Privacy Policy
Drowsia is a sleep-sound app. This policy describes exactly what the app does with data — nothing more is collected than what is listed here.
1. Your account
Drowsia works without an account; signing in is your choice. If you sign in with Apple or Google, that customer account exists for one purpose: your Premium belongs to the account, so it is there on every device you sign in on. With Sign in with Apple we ask Apple for neither your name nor your e-mail address and receive only an account identifier. With Google we receive the e-mail address of your Google account, its display name and an account identifier, because Google's sign-in always includes them; Drowsia does not show or use the name. These are held by our sign-in provider, Firebase Authentication (Google LLC). The account identifier is also stored on your device and passed to RevenueCat (section 3). There is no public profile, and nothing you do in the app is visible to other people.
The app requests no microphone, camera, precise location, contacts or photo access, and contains no advertising and no ad tracking.
2. Data that stays on your device
Your preferences (favourites, saved Sleep Scenes, sleep-timer settings, language, onboarding answers) are stored only on your device. Deleting the app deletes them.
3. Purchases and subscriptions
Subscriptions are sold by Apple (App Store) or Google (Google Play). We never see your payment details. To verify your Premium access we use RevenueCat (RevenueCat, Inc., USA), which receives your account identifier if you are signed in — otherwise a random identifier for your installation — and the purchase receipt data the store provides (product, dates, store country, whether the purchase is a sandbox test). This is required to unlock Premium, to restore purchases and to recognise your Premium on another device. RevenueCat reports each purchase event, with the same identifier, to a server operated by BUSATER. RevenueCat's privacy policy: revenuecat.com/privacy.
4. Product analytics (pseudonymous)
To understand which sounds and features are used and whether the app works, the app sends usage events to a server operated by BUSATER on Cloudflare (Cloudflare, Inc.). Each event carries a random installation identifier, the app version and platform, the coarse country of the request, a session identifier and the event itself (for example "sound started", "timer started", "paywall viewed"). Events never contain names, e-mail addresses, your account identifier, free text, precise location or persistent hardware identifiers. The analytics identifier is not your account identifier, the two are not linked, and the analytics identifier cannot be used to identify you personally. Purchase-related events carry only the product identifier and the store price the store reports. Test, sandbox and internal traffic is separated from real usage and never counted as revenue.
5. Legal basis, retention and deletion
The customer account and purchase verification are necessary to perform the contract with you. Pseudonymous analytics is based on our legitimate interest in improving the app; the data is aggregated for reporting and raw events are kept for at most 24 months. You can stop analytics by uninstalling the app; because the identifier is random and not linked to you, we cannot look up "your" records on request, and the same reason means they cannot be used to identify you.
Deleting your account. You can delete your account in the app at any time: Profile → Delete account. You confirm by signing in once more, and the account record — e-mail address, display name and account identifier — is deleted from Firebase Authentication immediately. Deleting the account does not cancel a subscription; that is managed in your App Store or Google Play account. Purchase records (product, dates, price, store country) stay with RevenueCat and on our server under the deleted identifier, because they are transaction records; we keep them for up to 10 years, the period Turkish commercial law sets for such records. If you cannot use the app, the same request can be made from this page.
Other deletion. Everything Drowsia keeps on your device — favourites, saved Sleep Scenes, timer settings, language and your onboarding answers — is gone when you uninstall the app, and uninstalling also ends analytics collection. Raw analytics events are deleted automatically after 24 months at the latest. We would rather state the limit of a deletion request than imply one we cannot honour: those events carry only a random installation identifier, it is shown nowhere in the app, and it is never linked to a person, so we cannot find "your" rows even when you ask. What we can identify we do delete on request — the customer account described above, and the operator sign-in record (display name, e-mail address, account identifier) with the access-log entries keyed to it. Write to bsdigitalapp+drowsia@gmail.com and we answer within two business days.
6. Operator sign-in (not a user feature)
The app contains a private diagnostics panel that only BUSATER uses to read the aggregate figures described in section 4. It is not part of the product, and it is shown only when BUSATER's own account is signed in: after you sign in, the app asks our server whether your account is that one, and for every other account the panel does not appear and nothing about that question is recorded. For the one authorised account this operator sign-in processes the display name, the e-mail address of that account and its permanent account identifier, and requests to the panel are written to an access log. Google's handling of the sign-in itself is covered by Google's own privacy policy. Ordinary use of Drowsia never reaches this panel.
7. Children
Drowsia is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has signed in, write to us and we will delete the account.
8. Changes and contact
If this policy changes, the date above changes with it. Questions: bsdigitalapp+drowsia@gmail.com.