Privacy Policy
Link: https://soothfy.com/privacy_policy.html
- Owner and Data Controller
- Policy Summary
- Information on opting out of interest‑based advertising
- Further information: Push notifications
- Types of Data collected
- Mode and place of processing the Data
- The purposes of processing
- Detailed information on processing
- Managing Contacts and Sending Messages
- Further Information for Users in the European Union
- How to exercise your rights
- Additional information
- Contact information
- Definitions
Owner and Data Controller
Syntrum Moderator Private Limited
Owner contact email: info@soothfy.com
Policy Summary
1. Analytics
Google Analytics for Firebase
Personal Data: Application opens; Application updates; geography/region; in‑app purchases; launches; number of sessions; number of Users; session duration
2. Hosting and backend infrastructure
Amazon Web Services (AWS)
Personal Data: various types of Data as specified in the privacy policy of the service
3. Registration and authentication
Facebook Authentication
Personal Data: Trackers; various types of Data as specified in the privacy policy of the service
Direct registration and profiling
Personal Data: billing address; country; email address; first name; last name; password; phone number
Google OAuth
Personal Data: various types of Data as specified in the privacy policy of the service
Sign in with Apple
Personal Data: email address
4. Handling Payments
Soothfy offers in‑app purchases through the Apple App Store and Google Play Store, managed by RevenueCat. Soothfy does not store or process payment method details directly. Subscription management, including renewals, cancellations, and refunds, must be handled through the user’s App Store or Play Store account settings.
5. Infrastructure monitoring
App Center – Diagnostics
Personal Data: crash data
Bugsnag
Personal Data: app information; country; device information; device logs; various types of Data as specified in the privacy policy of the service
6. Managing contacts and sending messages
OneSignal
Personal Data: email address; geographic position; language; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data; various types of Data as specified in the privacy policy of the service
Information on opting out of interest‑based advertising
In addition to any opt‑out feature provided by any of the services listed in this document, Users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US), the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar initiatives. These allow Users to select tracking preferences for most advertising tools. The Owner recommends that Users use these resources in addition to the information provided in this document. The Digital Advertising Alliance offers an application called AppChoices that helps Users control interest‑based advertising on mobile apps. Users may also opt out of certain advertising features through their device settings, such as device advertising settings for mobile phones or general ad settings.
Further information about the processing of Personal Data — Push notifications
This Application may send push notifications to achieve the purposes outlined in this privacy policy, including reminders related to mental wellness activities and important subscription or billing information. Users may opt out of receiving push notifications through their device settings, but disabling push notifications may negatively affect the utility of this Application.
Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, are: Trackers; email address; password; first name; last name; phone number; country; state; Usage Data; number of Users; number of sessions; session duration; Application opens; Application updates; launches; crash data; device information; device logs; app information; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); geographic position; language; billing address; purchase history; subscription status.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.
Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or functioning of the Service.
Any use of Cookies – or other tracking tools — by this Application or by the owners of third‑party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document.
Users are responsible for any third‑party Personal Data obtained, published, or shared through this Application.
Mode and place of processing the Data
Methods of processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT‑enabled tools, following organizational procedures and modes strictly related to the purposes indicated.
In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third‑party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.
Place
The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own.
Retention time
Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligations or based on the Users’ consent. Payment and subscription‑related data may be retained as long as necessary to comply with financial and legal obligations or the policies of the App Store and Google Play Store.
The purposes of processing
The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Registration and authentication, Analytics, Hosting and backend infrastructure, Infrastructure monitoring, Interaction with data collection platforms and other third parties, Handling payments, and Managing contacts and sending messages.
For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data.”
Detailed information on the processing of Personal Data
Analytics
Google Analytics for Firebase (Google LLC)
Firebase Analytics is an analytics service provided by Google LLC.
Personal Data processed: Application opens; Application updates; launches; number of sessions; number of Users; session duration.
Place of processing: India – Privacy Policy.
Hosting and backend infrastructure
Amazon Web Services (AWS)
AWS is a hosting and backend service provided by Amazon Web Services, Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: India – Privacy Policy.
Registration and authentication
Facebook Authentication (Meta Platforms, Inc.)
Personal Data processed: Trackers; various types of Data as specified in the privacy policy of the service.
Place of processing: India – Privacy Policy.
Direct registration and profiling (this Application)
Personal Data processed: email address; first name; last name; password; phone number.
Google OAuth (Google LLC)
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: India – Privacy Policy.
Sign in with Apple (Apple Inc.)
Personal Data processed: email address.
Place of processing: India – Privacy Policy.
Handling Payments
Soothfy offers in‑app purchases through the Apple App Store and Google Play Store, managed by RevenueCat. Soothfy does not store or process payment method details directly.
RevenueCat (RevenueCat, Inc.) helps securely manage in‑app purchases and verify user subscriptions.
Personal Data processed: purchase receipts, subscription status, anonymized identifiers.
Place of processing: as specified in RevenueCat’s Privacy Policy.
Infrastructure monitoring
App Center – Diagnostics
Personal Data processed: crash data.
