Privacy Policy

1. Key Points at a Glance

• We collect minimal data and never sell your personal information.
• Heart-sound recordings stay on your device unless you choose to export or back them up.
• We use industry-standard security measures, including encryption in transit and at rest.
• Your regional privacy rights (GDPR, CCPA, etc.) are fully respected.

3. Cookies and Similar Technologies

The App itself does not use cookies. Integrated third-party SDKs (e.g., Firebase Crashlytics, Apple Analytics) may employ device identifiers to collect crash reports and usage statistics. These identifiers are pseudonymous and are not combined with direct identifiers.

4. How We Use Data

• Provide, maintain, and improve the App
• Monitor performance, detect fraud or abuse
• Send essential service communications (e.g., security notifications)
• Respond to support inquiries

We do not use recordings for advertising, profiling, or any purpose unrelated to core functionality.

5. Sharing and Disclosure

We disclose data only:

1. to vetted service providers who process it under written agreements and strict confidentiality;
2. when required by law, subpoena, or court order;
3. in connection with a merger, acquisition, or sale of assets (users will be notified of any change in control).

We never sell personal information.

6. International Transfers

When data is transferred outside your jurisdiction (for example, to servers in the United States), we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK Addendum. You may request copies of these safeguards by emailing wombly.app@gmail.com.

8. Your Rights

Depending on your region, you may have rights to:

• access, correct, or delete personal data;
• restrict or object to processing;
• data portability;
• withdraw consent at any time (without affecting prior lawful processing);
• lodge a complaint with a supervisory authority.

Submit requests via wombly.app@gmail.com. We will verify your identity and respond within one month.

9. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact wombly.app@gmail.com and we will delete it promptly.

10. Security Measures

• TLS 1.2+ encryption for data in transit
• AES-256 encryption for server-stored data at rest
• Role-based access controls and least-privilege policies
• Annual penetration testing and vendor risk assessments

No security measures are perfect; you use the App at your own risk.

In the event of a breach of personal data we will notify affected individuals and relevant authorities without undue delay and, where GDPR applies, within 72 hours.

11. Changes to This Policy

We may update this Policy periodically. Material changes will be announced in-app or via the App Store listing at least seven days before they take effect. Continued use of the App after that date constitutes acceptance of the revised Policy.

13. Contact

We aim to respond to all privacy enquiries within 10 business days.