Privacy Policy

1. About This Policy

This Privacy Policy describes how Palatone ("we," "us," or "our") collects, uses, and shares information when you use the Palatone web application and any associated services (collectively, the "Service"). By using the Service, you agree to the practices described here.

2. Information We Collect

Usage Data (Collected Automatically)

When you use Palatone, we automatically collect anonymous session information to understand how the product is used:

• Session data — categories selected (e.g., Coffee, Calm), mode used (Taste / Mood / Therapy), session duration, and play/stop events
• Device information — browser type, operating system, and screen size (derived from your user-agent string)
• Page view data — which pages were visited and approximate time of visit
• Referrer URL — the URL you came from, if your browser provides it
• Anonymized IP — we hash your IP address using only the first two octets (e.g., 192.168.x.x) so it cannot identify you individually

Information You Provide

We only collect personal information when you voluntarily provide it:

• Email address — if you join our waitlist or subscribe to updates. This is entirely optional.

Payment Information

If you purchase a subscription, payment is processed by Stripe. Palatone does not store your credit card number, CVV, or full billing details. Stripe's privacy policy governs their data practices: stripe.com/privacy.

3. What We Do NOT Collect

• Health records, medical history, or clinical data of any kind
• Biometric data or physiological measurements
• Precise geolocation (we only use anonymized IP data)
• Audio recordings from your microphone
• Any information from children under 13 (see Section 9)

4. How We Use Your Information

We use the data we collect to:

• Understand which features and sound categories are most useful
• Diagnose bugs and improve performance
• Send product updates to users who opted in via email
• Comply with applicable laws and regulations

We do not use your data for advertising, profiling, or automated decision-making.

5. Analytics Tracking

Palatone uses a first-party analytics system to track pageviews and in-app events (play starts, stops, mode switches). This system runs on Palatone's own servers — we do not embed Google Analytics, Meta Pixel, or other third-party trackers.

We also use a lightweight analytics beacon from Polsia (our infrastructure provider) for aggregate session counting. This beacon receives only an anonymous visitor ID stored in your browser's localStorage (key: polsia_vid).

6. Cookies and Local Storage

Palatone does not use advertising cookies. We use localStorage (not cookies) for the following purposes:

• Anonymous visitor ID (polsia_vid) — a random UUID generated on first visit, used only for aggregate session counting. Contains no personal information.
• Session state — to remember your last selected mode or category within a visit.

You can clear your localStorage at any time via your browser settings.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe — for payment processing. stripe.com/privacy
• Render — our cloud hosting provider. Application data resides on Render's infrastructure. render.com/privacy
• Polsia — our platform infrastructure provider, which hosts our servers and databases.
• Legal authorities — if required by law or to protect the rights and safety of our users.

8. Data Retention and Deletion

Anonymous usage events (play starts, page views) are retained indefinitely for product analytics. These records contain no personally identifiable information.

Email addresses are retained until you request removal. To delete your email from our waitlist or mailing list, email us at privacy@palatone.app and we will remove it within 30 days.

Payment records are retained as required by applicable financial regulations (typically 7 years).

9. Children's Privacy (COPPA)

Palatone is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

10. Your Rights

Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, or delete information we hold about you. To exercise any of these rights, contact us at privacy@palatone.app.

Because most of our usage data is anonymous by design, there is typically no personal record to retrieve or delete beyond an email address if you provided one.

11. Data Security

We use industry-standard security practices: HTTPS for all data in transit, encrypted database connections, and access controls on our servers. No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. Continued use of the Service after changes constitutes acceptance of the updated policy. If you have questions, email us at privacy@palatone.app.

13. Contact

Questions about this policy? Email privacy@palatone.app.