Calming Galaxy — Privacy Policy

Last updated: February 11, 2026

Applies to: Calming Galaxy mobile app (Android testing / iOS coming soon) and related websites/pages, including beta tester applications and waitlists.

This Privacy Policy explains how Galaxyway AI (“Galaxyway AI”, “we”, “us”, “our”) collects, uses, shares, and protects information when you use Calming Galaxy (the “App”) and our website(s) and related services (together, the “Services”).

1) Who We Are (Data Controller)

Calming Galaxy is owned and managed by Galaxyway AI.

For data protection laws (including the UK GDPR), Galaxyway AI is the data controller for personal data processed through the Services unless stated otherwise.

Contact us

  • Support email: support@calminggalaxy.com
  • Website contact form routes to: emailgalaxyway@gmail.com
  • Address: Holly Hill Road, Belvedere, Kent, DA8 1QD, United Kingdom

2) Key Definitions

Personal data: information that identifies you or can reasonably be linked to you (e.g., email address, device identifiers, account activity).

Processing: anything done with personal data (collecting, storing, using, sharing, deleting).

App Stores: Google Play Store and Apple App Store (and their billing systems).

3) Scope: What This Policy Covers

This Privacy Policy covers information processed when you:

  • Use the Calming Galaxy App (including features like music playback, Nature Sounds mixing, sleep timer, favorites, playlists, history, downloads, listening stats, and achievements).
  • Download and use the Calming Galaxy Android app or join the iOS waitlist.
  • Contact support or submit forms on our website.

It does not control how third parties (e.g., Google, Apple) process your data through their own platforms. See Section 12.

4) What Information We Collect

We collect information in three ways: (A) you provide it, (B) we collect it automatically, and (C) we receive it from third parties.

A) Information you provide directly

Account & profile information

  • Full name (if provided)
  • Email address
  • Password (stored using secure hashing; we do not store readable passwords)
  • Account preferences (e.g., settings, timer defaults, notification preferences if enabled later)

User-generated activity inside the App

  • Favorites/likes
  • Playlists and playlist names
  • Listening history and “continue listening” data
  • Downloads/offline items (and download status)

Support, feedback, and communications

  • Messages you send to support, including attachments you choose to provide
  • Feedback you submit as a tester (bug reports, feature requests)

Beta / waitlist forms

  • Contact details (e.g., name/email), device/platform info you choose to provide
  • Any notes you add

B) Information we collect automatically

Device & app technical data

  • Device type/model, OS version, app version, language, time zone (approx.), country/region (approx.)
  • App identifiers and device identifiers (e.g., installation ID)
  • Log data (timestamps, feature usage, crash/diagnostic logs)

Usage and interaction data

  • Content interactions: what tracks/albums you view or play, skip events, session durations
  • Feature usage: use of Nature Sounds mixer and sleep timer (including timer duration/fade options)
  • Performance analytics (app responsiveness, errors)

Cookies and similar technologies (Website)

We may use cookies/local storage for essential site functionality, security, and (optionally) analytics. ICO guidance explains what privacy information you should provide and how to do so. (ICO)

C) Information we receive from third parties

Google sign-in (if you “Continue with Google”)

We receive basic profile information such as your email and a unique account identifier from Google, depending on your Google settings and consent.

App Stores & billing partners

We may receive purchase-related data such as subscription status, transaction identifiers, receipt/purchase tokens, and renewal/expiration dates (so we can unlock Premium features and restore purchases).

The App Stores handle payment card details; we typically do not receive your full payment card information.

Service providers

If we use analytics, crash reporting, email delivery, or hosting providers, they may generate or share technical logs and service metrics with us related to your usage.

5) Information We Do Not Intentionally Collect

  • Precise GPS location (unless we add a feature that clearly requires it and you grant permission)
  • Biometric identifiers
  • Government ID numbers
  • Sensitive categories (e.g., health data) unless you voluntarily include them in messages to support

If you send sensitive information to support, you consent to us processing it solely to respond and resolve your issue.

6) Why We Use Your Information (Purposes)

We use your information to:

  • Provide and operate the Services
  • Create and manage accounts (email/password or Google sign-in)
  • Enable playback features (music, Nature Sounds, audiobooks)
  • Save favorites, playlists, listening history, downloads, and achievements
  • Personalise and improve your experience
  • “Continue listening”, recommendations, content surfacing, streaks, stats, and milestones
  • Subscriptions and access control
  • Verify Premium entitlement, apply Premium features (offline access, ad-free, Premium content), and restore purchases
  • Safety, security, and fraud prevention
  • Protect accounts, detect abuse, secure infrastructure, and monitor suspicious activity
  • Customer support and communications
  • Respond to support requests, troubleshoot issues, and provide service announcements
  • Product testing and development
  • Manage app access, evaluate feature performance, fix bugs, and collect feedback (Android app; iOS waitlist)
  • Legal and compliance
  • Meet legal obligations, enforce policies, handle disputes, and maintain records

