What we collect
- Account: email address and authentication identifiers (used to sign you in and associate your subscription).
- Subscription state: tier, status, and renewal date returned by Stripe. We never see or store your card details — Stripe processes payments directly.
- Biometrics (optional): heart rate from a Bluetooth sensor and step cadence, used in your browser only to adapt the soundscape. Raw biometric values are never transmitted to our servers unless you opt in to session reports.
- Coarse location (optional): latitude/longitude rounded to one decimal, used to fetch weather from Open-Meteo. Not stored.
- Session log (optional): mode, duration, and scape name for your listening history when you are signed in.
What we never do
- We do not sell or share personal data with advertisers.
- We do not record audio output, microphone input, or any other on-device sensor.
- We do not train machine-learning models on your biometric data.
Your rights
You may request access, correction, or deletion of any account data at any time. Email privacy@aether.app and we will respond within 30 days. Deleting your account removes your profile, favorites, and session history from our database.
Cookies
We use a single authentication cookie to keep you signed in and local storage for your player preferences (volume, autoplay, last mode). No third-party analytics or advertising cookies.
Subprocessors
Stripe (payments), Supabase/Lovable Cloud (database + auth), Open-Meteo (weather). Each is bound by their respective privacy commitments.