1. Data We Collect and Why
The following data is collected automatically to improve the Service and serve ads in the free version. None of it directly identifies you.
| Tool | Data | Purpose |
|---|---|---|
| PostHog (app analytics) | Anonymous events (sound playback, purchases, etc.), device model, OS version, app version, anonymous identifier | Usage analysis and product improvement |
| Microsoft Clarity (usability) | Screen interaction recordings (inputs are masked on-device before transmission), device info | Improving screen usability |
| Sentry (error reporting) | Crash logs, device/OS info (personal data masked) | Diagnosing errors and improving stability |
| Google AdMob (advertising) | Advertising identifier (IDFA/AAID), IP address, ad interactions, diagnostics | Serving ads in the free version |
2. Payments
Premium one-time purchases are processed directly by Apple App Store or Google Play. We never receive your payment details (such as card numbers); we only process store receipt data to verify your purchase.
3. Data Stored on Your Device and Website Cookies
Saved sound mixes, settings (sleep timer, language), and the premium ownership cache are stored only on your device and are never sent to our servers. They are deleted when you delete the app.
Our website (noisly.daylab.dev) uses Google Analytics and Microsoft Clarity cookies to analyze visits. These analytics cookies are set only if you accept them in the consent banner shown on your first visit; if you decline, they are not set. You can withdraw consent at any time by clearing your browser cookies.
| Cookie | Provider | Purpose | Retention |
|---|---|---|---|
| _ga | Google Analytics | Distinguish visitors | 2 years |
| _ga_<measurement ID> | Google Analytics | Persist session state | 2 years |
| _clck | Microsoft Clarity | User ID and settings | 1 year |
| _clsk | Microsoft Clarity | Session linking | 1 day |
| CLID | Microsoft Clarity | User identification | 1 year |
| MUID | Microsoft Clarity | Browser identifier | 1 year |
| ANONCHK / MR / SM | Microsoft Clarity | Ad flag and domain sync | 10 min–7 days |
4. Children
We do not knowingly collect personal data from children under 14. If we learn that such data has been collected, we will delete it without delay.
5. Retention Periods
| Data | Retention |
|---|---|
| PostHog anonymous events | Up to 1 year from collection |
| Clarity session recordings | 30 days (aggregated data: 13 months) |
| Sentry error logs | 90 days |
| AdMob data | Per Google Privacy Policy |
| Web Google Analytics | Cookies 2 years / data 14 months |
| On-device data | Until you delete the app (device only) |
6. Deletion
Data past its retention period is automatically deleted by each processor using methods that prevent recovery. We do not keep personal data on our own servers.
7. Sharing
We do not sell or share personal data with third parties for their own purposes.
8. Processors and International Transfers
We use the processors below, all located in the United States, so data is transferred internationally via SDK network transmission (TLS-encrypted).
| Processor | Country | Task | Data Transferred | Retention |
|---|---|---|---|---|
| PostHog, Inc. | USA | App usage analytics | Anonymous events, device info, anonymous identifier | Up to 1 year |
| Microsoft Corporation | USA | Usability analysis (app & web session recordings) | Interaction recordings (inputs masked), device info | 30 days / aggregates 13 months |
| Functional Software, Inc. (Sentry) | USA | Error and crash reporting | Crash logs, device/OS info | 90 days |
| Google LLC | USA | Advertising (AdMob) | Advertising ID, IP, ad interactions, diagnostics | Per Google policy |
| Google LLC | USA | Website analytics (Google Analytics) | Cookie identifiers, truncated IP, page views | Cookies 2 years / data 14 months |
9. Personalized Ads and Opting Out
The Google AdMob SDK may collect behavioral data (ad views, clicks) based on your advertising identifier to serve ads in the free version. You can opt out at any time and continue using the Service with non-personalized ads:
- iOS: Settings → Privacy & Security → Tracking → turn off Allow Tracking for Noisly
- Android: Settings → Google → All services → Ads → Delete advertising ID
- In the EU/EEA, Google’s consent platform (UMP) lets you choose whether to allow ad data processing.
10. Your Rights
You may request access, correction, deletion, restriction of processing, or withdrawal of consent at any time by emailing contact@daylab.dev. We will respond without undue delay. Where collected data is anonymous and cannot be linked to you, we will explain that limitation.
11. Security
- Data minimization — no accounts, names, or contact details collected
- TLS encryption for all data in transit
- Client-side input masking (Clarity) and personal data masking (Sentry)
- Least-privilege access to processor dashboards
12. Automated Decision-Making
We do not make automated decisions that produce legal or similarly significant effects on you.
13. Privacy Officer
- Name: Dasong Sim
- Title: CEO
- Organization: DAYLAB
- Contact: contact@daylab.dev / +82-505-007-7703
14. Dispute Resolution (Korea)
You may contact the following Korean authorities regarding privacy concerns:
- Personal Information Protection Commission (PIPC): privacy.go.kr / 1833-6972
- KISA Privacy Infringement Report Center: privacy.kisa.or.kr / 118
- Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
- Supreme Prosecutors’ Office Cyber Investigation: spo.go.kr / 1301
- National Police Agency Cyber Bureau: ecrm.police.go.kr / 182
15. Notice for International Users (GDPR / APPI)
EU/EEA users: our legal bases are consent (advertising identifier and website analytics cookies) and legitimate interests (app usability analytics and error reporting). You have the rights of access, rectification, erasure, restriction, portability, objection, and consent withdrawal (withdrawal does not affect prior processing). You may lodge a complaint with your local supervisory authority. Data controller: DAYLAB, Seoul, Republic of Korea — contact@daylab.dev.
Japan users: personally referable information (such as advertising identifiers) is transferred to processors located in the United States (see Section 8). Inquiries: contact@daylab.dev.
16. Changes to This Policy
We will announce changes on noisly.daylab.dev at least 7 days before they take effect. Material changes to what we collect or why will be additionally notified in the app.