Privacy policy

Last updated: September 21, 2026

This Privacy Policy explains how MB Damn good audio, a Lithuanian small partnership (Mažoji bendrija), collects, uses, shares, and protects personal data when you visit damngoodaudio.com, place an order, contact us, subscribe to marketing communications, use our DGA Control mobile app, or otherwise interact with our website, products, and services.

This policy covers two different things, and they work differently. Most of it describes our website and online store. Section 5 describes the DGA Control mobile app, which has no accounts and no tracking, and which keeps almost everything on your own device.

Data controller MB Damn good audio
Registered address Kuosų g. 9-R18, 10312 Vilnius, Lithuania
Company number 307592479
VAT status Not VAT registered
General support Contact form
Privacy contact privacy@damngoodaudio.com

This address is provided for legal registration and business identification purposes only. It is not a customer support location, return address, or visit address.

1. Personal data we collect

Information you provide to us

We may collect personal data that you provide directly to us, including when you place an order, submit a preorder, contact us through our contact form, sign up for marketing communications, or otherwise communicate with us.

This may include:

  • name
  • billing address
  • shipping address
  • email address
  • phone number
  • order and preorder details
  • payment-related information processed during checkout
  • messages, questions, or other information you send to us
  • marketing preferences

This also includes anything you choose to send us when you ask for help with a product, including a diagnostic log you decide to share from the DGA Control app. See section 5.

Information collected automatically on our website

When you visit our website, we and our service providers may automatically collect certain technical and usage data, such as:

  • IP address
  • browser type and device information
  • time zone and general location inferred from IP address
  • pages viewed, products viewed, and referring pages
  • how you interact with the website
  • cookie identifiers and similar online identifiers

This automatic collection describes our website. It does not describe the DGA Control app, which contains no analytics or advertising technology. Section 5 explains what the app does.

Information from third parties

We may receive information from Shopify and other service providers involved in hosting our store, processing payments, delivering orders, sending communications, measuring performance, or helping us detect fraud and secure our website.

2. How we use personal data

We use personal data for the following purposes:

  • to operate our website and online store
  • to process and fulfill orders and preorders
  • to take payment and provide order confirmations, invoices, and shipping updates
  • to communicate with you about your order, preorder timing, returns, refunds, or support requests
  • to manage delays, dispatch updates, and preorder-related issues
  • to provide the DGA Control app and allow it to find, connect to, and configure your controller
  • to make controller firmware updates available and deliver them to your device
  • to investigate and resolve connection or product problems you report to us, including any diagnostic log you choose to send us
  • to detect, prevent, and investigate fraud, abuse, or security incidents
  • to comply with legal, accounting, tax, and regulatory obligations
  • to send marketing communications where you have opted in or where otherwise permitted by law
  • to understand website performance and improve our store, communications, and campaigns

3. Legal bases for processing

Where the GDPR applies, we rely on one or more of the following legal bases:

  • Performance of a contract: to process purchases, payments, delivery, returns, refunds, and related customer support.
  • Legal obligation: to comply with applicable accounting, tax, consumer, and regulatory obligations.
  • Legitimate interests: to operate, secure, improve, and defend our website and business, to provide the DGA Control app and make firmware updates available to the products you own, and to investigate faults reported to us, provided those interests are not overridden by your rights.
  • Consent: where required for non-essential cookies, certain analytics or advertising technologies, and some marketing communications, and where you choose to send us a diagnostic log or other information in support of a request for help.

Consent for cookies and similar technologies applies to our website. The DGA Control app does not use cookies or similar tracking technologies, so there is no cookie consent to give or withdraw in the app.

4. Cookies and similar technologies

This section describes our website. The DGA Control app does not use cookies, pixels, tags, advertising identifiers, or similar tracking technologies, and none of the tools named in this section are present in the app.

We use cookies and similar technologies to operate our website and, where enabled, to understand usage and improve marketing performance.

Cookies are small text files placed on your device when you visit a website. We may also use similar technologies such as pixels, tags, scripts, and local storage for related purposes.

We may use the following categories of cookies and similar technologies:

  • Strictly necessary cookies: required for the basic operation of our website and store, including security, cart, checkout, and essential functionality.
  • Preference and functionality cookies: used to remember choices and improve your browsing experience.
  • Analytics cookies: used, where enabled, to understand how visitors use our website and how the website performs. These may include Google Analytics 4 or similar technologies.
  • Advertising and marketing cookies: used, where enabled, to measure campaign performance, understand customer preferences, and show more relevant advertising. These may include Meta Pixel and similar technologies.

We use a Shopify-based cookie consent tool, currently Shopify Cookie Bar, to manage consent for non-essential cookies and similar technologies. Where required by law, non-essential analytics and advertising technologies are activated only after you provide consent.

