Legal and Institutional Information

PRIVACY POLICY – HIPNOAPP

Last updated: 02/25/2026
This Privacy Policy explains how EDWIN JAVIER LAMIÑA LUGMAÑA (hereinafter, “HipnoAPP”, “we”, “us”, or “our”) collects, uses, discloses, and protects your information when you use our mobile application and related services (collectively, the “Services”).
HipnoAPP provides audio content (e.g., relaxing music, hypnosis audio tracks, relaxation tips, and podcasts), featuring streaming and offline playback, user accounts, playlists, favorites, and subscriptions.

Who is the data controller?
Data Controller: Edwin Javier Lamiña Lugmaña
Address: Eloy Alfaro and Alemania, Quito – Ecuador.
Privacy Email: privacidad@hipnoapp.com
Support: soporte@hipnoapp.com
Legal: legal@hipnoapp.com

Scope
This Policy applies to information collected when you:
• Download, access, or use HipnoAPP.
• Create an account or subscribe (trial or premium).
• Contact us for support or interact with us.
It does not apply to third-party websites, apps, or services (for example, Apple, Google, PayPal, or Stripe) that have their own policies.

Information we collect
A. Information you provide to us
• Account and profile data: name, email address, date of birth (or age confirmation), and login credentials (or tokens when signing in with Google/Apple).
• Communications: messages you send to support (and, if applicable, attachments).
• Voluntary content (if enabled in your version): emotional journal entries, feedback, or reactions (e.g., "likes", emojis).
B. Information generated through the use of the Service
• Playback activity: basic playback history (e.g., recently played audio tracks), progress and playback resume, favorites, and playlists.
• Trial/premium data: user status (trial or premium), daily playback count during the trial (e.g., 1 audio track/day), remaining trial days.
• Offline downloads: audio tracks you download and manage (e.g., delete), taking into account that downloads are encrypted and can only be played within the app.
• Basic activity logs: events such as login, playback, downloads, subscription validation, and security events (for operations and fraud prevention).
C. Technical and device information
We may collect: IP address, device type, operating system, app version, device identifiers, language, time zone, crash logs, and similar data necessary to operate and secure the Service.
D. Payments and subscriptions
Subscriptions may be processed through:
• PayPal and/or Stripe (direct payment).
• In-App Purchases via the Apple App Store and/or Google Play, where enabled.
• We do not store your complete card number.
• We may receive limited information necessary to enable and manage your subscription (for example: "approved/declined" status, date, amount, currency, transaction ID, subscription status, expiration period/date, and/or a receipt/purchase ID).

How we use your information
We use your information to:
• Provide and operate the Services: create your account, enable playback, save favorites/playlists, enable encrypted offline downloads, and resume audio playback.
• Manage trial and subscription: enforce trial limits, manage renewals, handle cancellations, and verify subscription status according to the chosen payment method.
• Support: address inquiries, requests, and technical issues.
• Improvements and analytics: understand feature usage, stability, errors, and performance to improve the app.
• Security and fraud prevention: protect accounts, detect malicious activity, and investigate incidents.
• Legal compliance: comply with legal obligations, fulfill authority requests, and defend against legal claims.
• Communications: send operational messages (e.g., important notices) and, if you agree or where permitted by law, marketing messages.
• Aggregated/anonymous data: generate statistics that do not identify you (e.g., "most played audio tracks").

Legal basis (where applicable depending on your country)
Depending on your jurisdiction, processing may be based on:
• Performance of a contract (to provide the Service to you).
• Consent (e.g., marketing, certain personalizations, future integrations).
• Legitimate interest (security, fraud prevention, Service improvement).
• Legal obligation (accounting, regulatory requirements).

How we share your information
We may share your information with:
• Service providers (data processors): hosting, cloud storage, database operations, analytics, support, messaging, and tools necessary to operate HipnoAPP.
• Payment processors: PayPal and/or Stripe; and, when using In-App Purchases, Apple and/or Google (as applicable).
• Authentication providers: Apple and Google when you choose to sign in with them.
• Legal requirements: if necessary to comply with the law, respond to legal proceedings, or protect rights and safety.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets (subject to reasonable protective measures).
• With your consent: when you explicitly authorize it.
We do not share personal information with third parties for their own commercial purposes without your consent, except as described in this Policy.

International transfers
Your information may be processed in countries other than your own (for example, where our cloud or payment providers are located). In such cases, we will implement reasonable protective measures (contracts, controls, and standard security practices).

