Privacy Policy

Last updated: October 12, 2026

Khaos Studios ("we," "us," or "our") builds and operates software products including Delve, Synthscape, Finite, StillHere, and the website at khaosstudio.com (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

The information collected depends on the product and features you use. App-specific details are set out below.

1. Information We Collect

1.1 Information You Provide

Contact form: When you use the contact form on our website, we collect your name, email address, and message. This data is processed through Formspree and is used solely to respond to your inquiry.
Account information: When you use account features, we process the account and authentication information described for that product below.

1.2 Information Collected Automatically

Website: Our website is hosted on Cloudflare Pages. Cloudflare may collect basic server logs (IP address, browser type, pages visited) as part of their standard service. We also run two analytics scripts on the site, Google Analytics and PostHog, described in Section 4.
Third-party resources: Our website loads fonts from Google Fonts and scripts from jsDelivr CDN. These services may collect standard web request data (IP address, user agent) when your browser requests these resources. See Google's Privacy Policy and jsDelivr's Privacy Policy.

1.3 App-Specific Data

Synthscape: Synthscape processes audio locally on your device in real time. No audio data is transmitted, stored, or collected by us. All visualization happens on your machine.
Finite: Finite stores personal data you provide (such as your date of birth and health-related information) locally on your device to power its features. Your health data never leaves your device. Finite includes the following third-party services:
- PostHog: Anonymous product analytics (screen views, feature usage, app events). PostHog does not receive any health data, life expectancy calculations, or personal health profiles. See PostHog's Privacy Policy.
- Sentry: Crash reporting and performance monitoring. Sentry receives diagnostic data (crash logs, device info, OS version) to help us fix bugs. Sentry does not receive any health data. See Sentry's Privacy Policy.
We do not access, analyze, or sell your health data.
StillHere: Privacy details for StillHere will be added to this policy before or at launch.

1.4 Delve

Delve processes disk scans on your Mac. Local scanning is separate from the online services used for licensing, updates, accounts, referrals, analytics, and diagnostics. The following describes Delve 0.9.0.

Product analytics: Delve starts PostHog analytics when the app launches. It sends the app version and build, and associates analytics with the Mac account's full name and username. These records are not anonymous.
First-launch notification: Delve sends Khaos Studios a notification through Discord containing the Mac account name, username, app version, build, and macOS version.
Crash and scan diagnostics: The production app automatically sends incident diagnostics to PostHog and Discord. Reports can include a generated diagnostic identifier, app version, scan status, file and directory counts, byte totals, warning and error codes, resource usage, and sanitized crash information. Diagnostic sanitization is designed to exclude scanned file names, paths, file contents, and exception messages that could contain them. Diagnostics also have a local archive that can be exported for support.
Accounts and referrals: Sign in with Apple and Supabase provide account and referral features. These use authentication information, an email address when available, referral codes, and a stable Mac hardware identifier to record referral eligibility. Delve can also contact the referral service before sign-in to match a recent referral-link visit using the network's IP address.
Purchases and license validation: Lemon Squeezy processes checkout and license activation, validation, and deactivation. Activation sends the license key and a name for the Mac, using the computer name or the Mac account's full name as a fallback. Delve stores the license key, activation identifier, and purchase email locally in the Keychain. Licensed installations periodically contact the license service.
Updates: Sparkle checks the release feed hosted on GitHub and downloads app updates. As with other online requests, the hosting service receives standard request information such as the IP address.

Product analytics, first-launch notifications, and production incident reporting run automatically in this version. Delve does not currently provide an in-app switch to disable those services. Signing out of referral features does not disable them. Contact support@khaosstudio.com with questions about data associated with your installation or account.

2. How We Use Your Information

We use the information we collect to:

Respond to messages you send through our contact form
Provide and improve our apps and services
Fix bugs and diagnose technical issues
Comply with legal obligations

We do not sell personal information or use it for advertising. Product analytics and account records are used as described above.

3. Data Sharing

We do not sell, rent, or trade your personal information. We only share data with:

Formspree: Processes contact form submissions on our behalf. See Formspree's Privacy Policy.
Cloudflare: Hosts our website and provides CDN/security services. See Cloudflare's Privacy Policy.
Google Analytics: Provides page-view analytics for this website. See Google's Privacy Policy.
PostHog: Provides product analytics and, for Delve, incident reporting. Identifiers vary by product as described above. See PostHog's Privacy Policy.
Sentry: Provides crash reporting and performance monitoring for our apps. See Sentry's Privacy Policy.
Discord: Receives Delve first-launch notifications and incident reports for Khaos Studios.
Apple and Supabase: Provide Delve authentication, account, and referral services.
Lemon Squeezy: Processes Delve purchases and license services.
GitHub: Hosts Delve downloads and the update feed.
Platform app stores: If you download our apps through Steam, Apple App Store, or Google Play, those platforms have their own privacy policies that apply to your use of their services.
Legal requirements: We may disclose information if required by law, legal process, or government request.

4. Cookies and Tracking

Our website uses analytics, and we would rather say so plainly than bury it. We use Google Analytics to count page views and PostHog to understand which pages are actually useful, for example whether someone who reads a comparison page goes on to download the app. Both set first-party cookies in your browser to recognise a returning visit. We do not use cookies for advertising, we do not run ads, and we do not sell or share this data with advertisers.

We keep it as narrow as we can. Session recording is switched off, so we do not capture video of your visit. We do not build a stored profile for anonymous visitors. We honour the "Do Not Track" setting if your browser sends it, and any content blocker will stop both scripts with no effect on how the site works.

Third-party services we load (Google Fonts, Cloudflare) may set their own cookies as part of their standard operation. We do not control these cookies.

Some of our apps use analytics and crash reporting as described in Sections 1.3 and 1.4. These services may use cookies or device identifiers. Delve analytics also include Mac account identifiers, as explained above. Finite does not share health data with its analytics or crash-reporting services.

5. Data Retention

Contact form data: Retained only as long as needed to respond to your inquiry, then deleted.
Local app data: Apps may store data, preferences, diagnostics, and Keychain entries on your device. Removing an app does not necessarily remove those records.

Delve account, purchase, analytics, and diagnostic records may also be held by the services described above. Uninstalling Delve does not delete those online records. Contact us to ask about retained records or request deletion; purchase records may need to be retained for legal and accounting obligations.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction or deletion of your data
Object to or restrict processing of your data
Request a portable copy of your data
Withdraw consent at any time

To exercise any of these rights, contact us at the email below or through our contact form.

7. Children's Privacy

Our Services are not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

8. Security

We take reasonable measures to protect your information. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly addressing any breach that may occur.

9. International Users

Our Services are operated from the United States. If you are accessing them from outside the U.S., your information may be transferred to and processed in the U.S. or other countries where our service providers operate. By using our Services, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or your data, reach out to us: