Privacy Policy
Hush Asmr is built to help you relax. We collect the minimum amount of information needed to run the app, and we never sell your data.
1. Who we are
Hush Asmr ("we", "us") develops and publishes the Hush Asmr application for iOS. For any privacy question you can reach us at [email protected].
2. Information we collect
a) Account information
If you create an account, we store your email address and a securely hashed version of your password (bcrypt). We never store your password in plain text and we cannot read it.
b) Activity in the app
When you are signed in, we store the sounds you like and save, so your list is available on your other devices. This data is linked to your account.
c) Technical information
Our servers keep short-lived technical logs (IP address, request time, requested endpoint, app version) for security, abuse prevention and debugging. These logs are rotated automatically and are not used for advertising or profiling.
d) Advertising
Hush Asmr is free and supported by advertising delivered by Google AdMob. The Google Mobile Ads SDK may collect your device's advertising identifier (Android Advertising ID, or IDFA on iOS), IP address, approximate region, device and app information, and data about which ads were shown or tapped. We use this data to show ads and to measure their performance. We do not receive your name or email address from Google.
Where required (for example in the EEA and the UK), we ask for your consent before using your data for personalised advertising. You can change or withdraw your choice at any time using the privacy options in the app.
e) What we do not collect
- No location data.
- No contacts, photos, microphone or camera access.
- No third-party analytics SDKs.
- We do not sell your personal data. Advertising data is processed by Google as described above.
3. Guest use
You can browse and listen without an account. In guest mode nothing about your activity is stored on our servers.
4. How we use your information
- To create and secure your account and keep you signed in.
- To sync your liked and saved sounds across devices.
- To deliver the audio streams you request.
- To show advertising that keeps the app free, and to measure ad performance.
- To detect abuse, fraud and attacks on our service.
- To answer your support requests.
We do not sell your personal data or build advertising profiles ourselves. Advertising is delivered by Google AdMob under its own privacy terms.
5. Legal bases (EEA/UK)
Where the GDPR applies, we rely on: performance of a contract (providing the app and your account), legitimate interests (security, abuse prevention, keeping the service reliable) and consent where we explicitly ask for it. You may withdraw consent at any time.
6. Sharing
We do not sell or rent your personal data. We share data only with:
- Hosting and infrastructure providers that run our servers and store our database, acting on our instructions.
- Google AdMob, which delivers ads and processes advertising identifiers and ad interaction data as an independent controller. See Google's partner sites policy and Google's privacy policy.
- Authorities, when we are legally required to do so.
All providers are bound by data processing agreements and process data only to provide their service to us.
7. Retention
Account data is kept while your account exists. When you delete your account, your profile, liked items and saved items are deleted from the production database. Technical logs are kept for a maximum of 30 days. Backup copies are purged within 30 days of deletion.
8. Your rights
You can:
- Access, correct or export your data by emailing us.
- Delete your account using the account deletion page or by emailing us.
- Object to processing based on legitimate interests.
- Withdraw or change your advertising consent using the privacy options in the app.
- Lodge a complaint with your local data protection authority.
We respond to requests within 30 days.
9. Children
Hush Asmr is not directed at children under 13 (or under the minimum age in your country). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
10. Security
Traffic between the app and our servers is encrypted in transit (TLS). Passwords are hashed with bcrypt. Access to production data is restricted and authenticated. If a breach affects your personal data, we will notify you and the relevant authority as required by law.
11. Changes
If we change this policy, we will update the date above and, for material changes, notify you in the app.