Legal

Privacy policy

Effective 2 September 2026. This policy covers the JUDE website at heyjude.studio and the JUDE desktop application. JUDE is a product of Okachobi, LLC, an Indiana limited liability company, which is the data controller for the purposes of this policy. Where this policy and Okachobi's general company policy differ, this one governs JUDE.

The short version: your voice is sent to Amazon's speech service so the engineer can understand and answer you, and it is not recorded or kept. We meter how long you use the product, because that is what you pay for. The website itself stores nothing on your device and runs no analytics or trackers of any kind.

1. What we collect

Account details

When you create an account we collect your email address, a password, and optionally your name. We also ask which DAWs you use, how you plan to use JUDE, and whether you want to hear about beta features. Passwords are handled by Amazon Cognito and stored only as a cryptographic hash — we never see or store your password. We also record the network address your signup request came from and compare it across accounts to detect trial abuse.

Usage and metering

While a session is running, the app reports elapsed seat time so your plan can be metered. We store your plan, trial window, accrued time, the timestamps of those reports, and simple engagement counters (how many sessions you have run and on how many days) that decide which trial reminder emails you receive. If we offer you a discount code, we store the code and its expiry on your account so the app can apply it at checkout. The meter pauses when you step away; idle time is not charged and not recorded as activity. The app also sends a one-way hashed identifier of your Mac — nothing about your hardware can be recovered from it — which we compare across accounts to detect and limit trial abuse: the free trial is available once per Mac, so a second trial account on a machine that already hosted one is asked to contact support instead of starting a session (paid plans are never affected, and a musician's own account works on any number of Macs). The identifier is kept as the record of which account used that Mac for as long as that account exists.

Session history and engineer's notes

So you can look back at your own studio activity, we keep a history of when your sessions ran (in half-hour blocks) and short written notes about each one: when the session started, which engineer you worked with, a one-or-two-sentence summary of what you said you planned to work on, the engineer's brief end-of-session notes, and the number of takes recorded. These are text summaries the engineer writes — never recordings or transcripts of your voice.

You can view this history as a private studio calendar: the app can give you a personal calendar link to subscribe to in Apple Calendar, Google Calendar, or similar. That link contains a secret that makes it work without a password — treat it like one, and share it only with people you want seeing your studio activity. You can ask us to revoke the link at any time, which invalidates every copy of it. Session history is kept for as long as you have an account — it is your studio log, and you may want to look back years later — and it is deleted when you ask us to delete your account.

Payment information

Payments are processed by Stripe. We never receive or store your card details — the payment form is hosted by Stripe on their own systems. We keep only the identifiers Stripe gives us for your customer, subscription, invoice and discount-code records, your plan status, and a billing log of the charges we ask Stripe to make. If your plan ends, we keep your account and these records so you can pick up where you left off — or ask us to delete everything, at any time.

Voice and session context

When you start a session, audio from your talkback microphone is streamed to Amazon Bedrock (the Nova Sonic speech model) so the engineer can understand you and reply. Alongside it we send the session context the engineer needs to be useful: your track names, transport state, fader positions, and the commands you give. This audio is processed in real time and is not recorded or retained by us. Amazon states that Bedrock does not store model inputs or use them to train its models.

JUDE does not read, upload, or scan the audio files, project files, or any other documents on your computer. Your recordings stay in your DAW, on your disk.

Diagnostics you choose to send

If you use the in-app feedback form, we receive your message, the reply address you give, and technical context such as app version, macOS version, audio devices, and DAW selection. If — and only if — you tick the option to include diagnostics, the app also uploads its debug log. That log can contain track names, device names, and command history, so review it if that matters to you. Nothing is sent unless you press send.

Support correspondence

If you email us, we keep the message and your address for as long as needed to help you and to keep a record of the issue.

2. What we do not do

  • We do not use cookies, analytics, advertising pixels, or any third-party tracking on this website.
  • We do not record, store, or replay your voice.
  • We do not use your audio, track names, or session data to train any model.
  • We do not sell, rent, or share your personal data for advertising.
  • We do not access files on your computer beyond the app's own settings and logs.

