Privacy Policy
Last updated: March 2026
This Privacy Policy explains how Asobi Labs (Sole Proprietorship of Maria Hollweck) ("Asobi Labs", "we", "our", "us") collects, uses, and protects personal data when you use the Magica mobile application ("the App").
By using the App, you agree to the practices described in this Privacy Policy.
1. Who We Are
Data Controller
Asobi Labs (Sole Proprietorship of Maria Hollweck)
Brooklyn, New York, USA
Email: magica@asobi-labs.com
2. Information We Collect
2.1 Information You Provide
- Apple ID information (name, email) when you sign in with Apple
- Saved affirmation sets and listening preferences
- Feature vote selections
2.2 Automatically Collected Information
- Anonymous device identifier — a randomly generated UUID stored on your device, used to group usage events. This is not your Apple advertising identifier (IDFA) and cannot be used to track you across other apps.
- User ID — when you sign in, your Supabase user ID is attached to events so we can associate usage with your account.
- Usage analytics — we log events such as which affirmation sets you play, search queries, screens you visit, paywall interactions, and session duration. These events are stored in our own Supabase database and are never shared with third parties.
- Error logs — when something goes wrong (e.g., audio fails to load, a purchase errors out), we log the error message, screen, and app version to help us fix bugs. No personal content is included in error logs.
- Device metadata — app version, build number, locale, timezone, and platform (always "iOS").
- Subscription status — via Apple StoreKit, synced to your profile.
- IP address — visible in Supabase infrastructure logs (standard for all web requests). We do not store or process IP addresses separately.
2.3 Information We Do Not Collect
- We do not collect location data
- We do not use the Apple Advertising Identifier (IDFA) or App Tracking Transparency
- We do not use third-party analytics SDKs (no Firebase, Amplitude, Mixpanel, etc.)
- We do not use third-party advertising SDKs
- We do not sell, share, or transmit your data to any third party for advertising or profiling
3. How We Use Your Information
We use your information to:
- Provide and operate the App
- Sync your saved sets, downloads, and preferences across sessions
- Verify subscription status
- Respond to support requests
- Understand how people use the App — which sets are popular, where users encounter errors, how long sessions last. This helps us improve the product.
- Diagnose and fix bugs — error logs help us identify and resolve issues quickly.
- Monitor performance and prevent misuse
We do not sell, rent, or share personal data with third parties for their own purposes. All analytics data stays in our own database.
4. Legal Bases (GDPR / UK GDPR)
We process data under:
- Performance of a contract — providing the App, managing subscriptions, syncing preferences
- Legitimate interests — product analytics (understanding usage patterns, fixing bugs, improving the experience). We only collect first-party data in our own database, do not profile users for advertising, and provide data deletion on request. We believe our interest in improving the App does not override your rights.
- Legal compliance — where required by law
5. Sharing of Information
5.1 Service Providers (Processors)
We may share data with:
- Supabase — authentication, database, file storage
- Apple — Sign in with Apple, StoreKit subscriptions
These providers process data only on our behalf.
5.2 International Transfers
Data may be stored or processed in the United States. Where required, transfers rely on Standard Contractual Clauses (SCCs).
6. Data Retention
- User profile data is kept until the user deletes their account.
- Analytics events (sessions, usage events, error logs) are retained for up to 24 months for product improvement, then deleted.
- After account deletion, all associated data (profile, analytics, preferences) is removed. Infrastructure logs and backups may persist for up to 90 days.
7. Your Privacy Rights
7.1 GDPR (EU/UK)
You have the right to:
- Access your data
- Correct your data
- Delete your data
- Withdraw consent
- Restrict or object to processing
- Request data portability
- File a complaint with your local supervisory authority
7.2 Brazil (LGPD)
Brazilian users may request access, correction, anonymization, deletion, data portability, and withdrawal of consent.
7.3 India (DPDP Act)
Indian users may access information about processing, request correction, deletion, and withdraw consent.
7.4 United States (CCPA / CPRA — California)
California residents have the right to:
- Know what personal information is collected and how it is used
- Request deletion of personal information
- Opt out of the "sale" or "sharing" of personal information — we do not sell or share your data
- Non-discrimination for exercising privacy rights
To exercise these rights, contact us at magica@asobi-labs.com.
7.5 Canada (PIPEDA)
Canadian users have the right to:
- Access personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent for data processing
- File a complaint with the Office of the Privacy Commissioner of Canada
Our analytics collection is based on legitimate business purposes (product improvement) and uses only first-party, non-advertising data.
7.6 Indonesia (PDP Law)
Users may access, correct, and delete data, withdraw consent, and file complaints.
Contact: magica@asobi-labs.com
8. Data Deletion
You may delete your account at any time from Settings within the App, or by emailing magica@asobi-labs.com.
This permanently removes:
- Your profile and email
- Saved sets and preferences
- Feature votes
- Subscription association
- All analytics events and error logs associated with your user ID
9. Children's Privacy
The App is not intended for children under 13. We do not knowingly collect data from users under 13.
10. Security
We use encryption, secure authentication, and managed cloud infrastructure. No system is fully secure; use the App at your own risk.
11. Changes to This Policy
We may update this Privacy Policy. Continued use of the App indicates acceptance.
12. Contact
Asobi Labs (Sole Proprietorship of Maria Hollweck)
Email: magica@asobi-labs.com