QuietMind Privacy Policy

Tinnitus Relief & Sound Therapy Application

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address - For account authentication and communication
• Display name - For personalization (optional)
• Google account info - If you sign in with Google

1.2 Tinnitus Profile Data

To provide personalized sound therapy, we collect:

Data Type	Purpose	Status
Tinnitus type (ringing, buzzing, etc.)	Sound recommendation	Required
Affected ear(s)	Audio optimization	Required
Severity level	Treatment tracking	Required
Approximate frequency	Notched audio therapy	Optional
Daily severity logs	Progress monitoring	Optional

1.3 Usage Data

• Sound listening history and duration
• App feature usage statistics
• Crash reports and performance data
• Device type and OS version

1.4 Purchase Information

For premium subscriptions, payment processing is handled entirely by Google Play Store and RevenueCat. We receive only:

• Subscription status (active/inactive)
• Purchase date and expiration
• We do NOT receive your payment card details

2. How We Use Your Information

• Personalized Experience: Recommend sounds based on your tinnitus profile
• Progress Tracking: Show your severity trends over time
• App Improvement: Analyze usage patterns to improve features
• Customer Support: Respond to your inquiries
• Notifications: Send daily reminder notifications (if enabled)

3. Third-Party Services

We use the following trusted third-party services:

Service	Purpose	Privacy Policy
Firebase (Google)	Authentication, Database, Analytics, Crashlytics	Link
Google AdMob	Advertising (free users only)	Link
RevenueCat	Subscription management	Link
Google Play Store	App distribution & payments	Link

Advertising & Consent (GDPR / CCPA)

QuietMind may show ads to free users using Google AdMob. Depending on your region, we may ask for your consent to show personalized ads.

• EEA/UK/Switzerland (GDPR): We use Google’s User Messaging Platform (UMP) consent form to request consent where required.
• United States (including California): UMP supports showing the required disclosures and choices (CCPA/CPRA) where applicable.

If you do not consent to personalized ads, we will request non-personalized ads.

Learn more about Google advertising: https://policies.google.com/technologies/ads

Cross-Device Sync (Firebase Firestore)

If you sign in, QuietMind can sync your profile, logs, listening sessions, saved mixes, and preferences across devices using Firebase Firestore. This allows you to restore your personalized experience when you log in on a new device.

4. Advertising

To opt out of personalized ads:

• Go to device Settings → Google → Ads → Opt out of Ads Personalization

5. Data Storage & Security

• Data is stored securely on Firebase (Google Cloud Platform)
• All data transmission uses SSL/TLS encryption
• We implement industry-standard security practices
• Account data is stored for the duration of your account
• Listening history is retained for 12 months for analytics

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate data in app settings
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-out: Disable notifications and personalized ads

To exercise these rights, contact us at the email below or use in-app settings.

6.1 Data Deletion & Account Removal

QuietMind respects your right to control your personal data. You may request deletion of your account or specific data at any time.

How to Request Data Deletion

• Send an email to aloneaarrow@gmail.com
• Use the subject line: "QuietMind – Data Deletion Request"
• Include the email address associated with your QuietMind account

Data That Will Be Deleted

• User account information (email, display name)
• Tinnitus profile data
• Listening history and usage data
• Severity logs and personalization settings

Data That May Be Retained

• Subscription and purchase records (retained for legal and financial compliance)

Purchase-related data may be retained for up to 6 years in accordance with tax and accounting regulations. All retained data is securely stored and not used for marketing purposes.

Once your request is verified, data deletion will be completed within 30 days.

7. Data Retention

Data Type	Retention Period
Account information	Until account deletion
Tinnitus profile	Until account deletion
Severity logs	24 months
Listening history	12 months
Analytics data	14 months (Google Analytics)

8. Children's Privacy

QuietMind is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. International Data Transfers

Your data may be processed in the United States and other countries where Google (Firebase) maintains data centers. We ensure appropriate safeguards are in place through Google's data processing agreements.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through:

• In-app notification
• Email notification (for major changes)
• Updated "Last Modified" date at the top of this policy

11. California Privacy Rights (CCPA)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• We do not sell your personal information

12. European Privacy Rights (GDPR)

EU/EEA residents have additional rights under GDPR:

• Legal basis for processing: Consent and legitimate interest
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority