Privacy Policy

1. Who we are

NeuSync is developed and operated by Malhar Bakshi, an individual developer based in Mumbai, India.

For anything relating to this policy, your data, or your rights, write to neusync.app@gmail.com. We will respond within 30 days.

2. The short version

We collect what we need to run and improve NeuSync, and nothing beyond it.

• We do not sell your personal data.
• We do not share your data for advertising. NeuSync contains no advertising and no advertising trackers.
• We do not use your AI Studio inputs to train AI models.
• You can delete your account from inside the app. We delete your data rather than deactivating it, and Section 10 lists what is kept and why.

The rest of this policy explains what we hold, who processes it on our behalf, and what happens when you delete your account.

3. What we collect

3.1 Information you give us

Account information. When you create an account, you sign in with Apple or with Google. We receive your email address and, where the provider supplies it, your name. We never see or store your Apple or Google password. If you use Sign in with Apple and choose to hide your email, we receive Apple's private relay address rather than your real one.

You can listen to tracks without an account. An account is needed to create and save mixes, to keep your library and programme progress across devices, and to use AI Studio.

AI Studio inputs. When you use AI Studio, you describe a change you want to make in your own words. You may also describe how you would like your life to feel afterwards, and add anything else you want to share. Section 4 explains what happens to what you write.

Your onboarding answers. During first-time setup you answer a short set of questions, for example the goals you want to work on, how you feel at the moment, your age group, your gender and how you heard about NeuSync. We use your answers to shape what the app suggests to you and to understand, in aggregate, how NeuSync is used.

Messages you send us. If you contact us by email, or through our Contact Support or Request a Feature form, we receive what you send, including your name and email address. We use it to reply to you and to improve NeuSync. These messages are kept separately from your account.

3.2 Information the app records as you use it

We record product-usage events so we can understand how NeuSync is used and improve it: for example, that a track was played, that a screen was opened, that a programme night was completed, or that a generation was requested. Section 5 explains how.

We also use some of this activity to decide which notifications to send you, for example a reminder if you have not yet played your first session.

We do not record your AI Studio input text in our analytics.

3.3 Information we receive about purchases

When you buy a subscription or a credit pack, the transaction is handled by Apple. We never receive or store your payment card, bank details or billing address. Apple does not give them to us.

What we do receive, through our subscription provider, is the fact of a purchase: which product, when, whether a trial is running, whether it renewed, and whether it lapsed. We use this to unlock premium features and to keep your credit balance correct.

3.4 Technical information

Standard technical data: device model, screen size and operating system version, app version, language, time zone, mobile carrier and connection type (Wi-Fi or mobile data), your IP address and the approximate location worked out from it (such as your city and country, never your precise location), a push notification token if you allow notifications, and error information needed to keep the app working.

3.5 What we do not collect

• We do not collect your precise location.
• We do not access your contacts, photos or calendar, and NeuSync never records audio.
• We do not collect the Advertising Identifier (IDFA), and NeuSync never shows you an App Tracking Transparency prompt because it does not track you.
• We do not collect health data from Apple Health or any other health service.

4. AI Studio

AI Studio lets you describe a change you want and produces a personal audio track built around it. This section explains what happens to what you write.

4.1 How your request is processed

When you submit a request, it is sent to our servers and then:

1. Your text is sent to OpenAI's large language model (LLM), which identifies what kind of request it is and whether a track can be made for it.
2. If a track can be made, your text is sent to OpenAI's LLM again to write a script, shaped by our own knowledge base and rules.
3. The script is sent to ElevenLabs, which turns it into speech. ElevenLabs receives the script, never your original text.
4. The speech is layered over one of our own binaural audio beds and stored on Cloudflare R2.
5. You receive a notification that the track is ready.

Your text and the finished track are stored in your account for as long as your account exists.

4.2 How your inputs are handled

• We do not use your inputs to train AI models.
• OpenAI does not use data sent through its API to train its models. It keeps that data for up to 30 days to detect abuse, then deletes it, unless the law requires it to keep it longer. See OpenAI's API data controls and OpenAI's privacy policy.
• ElevenLabs handles the script under its own terms. See ElevenLabs' privacy policy.
• We do not use your inputs for marketing or profiling.
• We do not share your inputs with anyone other than the providers named above, who receive them only in order to produce your track.
• We do not put your input text into our analytics. Analytics records events such as a generation being requested, whether it became a track (and, if not, the general reason), and the track's title when you play it. It never records what you wrote.

