Privacy Policy

Effective Date: March 22, 2026

Sonara ("we," "us," or "our") is a sleep and focus audio application. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

1.1 Account Information

When you sign in with Apple, we may receive:

• Apple User Identifier — a unique, anonymous ID provided by Apple
• Name — your first and last name (only if you choose to share it)
• Email Address — your email or Apple's private relay address (only if you choose to share it)

We also collect a device vendor identifier (a per-app UUID assigned by Apple, not an advertising identifier) to manage your sign-in sessions across devices.

1.2 Profile Information

You may optionally provide:

• Nickname
• Profile avatar (uploaded image or system icon)
• Preferences such as timezone, daily goal, bedtime reminder, preferred sound categories, and language

1.3 AI Chat Data

When you use our AI assistant, we collect:

• Messages — the text you send to the AI assistant
• Playback Context — what sounds are currently playing, volume levels, timer status, and recipe information, sent to provide context-aware responses
• Device Context — your local time, timezone, and language setting

We do not record audio from the microphone for AI conversations. If you use voice input, speech is converted to text on-device using Apple's Speech Recognition framework, and only the resulting text is transmitted to our servers.

1.4 Usage Data

To improve your experience and show you your activity, we collect:

• Sound play history (which sounds you played, duration, and frequency)
• Daily aggregated statistics (total listening minutes, session count)
• Favorite sounds and saved recipes

1.5 Approximate Location

At sign-in, we infer your approximate geographic region (country/region level only) from your IP address to provide localized content. We do not collect precise GPS location, and we do not request Location Services permission.

1.6 Subscription Information

In-app purchases and subscriptions are processed entirely by Apple through StoreKit. We do not collect or store your payment details, credit card numbers, or Apple ID password. We only receive a confirmation of your subscription status from Apple.

1.7 Information We Do NOT Collect

• Advertising identifiers (IDFA)
• Precise GPS location
• Contacts, photos, or calendar data
• Health or fitness data
• Browsing history
• Data from other apps

2. How We Use Your Information

Purpose	Data Used
Provide the core service (audio playback, recipe management)	Account, profile, preferences
Deliver AI-powered sleep and focus assistance	Chat messages, playback context
Show your activity and listening statistics	Usage data
Manage your subscription	Subscription status from Apple
Localize content and language	Approximate region, language preference
Authenticate your identity	Apple ID, device identifier, tokens
Improve our service	Aggregated, anonymized usage statistics

We do not sell your personal information. We do not use your data for advertising or behavioral tracking.

3. How We Store and Protect Your Data

• Encryption in Transit — All data transmitted between the app and our servers uses HTTPS/TLS encryption. WebSocket connections also use secure TLS.
• Local Storage — Authentication tokens are stored in the iOS Keychain. Audio and image caches are stored in the app's sandboxed directory.
• Server Infrastructure — Our servers are hosted on Alibaba Cloud with industry-standard security practices.
• Access Control — Access to user data is strictly limited to authorized personnel for the purpose of operating the service.

4. Data Sharing

We do not share your personal data with third parties, except:

• Apple — for Sign in with Apple authentication and in-app purchase processing
• AI Language Model Provider — we use a third-party large language model service to power AI chat responses. Your chat messages are sent to this service for processing. No other personal data is shared with this provider.
• Legal Requirements — we may disclose information if required by law, regulation, or legal process

We do not sell or rent your personal information to any third party.

5. Data Retention

• Account Data — retained as long as your account is active
• Chat History — retained as long as your account is active; you may request deletion at any time
• Usage Statistics — retained as long as your account is active
• After Account Deletion — we will delete or anonymize your personal data within 30 days of receiving a verified deletion request, except where we are legally required to retain it

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of your personal data
• Correction — update or correct inaccurate data
• Deletion — request deletion of your account and personal data
• Data Portability — request your data in a portable format
• Withdraw Consent — withdraw consent at any time where processing is based on consent
• Restriction — request that we limit processing of your data

Account Deletion

You may delete your account at any time directly within the app. The entry point is:

Profile → Settings → Preferences → Delete Account

When you confirm account deletion, the following data is permanently deleted or irreversibly anonymized:

• Account credentials and unique identifiers (Apple ID, email, phone, WeChat open ID)
• Your profile (nickname, avatar, region)
• All AI conversation history
• Recipes you created
• Active login sessions and refresh tokens

Anonymous aggregate statistics (such as total listening minutes and check-in counts) may be retained in de-identified form and cannot be linked back to you. This is consistent with our legitimate interest in understanding product usage and with PRC Personal Information Protection Law Article 47.

Important: Your App Store subscription is managed by Apple and will not be canceled automatically when you delete your Sonara account. To stop future charges, cancel your subscription in iOS Settings → your Apple ID → Subscriptions before deleting your account. If you re-register with the same Apple ID while an active subscription exists, the Pro status will automatically restore — this is a side effect of Apple's billing model, not a re-subscription by us.

Account deletion is immediate and cannot be undone. If you want to use Sonara again later, you will need to create a new account, which may reuse the same Apple ID but will have a fresh user identifier and no prior history.

For California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know — you may request that we disclose the categories and specific pieces of personal information we have collected about you
• Right to Delete — you may request deletion of personal information we have collected
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights
• No Sale of Personal Information — we do not sell your personal information as defined by the CCPA

To exercise any of these rights, please contact us at sonara@sesamehut.net.

7. Children's Privacy

Sonara is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. International Data Transfers

Our servers are located in China. If you access Sonara from outside China, your data will be transferred to and processed in China. By using the App, you consent to this transfer. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

9. Microphone and Speech Recognition

Sonara requests microphone access only for voice input to the AI assistant. We use Apple's on-device Speech Recognition framework to convert speech to text locally on your device. The raw audio is never transmitted to our servers or any third party. Only the resulting text transcription is sent to our AI service for processing.

10. Third-Party Services

Sonara uses the following third-party services:

Service	Purpose	Data Shared
Apple Sign-In	Authentication	Apple User ID, name, email (optional)
Apple StoreKit	In-app purchases	Subscription status only
Third-party LLM service	AI chat responses	Chat message text

We do not integrate any advertising, analytics, or tracking SDKs.

11. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of California, United States, without regard to its conflict of laws provisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within the app or by other appropriate means. The "Effective Date" at the top indicates when this policy was last revised.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: sonara@sesamehut.net