You can reject non-essential cookies or later change your preferences through the consent tool made available on our website, where applicable. You can also manage some cookies through your browser settings, although blocking strictly necessary cookies may affect website functionality, cart features, or checkout.

Our store is hosted on Shopify. Shopify and service providers acting on our behalf may place cookies or similar technologies in connection with hosting, storefront functionality, checkout, security, analytics, messaging, and marketing features.

Tools used in connection with our store may include Shopify services, Shopify Messaging, and any analytics or advertising tools actually enabled on the store, such as Google Analytics 4 and Meta Pixel.

5. DGA Control mobile app

DGA Control is our free companion app for iOS and Android. It is currently used with the DGA Cuore One in-car DSP controller, and is intended to work with other compatible DGA controllers we may release.

The app has no account, no login, and no registration. You do not give us your name, email address, or payment details to use it. It communicates with your controller directly over Bluetooth Low Energy.

Bluetooth and permissions

Your operating system asks for your permission before the app can use Bluetooth. That permission allows the app to:

  • discover nearby compatible DGA controllers
  • connect to the controller you choose
  • read and change your controller's settings
  • transfer firmware updates to your controller

On Android, the app asks for the Nearby devices permissions (BLUETOOTH_SCAN and BLUETOOTH_CONNECT). The scanning permission is declared with Android's "never for location" flag, and the app does not request Android's location permissions. On iOS, the system asks for Bluetooth permission the first time the app looks for a controller.

We do not use Bluetooth scanning to determine, infer, or track your physical location. The app does not request location permission on either platform, and it does not collect location data.

Information stored on your device

The app stores the following on your phone or tablet. This information stays on your device. It is not sent to us or to anyone else, and we have no access to it.

  • Controller connection information: the Bluetooth identifier your operating system assigns to each controller you pair with (a hardware address on Android, an app-specific identifier on iOS), the controller's name, when it was last connected, and its firmware and hardware version.
  • Controller settings: a local copy of the settings read from your controller, such as volume display, voltage overlay, display brightness, and ambient ring colour and brightness, so the app can show them to you immediately.
  • App preferences: whether you have completed the introduction, whether the app should reconnect automatically to your last controller, and whether you have dismissed certain tips.
  • Firmware cache: a downloaded firmware file, its signature, and its manifest, held temporarily in your operating system's cache area so the file can be transferred to your controller.
  • Connection log: a rolling technical log of recent Bluetooth activity, limited to the most recent few hundred entries, described below.

Sharing a connection log (optional)

The app keeps a short technical log of Bluetooth connection activity on your device, so that connection problems can be diagnosed. This log is never uploaded automatically. The app has no mechanism that sends it anywhere on its own.

The log contains technical information only, such as:

  • timestamps and elapsed times for connection events
  • connection events and state changes, such as connecting, connected, and disconnected
  • whether the app was in the foreground, and whether Bluetooth was switched on
  • your platform (iOS or Android) and your operating system version
  • Bluetooth error codes and reasons reported by your operating system
  • the last four characters of a controller's identifier, so that events can be matched to a particular controller without recording its full identifier

It does not contain your name, your email address, your location, your contacts, or anything you do outside the app.

The log leaves your device only when you choose Share connection log in the app. The app then passes the text to your operating system's standard sharing interface, and you choose where it goes. You may send it to us, save it as a file, or send it to someone else entirely.

We receive a log only if you choose to send it to us. If you share it with any other destination, it does not come to us and we have no access to it. Where you do send us a log, we use it solely to investigate and resolve the problem you have reported, and we treat it as support correspondence under section 9.

Firmware updates

The app checks for controller firmware updates by contacting our firmware distribution service over an encrypted HTTPS connection. This check runs automatically when you open a connected controller in the app, and also when you ask the app to check for or download an update.

As with any request over the internet, delivering a file requires your connection details, including your IP address, to be processed while the request is in transit, so that the response can reach your device. This is transient processing that is technically necessary to deliver the download, and it is not the same as keeping a record of it. Firmware distribution is served through Cloudflare as our content delivery network provider, and the service is configured so that request logs are not retained.

The request does not include your name, an account, an advertising identifier, or your controller's identifier. Downloaded firmware is cryptographically verified on your device before it is installed on your controller.

What the app does not do

To be specific rather than make a sweeping claim:

  • The app contains no analytics software and no advertising software.
  • The app uses no advertising identifiers and does no cross-app or cross-site tracking.
  • The app contains no crash-reporting or telemetry component that reports back to us.
  • The app has no account, login, or registration, and does not ask for your name, email address, or payment details.
  • The app does not use cookies or similar tracking technologies.

This does not mean that no data is ever processed. If you contact us for help, or choose to send us a connection log, we receive what you send us. And, as explained above, downloading firmware necessarily involves transient network processing.