4.3 Where it is processed

OpenAI, ElevenLabs and Cloudflare process this data mainly in the United States. See Section 8.

4.4 Requests AI Studio does not turn into tracks

AI Studio does not produce a track for some kinds of request, such as anything suggesting a crisis or a risk of self-harm, or questions about prescription medication. Instead, you see a message encouraging you to seek appropriate support, for example from someone you trust, a local support service or your doctor.

In these cases your text is still processed by OpenAI's LLM, because that is how the request is recognised, but no script is written and nothing is sent to ElevenLabs.

NeuSync is not a crisis service and cannot respond to an emergency. If you are in immediate danger, contact your local emergency number.

5. Analytics

We use Mixpanel to understand how NeuSync is used, so that we can improve it.

Usage events are recorded against a randomly generated user identifier, not against your name or email address. This kind of data is known as pseudonymous: it does not identify you directly, and we protect it in the same way as the rest of your personal data.

Alongside usage events, Mixpanel also receives your onboarding answers, the status of your subscription and details of your purchases, so we can understand which parts of NeuSync people value.

We look at analytics in aggregate: how many people complete onboarding, which features are used, and where people get stuck. We do not use it for advertising, and we do not sell or rent it.

When you delete your account, we delete your analytics profile and the records that link your user identifier to your account. Past usage events may remain, no longer linked to your account.

6. Who processes your data on our behalf

We use a small number of established providers. Each receives only what it needs, and each may use it only to provide its service to us. Each provider's name links to its own privacy policy.

We do not give your personal data to anyone else, except where we are legally required to or where it is necessary to protect someone's safety.

7. We do not sell your data

We do not sell your personal information, share it for advertising, or use it to target ads. NeuSync has no advertising and no advertising SDKs.

8. International transfers

We operate from India, and most of the providers listed above operate from the United States. Your data is therefore processed in countries other than the one you live in, including the United States. Our providers use recognised safeguards for these transfers, such as standard contractual clauses.

9. How long we keep things

10. Deleting your account

You can delete your account from inside the app: Profile → Delete Account.

What happens immediately. Your account's login is deleted and you lose access straight away. This cannot be undone, and we cannot restore an account once deleted. Any unused AI Studio credits are lost.

What happens within a few days. An automated process removes:

• everything stored under your account, including playlists, saved mixes, programme progress, onboarding answers, AI Studio inputs and scripts, credit records and usage records;
• every audio track AI Studio generated for you;
• your record with our notification provider;
• your analytics profile;
• the internal records that link your user identifier to your account.

What remains, and why.

• Analytics events, no longer linked to your account (Section 5).
• Purchase and transaction records, which we keep for tax and accounting purposes, and which Apple and our subscription provider hold independently of us.
• A minimal record of the deletion itself (your account identifier, sign-in provider and dates), kept as proof the deletion was carried out.
• Messages you sent us, by email or through our forms, which are kept separately from your account. Write to us if you would like them deleted.
• Server logs, which are deleted automatically after a limited period.

Data cached on your own device stays there until you uninstall the app.

Deleting your account does not cancel your subscription. Apple handles subscription billing, and you must cancel through your Apple ID settings. Before you confirm deletion, the app reminds you of this and, if you have an active subscription, gives you a link to manage it in the App Store. If you delete your account while a subscription is active, you will continue to be charged until you cancel it with Apple.

11. Your rights

You can ask us to:

• tell you what we hold about you;
• correct anything that is wrong;
• delete your account and data (the in-app route above is the fastest, and you can also write to us);
• withdraw consent to notifications at any time, in your device settings;
• object to or restrict how we process your data;
• receive a copy of your data in a portable form.

Write to neusync.app@gmail.com. We will respond within 30 days.

12. Children

NeuSync is not directed at children under 13, and we do not knowingly collect personal data from them. If you are under 18, use NeuSync only with the involvement of a parent or guardian, as our Terms of Use describe. If you believe a child under 13 has provided us with personal data, write to us and we will delete it.

Some NeuSync audio is designed to be played while falling asleep and is not suitable for use around infants or young children.

13. Security

Data travels between the app and our servers over encrypted connections, and the services that store it, Google Firebase, Google Forms and Cloudflare, encrypt it when stored. Database access rules allow each account to read only its own data, and the keys for our AI providers are kept on our servers, never in the app.

No system is completely secure. If a breach affects your personal data, we will notify you as the law requires.

14. Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. Where a change is significant, we will tell you in the app before it takes effect.

15. Contact

Malhar Bakshi
Mumbai, Maharashtra, India
neusync.app@gmail.com