Privacy Policy

Updated September 8, 2026. This policy describes OpenASMR's app and website. Contact privacy@openasmr.ai with questions.

1. Voice and audio

Reference recordings, voice conditioning data and synthesized audio are processed on your device. The script API does not receive voice recordings or generated audio, and we do not use them to train our models. Local files are under your control. Device backups, imported files and any copies you make are governed by your device and backup settings; “on-device” does not mean that no copy can ever exist elsewhere.

2. Account and subscription data

For accounts we store your email, a password hash, subscriber ID, authentication sessions and recovery/security records. We also store your mature-content preference and adult-verification result/time. The entered date of birth is processed to check age but is not retained. Password recovery sends an email through our mail provider. Apple and RevenueCat process purchase history, receipts, subscription identifiers and entitlements. We do not receive your full payment-card information. These records may be associated with your account and are not anonymous.

3. Script requests and service operation

Online generation sends the selected preset, requested length and subscriber identity to our API. Custom scenarios send the text you enter to the script service and its language-model backend. Do not enter sensitive personal information in a scenario. The API keeps a bounded in-memory fallback cache of up to five successful scripts per standard preset in each server process. Cached scripts may be reused during a model-service outage; they are replaced as new scripts arrive or discarded when the process restarts, rather than expiring on a promised fixed schedule. This cache is not written to the account database. Custom scenario prompts and responses are not put in this fallback cache. Saved sessions on your device are separate.

After you allow custom scenarios, the app also copies finished script text and any star rating you give to our analytics database (Supabase), alongside the preset, model, word count, cue count, latency and outcome of that generation and the device's vendor identifier, so sessions from different phones stay separate. The text you typed is not part of that copy, and no voice audio is. Those rows identify a device rather than an account and are used only to judge script quality; without the allowance nothing is sent.

Servers, network providers and download hosts see connection information such as your IP address, request times and requested resources. The service uses authentication, rate-limit records, cached entitlement information and operational metrics to operate securely. Aggregate metrics do not make account-linked records anonymous.

4. Providers and downloads

Apple provides distribution and billing; RevenueCat manages subscriptions. Model setup contacts the download hosts specified by the app's model manifest (including Hugging Face). Hosting and email providers process requests needed to operate the service. Their policies also apply to their services: RevenueCat, Apple, Hugging Face, DeepInfra (the script language model) and Supabase (the script-quality analytics database).

5. Website storage and tracking

The account page keeps its active authenticated session only in page memory; sign out or close the page to clear it. Website scripts and styles are served from our own origin, without third-party font or analytics scripts. OpenASMR does not use advertising identifiers for cross-app advertising, sell personal information, or share it for cross-context behavioral advertising. The marketing page does not load a third-party analytics script.

6. Retention and deletion

Account and authentication data are retained while needed to operate the account. Request deletion through the account portal or contact privacy@openasmr.ai. The pre-release app includes native deletion initiation, but real-provider and device verification are still required before launch. An acknowledgement of a deletion request is not a guarantee that all provider records have already been erased. A recoverable deletion option, where offered, is not the same as permanent deletion; its recovery window is 30 days, after which maintenance purges eligible records. RevenueCat customer deletion is queued asynchronously. If provider cleanup is pending after local account removal, account access should remain revoked rather than presenting that account as active. A minimal subscriber-ID/retry record may remain while provider deletion is retried or requires operator intervention; it is still account-linked data. Existing backups may retain data until their configured retention period expires; legally required purchase records may be retained by Apple or RevenueCat under their policies.

Local voice files and saved sessions must also be removed from your device. Account deletion does not cancel your Apple subscription: manage billing with Apple.

7. Your choices and rights

You may request access, correction, export or deletion of personal data by contacting us. Depending on your location, you may have additional rights, including objection, restriction and complaints to a supervisory authority. We may need to verify identity before responding. Data may be processed in the countries where our service providers operate. We use account data to provide the requested service and security records to prevent abuse; legal obligations may require retention of certain records.

8. Eligibility and changes

The service is intended for adults and is not directed to children. Contact us if a child has supplied personal data so we can investigate and remove it where required. Non-explicit content is the release policy; no age or website toggle unlocks explicit content. We may update this policy and will explain material changes through the service or appropriate notices.