Privacy Policy

1. Data Controller and Contact

The controller responsible for this Mobile App under the GDPR is:

Please use this address for privacy questions or to exercise your data-protection rights.

2. Scope and Separation from the Web App

This policy describes the current local-first version of the QuieTi Mobile App. The app is not connected to a QuieTi account and does not automatically send the app content described below to our servers.

The web app processes different information and uses different services, including Firebase, Stripe and optional calendar integrations. Those services are not part of the current Mobile App and are not described by this policy.

3. Information Processed Locally on Your Device

To provide and continue the app features you choose, QuieTi stores the following information locally in the app storage on your device:

• your onboarding choices, goals and app preferences;
• your sound and tinnitus profile, audio and playback settings, and saved mixes;
• journal content, exercise responses and Companion progress;
• entries you make about tinnitus, wellbeing, stress, sleep, mood, triggers and symptoms;
• local progress, autoplay and reminder settings.

This information may contain personal or health-related information. You choose what to enter. We do not automatically receive or access this locally stored content, and we do not use it for advertising or profiling outside the app.

The storage is necessary to provide the device features you request. Where section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies, access to device storage for these technically necessary functions is based on section 25(2) no. 2 TDDDG. This content is not transferred to a QuieTi server.

4. Retention on Your Device

Your local content remains on your device while the app is installed. To remove QuieTi content stored on your device in this version, remove the app. Device-level system permissions or technical preferences may remain managed separately by iOS.

The local store used for this core content is configured to be excluded from iCloud backups in the current iOS implementation. This release does not offer cloud backup, synchronisation or data recovery. We cannot delete copies you create or manage separately outside QuieTi.

5. Local Reminders and System Permissions

When you turn on reminders, the app first asks for iOS notification permission. It then schedules a daily reminder locally on your device. QuieTi does not register a push token for this purpose or send one to us. You can turn reminders off in the app or in iOS Settings at any time.

The current Mobile App does not request access to your microphone, camera, location, contacts or calendar. It uses audio for playback, not recording.

6. What the Current Mobile App Does Not Do

• It does not create or use a user account or cloud synchronisation.
• It does not use Firebase, in-app analytics or advertising SDKs in the Mobile App.
• It does not sell personal information or conduct cross-app tracking.
• This version does not offer in-app purchases or send purchase data to payment or subscription providers.

Before we activate accounts, cloud synchronisation, purchases or a service such as RevenueCat, we will update this policy and the App Store Connect privacy information before releasing the corresponding app version.

7. Support and External Links

Contact Support only opens your installed email app. We receive your email address, message content and voluntary attachments only when you actually send an email. Please do not include sensitive information unless it is necessary for your request.

We use support correspondence only to answer your request, prevent abuse or meet legal obligations. Depending on the request, the legal basis is Article 6(1)(b) GDPR (handling your request), Article 6(1)(f) GDPR (our legitimate interest in secure and reliable support), or Article 6(1)(c) GDPR. We delete or anonymise support correspondence when it is no longer needed for that purpose unless a statutory retention obligation applies.

When you open an external link, it opens in your browser. The recipient's privacy policy applies to its processing. The app does not pass your journal, profile or exercise content to that site.

8. Recipients, International Transfers and This Webpage

There are no recipients of your local app content because we do not receive that content. Apple independently processes information in connection with the App Store, iOS and your device settings under Apple's own privacy information.

If you email support, our email service provider Google (Gmail) may technically process that email. This may involve processing outside the European Economic Area under Google's Privacy Policy and the transfer mechanisms described there.

This webpage is delivered without analytics, advertising or third-party scripts. When you open it, quieti.app's hosting provider and its technical infrastructure may process connection data such as your IP address, time and requested URL where necessary to deliver, secure and troubleshoot the page. The legal basis is Article 6(1)(f) GDPR. This connection data does not come from the Mobile App.

9. Your Rights

Where we process personal data, the GDPR gives you rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future where consent applies. Because your app content currently remains on your device and is not available to us, we cannot read or delete it for you. To remove QuieTi content stored on your device in this version, remove the app. This version does not offer cloud recovery of that local content.

You also have the right to lodge a complaint with a data-protection supervisory authority, including the competent North Rhine-Westphalia data- protection authority.

10. Providing Information and Automated Decisions

You are not required to enter personal or health-related information. Without optional information, some personalisation features may be less suitable. The Mobile App does not make automated decisions with legal or similarly significant effects about you.

11. Changes to This Policy

We will update this policy before a material change to the processing described here, for example before introducing an account, cloud synchronisation, in-app purchases or new analytics services. The current version is available in the app's Settings and at this URL.