Privacy Policy

Introduction

This Privacy Policy explains how Hushfield ("we," "our," or "us") handles information when you use the Hushfield mobile application for iOS and Android, the Hushfield website at https://hushfield.xyz, and related services.

Hushfield is designed with a local-first approach to privacy. Most personal settings, saved Places and mixes, detailed listening state, downloaded audio, and personalization data remain on your device. Hushfield also uses limited pseudonymous product analytics to understand how the app is used and improve the product. Hushfield does not operate a user account system, does not require personal profile details to use the application, and does not engage in third-party advertising, data broker sharing, or cross-app behavioral tracking.

Who Operates Hushfield

Operator: Aradhya Singh, operating Hushfield

Business Structure: Individual / independent operator

Location: Ontario, Canada

Privacy Contact: hushfieldapp@protonmail.com

Information Hushfield Handles

Because Hushfield does not require account registration or login, we do not collect user account profiles, names, physical mailing addresses, telephone numbers, passwords, or health data unless provided voluntarily through support communications. Hushfield does not request or collect precise GPS location. Limited coarse location information may be inferred from an IP address by analytics or infrastructure providers as described below. The information handled in connection with Hushfield falls into the distinct categories described below.

Information Stored Only on Your Device

Hushfield is built on a local-first model where your detailed personal audio environment, media files, and listening data remain strictly on your device. This locally stored data includes:

Detailed listening history and session history (including sound and mix identifiers, start times, durations, and completion or skip flags)
Saved custom mixes, mix layer audio configurations, sound selections, and individual layer volume settings
Application settings (such as background playback preferences, default timer lengths, fade-out durations, and category selections)
Current and recent playback checkpoint state and sleep-timer state
Downloaded audio files, artwork files, and local cache registries used for offline playback
Recommendation inputs and preferences derived locally from your on-device listening activity
Local configuration records for onboarding completion status, personalization choices, and favorite sounds or saved Places

The detailed underlying contents of your saved mixes, listening history, local settings, downloaded media, and local playback state remain stored exclusively on your device and are not uploaded to Hushfield servers or PostHog. As described in the Product Analytics section, Hushfield may separately transmit limited, pseudonymous interaction events when you use certain features—such as recording that an onboarding goal was selected, onboarding was progressed or completed, a Place was started, a favorite was toggled, a feature was accessed, or a mix was saved. These high-level analytics events reflect feature usage and do not contain your complete saved mix configurations, full listening history, or raw on-device preference databases. Your detailed listening history is processed strictly on-device to provide personalized sound recommendations on your home screen. You can permanently delete all locally stored data at any time from within the app by navigating to Settings → Delete all local data, or by clearing downloaded media via Settings → Clear downloaded sounds.

Subscription and Purchase Information

Hushfield offers optional paid subscriptions. We use RevenueCat to manage subscriptions, validate purchases, and verify feature entitlements across iOS and Android.

When you purchase or manage a subscription, information processed through RevenueCat may include:

An anonymous, randomly generated RevenueCat App User ID (no custom user identifier or login is created by Hushfield)
Subscription status, plan type, and paid subscription entitlement identifiers
Purchase history, transaction identifiers, and renewal/expiration timestamps
Product and offering identifiers

Hushfield does not provide RevenueCat with your name, email address, custom user IDs, onboarding preferences, listening history, favorites, or saved mixes.

All payment transactions and billing details (such as credit card or banking information) are handled directly and securely by the Apple App Store (for iOS) or Google Play (for Android) under their respective terms and privacy policies. Hushfield does not directly receive, process, or store your payment-card or banking details.

Separately, PostHog may receive limited product-analytics events related to the subscription purchase funnel, such as when a paywall is viewed, a purchase is started, succeeded, or cancelled/failed, a subscription is restored, the selected subscription plan, and whether the selected offer included a free trial. PostHog does not receive your credit card number, bank account details, payment card details, or Apple Account or Google Account credentials from Hushfield. All billing and payment processing remains handled exclusively by Apple or Google, RevenueCat manages subscription entitlements, and PostHog is used solely for product analytics.

Product Analytics

On this website, we use PostHog to measure home-page visits, clicks to the Apple App Store or Google Play, and use of the audio preview. Each page load uses a temporary random identifier that is not saved in a cookie or local storage or linked to an app user. Website events may include the selected store, the button's location on the page, a broad viewport-size category, and the referring website's domain when the browser provides one. PostHog may also process standard network information such as IP address and browser details. We do not use website session replay or automatic click capture.

