Privacy Notice

Who controls your data

Fredrik Bernström is the data controller for personal data processed through Hushwall. Contact us at support@hushwall.app with any privacy question or request.

What we collect and why

• Account data — your email address and an encrypted password hash, so you can sign in and keep your plan across devices.
• Subscription data — plan, status, billing period dates and the customer/subscription identifiers issued by our payment provider, so we know what access to grant.
• Usage data — the number of free listening seconds used per day on your account, so the free limit can be applied fairly.
• Technical data — standard server and error logs generated when you use the site.

We do not record audio, use your microphone, or build advertising profiles. Card details are never sent to or stored by us.

Legal bases

We process account and subscription data to perform our contract with you, usage and technical data on the basis of our legitimate interest in running a secure and fair service, and any other data with your consent, which you may withdraw at any time.

Who we share data with

• Paddle — our payment provider and Merchant of Record. Paddle receives the data needed to take payment, issue receipts, calculate tax and handle billing support, and acts as an independent controller for that processing.
• Supabase — our database and authentication provider, which stores account, subscription and usage data on our behalf.
• Lovable — our application hosting provider.

We do not sell personal data. We disclose data to authorities only where legally required.

Retention and deletion

Account, subscription and usage data are kept while your account is open. Deleting your account from the account page removes your account and its data and cancels any active plan; payment records are retained by our payment provider where tax or accounting law requires.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to complain to your local data protection authority. Email us and we will respond within 30 days.

Cookies and local storage

We use only what the service needs: a sign-in session token, and — for visitors without an account — a small browser entry recording how much of today's free listening has been used. No advertising or third-party tracking cookies are set by us.