Privacy Policy

Last updated: 2026-10-14

Introduction

Umbrisk Studios LLC ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application. The data controller responsible for your personal data is Umbrisk Studios LLC (contact: privacy@optophone.app).

Information We Collect

Information You Provide

Preferences and Mixes: Sound preferences, saved mixes, and app settings are stored locally on your device. If you create an account (see below), this data may also be synced to cloud storage.
Purchase Information: When you make a purchase, payment is processed by Apple (App Store) or Google (Play Store). We do not collect or store payment card details.

Account and Authentication

Anonymous Account: After you accept the app’s legal terms, Firebase Authentication creates a pseudonymous account if none exists. Its randomly generated user ID is used for authentication and Premium access and can be linked to activity in your app account. You do not need to provide a name or email address unless you choose to link an account.
Linked Account (Optional): You may optionally link your account via Apple Sign-In or Google Sign-In. If you do, we receive your name and email address from the sign-in provider. This information is used solely for account identification and recovery.

Cloud Data Sync

Saved Mixes and History: If you have an account, your saved sound mixes, listening history, and preferences may be synced to Google Cloud Firestore. This data is stored in a user-scoped document accessible only by your authenticated account.
Data Stored: Mix names, sound configurations, listening session durations, and app preferences. When cloud sync is enabled, this data is associated with your account. Mix names may contain personal information that you enter.

Device Sensors and Voice Control (Optional)

Motion sensors: While audio is playing, Optophone may use your device's accelerometer to detect whether the device has been physically still for an extended period, so it can automatically fade the audio out once that happens. Readings are evaluated on your device in real time and are used only to answer "has this device moved recently?". No motion data is stored, profiled, or transmitted to us or to any third party.
Siri and Shortcuts: If you add Optophone shortcuts, the phrases you assign and the fact that a shortcut ran are handled by Apple's Siri and Shortcuts system on your device. We receive only the resulting in-app action (for example, "start this mix"). We do not receive audio recordings, transcripts, or any other Siri data.
Microphone: Optophone does not request microphone access and never records audio.

Automatically Collected Information

Analytics: With your permission, Firebase Analytics collects pseudonymous usage events, app-instance identifiers, and approximate location inferred from IP addresses. It does not use GPS. Events remain associated with an app installation.
Crash Reporting: With your permission (crash reporting uses the same setting as analytics), Firebase Crashlytics collects crash logs, device state information, and a pseudonymous Firebase user ID to diagnose failures. Reports can be linked to your app account.
Device Information: Basic device information (OS version, device model) for compatibility and crash reporting.

Legal Basis for Processing (GDPR)

We process your data on the following legal bases:

Legitimate interest: Cloud sync to improve app quality, stability, and user experience.
Consent: Optional notifications, analytics, and crash reporting, which stay off until you turn them on (you may withdraw consent at any time in Profile → Privacy controls).
Contract performance: Processing purchase information and account data to provide Premium features and cloud sync.

How We Use Your Information

To provide and improve app functionality
To sync your saved mixes and preferences across devices (when signed in)
To process in-app purchases
To analyze app performance and fix crashes
To send optional notifications (such as bedtime reminders) that you control

Data Storage, Retention, and Security

Your sound preferences, mixes, and settings are stored locally on your device in the app’s local storage. If you have linked your account, this data is also synced to Google Cloud Firestore, where it is encrypted in transit and at rest. Cloud data is stored in a user-scoped document accessible only by your authenticated account.

Analytics event data is retained for up to 14 months. Firebase starts removing crash reports after 90 days. Cloud-synced data is removed through the account deletion process. Providers may retain security logs and backups for longer under their retention schedules; Firebase Authentication data removal from live and backup systems can take up to 180 days after deletion is initiated. See Firebase’s retention information.

Cross-Border Data Transfers

Analytics and cloud sync data processed by Google (Firebase, Firestore) may be transferred to and stored on servers located outside your country of residence, including in the United States. Google relies on Standard Contractual Clauses and other approved transfer mechanisms to protect data transferred internationally. For more details, see Google's Privacy Policy.

Third-Party Services

Firebase (Google): Authentication, Cloud Firestore (data sync), Analytics, Crashlytics, and Remote Config. See Google Privacy Policy. Remote Config processes installation identifiers, country, language, time zone, and device/app information to provide service configuration, including when optional analytics is off.
RevenueCat: Manages subscriptions and purchases. See RevenueCat Privacy Policy. RevenueCat processes app user identifiers, purchase history and entitlement information to provide Premium access. Deleting your account starts server-side deletion of the associated RevenueCat customer record; this does not cancel an Apple or Google subscription.
Content delivery (Cloudflare): Real recordings are downloaded on request. Cloudflare processes your IP address and request metadata, including the requested recording’s path, to deliver files and protect the service. For U.S.-restricted downloads, our delivery service uses the country inferred from the connection to decide whether to allow access. It does not use GPS. We do not send account identifiers or saved mixes with these download requests. Our delivery code does not store individual download logs; Cloudflare may process operational and security data under its Privacy Policy. Procedural sounds require no recording download.

Children's Privacy

Optophone is not directed to children. Use of the App requires you to be at least 13 years old — or at least 16 if you reside in the European Union, the United Kingdom, or another jurisdiction where the digital-services minimum age is 16 — and the App asks you to confirm this before you can continue past first launch. We do not knowingly collect personal information from children below the applicable age. The app does not contain user-generated content or social features. Account linking (Apple/Google sign-in) is an optional feature intended for adult users. If you believe a child below the applicable age has provided us with personal information, contact privacy@optophone.app and we will delete it.

