Privacy Policy

1. Introduction PurrSleep ("we", "us") respects your privacy. This Privacy Policy explains how we process personal data when you use the PurrSleep Android app, in line with the EU General Data Protection Regulation (GDPR) where it applies and with privacy principles relevant to users in other regions (including the California Consumer Privacy Act, CCPA, where applicable). 2. Data controller and contact The data controller for personal data processed through PurrSleep is the developer listed on the Google Play store listing. For privacy questions or data-subject requests, contact: purrsleeporg@gmail.com 3. About the current version The current version of PurrSleep is free to download and use. It does not display third-party advertisements and does not offer in-app purchases or subscriptions through Google Play. Voluntary support donations are available via an external Revolut link (see section 8). Future versions may introduce additional features; if that affects this policy, we will update it and, where required, ask you to review it again. 4. Optional account (Firebase Authentication) An account is optional. If you register or sign in, we use Firebase Authentication (Google) to create and manage your account. We collect your email address and password, which are stored and protected under Google/Firebase security practices, only for authentication, account recovery, and security. We do not run our own login servers or store passwords on PurrSleep servers. If you set a display name, it may appear in the app on your device. Most app features work without an account. 5. On-device processing The following activities are performed on your device only. Photos and audio you import are not sent to PurrSleep servers for these features: • Cat silhouette creation using Google ML Kit Subject Segmentation (Google may download the model component to your device). • Processing of custom purr audio files you choose to import. • QR codes for voluntary donations, generated locally from a public Revolut link. Silhouette and custom sound files may be stored in the app's private storage on your device. 6. Local storage on your device Preferences and app data—such as purr settings, sleep timers, language choice, onboarding status, custom sound metadata, saved Bluetooth device information, and similar settings—may be stored locally using Android SharedPreferences, JSON, or app-private files. We do not upload this local data to PurrSleep servers. You can delete it by clearing app data in Android settings or uninstalling the app. 7. Permissions PurrSleep requests permissions only as needed for its features: • Internet — account sign-in, delivery of ML Kit components, opening external donation pages. • Notifications and foreground service (media playback) — persistent playback controls while purr audio runs in the background. • Vibration and wake lock — vibration patterns synced with purr playback. • Bluetooth — connect to external speakers or audio devices (optional). On Android 11 and older, location permission may be requested by the system for Bluetooth device discovery; we do not use it to track your location. • Access to photos/audio files — import and manage custom cat sounds you select. • Post notifications (Android 13+) — shown only after you grant permission. 8. Voluntary donations (Revolut) The app may offer an optional "Buy me a coffee" feature with a QR code or link to Revolut (revolut.me). Payments are processed entirely by Revolut outside Google Play. Google is not responsible for payment processing or security. PurrSleep does not receive or store your card or bank details. Revolut's own privacy policy applies to any information you provide to them. 9. Third-party services • Google Firebase Authentication — optional account sign-in and registration. This is the only Firebase service actively used in the current version of the app. • Google ML Kit — on-device image segmentation; related components may be delivered by Google services. The current version does not use Firebase Analytics or Firebase Crashlytics, and the app does not read from or write to Cloud Firestore. This version also does not use Google AdMob advertising or Google Play Billing. If we add any of these later, this policy will be updated accordingly. 10. Legal basis for processing (GDPR) Where the GDPR applies, we rely on the following legal bases for each type of processing: • Firebase account (email address, password, optional display name) — Article 6(1)(b) performance of a contract, to create and maintain the account you ask us to provide, and Article 6(1)(a) consent, given when you choose to register or sign in. • Local, on-device data (preferences, timers, custom sound metadata, saved Bluetooth device information) — Article 6(1)(f) legitimate interest in providing core app functionality on your device. • ML Kit component delivery — Article 6(1)(f) legitimate interest in delivering the on-device features you choose to use; the related model component is provided by Google services. • Voluntary Revolut donations (external) — Article 6(1)(a) consent, exercised when you choose to open the external donation link; the payment itself is governed by Revolut's own terms. Where consent is the legal basis, you may withdraw it at any time, without affecting features that do not require it. 11. Data retention • Firebase account data is retained until you delete your account; you can delete it at any time using Google/Firebase account tools or by contacting us. • Local, on-device data is retained until you clear the app's data or uninstall the app. • Because the current version does not use Firebase Analytics or Firebase Crashlytics, we hold no analytics or crash-report data about you and therefore have no related retention period. 12. Account deletion To request deletion of your PurrSleep account and associated Firebase data (email address, authentication data): • Send an email from your registered address to purrsleeporg@gmail.com with the subject "Delete my PurrSleep account". • We will delete your account within 30 days. • Local data on your device (settings, custom sounds) is not stored on our servers; remove it anytime via Android Settings → Apps → PurrSleep → Clear data, or uninstall the app. 13. Children PurrSleep is not intended for children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has created an account, contact us at purrsleeporg@gmail.com. 14. Security Account-related communications use encryption in transit (HTTPS/TLS) via Google/Firebase. Data processed only on your device remains under your control unless you choose optional sign-in described above. 15. Your rights and complaints Where applicable law grants them, you may have rights of access, rectification, erasure, restriction, objection, and data portability. For Firebase account data, see section 12 (Account deletion). Local data can be removed by uninstalling the app or clearing its storage. You also have the right to lodge a complaint with a data protection supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), https://www.dataprotection.ro. Users in the EEA or the UK may instead contact their local supervisory authority. 16. International data transfers If you use Firebase Authentication, Google may process your account data in countries outside your own, subject to Google's terms and safeguards. 17. Changes We may update this Privacy Policy. The version shown in the app when you use it applies. Significant changes may also be noted in the Google Play listing. This website version mirrors the app policy for convenience. 18. Acceptance If you create an account, you confirm you have read and understood this policy. If you disagree, do not register; you may still use features that do not require an account. This website is a marketing site for the PurrSleep Android application. Browsing this site alone does not create an account. If you contact us by email, we process your message solely to respond to your request.