Privacy Policy

• Onda uses Superwall for app, paywall, and subscription analytics, including when you have not signed in.
• Apple processes subscription payments. Onda and Superwall process purchase and subscription records, but do not receive your full payment-card details.
• Signing in enables account services and synchronization of supported saved content and listening history through Supabase.
• Onda’s custom analytics events do not include your written goals, affirmation text, images, or free-text onboarding answers.
• Contact us for access or deletion requests, including records held by our service providers. Deleting the app alone does not erase server records or cancel a subscription.

The app is provided by Stefan Andrei, an individual developer, responsible for the processing described here. Contact: stefanandrei123321@gmail.com.

• App and device information: app and operating-system versions, device model, language, region, time zone, install/first-open information, and app or vendor identifiers. Network services receive an IP address; Superwall may derive an approximate city, region, or country from it. This is not GPS location.
• Interactions: app sessions, onboarding steps, paywall views and actions, selected subscription plans, checkout attempts and outcomes, restore actions, and listening-session activity. Events can include timestamps, source screens, presentation identifiers, and technical error categories.
• Subscriptions: product and transaction identifiers, price and currency, trial and entitlement status, purchases, renewals, cancellations, expirations, refunds, and billing-related status supplied through Apple’s services.
• Account information: an account identifier and the email address returned by your sign-in provider, such as Apple or Google. Apple’s private relay address can be used when you choose Hide My Email.
• Saved content and preferences: listening history, supported library items, and settings stored on your device. Earlier versions may also hold affirmation text, personal goals, and selected Vision images.
• Support: your email address, message, and any information you choose to send us. Please do not send passwords or full card details.

Superwall helps us understand first launches, onboarding, paywall use, trial starts, purchase outcomes, and subscription changes. We use this information to operate membership access, investigate problems, and improve the app and purchase experience.

Before sign-in, activity is associated with app or device identifiers. After sign-in, Onda supplies its account identifier to Superwall so activity and subscription information can be associated with that account across devices. These records are pseudonymous, not necessarily anonymous. Onda does not send your email address or written personal content as custom Superwall attributes.

Apple processes payments and can send subscription updates to Superwall. The app also reports purchase and restore events. Subscription records can continue to update after you stop opening the app. We can view these records in Superwall’s dashboard.

Onda does not include advertising placements or use Superwall purchase history for cross-app advertising. Analytics collection is distinct from advertising tracking. See Superwall’s data-collection documentation.

Soundscape audio is synthesized on your iPhone. Account sign-in is separate from purchasing a subscription. When signed in, supported saved library records and listening history can sync to Supabase; those records can include text, sound settings, dates, and listening duration.

If you have saved personal goals or Vision content from earlier versions, the personalized daily-line service can send goal text and selected images through Supabase to OpenAI when that content refreshes. The service also processes an installation identifier and subscription proof for access and usage limits, and may cache generated lines and image summaries. This is separate from on-device soundscape generation.

On-device generation is not a promise that all app data stays on the phone. Account, analytics, purchase, and any applicable daily-line processing follow the descriptions in this policy.

• Apple: App Store distribution, payments, subscription information, Sign in with Apple, and device backups you manage. Apple privacy information.
• Supabase: account authentication, supported data synchronization, database hosting, and server functions. Supabase privacy policy.
• Superwall: app and paywall analytics, purchase records, and subscription reporting. Superwall privacy policy and data processing terms.
• Google: authentication when you choose Sign in with Google. Google privacy policy.
• OpenAI: processing for the personalized daily-line features described above, where applicable. OpenAI privacy information.
• Vercel: hosting and delivery of this public website. Vercel privacy policy.

Providers may use subprocessors. Their roles depend on the service: payment and sign-in providers also process information under their own policies. We do not sell personal information or share it for cross-context behavioral advertising.

Visiting this website sends normal request information, including IP address, browser information, requested pages, and timestamps, to its hosting infrastructure for delivery and security. This website does not embed the app’s Superwall SDK or a Meta advertising pixel.

The /ig page links to Apple’s App Store. Opening that link takes you to Apple’s services. Instagram’s own handling of its in-app browser is governed by Meta’s policies.

Where EU or UK data-protection law applies, account services and subscription access are processed to perform our contract with you. Security, troubleshooting, and proportionate product analytics serve our legitimate interests in operating and improving Onda, where those interests are not overridden by your rights. Records needed to comply with legal obligations are processed on that basis.

Separate consent requirements may apply to particular processing or access to information on a device. This policy does not replace any consent required by law, and reading it or continuing to use the app does not itself constitute consent. You may contact us to object to processing based on legitimate interests or to withdraw consent where consent is the applicable basis.

We retain information according to its purpose: to provide your account and subscription, resolve support issues, maintain security, understand app use, and meet legal requirements. The period depends on the record, whether your account or subscription remains active, and any legal need to retain it. Provider backups and transaction records can have separate retention periods.

• Use Delete account if your version of Onda offers it. If that control is unavailable, email stefanandrei123321@gmail.com to request account and data deletion.
• Account deletion is not an automatic erasure of every Superwall analytics record, Apple transaction record, or provider backup. Contact us to request deletion of associated records; we will address the request with relevant providers, subject to legal retention requirements.
• Removing the app deletes its ordinary local storage, but does not cancel Apple subscriptions, remove cloud backups you control, or by itself request deletion of server data.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. Contact stefanandrei123321@gmail.com. We may need information to verify your request and locate the relevant records.

The current app does not provide a separate analytics opt-out switch. You can contact us about analytics processing and your rights. Signing out does not disable app analytics. Manage subscriptions separately in your Apple Account settings.

You may complain to your local data-protection authority. Where California privacy law applies, Onda does not sell or share personal information for behavioral advertising, and we do not discriminate against you for exercising applicable privacy rights.

Onda is not directed to children. You must be at least 16, or the minimum age required by applicable law, to create an account. If you believe a child has provided personal information without the required authorization, contact us so we can investigate and address it.

We use encrypted network connections and access controls for account services. No system is completely secure. Our providers and their subprocessors may process information outside your country, including outside the European Economic Area. Applicable provider data-processing terms describe transfer safeguards; you can ask us for information about safeguards relevant to your data.

We will update the effective date when this policy changes. Where applicable law requires additional notice or consent for a material change, publishing a revised policy alone does not replace that requirement.

Privacy and support requests: stefanandrei123321@gmail.com.