Privacy policy

Last updated 30 October 2026

ASMR is a listening app for calm and sleep. You can use it as a guest, without an account. This page explains what the app and its server keep, why, and how you stay in control.

What we keep

• Account (only if you create one): your e-mail address, an optional name and a securely hashed password. With two-step sign-in, an encrypted key for your authenticator app and hashed recovery codes.
• Signed-in devices: a random identifier the app creates when it is installed, the device model (for example "Pixel 9"), when it signed in and was last used, and the result of Google Play's app check. They let you see and sign out your devices and apply your plan's device limit.
• Your library: favourites, playlists, saved mixes, bedtime routines, the triggers and goal you chose and your sounds to avoid, so they follow you to your other devices.
• Listening history: which sessions you played and for how long, your sleep check-ins and the ratings you give. They build your Trigger DNA and suggestions.
• Settings: playback, language, night and reminder preferences.
• App use: simple events, such as a session started or a setting changed, to learn what helps people rest. They hold nothing you wrote or said.
• Subscription: your plan and the Google Play purchase token needed to confirm it. Payment details stay with Google; we never see your card.
• Downloads: which sessions you took offline and when, to apply your plan.
• Family plan: if you share a plan, the people in it see each other's names.
• Security records: counts of recent sign-in attempts per address and network address, kept for a day, to stop password guessing.
• Feedback: the messages you send from the app, with the app version.
• Notifications and crash reports: to receive the team's news, the app gets a random installation identifier from Google Firebase and listens for news; our server never learns which phone receives it. If the app crashes, a crash report (the app and Android version, the device model and where the app failed) goes to Firebase Crashlytics.

As a guest, your library, history, app use and settings stay on your device only. A photo you choose as your picture always stays on your device.

What we do not do

• We do not sell your data or share it with advertisers. The app shows no ads.
• We do not record audio from your microphone, and we never use your voice.
• We do not track you across other apps or websites.

Who processes it

Our server stores the data above. Google Play handles purchases and checks that the app was installed from Google Play on a genuine device (Play Integrity). Google Firebase delivers the team's notifications (Cloud Messaging), receives crash reports (Crashlytics) and tells the app where our server is (Remote Config); it receives the installation identifier and technical details of the device, never your account. Audio is streamed from our server and its storage provider. These providers act on our instructions only.

How long we keep it

We keep account data while your account exists. When you delete your account, the server deletes your account and everything linked to it.

Your choices

• Export: You › Privacy and data › Export my data saves everything the server keeps about your account in a file.
• Correct: change your name or password on the You screen.
• Devices: You › Account and security lists your signed-in devices; sign any of them out there.
• Delete: You › Privacy and data › Delete account removes the account and its data. Cancel a Google Play subscription in Google Play as well.
• Notifications: the bedtime reminder and the gentle wake stay off until you turn them on. News from the team can be turned off in You › News, and Android shows no notification from the app without your permission.

Children

The app is not directed to children under 13, and we do not knowingly collect their data.

Contact

Questions or requests: use You › Support › Send feedback.