Privacy Policy

Last updated: July 21, 2026

This Privacy Policy explains how Coyotiv GmbH (“Coyotiv,” “we,” “us,” or “our”) handles personal data in connection with:

Taurus is an audio-effects application and Audio Unit host that allows musicians to create virtual pedalboards, use compatible audio plugins, tune instruments, and process live audio.

We designed Taurus to collect as little personal data as possible. The app does not require an account, does not include advertising or tracking, and performs its audio processing locally on the user’s device.

1. Data controller

The controller responsible for processing personal data under this Privacy Policy is:

Coyotiv GmbH c/o Factory Works GmbH Rheinsberger Straße 76/77 10115 Berlin Germany

Managing Director: Armağan Amcalar Registered with the Amtsgericht Charlottenburg under HRB 217066 B VAT identification number: DE815873870

Email: support@playtaurus.com

2. Privacy at a glance

Taurus:

  • does not require registration or a user account;
  • does not collect names, email addresses, usernames, or profiles through the app;
  • does not contain analytics or third-party crash-reporting SDKs;
  • does not contain advertising or tracking technology;
  • does not collect advertising identifiers;
  • does not collect location, contacts, photos, calendars, or camera data;
  • does not record, store, or transmit live audio;
  • processes live audio locally on the device;
  • stores pedalboard configurations locally and, where enabled by the user, in the user’s own iCloud account;
  • processes purchases and subscriptions through Apple; and
  • does not sell, rent, or use personal data for targeted advertising.

3. Data processed by the Taurus apps

3.1 Live audio and microphone access

Taurus requires access to an audio input, such as a microphone, guitar interface, or other connected audio device, to provide its core audio-processing functionality.

Live audio is:

  • processed in real time on the user’s device;
  • not recorded by Taurus;
  • not stored on our servers;
  • not transmitted to Coyotiv; and
  • discarded after it has been processed.

The operating system may ask the user for permission before Taurus can access the microphone or another audio input. Users can review or withdraw this permission through their device settings. Withdrawing permission may prevent the app’s audio features from working.

3.2 Pedalboards and app configurations

Users can create and save virtual pedalboards, including information about selected effects, plugins, settings, and pedalboard layouts.

Pedalboards are stored:

  • locally on the user’s device; and
  • optionally, in the user’s own iCloud account when iCloud syncing is enabled.

Coyotiv does not operate an application database for pedalboards and does not have access to pedalboards stored on a user’s device or in the user’s personal iCloud account.

Users can delete pedalboards from within the app. Locally stored data can also be removed by uninstalling the app. Data stored through iCloud can be managed through the app, iCloud Drive, or the user’s Apple account and device settings.

3.3 Third-party Audio Unit plugins

Taurus can host compatible Audio Unit plugins installed or selected by the user.

This Privacy Policy applies to Taurus itself. It does not govern independently developed third-party plugins. When a user routes audio through a third-party plugin, that plugin processes the audio according to its own design and may be subject to its developer’s privacy policy.

Coyotiv does not control the data practices of third-party plugin developers. Users should review the privacy information provided by the developer of each plugin they install or use.

3.4 Purchases and subscriptions

Purchases and subscriptions are processed entirely by Apple through the App Store and StoreKit.

Coyotiv does not receive or store:

  • payment card numbers;
  • bank account details;
  • billing addresses; or
  • Apple ID credentials.

Apple provides Taurus with the transaction or entitlement status necessary to determine whether paid features should be available. Purchase history, billing, refunds, and subscription management are handled through the user’s Apple ID and are subject to Apple’s terms and privacy practices.

To the extent that Coyotiv processes purchase-entitlement information, the legal basis is Article 6(1)(b) of the General Data Protection Regulation (“GDPR”), because this processing is necessary to provide purchased or subscribed features.

Where information must be processed to comply with accounting, tax, consumer-protection, or other legal obligations, the legal basis is Article 6(1)(c) GDPR.

3.5 Apple diagnostics

Taurus does not contain a third-party analytics or crash-reporting SDK.

