Last Updated:June 22, 2026
This privacy policy governs the use of the iOS mobile application Hypnomedia App (the “App”) and the website https://www.hypnomedia.org(the “Site”), created by Vaidas Gaurilcikas (“we,” “us,” or “our”). We act as the Data Controller under the UK Data Protection Act 2018 and the UK GDPR.
1. Information We Collect and How We Use It
We collect information you explicitly provide to us, as well as technical data collected automatically via our third-party infrastructure for application performance, behavioral analytics, and targeted advertising.
A. Information You Provide Dynamically
- Account Data: If you create an account, we collect your login credentials (such as your email address, name, or password). We use this purely to authenticate you and manage your account securely.
- User-Generated Content:Any data you intentionally upload, save, or input within the App or Site to utilize its features.
- Comments and Media:When visitors leave comments on the site we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to aid spam detection. An anonymized string (hash) from your email may be provided to the Gravatar service to verify usage. If you upload images, avoid embedding location data (EXIF GPS), as visitors can download and extract it.
B. Automatically Collected Data & Tracking Identifiers
To understand user interaction, personalize your experience, and deliver relevant promotions, Hypnomedia App integrates Google Firebaseand tracking SDKs. These tools automatically collect:
- Device Identifiers:The iOS Identifier for Advertisers (IDFA), Identifier for Vendors (IDFV), or unique advertising tokens.
- Analytics & Behavioral Metrics: In-app navigation paths, screen interactions, features used, session durations, and event conversions (such as completing an exercise or completing a purchase).
- Technical Log Data: IP addresses (truncated for geographic optimization), device models, mobile carrier names, iOS versions, and crash stack traces via Firebase Crashlytics.
- Cookies: If you interact with our Site, temporary cookies monitor your login status and display preferences (ranging from 1 day to 1 year duration).
2. Our Lawful Bases for Processing Data
Under the UK GDPR, we must have a valid legal ground to process your data:
| Data Category | Purpose | Lawful Basis (UK GDPR) |
| Account & Profile Data | To provide app services, save your data, and handle authentication. | Performance of a Contract(Necessary to deliver the requested service). |
| Crashlytics & Performance Logs | To detect bugs, maintain infrastructure stability, and secure the application. | Legitimate Interests(Ensuring a secure, functioning app environment). |
| Usage Analytics | To evaluate user behavior trends and optimize feature placement. | Consent(Obtained through opt-in choices within the application). |
| Targeted Advertising & Ad Tracking | To display tailored promotions or attribute ad campaign installations using the IDFA. | Explicit Consent(Requested exclusively via the native iOS App Tracking Transparency prompt). |
3. Third-Party Data Sharing & Network Transfers
We do not sell your personal data. However, we transmit data to technical processors to fulfill performance analytics and ad delivery:
- Google Firebase (Analytics & Infrastructure):Processes user interaction data and account credentials on our behalf to improve UI flow and maintain security.
- Advertising Partners: If authorized by you, these platforms use your device’s IDFA to serve personalized advertising campaigns and track successful app installs.
- Embedded Third-Party Content:Articles or features on our platform may include embedded media. These third parties behave as if you visited their own sites, collecting data via cookies or tracking integrations if you hold an account with them.
UK-US Data Transfers:Automated tracking and performance data may be stored on servers outside the UK (including the United States). Our processors utilize Standard Contractual Clauses (SCCs) and comply with the UK Extension to the EU-US Data Privacy Framework to safeguard your digital footprint across international borders.
4. Data Retention
- Account Data:Retained while your account remains active. Upon deletion requests, active records are scrubbed within [e.g., 30 days].
- Comments and Metadata:Retained indefinitely on our Site to recognize and approve follow-up comments automatically.
- Analytics & Tracking Profiles:Anonymized or automatically purged from Firebase and advertising logs within [e.g., 14 months]from collection.
5. Your Rights and How to Control Your Privacy
You hold complete authority over how your activity is logged under UK law:
- Revoking Tracking Consent:You can modify your choice regarding advertising and tracking at any time on your Apple device. Navigate to Settings > Privacy & Security > Tracking to toggle permissions off for Hypnomedia App.
- Right of Access & Portability:You can request a clear copy of all data we retain on you.
- Right to Deletion:You can demand the permanent extraction of your user profile and associated tracking metrics.
