Privacy Policy

Introduction

This Privacy Policy explains how Hushfield ("we," "our," or "us") handles information when you use the Hushfield mobile application for iOS and Android, the Hushfield website at https://hushfield.xyz, and related services.

Hushfield is designed with a local-first approach to privacy. We do not operate a user account system, we do not require your name or contact details to use the application, and we do not run third-party advertising or behavioral tracking.

Who Operates Hushfield

Operator: Aradhya Singh, operating Hushfield

Business Structure: Individual / independent operator

Location: Ontario, Canada

Privacy Contact: hushfieldapp@protonmail.com

Information Hushfield Handles

Because Hushfield does not require account registration or login, we do not collect personal profiles, names, physical mailing addresses, telephone numbers, passwords, location data, or health data. The information handled in connection with Hushfield falls into the distinct categories described below.

Information Stored Only on Your Device

The vast majority of your interactions with Hushfield are processed and stored exclusively on your local device. This local data includes:

Onboarding completion status and in-progress onboarding checkpoints
Onboarding selections, personalization choices, and wellness goal preferences (such as sleep, focus, relax, or noise-masking preferences)
Favorite sounds
Saved mixes, custom mix configurations, layer selections, and volume settings
Application settings (such as background playback preferences, default timer lengths, fade-out durations, and category selections)
Current and recent playback state and sleep-timer/checkpoint state
Listening history and session history (including sound/mix identifiers, start times, durations, and completion or skip flags)
Recommendation inputs and preferences derived locally from your on-device listening activity
Downloaded audio files, artwork files, and local cache registries used for offline playback

This information is stored locally on your device and is not transmitted to Hushfield, RevenueCat, advertisers, analytics providers, or any other third parties. Your listening history is processed strictly on-device to provide personalized sound recommendations on your home screen. You can permanently delete all locally stored data at any time from within the app by navigating to Settings → Delete all local data, or by clearing downloaded media via Settings → Clear downloaded sounds.

Subscription and Purchase Information

Hushfield offers optional paid subscriptions. We use RevenueCat to manage subscriptions, validate purchases, and verify feature entitlements across iOS and Android.

When you purchase or manage a subscription, information processed through RevenueCat may include:

An anonymous, randomly generated RevenueCat App User ID (no custom user identifier or login is created by Hushfield)
Subscription status, plan type, and entitlement identifiers (such as Pro access)
Purchase history, transaction identifiers, and renewal/expiration timestamps
Product and offering identifiers

Hushfield does not provide RevenueCat with your name, email address, custom user IDs, onboarding preferences, listening history, favorites, or saved mixes.

All payment transactions and billing details (such as credit card or banking information) are handled directly and securely by the Apple App Store (for iOS) or Google Play (for Android) under their respective terms and privacy policies. Hushfield does not directly receive, process, or store your payment-card or banking details.

Technical and Network Information

When the application connects to our content delivery infrastructure or when the RevenueCat SDK communicates with its servers, standard technical data is inherently transmitted as part of normal internet communications. This may include:

Internet Protocol (IP) address
Date and timestamp of the network request
Requested resource path (such as catalog data, sound tracks, or artwork images)
Standard device and network metadata (such as operating system version or device model) where processed by the underlying content network or SDK bridge

This technical data is used solely to route and deliver requested media content securely and efficiently, to maintain server reliability, and to validate subscription entitlements. Hushfield does not use this technical data to build personal or behavioral profiles.

Support Communications

If you choose to contact us voluntarily for assistance, feedback, or privacy requests at hushfieldapp@protonmail.com, we will receive:

Your email address
The contents of your message and any attachments
Any additional information you voluntarily provide

Reaching out for customer support is entirely optional. We use this information solely to review, respond to, and resolve your inquiry.

How Information Is Used

We use the limited information described above for the following specific purposes:

Subscription Management: Managing, verifying, and restoring paid subscriptions and feature entitlements through RevenueCat and platform app stores.
Content Delivery: Delivering requested sound catalogs, ambient audio files, and artwork assets from our content delivery network to your device.
Customer Support: Responding to and resolving user-initiated inquiries, feedback, and support requests.
Technical Operation & Security: Maintaining application security, troubleshooting technical errors, preventing fraud, and ensuring reliable infrastructure operation.
Legal Compliance: Complying with applicable legal, regulatory, tax, or accounting requirements.

Separately, locally stored data is used strictly on-device to maintain your preferences, restore playback and timer states, save your favorite sounds and custom mixes, and generate personalized recommendations.

We do not use your information for third-party advertising, behavioral targeting, remarketing, marketing emails, or cross-app tracking, and we do not sell your personal information.

Lawful Bases for Processing

Where applicable data protection laws (such as GDPR or UK GDPR) require a legal basis for processing personal information, we rely on the following grounds:

Performance of a Contract / Steps at Your Request: Processing necessary to manage subscriptions, validate paid feature access, and provide requested Hushfield functionality and content.
Legitimate Interests: Operating, securing, maintaining, and supporting Hushfield, where those interests are not overridden by your fundamental rights and privacy interests.
Legal Obligations: Processing necessary to comply with applicable statutory, regulatory, tax, or accounting obligations.
Consent: Where we specifically request your consent for a particular activity (which you may withdraw at any time).

