Privacy Policy

1. Introduction

Celestryll ("we," "us," or "our") is committed to protecting the privacy of every person who uses our mobile and web applications. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have regarding your information.

This policy applies to all applications published under the Celestryll brand, including but not limited to Somnaural, Pemdas, and Badly Defined, as distributed through the Google Play Store, Apple App Store, Amazon Appstore, and any future distribution channels or web versions.

By downloading, installing, or using any Celestryll application, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the application.

2. Information We Collect

2.1 Information You Provide Directly

We may collect information you provide when you:

• Contact us via email or our support form (name, email address, message content)
• Submit a bug report or feature request
• Respond to any optional in-app feedback prompts

2.2 Information Collected Automatically

Our apps are designed to work primarily offline and collect minimal data automatically. Where applicable, we or our third-party service providers may collect:

• Device information: Device model, operating system version, unique device identifiers (where required for crash reporting)
• Crash reports and diagnostics: Stack traces, app version, and device state at time of crash, used solely for debugging purposes
• Usage analytics (aggregated and anonymised): Screen views, feature interactions, session duration — never linked to personally identifiable information
• App store purchase information: Transaction IDs for in-app purchases, processed entirely by the respective app store (Google Play, Apple, Amazon). We do not receive payment card details.

2.3 Information We Do NOT Collect

Unless explicitly stated in an individual app's supplemental notice, we do not collect:

• Your real name, address, or phone number through the app
• Precise or approximate GPS location
• Contacts, photos, camera, or microphone content (except where a specific app feature explicitly requires it and requests your permission)
• Browsing history or data from other apps on your device
• Biometric data
• Health or fitness information

3. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and improve our apps: Diagnosing bugs, improving performance, and developing new features based on aggregated usage patterns
• To respond to support requests: Replying to emails and contact form submissions
• To process transactions: Validating in-app purchases through the respective app store platform
• To comply with legal obligations: Meeting requirements imposed by applicable law, court orders, or government regulations
• To protect safety and prevent fraud: Detecting and preventing abuse, fraud, or security incidents

We do not use your information for targeted advertising. We do not build advertising profiles. We do not sell, rent, or lease your personal information to any third party.

4. How We Share Your Information

We do not sell or trade your personal information. We may share limited information with:

• Service providers: Third-party vendors who assist us in operating our apps (e.g., crash reporting services such as Firebase Crashlytics or Sentry). These providers are contractually prohibited from using your data for any purpose other than providing services to us.
• App store platforms: Google, Apple, and Amazon receive data necessary to facilitate app distribution and in-app purchases, subject to their own privacy policies.
• Legal requirements: If required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred. We will notify you via prominent notice within the app or on our website before any such transfer occurs.

5. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

• Support communications: Retained for up to 2 years from the date of the last correspondence
• Crash and diagnostic data: Retained for up to 90 days
• Anonymised analytics: May be retained indefinitely in aggregated, non-identifiable form
• App data stored on-device: Retained on your device until you delete the app or clear app data; we do not control this data

You may request deletion of your personal data at any time by contacting us at appdev@celestryll.com. We will process deletion requests within 30 days.

6. Your Rights and Choices

6.1 All Users

Regardless of your location, you have the right to:

• Request a copy of the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of non-essential data collection by not using features that require it
• Withdraw consent at any time where processing is based on consent

6.2 California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information we have collected (subject to certain exceptions)
• Opt out of the sale or sharing of personal information — we do not sell personal information
• Non-discrimination for exercising any CCPA rights
• Correct inaccurate personal information
• Limit the use and disclosure of sensitive personal information

To submit a California privacy request, email appdev@celestryll.com with "CCPA Request" in the subject line.

6.3 European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) including:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure / "right to be forgotten" (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right not to be subject to automated decision-making (Article 22)

Our lawful basis for processing is legitimate interests (app improvement, security) and contract performance (app functionality). Where we rely on consent, you may withdraw it at any time. To exercise GDPR rights, contact appdev@celestryll.com. You also have the right to lodge a complaint with your local supervisory authority.

