MIDI-HA Bridge macOS Menu Bar App · by Hyunwoo Jo

Privacy Policy

Last updated: June 17, 2026

This Privacy Policy describes how MIDI-HA Bridge ("the App", "we", "us") handles information. The App is a macOS menu bar application that forwards MIDI signals to a local Home Assistant instance. We designed it to keep your data on your own device wherever possible and to collect the minimum information needed to operate.

1. Information You Provide

Email address — if you register the App (to receive update and support notices and obtain a free activation token), your email address is sent to our server.

2. Information Collected Automatically During Registration

When you register, the following is recorded on our server alongside your email:

A random installation ID generated by the App (not tied to your identity).
The App version.
Your IP address (used for abuse/rate-limiting only).
Timestamps of first and most recent registration.

If you never register, none of this is sent — the bridge functions without registration.

3. Information Stored Only on Your Device

The following never leaves your Mac. It is stored locally in ~/Library/Application Support/MIDI-HA/ and is not transmitted to us:

Your Home Assistant address and Long-Lived Access Token.
Your MIDI port selection and note-to-action mappings.
Your Google OAuth tokens (if you use Google sign-in for email alerts).
Your custom SMTP credentials (if you use custom SMTP for email alerts).

4. Google User Data

Email alerts are optional. If you choose Google sign-in, the App requests these scopes:

https://www.googleapis.com/auth/gmail.send — to send alert emails from your own Gmail address to a destination you specify. The App never reads, lists, or modifies any messages in your mailbox.
openid and https://www.googleapis.com/auth/userinfo.email — to display the connected Gmail address in the Settings window so you can confirm which account is in use.

OAuth access and refresh tokens are stored only on your device. We have no server-side access to your Google account or email content. Alert emails are sent directly from your device via the Gmail API.

MIDI-HA Bridge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How We Use Information

To issue and manage your free activation token.
To send you update and support notices related to the App.
To prevent abuse of the registration endpoint (rate-limiting).

We do not sell, rent, or share your information for advertising. We do not run analytics or behavioral tracking.

6. Third-Party Services

Google / Gmail API — only if you enable Google sign-in for alerts (see §4).
LemonSqueezy — if you purchase a paid license, license-key validation is handled by LemonSqueezy under their own privacy policy. We receive only license validity status.

7. Local Network

To detect whether more than one installation is running on the same network (for licensing), the App broadcasts lightweight beacons on your local network containing a random ID, a display name, and the App version. This stays within your local network and is never sent to us.

8. Data Retention & Your Choices

Registration records are retained while your installation remains active. To request access to, or deletion of, the email and registration data associated with your installation, email us at the address below and we will remove it.

9. Security

Registration data is stored on a server we control. Locally stored credentials remain under the protection of your macOS user account. No method of transmission or storage is 100% secure, but we collect as little as possible to limit exposure.

10. Children

The App is not directed to children under 13 and we do not knowingly collect their information.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above.

12. Contact

Developer: Hyunwoo Jo
Email: midi-ha@sound4u.net
Website: www.sound4u.net