7) Legal Bases for Processing (UK GDPR)

We rely on the following legal bases as appropriate:

  • Contract (to provide the Services you request)
  • Legitimate interests (to secure, improve, and operate the Services, prevent fraud, and run our business)
  • Consent (for optional features like marketing emails, non-essential cookies, or advertising personalisation where required)
  • Legal obligation (to comply with laws, accounting, or regulatory requirements)

The UK GDPR requires transparency about what you collect and why; ICO guidance explains the required privacy information and timing. (ICO)

8) How We Share Your Information

We may share information in these limited situations:

A) Service providers (processors)

We use trusted third parties to help deliver the Services, such as:

  • Cloud hosting and databases
  • Analytics and crash reporting
  • Email delivery and customer support tooling
  • Content delivery networks (CDNs)
  • Security and anti-abuse providers

They are permitted to process personal data only on our instructions and for the purposes described in this policy (subject to contractual safeguards).

B) App Stores and payment processing

Purchases are processed by Google/Apple. We use subscription status/receipt validation to provide Premium access.

C) Legal requirements

We may disclose information if we believe it is necessary to:

  • Comply with a legal obligation or lawful request
  • Protect our rights, users, and the public
  • Investigate fraud or security incidents

D) Business transfers

If we are involved in a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

E) With your direction

We share information when you ask us to (e.g., account export request, or a feature you enable that requires sharing).

We do not sell your personal data in the ordinary commercial sense.

9) Advertising, Tracking, and Analytics

A) Ads

Calming Galaxy may include ads on the Free tier and provide an ad-free experience for Premium.

If ads are enabled, we may use advertising identifiers (where available) and related technical data for ad delivery, frequency capping, and measurement—subject to your device settings and applicable laws.

B) iOS Tracking (ATT)

If we ever use tracking across apps/sites owned by other companies on iOS, Apple requires user permission. (Apple Developer)

C) Analytics

We may use analytics to understand usage trends and improve performance. Where required, we will obtain consent for non-essential analytics cookies/SDKs.

10) International Data Transfers

Your information may be processed in countries outside the UK. Where this occurs, we implement safeguards such as:

  • UK International Data Transfer Agreement (IDTA) or equivalent contractual protections
  • Vendor due diligence and security controls

11) Data Retention

We keep personal data only as long as necessary for the purposes in this policy, including:

  • Account data: retained while your account is active, and for a limited period after deletion to handle backups, legal claims, fraud prevention, and compliance.
  • Support tickets: retained as needed to resolve issues and maintain service records.
  • Logs and diagnostics: retained for security and performance analysis, then deleted or anonymised.
  • Subscription records: retained for accounting/tax/legal requirements.

Where possible, we aggregate or anonymise data so it no longer identifies you.

12) Third-Party Platforms and Links

A) Google and Apple

Your use of Google Sign-In, Google Play, or the Apple App Store is subject to their own policies. Apple provides information about App Store privacy practices and how receipts may relate to personal data. (Apple)

B) External links

If the Services link to third-party sites, we are not responsible for their privacy practices.

13) Your Rights and Choices (UK)

Under the UK GDPR, you may have rights including:

  • Right to be informed (transparency) (ICO)
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability (GOV.UK)
  • Right to object (ICO)
  • Rights related to automated decision-making/profiling (where applicable)

How to exercise your rights:

Email support@calminggalaxy.com with your request. We may request verification to protect your account.

Complaints:

You can complain to the UK Information Commissioner’s Office (ICO). ICO privacy notice guidance explains complaint information should be provided to users. (ICO)

14) Account Controls, Cache Clearing, and Deletion

A) Data management inside the App

The App may allow you to clear cached data (e.g., images cache, refresh data). Clearing cache removes locally stored copies but should not remove server-stored information like your account, favorites, or playlists.

B) Deleting your account

You can request account deletion via support@calminggalaxy.com.

When you delete your account, we will delete or de-identify personal data unless retention is required for legal, security, or operational reasons (e.g., backups, fraud prevention, accounting records).

15) Children’s Privacy

Calming Galaxy is intended for a general audience and is not directed to children. If we learn we collected personal data from a child without appropriate consent, we will delete it.

Not for children under 16 without parental responsibility consent.

16) Security

We use administrative, technical, and physical safeguards designed to protect personal data (encryption in transit, access controls, monitoring, secure credential storage). No system is 100% secure, so you use the Services at your own risk.

17) Changes to This Privacy Policy

We may update this policy from time to time. If changes are material, we will notify you via the App, website, or email (where appropriate). Continued use of the Services after the effective date means you accept the updated policy.