Your choices, and removing app data

  • Forget a controller. Forget this device on the app's device information screen removes that controller's saved record, its cached settings, and its stored metadata from your device. Note that this does not clear the connection log or the firmware cache.
  • Firmware cache. The app clears this after an update completes, or when a different firmware version supersedes it. Your operating system may also remove cached files on its own.
  • Remove everything. Uninstalling the app removes all data the app has stored on your device, including the connection log. On Android you can also use the system's Clear storage option for the app.
  • Withdraw Bluetooth permission. On iOS, go to Settings → Privacy & Security → Bluetooth. On Android, go to Settings → Apps → DGA Control → Permissions → Nearby devices. The app cannot connect to a controller without this permission.
  • Settings held on your controller. Settings you have saved to your controller are stored on the controller hardware itself, not only in the app. Uninstalling the app or forgetting the device does not reset them. Forgetting a device also asks the controller to delete its Bluetooth bond, and the app will prompt you to remove the pairing in your operating system's Bluetooth settings as well.
  • Information you have already sent us. If you have emailed us or sent us a connection log, we hold that as support correspondence. You can ask us to delete it, as described in section 10.

Because the app has no accounts, there is no account to close or delete.

To request access to, or deletion of, personal information we hold about you, contact privacy@damngoodaudio.com. Your rights are set out in section 10.

6. Marketing communications

We may send marketing communications using Shopify Messaging and related Shopify tools, including email and, where enabled and lawfully used, SMS. We will only send marketing communications where we have a valid legal basis to do so.

The DGA Control app does not send marketing messages and is not used to build marketing audiences.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the message or by contacting us through our contact form .

7. How we share personal data

We may share personal data with trusted third parties where reasonably necessary to operate our business, including:

  • Shopify, which powers our online store
  • payment processors and financial service providers
  • shipping, logistics, and delivery providers
  • email, messaging, analytics, and advertising service providers
  • content delivery network providers, currently Cloudflare, which deliver firmware update files to the DGA Control app
  • fraud-prevention, security, hosting, and IT providers
  • professional advisers such as accountants, auditors, insurers, and legal advisers
  • courts, regulators, tax authorities, law enforcement, or other public authorities where required by law

We do not sell your personal data in the ordinary sense of that term.

Information that the DGA Control app stores on your device is not shared with anyone, because it is never transmitted to us in the first place.

8. International transfers

Some of our service providers may process personal data outside the European Economic Area. Where this happens, we take reasonable steps to ensure that appropriate safeguards are in place, such as adequacy decisions or approved contractual safeguards, where required by applicable law.

This includes the content delivery network that serves firmware updates, which operates a global network and will normally serve your download from a location near you.

9. Data retention

We retain personal data only for as long as necessary for order fulfillment, customer support, legal compliance, accounting, tax, fraud prevention, dispute resolution, and marketing record-keeping where applicable.

Retention periods may vary depending on the type of data and the reason we hold it. For example, order and invoice records may need to be retained for longer where required by accounting or tax laws.

Where you contact us for support, or choose to send us a diagnostic log from the DGA Control app, we keep that correspondence for as long as necessary to deal with your request and for related purposes such as warranty handling, product safety, and dispute resolution, applying the same criteria.

Information that the DGA Control app holds only on your device is not covered by our retention practices, because we never receive it. It remains on your device until you remove it, as described in section 5.

10. Your rights

Depending on your location and applicable law, you may have the right to:

  • request access to the personal data we hold about you
  • request correction of inaccurate or incomplete personal data
  • request deletion of personal data in certain circumstances
  • request restriction of processing in certain circumstances
  • object to certain processing activities
  • request data portability where applicable
  • withdraw consent at any time where processing is based on consent
  • lodge a complaint with a supervisory authority

If you want to exercise any of these rights, please contact us at: privacy@damngoodaudio.com.

These rights apply to personal data we actually hold. We cannot give you access to, or delete, information that the DGA Control app keeps only on your own device, because we never receive it and cannot reach it. Section 5 explains how you can remove that information yourself.

If you are in the European Union or European Economic Area, you also have the right to lodge a complaint with your local data protection authority, including the Lithuanian State Data Protection Inspectorate where relevant.

11. Security

We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, disclosure, or alteration. However, no method of transmission over the internet or electronic storage is completely secure.

For the DGA Control app specifically: firmware updates are requested and downloaded over encrypted HTTPS connections, and each firmware file is cryptographically verified on your device before it is installed on your controller. Information the app stores on your device is held in the app's own storage area and protected by your device's security controls, such as your screen lock and the operating system's separation between apps.

12. Children

Our website and the DGA Control app are not intended for children, and we do not knowingly collect personal data from children in violation of applicable law.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our business, website functionality, app functionality, legal obligations, or service providers. The updated version will be posted on this page with the revised last-updated date.

14. Contact us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us at: privacy@damngoodaudio.com.