Privacy Policy

👤 Account & Authentication

When you create an account, we store your email address, username, and a bcrypt-hashed password on our secure server. Your password is never stored in plain text. We also store a server-generated authentication token to keep you logged in.

💰 Subscription & Plan Data

We store your current plan (Trial, Pro, or ASMRtist), trial start date, and monthly character usage count. Payment processing is handled entirely by Apple (App Store) via RevenueCat for native purchases, or by Stripe for web subscriptions. We never receive or store your credit card details.

🌐 Community Sounds

If you choose to share a recording to the Community tab (ASMRtist plan only), the audio file, title, creator name, and tags you provide are uploaded to our server and made publicly available to other ASMRtist subscribers. Play counts and download counts are tracked per sound.

📄 Content Moderation Reports

If you report a community sound, your report (reason text and user ID) is stored on our server for review purposes.

🎧 Session Recordings

All ASMR session recordings are stored locally on your device using the file system. They are never uploaded to our servers unless you explicitly choose to share them to the Community.

🎤 Custom Sounds (Sound Crafter)

Sounds generated through Sound Crafter are received as audio data and stored locally on your device. The generation request (your text prompt) is sent to our server and forwarded to ElevenLabs — it is not permanently stored on our server.

⚙ App Preferences

Settings like onboarding status, plan cache, volume levels, reduced motion preference, and rating state are stored locally using AsyncStorage on your device. These never leave your device.

📊 Usage Analytics

ASMR DIY uses Firebase Analytics (provided by Google) to collect usage data such as screen views, feature interactions, and app performance metrics. This data helps us understand how the app is used so we can improve it.

What is collected: Usage event data (e.g., which screens are visited, which features are used), app version, device type, operating system version, and a pseudonymous internal user ID to associate analytics events with your account. Your subscription plan tier and trial status are also recorded as user properties.

What is NOT collected: Your name, email address, or username are not sent to Firebase Analytics. Analytics data is pseudonymous — it is linked to an internal numeric ID, not to directly identifying information such as your email or name.

No advertising or device tracking: We do not use analytics data for advertising, behavioral targeting, or cross-context profiling. We do not collect the Apple Identifier for Advertisers (IDFA) or any advertising identifier. We do not integrate any ad networks or tracking pixels.

Firebase Analytics processes data according to Google's Privacy Policy.

✅ No Data Sales

We do not sell, rent, or share your personal information with data brokers, advertisers, or any third parties for marketing purposes.

✅ No Microphone Access for Surveillance

The microphone permission is only requested if you use a feature that requires it. We do not passively listen to or record ambient audio. All audio processing happens on-device.

✅ No Location, Contacts, or Camera

ASMR DIY does not access your location, contacts, photos, or camera.

🤖 AI Whisper (Text-to-Speech)

When you use the AI Whisper feature, the text you type is sent from your device to our server, which forwards it to ElevenLabs for voice synthesis. The generated audio is returned to your device. We do not permanently store your whisper text on our server. ElevenLabs processes this data according to their Privacy Policy.

What is sent: Your text prompt (up to 250 characters per request).

What is NOT sent: Your name, email, device ID, or any other personal identifier.

🎶 Sound Crafter (AI Sound Generation)

When you generate a custom sound via Sound Crafter, your text description is sent to our server and forwarded to ElevenLabs for audio generation. The prompt is not stored on our server after the request completes.