To execute any data control rights, contact our privacy response team at: [Insert Support Email Address].
6. Children’s Privacy
Hypnomedia App is not structured to attract or collect the information of children under the age of 13 [or 16]. If we discover that tracking tokens or identifiers of a minor have been collected inadvertently without verifiable consent, we will secure and purge them immediately.
7. Regulatory Enforcement
If you believe our data collection or advertising tracking workflows breach UK data protection regulations, you can lodge a grievance directly with the supervisory body:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 / www.ico.org.uk
Last Updated:June 22, 2026
This privacy policy governs the use of the iOS mobile application [Insert App Name] (the “App”), created by [Insert Company/Developer Name] (“we,” “us,” or “our”). We act as the Data Controller under the UK Data Protection Act 2018 and the UK GDPR.
1. Information We Collect and How We Use It
We collect two types of information: information you explicitly provide to us, and technical data collected automatically via our third-party infrastructure.
A. Information You Provide Dynamically
- Account Data: If you create an account, we collect your [e.g., email address, name, password]. We use this purely to authenticate you and manage your account securely.
- User-Generated Content:Any data you intentionally upload, save, or input within the App to utilize its features.
B. Automatically Collected Data (Via Firebase)
To monitor app performance, fix crashes, and understand user engagement, this App integrates Google Firebase. Firebase may automatically collect:
- Unique device identifiers (e.g., iOS Identifier for Advertisers (IDFA) or Vendor ID).
- IP addresses (truncated for geolocation mapping).
- App usage statistics, session durations, and in-app navigation paths.
- Crash logs and device state information (e.g., device model, iOS version).
2. Our Lawful Bases for Processing Data
Under the UK GDPR, we only process your data when we have a valid legal ground to do so:
| Data Category | Purpose | Lawful Basis (UK GDPR) |
| Account & Profile Data | To provide app services, save your data, and handle authentication. | Performance of a Contract(Necessary to make the app function for you). |
| Crashlytics & Performance Logs | To detect bugs, fix crashes, and maintain infrastructure stability. | Legitimate Interests(Ensuring a secure, functioning app environment). |
| Analytics & Usage Tracking | To analyze user behavior and optimize app features. | Consent(Requested via the iOS App Tracking Transparency prompt or in-app toggle). |
3. Third-Party Data Processors (Firebase/Google)
We do not sell your personal data. However, we do transfer technical data to Google Firebaseto process it on our behalf. Google acts as our data processor. Depending on the specific Firebase tools used, data is utilized as follows:
- Firebase Authentication:Securely stores your email and password credentials.
- Firebase Crashlytics:Collects anonymized stack traces to help us diagnose app crashes.
- Google Analytics for Firebase:Aggregates user behavioral events to help us improve the interface.
UK-US Data Transfers:Firebase data may be transferred to and stored on servers located outside the UK (including the United States). Google relies on standard contractual clauses (SCCs) and complies with the UK Extension to the EU-US Data Privacy Framework to ensure your data receives an equivalent level of protection as it does under UK law.
4. Data Retention
We only hold onto your personal data for as long as necessary:
- Account Data:Retained for as long as your account remains active. If you delete your account, this data is scrubbed from our active databases within [e.g., 30 days].
- Firebase Analytics & Crash Data:Automatically retained by Firebase for up to [e.g., 14 months]before being automatically purged or anonymized.
5. Your Rights Under UK Law
Because you are based in the UK, you have robust rights regarding your personal data. You can exercise these at any time by contacting us:
- Right of Access: You can request a copy of all data we hold on you.
- Right to Eradication (Deletion):You can request that we delete your account and all associated Firebase data.
- Right to Withdraw Consent: If you allowed analytics tracking via the iOS App Tracking Transparency (ATT) prompt, you can turn it off at any time via your iOS device’s native settings (Settings > Privacy & Security > Tracking).
To make a data request, please contact our support team at: [Insert Support Email Address].
6. Children’s Privacy
Our App is not intended for children under the age of 13 [or 16, depending on your app’s true target]. We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data via Firebase, we will delete it immediately.
7. Regulatory Enforcement
If you feel we have not handled your data correctly, you have the right to lodge a formal complaint with the UK’s data protection authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113 / www.ico.org.uk
Who we are
Suggested text: Our website address is: https://www.hypnomedia.org.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.