. Devices, in Patchd Deck's Settings, lists the phones you paired, but cannot remove one yet. To remove every paired phone and keep your deck, quit Patchd Deck, then delete the file surfaces.json from the patchd-deck folder. Every phone will need to pair again.
An app you connected. In Settings, open Integrations, choose the app and click Remove. Patchd Deck forgets its address and its password, token or key, and stops connecting to it. Removing Lights forgets every light and its key. Removing Twitch signs Patchd Deck out of Twitch, as described above. Removing MIDI forgets the inputs you turned on. Removing Calendar forgets your calendars' addresses. Removing the Soundboard deletes its copies of your sound files and forgets the output they play on.
Your deck. Delete pages and buttons in Patchd Deck. The newest 20 earlier versions stay in the backups folder inside the patchd-deck folder until you delete them.
Everything. Quit Patchd Deck from its icon by the clock, then delete the patchd-deck folder (type %APPDATA%\patchd-deck into the address bar of File Explorer). This cannot be undone. It deletes your deck and its backups; every pairing and your PC's own certificate, so every phone will need to pair again; and every app's address and password, token or key, including your Twitch sign-in.
The log and the window's display choices. These are in a separate folder. Type %LOCALAPPDATA%\studio.patchd.deck.desktop into the address bar of File Explorer, and delete it while Patchd Deck is closed.
When you uninstall. Uninstalling Patchd Deck (in Windows' Settings, Apps) removes the app, its Windows Firewall rule and its start when you sign in, and keeps your deck, pairings and saved passwords, so a reinstall finds them. Check "Delete the application data" while uninstalling to delete them too: the patchd-deck folder, the log and the window's display choices.
Exports stay in your Downloads folder until you delete them.

What reaches us

We keep what you send us, and any crash reports and statistics Apple or Google share with us, only for as long as we need them for the purposes on this page, unless a longer period is required or permitted by law (such as tax, accounting or other legal requirements). When we no longer need them, we delete or anonymize them. If that is not possible, for example because they are in backup archives, we store them securely and keep them from any further use until they can be deleted. You can ask us to delete them sooner, as described under Your privacy rights.

How long we keep your Patchd account and what goes with it is under Your Patchd account.

Security

The connection between your phone and your PC is encrypted with TLS 1.3. On every connection, your phone checks that it has reached the PC it paired with. Your PC accepts control from your network only from phones you have allowed. Patchd Deck's window and its control port answer only programs on your PC itself, and refuse web pages open in your browser.

Patchd Deck on your PC reaches Twitch, and any https:// address, over an encrypted connection, and checks the site's certificate. Its connections to apps and lights on your PC and your network use what each one offers, and most are not encrypted unless you gave an https:// or wss:// address. Each app's password, token or key travels as that app expects: some apps take a proof made from it rather than the password itself, others take it as it is. The passwords, tokens and keys kept on your PC are encrypted, as described under Patchd Deck on your PC.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the emails, crash reports and statistics that reach us, and your Patchd account. No way of storing or sending information is completely secure, so we cannot promise that no one will ever get past these protections.

Children

Patchd Deck itself has no minimum age. Without a Patchd account it sends nothing to us: your phone talks only to your own PC. A Patchd account, which signing in and Get help need, is for people 16 or older, or the older age the law sets where you live, and if you are under 18 your parent or guardian must agree. We do not knowingly collect information from, or market to, children under 16 through an account, and we do not sell such information. If we learn that we have received personal information from a child under that age, for example in an email, we promptly delete it and close any Patchd account it belongs to. If you become aware of any such information, please contact us at privacy@patchd.studio.

Your privacy rights

The information we could hold about you in connection with Patchd Deck is limited to what you send us, any rating or review you post on the App Store or Google Play, the crash reports and statistics Apple or Google share with us, and your Patchd account if you use one. Depending on where you live, you may have rights over that information. These rights may be limited in some circumstances by applicable law. What Patchd Deck keeps on your PC never reaches us.

In some regions, such as the European Economic Area (EEA), the United Kingdom (UK), Switzerland and Canada, these may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) if applicable, to data portability, and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. Apart from the country rules described under Your Patchd account, we make no automated decisions about you.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to know whether we are processing your personal data, to access it, to correct inaccuracies in it, to request its deletion, to obtain a copy of the personal data you previously shared with us, and not to be discriminated against for exercising these rights. You may also have the right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California's privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not use the information that reaches us for any of these. These rights are not absolute, and in certain cases we may decline a request as permitted by law.

If you are in Australia, you may request access to or correction of your personal information at any time.

If we are relying on your consent to process your personal information, you have the right to withdraw it at any time by contacting us. This will not affect the lawfulness of processing before you withdraw it nor, when applicable law allows, processing on lawful grounds other than consent.

In your phone's Settings, you can change camera access, local network access on iPhone and iPad, and whether your phone shares diagnostics and usage information.

How to exercise your rights

To make a request, submit a data subject access request, email privacy@patchd.studio, or write to us at the address under Contact below. We will consider and act upon any request in accordance with applicable data protection laws. You can also remove what Patchd Deck stores on your phone and your PC yourself, as described under How long information is kept, and how to delete it, and sign out of or delete a Patchd account as described under Your Patchd account.

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

When we receive a request, we will need to verify your identity to determine that you are the person the information is about. We will only use personal information provided in your request to verify your identity or authority to make the request, and if we cannot verify it from information we already hold, we may ask you for more. If you make a request through an authorized agent, we may need more information to verify your identity, and the agent will need written and signed permission from you.

Under certain US state data protection laws, if we decline to take action on your request, you may appeal our decision by emailing privacy@patchd.studio. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If your appeal is denied, you may submit a complaint to your state attorney general.

Complaints

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or the UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner. If you are in Australia and believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy from time to time, and the date at the top shows when it last changed. If we make material changes, we may notify you by posting a notice of the changes or by sending you a notification.

Contact

If you have questions about this policy or about your information, email privacy@patchd.studio, or write to us at:

Patchd (Dickey Media LLC)
Data Protection Officer
1404 SW Market St, #706
Lee's Summit, MO 64063
United States