Data retention
We retain your information only as long as necessary to provide the Service, comply with legal/accounting obligations, resolve disputes, enforce agreements, and maintain security. In general:
• Account data: as long as your account remains active. If you request account closure/deletion, we will delete or anonymize it within a reasonable period (for example, within 30–90 days), unless retention is required by a legal obligation or to defend against claims.
• Security logs: typically for up to 12 months, unless an incident requires longer retention.
• Support and communications: typically for up to 24 months for service tracking and quality assurance.
• Billing/accounting information: for the period required by applicable law (where relevant).
When the information is no longer needed, we delete or anonymize it, unless the law requires it to be retained for a longer period.

Security
We implement reasonable technical and organizational measures to safeguard your information, such as:
• Secure transmission (e.g., HTTPS).
• Credential protection (e.g., password hashing/encryption) and access controls.
• Reasonable validation and anti-fraud measures.
• Offline content protection (encrypted downloads playable only within the app).
Even so, no system is 100% secure; we therefore recommend using strong passwords, keeping your device protected, and not sharing your access credentials.

Your rights and choices
Depending on your jurisdiction, you may have rights such as:
• Access to your data.
• Rectification of inaccurate data.
• Deletion (erasure) of your data.
• Objection to or restriction of processing in certain circumstances.
• Data portability, where applicable.
• Withdrawing your consent (for example, for marketing), without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise these rights, write to: privacidad@hipnoapp.com with the subject line “Privacy – Rights”. We may request reasonable identity verification. We will respond within up to 30 days (or the applicable statutory timeframe), which may be extended if the request is complex or numerous, in accordance with the law. We may also deny requests where a legal exemption applies (for example, a statutory retention obligation).

Communication preferences
• You can opt out of promotional emails by clicking the “unsubscribe” link or by contacting us.
• You can manage notifications directly through your device settings (and, if applicable, within the app).

Minors (13+)
• Minimum age: HipnoAPP is intended for users who are thirteen (13) years of age or older.
• Users aged 13 to 17: may only use HipnoAPP with the consent and under the supervision of a parent or legal guardian, who is responsible for their use, including purchases and privacy settings.
• Children under 13: may not use HipnoAPP. If we discover that a child under 13 has created an account, we may suspend the account and delete the associated information to the extent permitted by law.
• We may request reasonable age verification and/or guardian consent when necessary.

Cookies and similar technologies (if you operate a website/landing page)
If HipnoAPP also operates a website or landing page, we may use cookies and similar technologies to: remember preferences, measure performance, and optimize marketing campaigns. You can manage cookies through your browser settings (and, if applicable, via a cookie banner).

Third-party links
The Services may contain links to or integrations with third parties. We do not control their practices; please review their respective policies independently (Apple/Google/PayPal/Stripe, etc.).

Changes to this Policy
We may update this Policy from time to time. If we make changes, we will update the “Last updated” date and, where appropriate, notify you within the app or through other channels.
ANNEX: WELLNESS DATA / “SENSITIVE DATA”
This annex supplements the Policy and explains how we handle information that could be considered related to emotional well-being or “consumer health,” if and only if you provide it or if we enable specific features (for example, integrations with health apps or wearables).
A) What data may fall under this category
• Emotional journal entries, self-assessments, mood tracking, and personal notes (if available in your version).
• Any data you choose to log within HipnoAPP regarding sleep, anxiety, stress, or lifestyle habits.
Currently (MVP), HipnoAPP does not require integration with HealthKit/Health Connect or wearables as part of its core functionality. If introduced in the future, we will request your consent and update this Policy.
B) How we use this data
• To deliver features within the app (for example, displaying your tracking/history and internal personalization).
• For support, security, and legal compliance.
• For aggregated/anonymous statistics.
We do not use or share this wellness data with third parties for targeted or interest-based advertising, unless you give explicit authorization.
C) Your controls
• If the feature is enabled, you will be able to edit or delete your entries within the app; otherwise, you can request deletion via email.
• You can request access or deletion by writing to privacidad@hipnoapp.com.
• You can withdraw consent whenever processing depends on it (for example, future integrations).
IMPORTANT NOTICE: Not medical care or emergency services
HipnoAPP is an emotional wellness support tool. Use of this application does not establish a doctor-patient relationship and is not a substitute for individual psychotherapy or psychiatric treatment. If you are experiencing a mental health crisis, please visit an urgent care clinic or contact emergency services immediately.
Do not use this application while driving vehicles, operating heavy machinery, or performing any activity that requires your full, undivided attention.
CONTACT
If you have questions about this Policy or how your information is handled:
• Privacy: privacidad@hipnoapp.com (Subject: “HipnoAPP Privacy”).
• Support: soporte@hipnoapp.com
• Legal: legal@hipnoapp.com