Privacy Policy

This Privacy Policy explains what information the Sonelvia app for iPhone and iPad (the “App”) and the website sonelvia.com (together, the “Service”) collect, how it is used, and the choices you have. We keep data collection to the minimum needed to run the Service.

Summary

You can listen without creating an account.
We do not show third-party ads, and we do not track you across other apps or websites without your permission. To improve the App and to measure our own advertising we use Google Firebase Analytics, Meta, TikTok and RevenueCat (see below).
We do not sell or rent your personal information.
Your own affirmations, wishes and notebook entries are visible only to you.
The Sonelvia Plus subscription is paid through Apple; we never receive your payment details.
Notifications are optional, and each kind can be turned off in the App.
You can delete your account and all associated data at any time directly in the App.

Information we collect

Data	When	Purpose
Email address, display name, password (stored only as a secure hash), preferred language; or the identifier and email that Apple or Google share when you sign in with them	When you create an account or sign in	To sign you in, secure your account and send confirmation and password-reset emails
Profile photo	Only if you add one	To show it in your profile
Favorites and playback settings (voice, background, volume, pauses, repeat, sleep timer)	When you use these features while signed in	To keep your preferences across sessions and devices
Your own affirmations: titles, lines and cover images	When you create them	To store and play your personal affirmations
Practice history and weekly goals (which practice, when it started, how long you listened)	When you listen; synced only if you are signed in and sync is on	To count your progress, grow the tree, order “Collections for you” and keep your history across devices
Wishes (text, plan and the photo you choose) and notebook entries (date, moods and your answers)	When you create them while signed in	To store them for you and show them on your devices
Notification data: an app installation identifier, the Apple push token, notification permission status, time zone, interface language, app version, your notification choices and reminder time	When the App starts or you change notification settings, also without an account	To deliver the notifications you allow at the right local time and to respect daily limits and quiet hours
Introduction answers: the name you type and your choices (age range, gender, focus, mood, interests, practice time, voice, rating)	When you go through the introduction on first launch, also without an account	To personalise recommendations and greetings; the answers stay on your device. Only the first name you type is sent to our server, to address you in the notifications you allow (for example a reminder to finish the introduction)
App events: a practice started, the daily letter opened, a notification opened, the App opened or closed	While you use the App	To count practices, avoid notifying you about a letter you have read or while the App is open, and to see which notifications are useful
Usage analytics (Google Firebase Analytics): an app instance identifier and events such as the App opened, a practice started or finished, the daily letter opened, a subscription offer shown, sign-up or sign-in and a notification opened; approximate device and app information (model, iOS and app version, language, country)	While you use the App	To understand which features are used and to improve the App
Advertising measurement (Meta SDK): an anonymous Meta identifier and events for an app install, a trial start, a subscription purchase (amount and currency) and an opened notification. If you allow tracking, the advertising identifier (IDFA) is also used	While you use the App; the advertising identifier only after you allow tracking	To measure and improve the results of our own advertising on Meta platforms, for example how many installs and subscriptions an advertisement led to
Advertising measurement (TikTok SDK): an anonymous TikTok identifier and events for an app install, app launches, sign-up, sign-in and a subscription purchase (amount and currency). If you allow tracking, the advertising identifier (IDFA) is also used	While you use the App; the advertising identifier only after you allow tracking	To measure and improve the results of our own advertising on TikTok, for example how many installs and subscriptions an advertisement led to
Subscription analytics (RevenueCat): the app installation identifier or your account identifier, the purchase transactions from the App Store, subscription status, plan, price, currency and country, and identifiers used to match them with the services above	When you subscribe, renew or restore purchases	To show subscription results, make sure each purchase is counted once and send purchase events for advertising measurement
Support messages and the email you reply to	When you write to support	To answer you
Sonelvia Plus purchases: the transaction information Apple signs (transaction identifiers, plan, purchase and expiry dates, refund or cancellation status), linked to the app installation identifier and, if you sign in, to your account	When you subscribe, renew, restore purchases or open the App, and when Apple notifies us of a renewal, cancellation or refund	To unlock Sonelvia Plus, keep it on your devices and account, and end it when the subscription ends
Phrase text sent for voice generation	When you play a phrase that has no recording yet in the chosen voice, or choose a voice to hear a sample	To create the spoken recording (see “Service providers”)
Technical request data (IP address, time of request)	When the App or website contacts our server	To deliver the Service, prevent abuse and keep it secure

We do not collect your location, contacts, health data or payment information; payments are handled entirely by Apple. The advertising identifier (IDFA) is read only if you allow tracking when the App asks, and it is used only to measure our own advertising. The App does not use the microphone. It accesses the camera and photo library only to let you take or pick a photo for a wish, a cover or your profile; nothing else from your photo library is uploaded. The time zone is used only to schedule notifications in your local time.

How we use information

To provide the App’s features: playing practices, generating and storing recordings, counting progress, the daily letter, wishes, notebook, syncing favorites and settings, and your own affirmations.
To provide Sonelvia Plus: to verify purchases signed by Apple, unlock Plus content, restore it on your devices and stop it when the subscription ends or is refunded.
To send the notifications you allow: the new letter, gentle reminders, praise for your progress, your own reminder and, if you turn them on, offers of Sonelvia Plus. Automatic notifications are sent in the evening, between 7 and 10 pm local time, at least 15 minutes apart and never at night; a reminder you set yourself is sent at the time you choose. We may also send a one-time notice that a new version of the App is available.
To understand how the App is used and to measure the results of our own advertising (see “Analytics, advertising measurement and your choices” below).
To authenticate you and protect accounts, for example by limiting repeated sign-in attempts.
To answer your support requests.

We do not sell your data. We do not use your private content (your affirmations, wishes and notebook entries) for advertising or profiling, or for any purpose other than providing it back to you.

Service providers

Hosting. Our server and database are operated on infrastructure of a hosting provider that stores data on our behalf.
Voice generation (OpenAI and ElevenLabs). When a recording is not available yet, the text of the phrase, the selected voice and the tone of its category are sent to the OpenAI API or the ElevenLabs API to generate the audio. We do not send your email, name, progress or other account details. These providers process this data under their API data-usage policies.
OpenAI. The daily letters and notification texts are written and translated with the OpenAI API, without your account details.
Apple Push Notification service. To deliver a notification, its text and your device’s push token are sent to Apple.
Google Firebase Analytics (Google). Usage events and an app instance identifier are sent to Google to provide analytics for the App. We use the variant of the SDK that does not read the advertising identifier. Google processes this data under its own terms and privacy policy.
Meta (Facebook SDK). Install, trial and purchase events and an anonymous Meta identifier are sent to Meta so that we can measure and optimise our advertising on Meta platforms. If you allow tracking, the advertising identifier is also used. Meta processes this data under its own terms and privacy policy.
TikTok (TikTok App Events SDK). Install, launch, sign-up, sign-in and purchase events and an anonymous TikTok identifier are sent to TikTok so that we can measure and optimise our advertising on TikTok. If you allow tracking, the advertising identifier is also used. We do not send your name, email address or phone number. TikTok processes this data under its own terms and privacy policy.
RevenueCat. Subscription transactions and identifiers are sent to RevenueCat, Inc., which provides subscription analytics and forwards purchase events to Meta. RevenueCat only observes purchases made through the App Store; it does not receive your payment details.
Sign in with Apple and Google. If you choose them, Apple or Google confirm your identity and share your account identifier and email with us under their own privacy policies.
Email delivery. If you request a password reset, your email address is used to send the reset link through our mail provider.
Apple. Downloads, App Store interactions and in-app purchases are handled by Apple under Apple’s own privacy policy. For Sonelvia Plus, Apple sends us signed transaction information and notifications about renewals, cancellations and refunds; it never shares your payment details with us.

Analytics, advertising measurement and your choices

The App asks for your permission to track you (Apple’s App Tracking Transparency) once, after the notification question. If you decline, the App does not use the advertising identifier. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. We do not show third-party advertising in the App. Analytics and measurement events never include the text of your affirmations, wishes or notebook entries. To ask for the deletion of analytics data linked to your app installation, email [email protected].

Data stored on your device

The App keeps your sign-in session in the iOS Keychain, and caches the catalogue, audio, downloaded practices, your history and settings on your device so they work quickly and offline. This data stays on your device and is removed when you sign out, clear downloads in the App or delete the App.

Retention and deletion

Account data and private content are kept while your account exists.
Sign-in sessions expire after 30 days. Password-reset links expire after 30 minutes.
IP-based abuse-prevention records are stored as one-way keyed hashes and expire automatically, usually within an hour.
Analytics and advertising-measurement data is kept by the providers according to their policies and the settings we choose in their dashboards.
Notification records (what was planned or sent and why) are kept for analysing delivery and are deleted together with your account.
Purchase records are kept while needed to provide your subscription and to meet accounting and legal obligations. When you delete your account, they are unlinked from it; deleting your account does not cancel a subscription, which you manage in your Apple ID settings.
When you delete your account, your profile, favorites, settings, history and goals, wishes, notebook entries, own affirmations with their generated recordings, uploaded files, notification data and sessions are permanently deleted from our server immediately. Server backups, if any, are overwritten in the normal backup cycle.

To delete your account, open Profile → Account and data → Delete account in the App. More options are described on the Delete your account page. You can also download a copy of your data in Profile → Account and data.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. In the App you can edit your profile, turn notifications off, download your data and delete your account at any time. For any other request, email [email protected]. We will respond within 30 days.

Security

All connections to our server use HTTPS. Passwords are stored only as salted hashes, session tokens are stored only as hashes, and private content can be accessed only with your account. No method of transmission or storage is completely secure, but we work to protect your information.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

International transfers

Our servers and service providers may be located outside your country. By using the Service, you understand that your information may be processed in those countries, with safeguards consistent with this policy.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed. Significant changes will be announced in the App or on this website.

Contact

Questions about privacy? Email [email protected].