ASMR DIY — CCPA / California Privacy Rights

⚡ The Short Version

We do not sell your personal information — never have, never will.
We do not share your personal information for cross-context behavioral advertising.
We collect minimal data: account info (email, username, hashed password), plan/usage data, and pseudonymous usage analytics via Firebase Analytics (linked to an internal ID, not your email or name) to improve the app.
Most app data (recordings, preferences) is stored locally on your device — not on our servers.
You have the right to know, delete, correct, and opt out. We honor all five CCPA rights.

Categories of Personal Information Collected

🗃 Server-Stored Data

The following categories of personal information are stored on our secure servers:

Identifiers: Email address, username, server-generated user ID, authentication token
Account security: Bcrypt-hashed password (never stored in plain text)
Commercial information: Subscription plan (Trial/Pro/ASMRtist), trial start date, trial status
Usage data: Monthly character usage count for plan limit enforcement
Community content: Sounds shared to the Community tab (audio, title, creator name, tags) — only if you choose to share
Moderation data: Content reports submitted by users

📱 Local-Only Data (Device-Stored)

The following data is stored only on your device and is never transmitted to our servers (unless you explicitly share to the Community):

Session recordings and audio files
Custom sounds generated via Sound Crafter
App preferences (volume, reduced motion, onboarding status)
Cached plan information
Rating and review state

No Sale / No Sharing Disclosure

✅ We Do Not Sell Your Personal Information

ASMR DIY has never sold personal information to third parties and does not intend to do so. We do not participate in data broker networks, advertising exchanges, or any form of data monetization.

✅ We Do Not Share for Cross-Context Behavioral Advertising

We do not share your personal information with third parties for the purpose of cross-context behavioral advertising. While ASMR DIY uses Firebase Analytics to collect pseudonymous usage data (screen views, feature interactions, app performance, linked to an internal user ID), this data is used solely to improve the app and is not used for advertising, behavioral targeting, or cross-context profiling. We do not integrate any advertising SDKs or tracking pixels.

Your CCPA Rights

1. Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it was collected, and any third parties with whom it was shared.

2. Right to Delete

You have the right to request deletion of your personal information. Upon a verified request, we will delete your account and all server-stored data (email, username, plan data, usage records). Local data on your device can be removed by uninstalling the App.

3. Right to Opt Out of Sale

Because we do not sell your personal information, there is no opt-out mechanism needed. However, if this ever changes, we will provide a prominent "Do Not Sell My Personal Information" link and mechanism.

4. Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Exercising your rights will not result in denial of service, different pricing, a different quality of service, or any retaliatory action.

5. Right to Correct

You have the right to request correction of inaccurate personal information we hold about you. You can update your username and email through your account settings, or contact us for other corrections.

How to Submit a Request

To exercise any of your CCPA rights, contact us at:

maiboxingcoach@gmail.com

Please include:

Your full name and the email address associated with your ASMR DIY account
Which right(s) you are exercising (know, delete, correct, etc.)
Any additional details to help us locate your information

Response Time: We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days. If additional time is needed, we will notify you of the extension (up to 90 days total) and explain the reason.

Verification: To protect your privacy, we will verify your identity before fulfilling any request. This may involve confirming the email address on file and/or additional verification steps.

Authorized Agents

You may designate an authorized agent to submit a CCPA request on your behalf. To do so, the agent must provide:

Written authorization signed by you
Proof of the agent's identity
Verification of your identity (we may contact you directly to confirm)

Submit authorized agent requests to maiboxingcoach@gmail.com.

Third-Party Data Processing

Our third-party service providers process data only as necessary to provide their services to us:

ElevenLabs: Receives text prompts for voice/sound generation. Does not receive your name, email, or account identifiers
RevenueCat: Manages App Store subscription state. Receives Apple transaction data
Stripe: Processes web subscription payments. Receives payment information you provide directly to Stripe
Firebase Analytics (Google): Collects pseudonymous usage data (screen views, feature interactions, app performance) linked to an internal user ID. Does not receive your name or email. Data is not sold or used for advertising

None of these service providers sell your data or use it for purposes other than providing their services.

🔒 Privacy Policy 📜 Terms of Service 🛡 Data Compliance