Hushfield uses PostHog for first-party product analytics to understand how the app is used, measure feature engagement, diagnose product-flow issues, and improve Hushfield. Based on our implementation, the information processed through PostHog includes the following categories:

Pseudonymous Identifier: A randomly generated persistent device/analytics identifier created by the PostHog SDK on your device. Hushfield does not send PostHog your name or email address, and Hushfield does not call PostHog identify or login methods to associate analytics data with a Hushfield user account or real-world identity.
Product Interaction Data: Pseudonymous interaction events recording how features are used. Examples may include screen views, app lifecycle events (such as app open or backgrounding), button/touch interactions or similar interface interactions captured for product analytics, onboarding interactions and selected onboarding goals, Place identifiers and certain playback interactions, such as starting a Place, favorite interactions, Living Place and feature interactions, feature-flag evaluation or feature-usage analytics, mix-builder save events (recording that a mix was saved, without uploading the mix configuration), paywall impressions, selected subscription plans, purchase funnel interactions, and restore events. Touch interactions are captured strictly to understand navigation flows; Hushfield does not record text input, raw screen contents, audio, or session recordings, and session replay remains disabled.
Device and App Metadata: Standard technical metadata collected by the analytics SDK to ensure compatibility and diagnose issues, such as app version and build number, operating system and version, device model or type, device locale and language, timezone, screen dimensions, and network reachability metadata.
IP Address and Coarse Location: Standard network requests to the analytics endpoint inherently transmit your device's IP address. PostHog may process the IP address using GeoIP lookup to infer coarse, approximate location data (such as country, region, and city). Hushfield does not request or collect precise GPS location for analytics or any other purpose.

Technical and Network Information

When the application connects to our content delivery infrastructure (Cloudflare), when the RevenueCat SDK communicates with its servers to verify entitlements, or when the PostHog SDK transmits product analytics events, standard technical data is inherently transmitted as part of normal internet communications. Depending on the service requested, this may include:

Internet Protocol (IP) address
Date and timestamp of the network request
Requested service or resource path (such as catalog data, audio tracks, artwork images, subscription validation endpoints, or analytics event payloads)
Standard device, operating system, and network metadata transmitted by the underlying platform or SDK

This technical information is used strictly for purpose-specific operations: Cloudflare uses it to route and deliver requested media assets securely and reliably; RevenueCat uses it to validate subscription entitlements; and PostHog processes it to record product analytics events and diagnose technical delivery issues. Hushfield does not combine this technical data across services to build advertising or behavioral profiles.

Support Communications

If you choose to contact us voluntarily for assistance, feedback, or privacy requests at hushfieldapp@protonmail.com, we will receive:

Your email address
The contents of your message and any attachments
Any additional information you voluntarily provide

Reaching out for customer support is entirely optional. We use this information solely to review, respond to, and resolve your inquiry.

How Information Is Used

We use the limited information described above for the following specific purposes:

Product Analytics: Understanding how people interact with Hushfield, measuring onboarding and feature usage, improving product design, and identifying friction in the user experience.
Subscription Management: Managing, verifying, and restoring paid subscriptions and feature entitlements through RevenueCat and platform app stores.
Content Delivery: Delivering requested sound catalogs, ambient audio files, and artwork assets from our content delivery network to your device.
Customer Support: Responding to and resolving user-initiated inquiries, feedback, and support requests.
Technical Operation & Security: Maintaining application security, troubleshooting technical errors, preventing fraud, and ensuring reliable infrastructure operation.
Legal Compliance: Complying with applicable legal, regulatory, tax, or accounting requirements.

Separately, locally stored data is used strictly on-device to maintain your preferences, restore playback and timer states, save your favorite sounds and custom mixes, and generate personalized recommendations.

We do not use your information for third-party advertising, behavioral targeting, remarketing, marketing emails, or cross-app tracking, and we do not sell your personal information.

Lawful Bases for Processing

Where applicable data protection laws (such as GDPR or UK GDPR) require a legal basis for processing personal information, we rely on the following grounds:

Performance of a Contract / Steps at Your Request: Processing necessary to manage subscriptions, validate paid feature access, and provide requested Hushfield functionality and content.
Legitimate Interests: Operating, securing, maintaining, and supporting Hushfield, and understanding and improving the application through proportionate pseudonymous product analytics, where those interests are not overridden by your fundamental rights and privacy interests.
Legal Obligations: Processing necessary to comply with applicable statutory, regulatory, tax, or accounting obligations.
Consent: Where we specifically request your consent for a particular activity (which you may withdraw at any time).

Third-Party Services

We work with a minimal set of trusted third-party service providers to deliver core app functionality:

PostHog: Product analytics used to understand feature usage, monitor app flows, and improve Hushfield. PostHog processes limited pseudonymous interaction, device/app metadata, and network information as described in this policy. For more details, see PostHog's Privacy Policy.
RevenueCat: Subscription management, purchase validation, entitlement tracking, and purchase restoration. For more details, see RevenueCat's Privacy Policy.
Apple App Store: In-app purchase processing, billing, and subscription management on iOS devices. For more details, see Apple's Privacy Policy.
Google Play: In-app purchase processing, billing, and subscription management on Android devices. For more details, see Google's Privacy Policy.
Cloudflare / Cloudflare R2: Hosting and content delivery network (CDN) infrastructure used to deliver the public sound catalog, audio tracks, artwork, and related assets to the app. For more details, see Cloudflare's Privacy Policy.

Hushfield does not share information with advertising networks or data brokers and does not use PostHog for targeted advertising or cross-app tracking.