Bugsnag
Personal Data processed: app information; country; device information; device logs; various types of Data as specified in the privacy policy of the service.
Managing contacts and sending messages
OneSignal
Personal Data processed: email address; geographic position; language; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data; various types of Data as specified in the privacy policy of the service.
Place of processing: India — Privacy Policy — Opt out.
Monitoring and Diagnostics
App Center – Diagnostics (Microsoft Corporation)
App Center – Diagnostics is a monitoring service provided by Microsoft Corporation.
Personal Data processed: crash data
Place of processing: India — Privacy Policy
Bugsnag (Bugsnag Inc.)
Bugsnag is a monitoring service provided by Bugsnag Inc.
Personal Data processed: app information; country; device information; device logs; various types of Data as specified in the privacy policy of the service
Place of processing: India — Privacy Policy
Managing Contacts and Sending Messages
This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User. These services may also collect data about when the message was viewed by the User or when the User interacted with it (e.g. by clicking links).
OneSignal (Lilomi, Inc.)
OneSignal is a push notification and messaging service provided by Lilomi, Inc. OneSignal allows the Owner to send messages and notifications to Users across platforms such as Android, iOS, and the web. Messages can be sent to single devices, groups of devices, or specific User segments.
Depending on the permissions granted to this Application, the Data collected may include precise location (GPS‑level), WiFi information, and a list of apps installed and enabled on the User’s device.
This Application uses identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS) and technologies similar to cookies to run the OneSignal service. The Data collected may be used by the service provider for interest‑based advertising, analytics, and market research. For more details, see OneSignal’s Privacy Policy.
Personal Data processed: email address; geographic position; language; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA); Usage Data; various types of Data as specified in the privacy policy of the service
Place of processing: India — Privacy Policy — Opt out
Push Notifications Opt‑Out
Users may usually opt out of receiving push notifications by visiting their device settings and changing notification settings for this Application or all apps on the device. Disabling push notifications may limit the utility of this Application, including important subscription or billing updates.
Interest‑Based Advertising Opt‑Out
Users may opt out of OneSignal’s advertising features through their device settings, such as the device advertising settings for mobile phones. Different device configurations or updates may affect how these settings work.
In addition to any opt‑out feature provided by the services listed in this document, Users may follow the instructions provided by: YourOnlineChoices (EU), Network Advertising Initiative (US), Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar initiatives. The Digital Advertising Alliance offers an app called AppChoices that helps Users control interest‑based advertising on mobile apps. Users may also opt out through device ad settings.
Further Information for Users in the European Union
This section applies to all Users in the European Union under the GDPR and overrides any conflicting information elsewhere in this Privacy Policy.
Legal Basis for Processing
The Owner may process Personal Data if:
- The User has given consent for one or more specific purposes;
- Provision of Data is necessary for the performance of an agreement with the User or pre‑contractual obligations;
- Processing is necessary for compliance with a legal obligation;
- Processing relates to a task carried out in the public interest or the exercise of official authority vested in the Owner;
- Processing is necessary for the purposes of legitimate interests pursued by the Owner or a third party.
Retention Time
Unless otherwise specified, Personal Data is processed and stored as long as needed for its purpose and may be retained longer due to legal obligations or with the User’s consent.
- Data collected for performance of a contract will be retained until the contract is fully performed.
- Data collected for legitimate interests will be retained as long as needed to fulfill those purposes.
- Subscription data and purchase receipts may be retained as required by app store policies and payment obligations.
- After expiry, Personal Data will be deleted. After deletion, the rights to access, erase, correct, or port Data cannot be enforced.
User Rights under GDPR
- Withdraw consent at any time
- Object to processing
- Access their Data
- Verify and correct Data
- Restrict processing
- Have their Data deleted
- Receive their Data and transfer it to another controller
- Lodge a complaint with a data protection authority
Users may learn about Data transfers abroad and the security measures in place by contacting the Owner.
How to Exercise These Rights
Requests to exercise rights can be sent to: info@soothfy.com
Requests are free and processed within one month.
Additional Information
Legal action
Personal Data may be used for legal purposes or to comply with authorities.
System Logs and Maintenance
The Application and third‑party services may collect system logs and use other Personal Data (like IP Address) for operation and maintenance.
Changes to this Privacy Policy
The Owner may update this Privacy Policy at any time by posting changes here. Users are advised to check this page often. If changes affect processing based on consent, the Owner will seek new consent if required.
Contact Information
Owner and Data Controller
Syntrum Moderator Private Limited
Contact email: info@soothfy.com
Definitions
- Personal Data: Any information that allows for identification of a natural person.
- Usage Data: Automatically collected information like IP addresses, device details, session data.
- User: The individual using this Application.
- Data Subject: The natural person the Data refers to.
- Data Processor: A party that processes Data on behalf of the Owner.
- Data Controller: The party that determines how and why Data is processed.
- This Application: The Soothfy mobile app.
- Service: The services provided by this Application.
- European Union (EU): Includes all EU and EEA member states.
- Cookie: A Tracker stored in the User’s browser.
- Tracker: Any technology that enables tracking Users (e.g., cookies, device IDs).