Apple may collect diagnostic or crash information at the operating-system level. Depending on the user’s Apple privacy settings, Apple may share diagnostic information with app developers when the user enables options such as “Share with App Developers.”

This collection and sharing are controlled by Apple and the user’s device settings. Users can manage these choices through the privacy and analytics settings on their Apple device.

We do not use Apple-provided diagnostic information for advertising, profiling, or tracking.

3.6 Support communications

Taurus does not collect an email address through the app. However, users may voluntarily contact us by email.

When a user contacts us, we may process:

  • the user’s email address;
  • the contents of the message;
  • attachments provided by the user;
  • technical details voluntarily included in the message; and
  • our correspondence concerning the support request.

We use this information only to respond to the request, provide support, resolve problems, and maintain necessary records of the communication.

The legal basis is Article 6(1)(b) GDPR when the communication concerns the use or purchase of Taurus. In other cases, the legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries and providing effective customer support.

Users should avoid including sensitive personal information in support messages unless it is necessary for us to address the request.

4. Data processed through the website

4.1 No cookies, analytics, or forms

The Taurus website is a static marketing website.

We do not use:

  • analytics cookies;
  • advertising cookies;
  • tracking pixels;
  • behavioural profiling;
  • advertising networks;
  • embedded analytics services; or
  • website contact forms.

The website does not set cookies for analytics, advertising, or tracking. For this reason, we do not currently display a cookie-consent banner.

The website may include email links or copy-email functions. Clicking or using an email link may open the user’s chosen email application. We receive personal data only if the user chooses to send us an email.

4.2 Hosting and technical request data

The website is hosted and delivered using Cloudflare, including Cloudflare Workers and content-delivery and security services.

When a user visits the website, Cloudflare may automatically process standard technical request information necessary to deliver and protect the website, including:

  • IP address;
  • date and time of a request;
  • requested page or resource;
  • browser and operating-system information;
  • device and connection information;
  • HTTP request information; and
  • security-related information.

We do not add website analytics to this information and do not use it to create user profiles or track users across websites.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interests are securely delivering the website, maintaining availability, preventing abuse, diagnosing technical problems, and protecting our systems.

5. Purposes of processing

Where personal data is processed, we use it only for the following purposes:

  • providing Taurus and its audio-processing functionality;
  • storing and syncing pedalboards at the user’s direction;
  • confirming purchases and subscription entitlements;
  • responding to support messages and feedback;
  • operating and securing the website;
  • detecting and preventing technical misuse or security threats; and
  • complying with applicable legal obligations.

We do not use personal data for:

  • targeted advertising;
  • cross-app or cross-site tracking;
  • marketing profiling;
  • selling user information;
  • renting user information; or
  • automated decisions that produce legal or similarly significant effects.

6. Service providers and recipients

We use a limited number of external providers.

Apple

Apple provides:

  • App Store distribution;
  • StoreKit purchase and subscription processing;
  • purchase-entitlement information;
  • iCloud and iCloud Drive functionality; and
  • optional operating-system diagnostic sharing.

Apple processes information according to its own agreements and privacy documentation. Data stored in a user’s personal iCloud account is controlled through that user’s Apple account and device settings.

Cloudflare

Cloudflare provides website hosting, content delivery, network security, and related infrastructure services. Cloudflare may process technical request and security data when users access the website.

Business email provider

When a user emails us, the communication may be processed and stored by the provider used for our business email service. Access to support correspondence is limited to people who need it to respond to the request or administer our business systems.

We may also disclose information where legally required, such as in response to a valid court order or a binding request from a competent public authority.

We do not sell personal data or provide it to data brokers, advertising networks, or marketing platforms.

7. International data transfers

Coyotiv is established in Germany, within the European Economic Area.

Apple, Cloudflare, and other infrastructure providers may process information on systems located outside the European Economic Area, including in the United States.

Where the GDPR requires safeguards for an international transfer, the relevant provider may rely on measures such as:

  • an adequacy decision issued by the European Commission;
  • participation in the EU–US Data Privacy Framework, where applicable;
  • Standard Contractual Clauses approved by the European Commission; or
  • other legally recognised transfer safeguards.

Users may contact us at support@playtaurus.com for further information about the safeguards relevant to personal data processed on our behalf.

8. Data retention

We retain personal data only for as long as necessary for the purpose for which it was processed.

Pedalboards

Pedalboards remain on the user’s device or in the user’s iCloud account until the user deletes them. Coyotiv does not retain a separate server-side copy.

Purchase information

Purchase and subscription records are maintained by Apple according to Apple’s applicable policies and legal obligations. Taurus receives only the entitlement or transaction status needed to provide paid functionality.

Support communications

Support emails are retained only for as long as reasonably necessary to respond to the request, resolve related issues, and comply with applicable legal or recordkeeping requirements.

We may retain a communication for longer where necessary to establish, exercise, or defend legal claims.

Website technical data

We do not maintain a separate analytics database or user profile based on website visits. Technical request and security information processed by Cloudflare is retained according to the applicable service configuration, Cloudflare’s retention practices, and the time necessary to deliver and secure the website.

9. Data security

We use technical and organisational measures appropriate to the limited nature and risk of the data we process.

Our privacy and security approach includes:

  • processing live audio locally rather than transmitting it to our servers;
  • operating no Taurus user-account database;
  • minimising the personal data we receive;
  • limiting access to support communications;
  • using established infrastructure providers for website delivery and Apple services; and
  • avoiding advertising, tracking, analytics, and unnecessary third-party SDKs.

No system can be guaranteed to be completely secure. Users should protect their devices, Apple accounts, and email accounts with appropriate security measures.

10. GDPR rights

Where the GDPR applies, users may have the following rights:

Right of access

Users may ask whether we process their personal data and request a copy of data we hold about them.

Right to rectification

Users may ask us to correct inaccurate or incomplete personal data.

Right to erasure

Users may ask us to delete personal data where the legal requirements for deletion are met.

Right to restriction

Users may ask us to restrict the processing of personal data in certain circumstances.

Right to data portability

Where processing is based on consent or a contract and is carried out by automated means, users may request personal data they provided in a structured, commonly used, machine-readable format.

Right to object

Users may object to processing based on our legitimate interests. We will stop the relevant processing unless we have compelling legitimate grounds to continue or the processing is necessary for legal claims.

Right to withdraw consent

Where processing is based on consent, users may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to lodge a complaint

Users have the right to lodge a complaint with a data-protection supervisory authority, particularly in the European Union member state where they live, work, or believe an infringement occurred.

Our competent supervisory authority is generally the data-protection authority responsible for Berlin, Germany.

To exercise a privacy right, contact us at support@playtaurus.com.

Because Taurus does not have user accounts and we hold very little personal data, we may not have information that allows us to identify a particular user. We may need to request limited additional information to locate support correspondence or verify that a request relates to the person making it.

Data held only on a user’s device or in the user’s personal iCloud account must generally be managed by the user through Taurus, the device, iCloud, or the user’s Apple account.

11. Children’s privacy

Taurus has an App Store age rating of 4+, but it is a professional or creative tool for musicians and is not directed at or specifically marketed to children.

Taurus does not require an account and does not knowingly collect personal data from children through the app.

If a parent or guardian believes that a child has sent personal data to us in a support message, they may contact us at support@playtaurus.com and request its deletion.

12. Automated decision-making

We do not use personal data for automated decision-making or profiling that produces legal effects or similarly significant effects concerning users.

13. Changes to this Privacy Policy

We may update this Privacy Policy when Taurus changes, when our service providers or data practices change, or when required by law.

The current version will be published at:

https://playtaurus.com/privacy

The “Last updated” date at the top of the policy identifies the latest revision. Where a change materially affects how we process personal data, we will provide an appropriate additional notice, such as a notice on the website or within the app.

Users should review this policy periodically for updates.

14. Contact us

For questions, privacy requests, or concerns about this Privacy Policy, contact:

Coyotiv GmbH c/o Factory Works GmbH Rheinsberger Straße 76/77 10115 Berlin Germany

Email: support@playtaurus.com

Website: https://playtaurus.com

Terms of Service: https://playtaurus.com/terms