Your voice is processed to recognize speech, never to identify you as a person. It is not used as biometric data.

3. Why we are allowed to process it

For people in the United Kingdom and the European Economic Area, our legal bases under the GDPR are:

  • Performance of a contract — running your account, operating the engineer, metering and billing your usage.
  • Legitimate interests — keeping the service secure, diagnosing faults, preventing abuse of trial accounts, and keeping your account details after you cancel so a subscription can be restarted without starting over.
  • Consent — beta and marketing email, which you opt into and can withdraw at any time without affecting your service.
  • Existing-customer marketing — if you have been a customer, we may email you about JUDE itself and closely related products under the “soft opt-in” that European e‑privacy rules allow. Every message carries a one-click unsubscribe, and we will never pass your address to anyone else to market to you.
  • Legal obligation — keeping billing and tax records.

4. Who else processes your data

We keep the list short deliberately:

  • Amazon Web Services — hosting, account sign-in (Cognito), the speech model (Bedrock), database storage, application email, and software downloads.
  • Stripe — subscription payments and billing management.

Both act as processors under contract and may not use your data for their own purposes. We do not share your data with anyone else except where the law requires it.

5. Where your data goes

Okachobi, LLC is based in the United States, and our infrastructure runs in Amazon's US East region. If you are in the UK or EEA, your data is therefore transferred to the United States. Those transfers rely on our providers' safeguards — the EU–US Data Privacy Framework and Standard Contractual Clauses — under our data processing agreements with Amazon Web Services and Stripe.

6. How long we keep it

  • Account details — for as long as you have an account, and after you cancel, until you ask us to delete them. We keep them for two reasons: so you can restart a subscription later and pick up where you left off rather than starting from scratch, and so we can occasionally contact you about JUDE — new DAW support, major releases, or an offer to come back. Say the word and we will erase them; see your rights below.
  • Metering and billing records — as long as tax and accounting law requires, typically seven years.
  • Voice audio — not retained; it exists only for the moment it is being processed.
  • Session history and engineer's notes — for as long as you have an account; deleted with the account, or sooner if you ask.
  • Diagnostic logs — deleted when the issue is resolved, and in any case within twelve months.

7. Your rights

Wherever you live, you can ask us to show you the data we hold about you, correct it, or delete it — write to support@heyjude.studio and we will respond within 30 days. Asking us to delete your account details is always available and always free, whether or not you are still a customer, and we will not ask you to justify it. You can also tell us to stop emailing you without deleting anything — every message we send has an unsubscribe link.

If you are in the UK or EEA you also have the right to receive your data in a portable form, to restrict or object to processing, to withdraw consent at any time, and to complain to your national data protection authority. If you are in California, you have the right to know what we collect and to have it deleted, and the right not to be discriminated against for exercising those rights; note that we do not sell personal information, so there is nothing to opt out of.

8. Cookies and local storage

This website sets no cookies and stores nothing in your browser — no local storage, no session storage, no fingerprinting. There is nothing here to consent to, which is why you are not being asked. If you go on to pay, Stripe's own checkout pages are governed by Stripe's privacy policy.

The desktop app stores your sign-in token on your own computer, encrypted with macOS's secure storage, so you do not have to sign in every time. It never leaves your machine.

9. Security

All traffic runs over HTTPS. Passwords are hashed by Amazon Cognito and never visible to us. Sign-in tokens are encrypted at rest on your machine. Download links are individually signed and expire. Access to production systems is limited to those who need it.

10. Children

JUDE is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, write to us and we will delete it.

11. Changes to this policy

If we change how we handle your data we will update this page and move the effective date at the top. If a change is significant, we will tell account holders by email rather than relying on you to notice.

12. Governing law and contact

This policy is governed by the laws of the State of Indiana, United States, without regard to its conflict-of-law rules. Nothing here removes rights you have under the mandatory law of the country you live in.

Okachobi, LLC
Indiana, United States
support@heyjude.studio