Third-Party Services

We work with a minimal set of trusted third-party service providers to deliver core app functionality:

RevenueCat: Subscription management, purchase validation, entitlement tracking, and purchase restoration. For more details, see RevenueCat's Privacy Policy.
Apple App Store: In-app purchase processing, billing, and subscription management on iOS devices. For more details, see Apple's Privacy Policy.
Google Play: In-app purchase processing, billing, and subscription management on Android devices. For more details, see Google's Privacy Policy.
Cloudflare / Cloudflare R2: Hosting and content delivery network (CDN) infrastructure used to deliver the public sound catalog, audio tracks, artwork, and related assets to the app. For more details, see Cloudflare's Privacy Policy.

Hushfield does not share your data with external advertising networks, data brokers, analytics platforms, or customer relationship management (CRM) software.

No Analytics, Advertising or Tracking

The current production version of Hushfield operates without third-party tracking:

We do not integrate third-party analytics SDKs (such as Google Analytics, Firebase, Amplitude, or Mixpanel).
We do not integrate advertising SDKs, ad networks, or behavioral advertising platforms.
We do not perform cross-app or cross-site tracking, and we do not collect Advertising Identifiers (such as IDFA or AAID).
We do not use remote crash-reporting platforms (such as Sentry or Crashlytics).
We do not sell, rent, or trade your personal information.

International Data Transfers

Because our third-party infrastructure and service providers (including Cloudflare, RevenueCat, Apple, and Google) operate globally, information processed by these providers may be transferred to, stored, or processed in countries other than your country of residence, including the United States.

Where personal data originating in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland is transferred internationally, our service providers rely on legally recognized transfer mechanisms to ensure appropriate safeguards, such as European Commission Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or relevant adequacy decisions, as applicable.

Data Retention

We retain information only as long as necessary for the purposes outlined in this policy:

Local Device Data: Onboarding choices, personalization settings, favorites, saved mixes, playback checkpoints, listening history, and downloaded media remain on your device until you reset them, clear them via the app's settings (Settings → Delete all local data), or uninstall the app.
Subscription & Transaction Records: Subscription and purchase records handled by RevenueCat, Apple, and Google are retained by those platforms in accordance with their standard business practices, operational needs, and statutory legal or accounting obligations.
Technical & Server Logs: Standard technical request logs collected by our content delivery network (Cloudflare) are retained according to the provider's standard security and operational practices.
Support Inquiries: Communications sent to our support email are retained as reasonably necessary to resolve your request, maintain customer service records, and fulfill applicable legal requirements.

Data Security

We implement reasonable technical and organizational safeguards appropriate to the nature of the information handled. All production network communications with our content delivery network and subscription infrastructure use industry-standard HTTPS encryption in transit.

Please note that local data stored on your device via standard platform storage (such as AsyncStorage) is not separately encrypted by Hushfield, and no method of electronic transmission or mobile storage can be guaranteed to be 100% secure. We encourage you to maintain appropriate security controls on your mobile device (such as device passcodes and biometric locks).

Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have specific rights regarding your personal information.

Canada / PIPEDA

If you are a resident of Canada, under the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial legislation, you have the right to:

Request access to the personal information we hold about you
Request correction of inaccurate or incomplete personal information
Inquire about how your personal information is collected, used, and disclosed
Withdraw your consent to data processing at any time, subject to legal or contractual restrictions
Request deletion of your personal information where legally applicable
Lodge a complaint or inquiry regarding our privacy practices

To exercise any of these rights, please contact us at hushfieldapp@protonmail.com.

If you are located in the European Economic Area (EEA), under the General Data Protection Regulation (GDPR), you may have the right to:

Request access to your personal data
Request rectification of inaccurate personal data
Request erasure ("right to be forgotten") of your personal data
Request restriction of processing of your personal data
Object to the processing of your personal data
Request data portability where technically feasible
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with your local data protection supervisory authority

If you are located in the United Kingdom, under the UK General Data Protection Regulation and the Data Protection Act 2018, you possess rights equivalent to those described for the EEA above, including the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to lodge a complaint with the Information Commissioner's Office (ICO).

To make a privacy request under GDPR, UK GDPR, or other regional regulations, please email hushfieldapp@protonmail.com. Because Hushfield does not maintain user accounts or collect names, we may ask you to provide relevant transaction or communication details to verify and fulfill your request.

Children's Privacy

Hushfield is designed and intended for users aged 13 and older. The application is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Hushfield does not require an age verification gate or date-of-birth collection. If you are a parent or guardian and believe that a child under 13 has provided personal information to us (for example, by sending a support email), please contact us at hushfieldapp@protonmail.com so that we can promptly investigate and take appropriate steps to delete such information.

Third-Party Links

Our website or application may occasionally contain links to third-party websites or services (such as app stores or legal terms). We are not responsible for the privacy practices, content, or policies of external third parties. We encourage you to review the privacy policies of any third-party services you visit.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, operational requirements, or applicable law. When updates occur, the revised version will be posted with an updated "Effective Date" at the top of the policy.

Where required by applicable law, we will provide appropriate notice of material changes through the application, our website, or other suitable communication methods. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your privacy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or Hushfield's privacy practices, please reach out to Aradhya Singh, operating Hushfield: