Privacy Policy

Gateway is a guitar amp simulator built on Neural Amp Modeler. It is designed so that everything it does happens on your device. This policy explains, in plain language, exactly what data the app touches, where it lives, and what leaves your device in the one optional case where anything does. It is published by Matteo Demetrio Zanardi (“we”), the developer of Gateway.

1. Data we collect

We collect none. Gateway has no account system of its own, no backend, and no way to see your data even if we wanted to. The app makes no network connections at all unless you choose to use the optional TONE3000 integration described below. For Apple's App Privacy label, Gateway qualifies as “Data Not Collected.”

2. Microphone and audio

Gateway asks for microphone access so it can process the signal from your audio interface or the built-in microphone in real time. The audio is processed live, on-device, and exists only for the milliseconds it takes to pass through the amp simulation to your output. It is never recorded, never stored, and never transmitted — by design, the app contains no recording feature and no code path that writes or sends audio.

You can revoke microphone access at any time in iOS Settings; the app will simply have no input signal to process.

3. Your tone library

Amp models (.nam files) and cabinet impulse responses (.wav files) that you import or download are stored locally on your device, in a shared container that lets the app and its AUv3 plugin see the same library. These files describe guitar gear, not you. They stay on your device until you delete them from the library or uninstall the app.

4. The optional TONE3000 integration

Gateway can connect to TONE3000, a third-party community library of amp models and impulse responses operated by Hot, Inc. This is entirely optional — the app works fully without it. If you choose to connect:

• Sign-in happens through TONE3000's own secure web page (an in-app browser sheet using OAuth with PKCE). Your TONE3000 password is entered on their page, never in our code, and we never see it.
• What is sent to TONE3000: your search queries in the browser, your download requests, and the authentication tokens that identify your session — the same things their website would receive if you used it directly.
• What is stored on your device: the access and refresh tokens for your session, kept in the iOS Keychain. Signing out deletes them.
• What we receive: nothing. The connection is between your device and TONE3000; no data passes through us.

Anything TONE3000 does with the requests it receives is governed by their own privacy policy, which we encourage you to read.

5. No purchases, no accounts

Gateway is free and contains no in-app purchases, no subscription and no trial mechanism. Nothing in the app asks you to identify yourself, and there is no payment flow of any kind — so there is no billing information for us or anyone else to handle.

6. The AUv3 plugin

When you load Gateway inside a host app (GarageBand, AUM, Logic, and others), the plugin does the same on-device processing described above. Anything you record or save happens in the host app and is covered by that app's own privacy practices, not this policy.

7. What we don't do

• No analytics or crash-reporting SDKs of any kind.
• No advertising, ad identifiers, or cross-app tracking.
• No fingerprinting, profiling, or selling of data — there is no data to sell.
• No contact with any server we operate — we don't operate any.

Apple may share aggregated, anonymized App Store statistics with us (downloads, crashes) if you have opted in to sharing analytics with developers in iOS Settings; that sharing is controlled by you and Apple, not by the app.

8. Data retention and deletion

Because everything lives on your device, you are in full control. Deleting a model or IR removes it immediately. Signing out of TONE3000 deletes your session tokens. Uninstalling the app removes all of its local data, including your library. Nothing survives an uninstall, because nothing was ever stored anywhere else.

9. Security

The TONE3000 connection uses the industry-standard OAuth 2.0 flow with PKCE, over HTTPS only, and the app ships no secret credentials. Session tokens are stored in the device Keychain and are removed on sign-out. Since we hold no user data, there is no data of yours that a breach of ours could expose.

10. Children

Gateway is not directed at children, and — as described throughout this policy — it collects no personal data from anyone, of any age.

11. Your rights

Under the GDPR, the CCPA, and similar laws you have rights to access, correct, delete, and port your personal data. Because we never receive or hold any personal data about you, there is nothing on our side to access, correct, or delete — those rights are already satisfied by design. For data you have shared with TONE3000, please contact them directly under their policy. If you believe we do hold something about you, or you have any question about this policy, contact us at info@namgateway.com and we will respond promptly. You also have the right to lodge a complaint with your local data-protection authority.

12. Changes to this policy

If a future version of Gateway changes what data it touches — for example, by adding an online feature — we will update this policy before the change ships, revise the effective date above, and summarize the change here. Continued use of the app after an update means you accept the revised policy.

13. Contact

Matteo Demetrio Zanardi
Email: info@namgateway.com