Analytics, Advertising and Tracking

Hushfield maintains strict boundaries regarding advertising and tracking:

Hushfield uses PostHog solely for first-party product analytics as described in this policy.
We do not integrate advertising SDKs, ad networks, or behavioral advertising platforms.
We do not use PostHog for targeted advertising or remarketing.
We do not sell, rent, or trade your personal information to data brokers or third parties.
We do not engage in cross-app or cross-site advertising tracking.
We do not request or collect the Identifier for Advertisers (IDFA) or other advertising identifiers.
Session replay is not enabled.
Hushfield currently does not use remote crash-reporting platforms (such as Sentry or Crashlytics).

International Data Transfers

Because our third-party infrastructure and service providers (including PostHog, Cloudflare, RevenueCat, Apple, and Google) operate globally, information processed by these providers may be transferred to, stored, or processed in countries other than your country of residence, including the United States, where PostHog's analytics infrastructure is hosted (https://us.i.posthog.com).

Where personal data originating in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland is transferred internationally, our service providers rely on legally recognized transfer mechanisms to ensure appropriate safeguards, such as European Commission Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or relevant adequacy decisions, as applicable.

Data Retention

We retain information only as long as necessary for the purposes outlined in this policy:

Local Device Data: Onboarding choices, personalization settings, favorites, saved mixes, playback checkpoints, listening history, and downloaded media remain on your device until you reset them, clear them via the app's settings (Settings → Delete all local data), or uninstall the app.
Product Analytics: Analytics information processed through PostHog is retained only for as long as reasonably necessary for the product-analytics purposes described in this policy, subject to Hushfield's configured retention settings and applicable legal requirements. Users may contact our Privacy Contact regarding applicable deletion or privacy requests.
Subscription & Transaction Records: Subscription and purchase records handled by RevenueCat, Apple, and Google are retained by those platforms in accordance with their standard business practices, operational needs, and statutory legal or accounting obligations.
Technical & Server Logs: Standard technical request logs collected by our content delivery network (Cloudflare) are retained according to the provider's standard security and operational practices.
Support Inquiries: Communications sent to our support email are retained as reasonably necessary to resolve your request, maintain customer service records, and fulfill applicable legal requirements.

Data Security

We implement reasonable technical and organizational safeguards appropriate to the nature of the information handled. All production network communications with our content delivery network, subscription infrastructure, and analytics service providers use industry-standard HTTPS encryption in transit.

Please note that local data stored on your device via standard platform storage (such as AsyncStorage) is not separately encrypted by Hushfield, and no method of electronic transmission or mobile storage can be guaranteed to be 100% secure. We encourage you to maintain appropriate security controls on your mobile device (such as device passcodes and biometric locks).

Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have specific rights regarding your personal information.

Canada / PIPEDA

If you are a resident of Canada, under the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial legislation, you have the right to:

Request access to the personal information we hold about you
Request correction of inaccurate or incomplete personal information
Inquire about how your personal information is collected, used, and disclosed
Withdraw your consent to data processing at any time, subject to legal or contractual restrictions
Request deletion of your personal information where legally applicable
Lodge a complaint or inquiry regarding our privacy practices

To exercise any of these rights, please contact us at hushfieldapp@protonmail.com.

If you are located in the European Economic Area (EEA), under the General Data Protection Regulation (GDPR), you may have the right to:

Request access to your personal data
Request rectification of inaccurate personal data
Request erasure ("right to be forgotten") of your personal data
Request restriction of processing of your personal data
Object to the processing of your personal data
Request data portability where technically feasible
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with your local data protection supervisory authority

If you are located in the United Kingdom, under the UK General Data Protection Regulation and the Data Protection Act 2018, you possess rights equivalent to those described for the EEA above, including the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to lodge a complaint with the Information Commissioner's Office (ICO).

To make a privacy request under GDPR, UK GDPR, PIPEDA, or other regional regulations, please email hushfieldapp@protonmail.com. Privacy requests may also concern information processed through Hushfield's service providers, including PostHog. Because Hushfield does not maintain user accounts, collect names, or associate real-world identities with pseudonymous analytics identifiers, we may ask you to provide relevant transaction, device, or communication details where technically feasible to verify and fulfill your request. Where data is purely pseudonymous and cannot be linked to you without collecting additional personal data, our obligations may be limited as permitted by applicable law.

Children's Privacy

Hushfield is designed and intended for users aged 13 and older. The application is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Hushfield does not require an age verification gate or date-of-birth collection. If you are a parent or guardian and believe that a child under 13 has provided personal information to us (for example, by sending a support email), please contact us at hushfieldapp@protonmail.com so that we can promptly investigate and take appropriate steps to delete such information.

Third-Party Links

Our website or application may occasionally contain links to third-party websites or services (such as app stores or legal terms). We are not responsible for the privacy practices, content, or policies of external third parties. We encourage you to review the privacy policies of any third-party services you visit.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, operational requirements, or applicable law. When updates occur, the revised version will be posted with an updated "Effective Date" at the top of the policy.

Where required by applicable law, we will provide appropriate notice of material changes through the application, our website, or other suitable communication methods. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your privacy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or Hushfield's privacy practices, please reach out to Aradhya Singh, operating Hushfield: