Privacy Policy

Effective date: May 25, 2026

This Privacy Policy explains what personal information Serenarva collects, why we collect it, how we use and protect it, and what rights you have over it. Please read it carefully before using the app.

Who We Are

Serenarva is an independent wellness audio app operated by Ericka Thomas, an individual based in the United States. "Serenarva," "we," "our," and "us" refer to Ericka Thomas as the data controller for this service.

If you have questions or concerns about this policy, please contact us at: privacy@serenarva.com.

What We Collect

Information you provide

• Email address and password — collected when you create an account, managed by Firebase Authentication (Google).
• Display name — optional. You can set or change this at any time in Profile → Edit Profile. If you don't provide one, we use a default derived from your email address.

Information collected automatically as you use the app

The following are stored in Firestore (Google's cloud database) under your user account:

• Listening history — for each audio session you play, we record the session ID, category, modality, start time, and (if you finish) completion time. This lets us show you what you've listened to and power recommendations.
• Favorites — sessions you have marked as a favorite.
• Program progress — which multi-week program you're enrolled in, your current week, and which sessions you've completed.
• Subscription tier — whether your account is Free, Premium, or Pro. We do not store payment card details; billing is handled entirely by the Apple App Store or Google Play Store.

Information stored locally on your device only

The following data never leaves your device and is not accessible to us:

• Notification preferences and audio quality setting — stored in the device's local AsyncStorage.
• Downloaded audio files — audio you save for offline listening is stored in your device's local file system. Metadata (file names, download dates) is kept in a local SQLite database on your device.

How We Use Your Data

• Operate the service — authenticate your account, deliver audio content, track your program progress, and sync your experience across devices.
• Personalize recommendations — use your listening history and favorites to surface sessions relevant to you.
• Send transactional emails — account verification, password reset, and important service notifications. We do not send marketing emails without your consent.
• Fulfill legal obligations — respond to lawful requests from authorities, enforce our Terms of Service, and protect the safety of our users.

How We Share Data

We do not sell, rent, or trade your personal information. We share data only with the following service providers (data processors) who act on our behalf:

• Firebase / Google — provides authentication, cloud database (Firestore), file storage, and hosting. All account data, listening history, favorites, and program progress are stored in Firebase. Google processes this data per their Firebase Privacy and Security documentation.
• MiniMax and Anthropic — used on the admin side only for audio synthesis and script generation. These services process administrative content (audio scripts and production materials). They do not receive any end-user personal data — no email addresses, listening history, or account information is ever sent to them.

Planned additions (not yet active — will be opt-in where possible): Firebase Crashlytics and Analytics (crash and usage data), RevenueCat (subscription management), and a push notification provider. We will update this policy before enabling any of these services.

Your Rights

• Access — you can view your profile information, listening history, favorites, and program progress directly inside the app.
• Deletion — you can permanently delete your account from Profile → Delete Account. This immediately wipes your favorites, listening history, program progress, and user profile from Firestore, and removes your Firebase Auth record. Firebase backups are purged within 30 days.
• Correction — you can update your display name at any time in Profile → Edit Profile.
• Data portability — an in-app data export feature is planned but not yet available. In the meantime, you can request a copy of your data by emailing privacy@serenarva.com. We will respond within 30 days.
• Local data — you can clear all locally downloaded audio files and cache at any time from Profile → Downloads → Clear All.
• Opt-out of marketing — we do not currently send marketing emails. If we do in the future, every email will include an unsubscribe link.

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to know — you can request details about the categories and specific pieces of personal information we collect about you, the sources, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to delete — you can request deletion of your personal information (subject to certain exceptions). The in-app account deletion feature satisfies this right.
• Right to opt out of sale — we do not sell personal information. You do not need to opt out.
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

To submit a verifiable consumer request, email privacy@serenarva.com.

EU and UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases:

• Contract performance — processing your account and subscription data is necessary to provide the service you signed up for.
• Legitimate interests — maintaining listening history and program progress to deliver a personalized experience, and keeping security logs to protect the service.
• Legal obligation — retaining certain records as required by applicable law.

In addition to the rights listed above, you have the right to object to processing based on legitimate interests, the right to restrict processing, and the right to lodge a complaint with your local data protection supervisory authority (for EU residents, this is your national DPA; for UK residents, the Information Commissioner's Office at ico.org.uk).

Your data is stored and processed in the United States (via Firebase / Google). By using Serenarva, you acknowledge this cross-border transfer.

Children Under 13

Serenarva is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If we learn that a child under 13 has created an account, we will promptly delete their account and associated data.

If you are a parent or guardian and believe your child under 13 has signed up for Serenarva, please contact us immediately at privacy@serenarva.com and we will remove the account.

Data Retention

We retain your personal data for as long as your account is active. When you delete your account (Profile → Delete Account), your data is removed from Firestore immediately. Firebase automated backups are purged within 30 days of account deletion.

Locally downloaded audio files and preferences remain on your device until you remove them (Profile → Downloads → Clear All) or uninstall the app.

Security

All data transmitted between the app and Firebase is encrypted in transit using TLS. Data stored in Firebase is encrypted at rest using Google's default encryption. Passwords are never stored by us — they are managed entirely by Firebase Authentication using industry-standard hashing.

No method of transmission or storage is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and notify you via an in-app notice or email. Continued use of Serenarva after a change takes effect constitutes your acceptance of the updated policy.

Contact

For any privacy-related questions, requests, or concerns, please reach out to:

Ericka Thomas
Serenarva
privacy@serenarva.com