Governed by Cibru Interactive (cibru.in) • Lead Developer: Krishna Moni Borah • Release: v2.0
Core Privacy & Data Invariants
No microphone, camera, contacts, or health sensors accessed.
Audio streams are delivered via secure Cloudflare R2 infrastructure with TLS 1.3.
In-app account and data deletion available under Profile > Delete Account.
Wellness disclaimer: General motivational self-help, not a medical device.
Privacy Policy | Mythical Affirmation
# Privacy Policy
Effective and last updated: September 1, 2026
This policy explains how **Mythical Affirmation** (the “App”), handles information. “We,” “us,” and “our” mean the developer identified in the App’s Google Play listing. Contact: support@cibru.in.
## 1. Information we handle
| Category | Examples and purposes |
| --- | --- |
| Account information | Email address, display name, user ID, sign-in provider, and authentication status, used to create, secure, and manage your account. Authentication providers handle passwords; we do not receive your Google password. |
| App activity and preferences | Favorites, voice choice, playback checkpoints and history, streak and daily-play records, reminder preferences, offline-download records, and rewarded-ad unlocks, used to provide and synchronize features. Some preferences and downloads remain only on your device. |
| Purchases | Plan, subscription status and expiry, purchase token, and transaction identifiers, used to verify purchases, provide paid access, prevent fraud, and support refunds. Google Play processes your payment instrument; we do not receive full card or bank details. |
| Device, advertising, and usage data | Device or app identifiers, which may include the Android Advertising ID; IP address; approximate region inferred by providers; app interactions; ad impressions and rewards; and consent choices. Used for rewarded ads, analytics, fraud prevention, security, and service operation. |
| Diagnostics | Crash reports, performance information, device model, operating-system and App version, and technical logs, used to diagnose problems and improve reliability. Crash reporting is disabled by default in release builds until enabled with consent. |
| Notifications | A Firebase Cloud Messaging token and notification preferences, used to deliver notifications you enable. Local daily reminders may be stored and scheduled on your device. |
| Security information | Play Integrity results, session and authentication tokens, and anti-abuse events, used to protect accounts, licensed audio, purchases, and ad rewards. |
| Support communications | Information you provide when contacting support or submitting a privacy request. |
The App does not request microphone, camera, contacts, precise location, or Health Connect access and does not record audio. The App is not designed to collect health measurements, diagnoses, or medical records.
## 2. How we use information
- Provide accounts, playback, favorites, streaks, downloads, reminders, subscriptions, advertising rewards, and support.
- Verify purchases and App integrity and prevent fraud, misuse, and security incidents.
- Measure performance and feature usage, diagnose crashes, and improve the App.
- Deliver rewarded ads and respect applicable advertising and privacy choices.
- Send service notifications and user-enabled reminders.
- Comply with law, enforce our terms, and protect users and the service.
## 3. Service providers and sharing
We do not sell personal information. We disclose information only to operate the App, follow your direction, or satisfy legal and safety obligations:
- **Google:** Firebase Authentication, Firestore, Analytics, Crashlytics, Cloud Messaging, Google Sign-In, Google Play Billing, Play Integrity, AdMob, and User Messaging Platform.
- **Supabase:** authentication, database, server functions, feature synchronization, subscription verification, and deletion processing.
- **Cloudflare R2 and delivery infrastructure:** audio delivery and associated network logs.
- **Authorities or transaction parties:** when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a merger, financing, or transfer, subject to legally required safeguards and notice.
## 4. Advertising and consent
Free users may choose to watch rewarded advertisements. Google AdMob and advertising partners may process identifiers, IP address, approximate location, App interactions, and ad data to deliver, measure, limit, and protect ads. Where required, the App uses Google’s consent platform before requesting ads. You can change choices through any privacy-options control displayed in the App or consent message, Android advertising controls, or by contacting us.
## 5. Legal bases and controls
Where law requires a legal basis, we rely on performance of our contract, legitimate interests such as security and service improvement, consent for applicable advertising or diagnostics, and legal obligations. You may disable notifications in Android settings, change reminder settings in the App, decline optional consent when offered, and stop using optional features.
## 6. Retention and account deletion
- Account and synchronized feature data is retained while your account is active.
- When you use **Profile → Delete Account**, related feature data is cleared or queued for deletion. Backend deletion is designed to finish within 24 hours. Firebase cleanup may require a recent sign-in; if prompted, sign in again and retry or contact support.
- Local data is removed by the deletion flow where supported and can also be removed by clearing App storage or uninstalling. Routine encrypted backup copies may remain until backup rotation and are then deleted or made inaccessible.
- Limited purchase, fraud-prevention, security, support, or legal records may be retained when required by law or reasonably needed to resolve disputes and prevent abuse.
- Aggregated or irreversibly de-identified information may be retained because it no longer identifies you.
To request deletion without the App, use our account-deletion page. Deleting the App or account does not cancel a Google Play subscription; cancel it separately through Google Play subscriptions.
## 7. Your rights
Depending on your location, you may request access, correction, deletion, restriction, or a copy of personal information; object to certain processing; withdraw consent; or complain to a data-protection authority. Email support@cibru.in. We may verify your identity.
## 8. International processing and security
Providers may process information outside your country using legally recognized transfer safeguards where required. We use measures designed to protect information, including HTTPS/TLS, access controls, protected authentication tokens, restricted database permissions, and encryption for selected local data. No system is completely secure.
## 9. Children
The App is intended for adults and is not directed to anyone under 18. We do not knowingly collect children’s personal information. Contact us if you believe a child has provided information.
## 10. Wellness disclaimer
The App provides general wellness and self-help content. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It is not a substitute for advice from a qualified healthcare professional.
## 11. Changes and contact
We may update this policy for App, legal, or provider changes. We will change the date above and give additional notice where required. Questions and privacy requests: support@cibru.in.
Read this policy together with our Terms of Service and Refund Policy.