CIBRUSTUDIO • APPS
01 / APPLICATION SUITE · DATA GOVERNANCE

Privacy Policy. Respect for your autonomy.

Governed by Cibru Interactive (cibru.in) • Lead Developer: Krishna Moni Borah • Release: v1.0.0

Core Privacy & Data Invariants
Your location never leaves your device — calculated locally in memory using SunCalc.
Zero account registration required for guest browsing.
Complete user data deletion mechanisms: In-app and online web portal.
Complies fully with Google Play Developer Policies and Data Safety standards.
Privacy Policy — TorahTone ← Back to Legal Hub # Privacy Policy Last updated: August 2026 TorahTone (“we”, “our”, or “the app”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights and choices regarding your personal data when using TorahTone. ## 1. Information We Collect ### a) Account Information When you sign in using Google Sign-In, we receive your name, email address, profile picture URL, and unique Firebase Authentication user ID. If you use TorahTone as a guest, no personal account information is collected. ### b) Location Data > **Your location never leaves your device.** If you enable the Shabbat Candle Lighting reminder feature, TorahTone requests approximate (coarse) location permission (`ACCESS_COARSE_LOCATION`) to calculate local sunset times entirely on-device using the open-source SunCalc algorithm. This location data is processed strictly in memory on your phone, is never uploaded to our servers, and is never shared with third parties. ### c) Usage Analytics & Performance We use Google Firebase Analytics and Crashlytics to collect aggregated, pseudonymized usage and diagnostics data, including: - App feature interactions (e.g., audio playback, quote preferences, notification toggles) - App performance and stability metrics (load times, error logs, crash traces) - General device specifications (OS version, device model, screen resolution, locale) This information is used strictly to diagnose bugs, improve app stability, and optimize user experience. ### d) Subscriptions & Purchases When you purchase a TorahTone Premium subscription, all payment card information is securely collected and processed directly by Google Play Store Billing. We receive and store purchase tokens, product IDs, and subscription validity status via RevenueCat to activate and maintain your Premium features. We do not have access to or store your credit card or financial account numbers. ### e) Advertising & Device Identifiers For free-tier users, TorahTone integrates Google Mobile Ads (AdMob) to display advertisements. AdMob may automatically collect and process: - Device identifiers (such as Google Advertising ID / AAID) - Ad interaction data (ad impressions, clicks, views) - General device and network information for ad fraud detection, frequency capping, and ad delivery You can manage or reset your Advertising ID and opt out of personalized ads at any time in your Android device settings under **Settings → Google → Ads**. ## 2. How We Use Your Information - **Authentication & Profile:** To sign you in, maintain your session, and manage your account across devices. - **Subscription Verification:** To grant and manage Premium feature access via Google Play and RevenueCat. - **Notifications:** To deliver daily inspirational quote notifications and Shabbat reminders at your preferred local time. - **Astronomical Calculations:** To calculate Shabbat candle-lighting times locally on your device based on approximate coordinates. - **Ad Delivery:** To serve non-intrusive advertisements to users on the free tier via Google AdMob. - **App Performance & Security:** To detect crashes, improve responsiveness, ensure network security, and prevent fraud. ## 3. Third-Party Services & Data Sharing We do **not** sell, trade, or rent your personal information. We share data only with trusted third-party service providers essential for app functionality: - **Google Firebase:** User authentication, cloud database, cloud messaging (push notifications), performance monitoring, and analytics. - **Google Play Store Billing & RevenueCat:** Subscription verification, receipt validation, and in-app purchase fulfillment. - **Google AdMob (Google Mobile Ads):** Serving in-app advertisements and ad measurement for free-tier users. ## 4. Data Storage, Security & Retention Your data is stored and transferred using industry-standard security safeguards. All network communications are encrypted in transit via HTTPS / TLS 1.2+. Backend data is stored securely in Google Firebase Cloud infrastructure with role-based security rules and encryption at rest. User preferences and local quote history are stored locally on your device. Account data is retained as long as your account remains active. ## 5. Your Rights & Choices You have full control over your personal data: - **Access & Review:** You can view your account information and preferences within the app settings at any time. - **Account & Data Deletion:** You can delete your account and all associated personal data instantly in-app or via our web deletion portal. - **Notification Controls:** You can enable, disable, or adjust notification times under **Settings → Daily Wisdom Reminder**. - **Location Permissions:** You can grant or revoke location permissions at any time via your device’s application settings. - **Ad Personalization:** You can opt out of personalized ads or reset your advertising identifier in your Android device settings. ## 6. Children’s Privacy TorahTone is not directed at children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect or solicit personal information from children. If we become aware that personal information has been collected from a child without verified parental consent, we will promptly delete that data from our servers. ## 7. Google Play Data Safety Compliance TorahTone complies fully with the Google Play Developer Program Policies and Data Safety requirements: - **Data Encryption:** All data is encrypted in transit using secure HTTPS/TLS 1.2+ protocols. Firebase databases are encrypted at rest. - **Location Privacy:** Approximate location is processed exclusively on-device for candle-lighting calculation and is never transmitted off-device or stored remotely. - **Data Types Collected:** Name, email address, user identifier (for Google Sign-In), purchase tokens (for subscriptions), device/advertising identifiers (for AdMob and push notifications), and anonymous analytics events. - **Official Listing:** TorahTone on Google Play ## 8. Account & Data Deletion Policy In compliance with Google Play User Data policies, TorahTone provides both in-app and web-based mechanisms for permanent account and data deletion: ### Method 1: In-App Deletion 1. Open the TorahTone app on your device. 2. Go to **Settings** → **Account**. 3. Tap **“Delete Account”** and confirm. Your account, authentication profile, and cloud records will be deleted immediately. ### Method 2: Web Deletion Request Portal You may request account and data deletion directly from any web browser without needing the app installed: **→ Open TorahTone Web Account Deletion Portal** ### Method 3: Email Request You may also submit a deletion request via email to support@cibru.in with the subject line *“Account Deletion Request”*. All personal data, Firestore documents, and authentication records will be permanently purged within 30 days of verification. ## 9. International Privacy Rights (GDPR & CCPA/CPRA) For users residing in the European Economic Area (EEA), the United Kingdom, or California: - **Legal Basis for Processing:** Contractual necessity (provision of app services and subscriptions), legitimate interests (app security, crash diagnostics, analytics), and consent (device permissions such as coarse location and notifications). - **Right of Access & Portability (GDPR Art. 20):** You have the right to receive a machine-readable export of your personal data by emailing our support team. - **Right to Erasure & Rectification:** You may request correction or deletion of your personal data at any time. - **International Transfers:** Data is processed and stored on Google Firebase servers in the United States subject to standard contractual clauses and robust data processing agreements. ## 10. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect app updates, new features, or evolving legal requirements. Any modifications will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically. ## 11. Contact Us If you have any questions, concerns, or privacy requests regarding this Privacy Policy or our data practices, please contact us at: **Email:** support@cibru.in Legal Hub · **Privacy Policy** · Terms of Service · Refund Policy · Account Deletion