Your privacy

Privacy policy.

Hypercowboy LLC, doing business as Hypercalm, is built around a privacy-minimal model. We collect what the product needs to work, do not sell personal data, and do not build advertising profiles.

Who we are and what this policy covers

Hypercowboy LLC, doing business as Hypercalm ("Hypercalm," "we," "us," or "our"), controls the personal information described in this policy. This policy covers the Hypercalm public website, applications, accounts, subscriptions, support channels, and related services.

Hypercalm is currently intended for a United States consumer launch. If our territorial scope or data practices change, we will update this policy before applying materially different practices to your information.

Information we collect

  • Account and contact information, including your email address, authentication records, and account identifier.
  • Product information, including listening history, mix choices, session settings, saved preferences, and related activity you choose to synchronize.
  • Purchase information, including subscription status, product, billing platform, trial status, renewal, cancellation, and transaction identifiers supplied by Apple, Google, RevenueCat, or our hosted web-billing provider. Hypercalm does not receive your full payment-card number.
  • Deliberately named product-interaction events used to understand onboarding, reliability, and feature use.
  • When acquisition analytics is enabled, app-open, first completed session, subscription-access, session, and SDK diagnostic events, together with installation, device, and anonymous identifiers, internal account identifier after sign-in, device model, screen size, operating system, app version, language, time zone, and Apple's identifier for apps from the same vendor (IDFV). Layers also derives approximate city, region, or country from the connection's IP address and states that it does not retain that IP address.
  • When you enable remote notifications, OneSignal processes your push token, notification subscription status, internal account identifier after sign-in, device and operating-system information, app version, language, time zone, app activity, and notification interactions. Its standard handling may store your IP address and derive approximate location. We disable precise device location sharing.
  • Crash and performance diagnostics configured without screenshots, session replay, or direct account identity by default.
  • Support messages, account details, and attachments you choose to send.
  • Limited website and security data that our hosting providers may process automatically, such as IP address, browser or device type, requested page, and request time.

How we use information

We use personal information to create and secure accounts, operate Hypercalm, synchronize preferences, provide and personalize sessions, manage entitlements, restore purchases, process account requests, provide support, send required service notices, prevent fraud and abuse, diagnose failures, and improve product reliability.

We do not sell personal information, serve third-party advertisements, share audiences with data brokers, or use personal information for cross-application targeted advertising or legally significant profiling.

How we disclose information

We disclose only the categories of information needed for service providers to perform work for Hypercalm. These categories may include account identifiers, contact information, product activity, subscription status, diagnostics, and support content.

  • Infrastructure and authentication providers, including Supabase.
  • Subscription, storefront, and payment providers, including RevenueCat, Apple, Google, and a hosted payment gateway.
  • Product analytics, acquisition measurement, and diagnostic providers, including PostHog, Layers, and Sentry, when enabled and configured as described in this policy.
  • Remote notification delivery through OneSignal, when you enable notifications.
  • Transactional email and support providers, including Resend and our support mailbox provider.
  • Professional advisers, authorities, or other recipients when reasonably necessary to comply with law, protect rights and security, investigate fraud, or complete a merger, financing, acquisition, or sale of assets.

Analytics, cookies, and tracking choices

The Hypercalm app uses deliberately named product events rather than broad touch capture and provides an analytics opt-out in Settings. We do not use session replay, advertising identifiers such as IDFA, contacts, precise device location, microphone, camera, or health data for launch analytics.

When enabled, Layers acquisition analytics helps us understand app discovery, initial use, and subscription access. We do not send your name, email address, detailed listening history, or payment receipts to Layers. The analytics setting also controls this collection. We do not enable clipboard attribution or forwarding to advertising networks.

Turning off analytics in Settings stops future collection and clears events waiting to be sent. It does not erase previously collected events. You can request deletion through the account-deletion page or by contacting support.

The public marketing website currently does not use advertising trackers or non-essential analytics cookies. Hosting and security providers may use strictly necessary technologies to deliver and protect the site. Because Hypercalm does not track your activity over time across unrelated websites for targeted advertising, browser Do Not Track signals do not change our current practices. Where applicable law requires us to recognize another opt-out preference signal, we will do so.

Notification choices

Remote notifications are optional. OneSignal collection begins only after you enable notifications in Hypercalm. You can turn remote notifications off in Hypercalm Settings; this stops future collection and opts the device out of remote delivery. Device notification permissions are also available in your operating-system settings.

We use your listening times and modes to time optional Intelligent Nudges after a missed day. We use OneSignal to deliver these reminders and re-engagement messages. We do not send it your email address, name, detailed listening history, or subscription status. Turning off notifications does not erase previously collected provider records; account deletion includes deletion of the associated OneSignal user record.

Retention

  • Account, synchronized preferences, and listening history: while the account exists.
  • Linked product analytics collected through PostHog: up to 24 months, or removed earlier through a verified deletion request.
  • Layers does not publish a fixed automatic expiry for its product-analytics events. You can request deletion of your account-linked acquisition data through Hypercalm. We send applicable requests to Layers and track them until the provider confirms deletion. Turning analytics off stops new collection but does not by itself erase data already sent.
  • Notification user and subscription records: until removed through account deletion or a verified privacy request. OneSignal generally removes API-sent message records approximately 30 days after delivery.
  • Crash and performance events: up to 90 days.
  • Support correspondence: up to 24 months after a case closes.
  • Security and administrative audit records: only as long as reasonably needed for security, abuse prevention, and legal compliance.
  • Payment, tax, fraud, and deletion-audit records: only as long as required for legal, accounting, security, or dispute purposes.

Your privacy rights and choices

Depending on where you live and applicable law, you may have the right to confirm whether we process your personal information; request access, correction, deletion, or a portable copy; opt out of targeted advertising, sale, or certain profiling; and appeal a decision on a privacy request. Hypercalm does not currently sell personal information or use it for targeted advertising or legally significant profiling.

You may update supported information in the app, opt out of product analytics in Settings, use the public account-deletion page, or email support@hypercalm.net with the subject "Privacy request." We may verify your identity before completing a request. If we deny a request, you may appeal by replying with the subject "Privacy appeal." We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.

Account deletion

You can request deletion from Account settings or the public account-deletion page. A verified deletion request removes account-linked product data and queues deletion with relevant providers within 30 days, except for the minimum records we must retain for tax, payment, fraud, security, dispute resolution, or proof that deletion was honored.

Some providers process deletion manually. Where that applies, we track the request and keep it pending until the provider confirms deletion; sending a request alone is not treated as completion.

Deleting a Hypercalm account does not automatically cancel an Apple or Google subscription. Store billing must be canceled through the applicable subscription-management service. Web-billed renewal will be canceled as part of the verified web-account deletion process before the billing customer record is removed.

Children's privacy

Hypercalm is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it. Users under the age of legal majority where they live may use Hypercalm only with permission from a parent or legal guardian when required by law.

Security and United States processing

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication protections, restricted production access, and provider security settings. No system can guarantee absolute security.

Hypercalm and its providers may process and store information in the United States. If we later offer Hypercalm in a jurisdiction that requires additional cross-border transfer protections, we will put those protections in place before that launch.

Changes to this policy

We may update this policy as Hypercalm, its providers, or applicable law changes. We will post the revised policy with a new effective date. If a change materially affects how we use previously collected personal information, we will provide additional notice or request consent where required before the new practice takes effect.

Contact

Hypercowboy LLC d/b/a Hypercalm is responsible for this policy. Questions, privacy requests, and appeals can be sent to support@hypercalm.net.