Your Rights

You can delete all local app data by uninstalling the app.
Delete your account and cloud data using Delete Account in the app or our account deletion page. The app confirms completion after cloud-data and authentication deletion succeed. Related provider cleanup may finish later. For verified email requests, we aim to complete processing within 30 days, subject to applicable law; we explain any required retention.
You can turn analytics and crash reporting off at any time using the “Share usage & crash data” toggle in the app (Profile → Privacy controls).
Under GDPR (EU/UK), you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing based on legitimate interest.
You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe your data protection rights have been violated.
For data requests under GDPR, CCPA/CPRA, LGPD, PIPA, PIPL, or similar regulations, contact us at the email address below.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights:

Right to know the categories of personal information we collect, use, and disclose — listed in the "Information We Collect" section above.
Right to delete your personal information — use the in-app "Delete Account" option or our web deletion page.
Right to correct inaccurate personal information — contact us.
Right to opt out of sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information for money. Optophone does not serve advertising and does not share personal information for cross-context behavioral advertising. You can still limit analytics data sharing at any time using the "Do Not Sell or Share My Personal Information" toggle in the app (Profile → Privacy controls).
Right to limit use of sensitive personal information — we do not collect sensitive personal information (as defined by the CPRA).
Right to non-discrimination — we will not deny service, charge a different price, or reduce service quality because you exercised a CPRA right.

We have not sold or shared personal information for monetary consideration in the 12 months preceding the "Last updated" date above. We do not knowingly sell or share the personal information of consumers under 16.

You may designate an authorized agent to submit requests on your behalf by providing written permission. To exercise any CCPA/CPRA right, email privacy@optophone.app.

Brazil Privacy Rights (LGPD)

If you reside in Brazil, the Lei Geral de Proteção de Dados (Law No. 13,709/2018) gives you the rights to:

Confirm the existence of processing and access your data (Art. 18, I–II).
Correct incomplete, inaccurate, or outdated data (Art. 18, III).
Anonymize, block, or delete unnecessary or excessive data (Art. 18, IV).
Port your data to another service or product provider (Art. 18, V).
Delete personal data processed with your consent (Art. 18, VI).
Obtain information about public and private entities with which we shared your data (Art. 18, VII).
Be informed about the possibility of denying consent and the consequences thereof (Art. 18, VIII).
Revoke consent (Art. 18, IX).

Our legal basis for processing under the LGPD is consent (analytics and crash reporting) and legitimate interest (security, anti-fraud, app functionality). You have the right to lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). For privacy questions, or to exercise any of these rights, you can reach our privacy contact at privacy@optophone.app.

South Korea Privacy Rights (PIPA)

If you reside in South Korea, the Personal Information Protection Act (PIPA) gives you the rights to access, correct, delete, and suspend processing of your personal information. We process data on the following bases: consent (analytics and crash reporting), performance of contract (subscription features and cloud sync), and legitimate interest (security and fraud prevention). Personal information retention periods are listed in the "Data Storage, Retention, and Security" section above. You can exercise any PIPA right by contacting us at privacy@optophone.app. You may also file a complaint with the Personal Information Protection Commission (PIPC) or the Korea Internet & Security Agency (KISA).

Personal information controller (개인정보 처리자): Umbrisk Studios LLC — privacy@optophone.app.

China Privacy Rights (PIPL)

If you reside in mainland China and use Optophone, the Personal Information Protection Law (PIPL) gives you the rights to be informed, consent (and withdraw consent), access, correct, delete, obtain a copy, port, and object to processing of your personal information. Optophone is not offered in mainland China: it is not distributed through the App Store there, and Google Play is not available there. If you use it in mainland China nonetheless, your personal information is transferred outside mainland China, principally to the United States, because the app's services are operated on our behalf by Google (Firebase Authentication, Cloud Firestore, Remote Config, Analytics, Crashlytics), RevenueCat, and Cloudflare, whose servers are located outside mainland China. Some of these transfers happen whenever the app is used, whatever your settings: Firebase Authentication creates a pseudonymous account, Remote Config provides the app's configuration, RevenueCat processes your app user identifier and purchase status, and Cloudflare processes your IP address when the app downloads recordings. Linking an account, cloud sync, analytics, and crash reporting transfer further categories of the personal information listed under “Information We Collect”, for the purposes described under “How We Use Your Information”; each recipient's own privacy policy is linked under “Third-Party Services”. Optophone does not currently present a separate, standalone consent screen for these cross-border transfers. Not linking an account and turning off “Share usage & crash data” (Profile → Privacy controls) reduces what is transferred but does not stop all transfers; the only way to avoid them entirely is not to use the app. To exercise your PIPL rights, or to ask us about cross-border transfers, email privacy@optophone.app.

Other Jurisdictions

Residents of Colorado, Connecticut, Utah, Virginia, Texas, Oregon, Montana, and other US states with comprehensive privacy laws have substantially similar rights to California residents. Residents of Canada (PIPEDA and provincial laws), Australia (Privacy Act 1988), Japan (APPI), and other jurisdictions with comprehensive data protection laws may exercise the rights granted by their local law by contacting us at the email address below. We honor verified requests regardless of the requester's state or country of residence.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date. Continued use of the app constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

privacy@optophone.app