Privacy Policy

The ivoryHAUS app and The HAUS membership are developed and provided by Summit Avenue Web Solutions LLC (260 Summit Avenue, Pocono Summit, PA 18346). ivoryHAUS music is the work of Noah Spott. Contact for privacy, support, and this policy: support@ivoryhaus.com.

This policy applies to the ivoryHAUS website and the ivoryHAUS iOS app. The website and the app share the same Supabase project for accounts. Payments for The HAUS are processed on the website, not in the app.

App sign-in uses a one-time code sent by email through Supabase. There is no password and no social login.

The following is collected and linked to the user. It is not used for tracking:

• Email address (Supabase Auth)
• User ID (Supabase Auth; PostHog identify; Sentry user id)
• Device identifiers (PostHog anonymous ID; Expo push token; Live Activity push token while a timer is running)
• Product interaction (likes, play history, listen stats, settings, mixer events, PostHog events). Your likes, history and tracks you hide from shuffle.
• Saved soundscape mix names
• Offline downloads: tracks you choose are stored on your device until you remove them or delete your account.
• Membership status synced from Stripe
• Crash and performance data (Sentry, sampled)

The app does not collect:

• Name
• Precise location (PostHog GeoIP is off; Sentry default PII is off)
• Contacts
• Photos
• Advertising data
• IDFA

The app does not use App Tracking Transparency, does not show ads, does not sell data, and does not use session replay.

If you sign up for the newsletter, your email address and the first name you optionally provide are stored with Kit, the service that sends the emails. You have to confirm your address before you receive anything, and every email includes an unsubscribe link. Your address is used only to send occasional notes about new music. It is never sold or shared for marketing.

If you sign in at Account, your email is stored with Supabase Auth, the same project the mobile app uses. Sign-in uses a one-time code sent by email. A session cookie keeps you signed in on this browser. Membership status is stored so this site can show whether you are a member. Checkout runs on this site. Card details are handled by Stripe, not stored here. Recurring membership is billed monthly or annually; you can cancel from Account.

The Binaural beats page can Export a file of the current Carrier and Beat. Those files are built in your browser. The email on that page is the same Newsletter signup: you still have to confirm before anything is mailed. Export unlocks when you submit the address, and that unlock is remembered only in this browser. ivoryHAUS does not re-check the list before later Exports. Export is not an account.

The listen button opens an embedded Spotify player. When it loads, Spotify may set cookies and collect data under its own privacy policy. Nothing from Spotify loads until you open the player.

If you accept analytics cookies, this site uses Google Analytics to understand how visitors use the site. It may collect page views, approximate location, device and browser information, and how you move between pages. Google Analytics uses cookies and only runs after you accept. If you reject analytics cookies, Google Analytics does not load and no analytics cookies are set.

Information is used to:

• Create and maintain your account and sign you in
• Provide app features such as likes, play history, listen stats, settings, saved mixes, and membership status
• Send optional newsletter email if you subscribe
• Send optional app notifications about new releases and a welcome message when a membership starts
• Process The HAUS payments on the website through Stripe
• Stream audio and operate the website and app
• Understand product use in the app (PostHog) and diagnose crashes and performance (Sentry)
• Understand website use if you accept analytics cookies (Google Analytics)

App analytics and crash data are not used for cross-app tracking or advertising.

Under LGPD and GDPR, information is processed on these bases:

• Contract: providing your account and The HAUS membership
• Consent: where asked, such as analytics cookies and notifications
• Legitimate interests: security and abuse prevention
• Legal obligation: billing records

ivoryHAUS uses the following processors. Each is responsible for protecting the data they process under their own policies.

• Supabase — authentication and account data
• PostHog — app product events and an app-scoped device or user ID, hosted in the US region, kept up to 1 year, with no session recording
• Sentry — crash and performance data, kept 30 days, with only an anonymous user ID
• Stripe — website payments for The HAUS; billing records are kept as long as tax and accounting law requires; the app never handles card data
• Cloudflare — website hosting, server logs, audio stored in R2, and brief storage of a running timer's lock-screen data
• Kit — newsletter
• Google Analytics — website analytics after cookie consent
• Spotify — embedded player on the website, only after you open it
• Expo — relays push notifications. The app also checks Expo for over-the-air updates, which sends the device's IP address and app version to Expo
• Apple Push Notification service (APNs) — delivers app notifications and the timer's lock-screen (Live Activity) updates

The processors listed above are hosted in the United States. If you use the website or the app from outside the US, your information is transferred to the US so the service can run.

Stripe processes payments for The HAUS on the website. The app does not collect or store card data.

Audio is delivered as short-lived (10-minute) signed links directly from Cloudflare R2.

The app may send notifications about new releases and a welcome message when a membership starts. You can turn notifications off in the app's Settings or in iOS Settings.

While a timer is running, a Live Activity push token and the timer schedule are stored briefly on Cloudflare (a Durable Object) and erased when the timer ends.

The site links out to streaming platforms, Instagram, Bandcamp, and the merch shop at shop.ivoryhaus.com. Each of those services has its own privacy practices once you leave this site.

ivoryHAUS does not sell personal information, does not show third-party ads, and does not use the app for cross-app tracking.

Account data is kept while the account is active. When you delete your account, the records listed under Deletion are removed. PostHog app analytics is hosted in the US region and kept up to 1 year, with no session recording. Sentry crash reports are kept 30 days and contain only an anonymous user ID. Stripe billing records are kept as long as tax and accounting law requires. Timer lock-screen data is erased when the timer ends. Signing out resets the analytics ID.

In the ivoryHAUS app, open the You tab and choose Delete account. That removes the auth user, likes, history, stats, settings, mixes, hidden-from-shuffle preferences, push tokens, and the membership record, and clears local data on the device, including offline downloads stored on the device. This removes Supabase data and PostHog analytics data. Sentry reports expire after 30 days. Deleting the account schedules cancellation of The HAUS at the end of the current billing period. Access continues until that date. You can also cancel earlier at ivoryhaus.com/account.

Deletion requests emailed to support@ivoryhaus.com are completed within 30 days. Steps are also posted at ivoryhaus.com/account/delete.

Users in Brazil (LGPD) and the EU/UK (GDPR) keep their local rights, including access, correction, deletion, portability, and objection. Write to support@ivoryhaus.com to exercise them. You can change website cookie choices at any time using Cookie settings in the site footer. If your browser blocks cookies or tracking, the banner is hidden and analytics does not load. You can unsubscribe from the newsletter using the link in any email.

The website and the app are not directed at children under 13, and no information is knowingly collected from them.

Users will be notified of data breaches as required by law.

If this policy changes, the update will be posted here with a new date at the top.

support@ivoryhaus.com
Summit Avenue Web Solutions LLC
260 Summit Avenue, Pocono Summit, PA 18346