7. Children's Privacy (COPPA)

Our applications are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at appdev@celestryll.com and we will promptly delete such information.

For apps rated for general audiences or that may be used by children (e.g., educational apps), we apply additional caution:

• We do not display behavioural advertising in such apps
• We do not collect precise geolocation data
• We do not include social features that allow children to communicate with strangers
• We do not share children's information with third parties except as required for app functionality

Apps directed at users under 13 are developed in accordance with the Children's Online Privacy Protection Act (COPPA) and comparable regulations. Each app's individual store listing specifies the minimum age rating.

8. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2 or higher)
• Encrypted storage for any sensitive data retained server-side
• Access controls limiting who can access personal information
• Regular review of our data handling practices

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

9. Third-Party Services

Our apps may integrate with the following types of third-party services:

• Analytics: Aggregated, anonymised usage data (e.g., Firebase Analytics). No personally identifiable information is sent.
• Crash reporting: Diagnostic crash data to identify and fix bugs (e.g., Firebase Crashlytics).
• App store platforms: Google Play Services, Apple StoreKit, Amazon In-App Purchasing for purchase validation.
• Advertising (if applicable): If a specific app version includes ads, the ad network's privacy policy also applies. We will disclose this prominently in the app store listing.

These third parties have their own privacy policies. We encourage you to review them. Links to relevant policies are included in the app store listings where applicable.

10. App Store Specific Disclosures

10.1 Google Play

Our apps comply with Google Play's Data Safety requirements. Data type disclosures are available on each app's Play Store listing page. We respond to Google Play data deletion requests directed to appdev@celestryll.com.

10.2 Apple App Store

Our apps comply with Apple's App Privacy requirements. Privacy nutrition labels are available on each app's App Store product page. We adhere to Apple's guidelines regarding data collection and user consent, including App Tracking Transparency (ATT) framework requirements.

10.3 Amazon Appstore

Our apps comply with Amazon's developer policies and content rating requirements. Data collection practices are disclosed in the app description. Contact appdev@celestryll.com for any data requests related to Amazon Appstore installations.

11. International Data Transfers

Celestryll is based in the United States (Phoenix Metro Area, Arizona). If you access our apps from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our apps, you consent to this transfer.

For users in the EEA or UK, we ensure appropriate safeguards are in place for any international transfers of personal data, in accordance with GDPR Chapter V requirements.

12. Permissions

Our apps request only the device permissions necessary to provide their core functionality. A summary of permissions and their purpose:

• INTERNET: Required only for apps that fetch remote content or analytics. Not required for fully offline apps.
• FOREGROUND_SERVICE / WAKE_LOCK: Used by Somnaural to continue audio playback when the screen is off or the app is backgrounded.
• RECEIVE_BOOT_COMPLETED: Used to restore active timers after a device restart, where applicable.
• VIBRATE: Used for optional haptic feedback in game apps.

No app in our catalogue requests access to your contacts, location, camera, microphone, or external storage unless a specific feature explicitly requires it, in which case permission will be requested at the point of use and can be revoked at any time via device Settings.

13. Links to Third-Party Sites

Our apps and website may contain links to external websites or services not operated by Celestryll. We have no control over the content or privacy practices of those sites and are not responsible for their privacy policies. We encourage you to review the privacy policy of any third-party site you visit.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice within the affected app(s) for at least 30 days
• Where required by law, obtain renewed consent

Your continued use of our apps after any change to this policy constitutes your acceptance of the updated policy. If you do not agree to the changes, please uninstall the application and contact us to request deletion of any data we may hold.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: appdev@celestryll.com
• Phone: 623-252-5229
• Mailing address: Celestryll, Phoenix Metro Area, Arizona, USA
• Contact form: celestryll.com/contact

We will respond to all privacy-related inquiries within 30 days. For urgent matters related to data breaches or children's privacy, please mark your email "URGENT — Privacy."