Effective: 25 February 2026 · Last updated: 25 February 2026
The short version: Maushwave is built on a zero-knowledge architecture. We don't collect your name, email, location, or listening history. Your journeys, recordings, and affirmations never leave your device. We store only the minimum data needed to verify your subscription.
Maushwave ("we", "us", "our") is a privacy-first neuroacoustic wellness application distributed as a direct Android APK download. Our backend runs at app.maushwave.com.
Contact: support@maushwave.com
We believe your mental wellness journey is deeply personal. Our architecture is designed so that we cannot access your personal content — not that we choose not to, but that we are technically unable to.
We collect the absolute minimum data required to operate the subscription service:
| Data | Purpose | Stored Where |
|---|---|---|
| Device ID hash (SHA-256) | Identify your device for subscription verification | Server (PostgreSQL) |
| Subscription tier | Determine what content is accessible | Server |
| Subscription expiry timestamp | Enforce subscription period | Server |
| Stripe Customer ID | Link payment to entitlement (managed by Stripe) | Server |
| First/last seen timestamps | Basic service health monitoring | Server |
| App version string | Compatibility checks | Server |
The device ID hash is a one-way cryptographic hash. We cannot reverse it to identify your actual device. It serves only as an anonymous token to verify your subscription status.
We explicitly do not collect, store, process, or transmit:
| Data | Status |
|---|---|
| Your name | ❌ Never collected |
| Email address | ❌ Never collected (except if you email support) |
| Location / GPS | ❌ Never collected |
| IP address (stored) | ❌ Not logged (transits HTTPS, discarded) |
| Listening history | ❌ On-device only |
| Affirmation recordings | ❌ On-device only |
| Journey configurations | ❌ On-device only |
| Favourited affirmations | ❌ On-device only |
| Session duration / frequency | ❌ On-device only |
| Device model / OS version | ❌ Never collected |
| Contacts, photos, files | ❌ Never accessed |
| Advertising identifiers (GAID) | ❌ Never collected |
| Browsing or app usage data | ❌ Never collected |
The following data is stored locally on your device and never transmitted to our servers:
This data is stored in an encrypted local database. You can delete all local data at any time by uninstalling the app or using the in-app data deletion option in Settings.
Payments are processed by Stripe, Inc. Stripe's privacy policy applies to all payment transactions: stripe.com/privacy
When you subscribe:
If you choose to share your journey experience on social media for trial rewards:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment info (on Stripe's page, not ours) |
| BunnyCDN | APK downloads, content delivery | Standard HTTP request headers (IP, user-agent) |
| Railway | Backend hosting | Server-side only (no user data exposed) |
We do not use Google Analytics, Facebook Pixel, Mixpanel, Firebase, or any other analytics or advertising service.
Regardless of where you live, you have the right to:
For GDPR (EU), CCPA (California), and similar data protection requests, contact support@maushwave.com. We will respond within 30 days.
Maushwave is intended for users aged 13 and older. We do not knowingly collect data from children under 13. Since we don't collect personal information from any user, this risk is inherently mitigated.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will not retroactively reduce your privacy protections without explicit consent.
For any privacy-related questions, data requests, or concerns: