Privacy policy
Millpond is a wellness app for comfort and self-tracking. It does not diagnose, treat, or cure tinnitus or any condition. This page explains, in plain English, what data the app handles.
The short version
- Your scores and logs stay with you. Your Ring Impact scores, night logs, spike logs, and saved mixes live on your iPhone and in your own iCloud, so a new phone can pick up where you left off. We do not upload them to our servers, and we cannot see them.
- There are no accounts. No passwords, no sign-in. Your subscription is handled by Apple against your Apple ID; we never see payment details.
- Email is optional. If you choose to give us your name and email, we use them to send your fingerprint summary, tips, and occasional offers through our email provider (Klaviyo). Your matched pitch (the band and Hz from your test) goes with them, along with progress milestones — like finishing your first night with sound — and the date of your last session, so the emails fit your ringing and where you are. Your pitch is the only part of your fingerprint that leaves the phone; your scores and ratings never do. Every email has a one-tap unsubscribe. We never sell your data. Skipping this step changes nothing in the app.
- Anonymous usage analytics. We record which screens and features are used, along with your matched pitch and your quiz answers, tied to a random identifier — never to your name or email. Your Ring Impact scores and logs never go into analytics. This helps us fix and improve the app.
- Screen recordings, with your numbers blanked out. To find and fix problems, the app records how its screens are used, under the same random identifier as the analytics. Your scores, ratings, check-ins, reviews, and your Plan and Progress pages are blanked out in these recordings, and so is anything you type. Processed by PostHog on our behalf.
- Contact us (only if you write to us). When you send a message from Help, we receive it with your reply address, a support code (the same random identifier as the analytics), and your app and phone versions. If you leave “Include my progress” checked, your data export, your plan report, and a copy of your app data come with it. We use them to answer you, and for nothing else.
- Shared results (only if you say yes). The app asks once whether you want to share your results. If you agree, we record which sounds and approaches you used, for how long, and how you rated them — together with your matched pitch and quiz answers — under a separate random identifier that is never connected to your name, email, or anything else about you. We use this to learn what helps people with similar tinnitus and to improve everyone's recommendations. You can turn it off any time in Settings, and saying no changes nothing in the app.
- Ads. The app shows no ads. It does include Meta's SDK, which tells Meta that the app was installed and opened so we can measure our own advertising. That is all it sends: no health answers, no scores, no logs, no email. We never sell your data.
What we collect, exactly
- On your device and in your iCloud: your sound character, weekly Ring Impact scores, nightly sleep logs and ratings, spike logs, saved sound mixes, app settings. The iCloud copy sits in your own account so a new phone can restore it; we have no access to it. Your matched pitch also stays there unless you opt into email, below.
- If you opt in: first name, email address, your matched pitch (frequency band and Hz, used to personalize emails), progress milestones (such as your first night with sound, or completing week one of the program), your latest session date, and subscription events (trial started/converted/cancelled) — processed by Klaviyo on our behalf.
- Anonymous analytics: feature-usage events, your matched pitch, and your quiz answers, along with technical context (device model, iOS version, app version, country/region, and audio output type such as headphones or speaker — never device names), tied to a random device identifier — processed by PostHog on our behalf.
- Shared results (optional): if you agree to share, your sound and plan outcomes — the sound or approach used, minutes, level, your ratings, and your plan review answers — with your matched pitch and quiz answers, under their own random identifier, separate from the analytics one and never joined to your email — processed by PostHog on our behalf. Withdrawing consent in Settings stops the sharing and discards that identifier.
- Ad measurement: the fact that the app was installed and opened, with the device's advertising identifier only where iOS allows it, and Apple's SKAdNetwork attribution — processed by Meta. Nothing you enter in the app is included.
- Screen recordings: images of the app's screens as they are used, with your scores, ratings, check-ins, reviews, Plan and Progress pages, and typed text blanked out — processed by PostHog on our behalf.
- Support messages: your message, what it is about, your reply email, your support code, app and iOS version, and phone model — and, only if you choose, your data export and plan report — received through our website host (Netlify) and read by us.
- Purchases: processed entirely by Apple. See Apple's privacy policy for how Apple handles payment data.
Your controls
- Export: Settings → "Export my data" gives you everything as a CSV file.
- Delete: Settings → "Delete my data" erases all app data from your device and from your iCloud. To remove your email from our list, tap unsubscribe in any email or write to us.
- Subscription: manage or cancel anytime in your iPhone's Settings → Apple ID → Subscriptions.
Children
Millpond is not directed at children under 13 and we do not knowingly collect data from them.
Changes
If this policy changes, the current version will always be at this address, with the date above.
A note on sudden or unusual tinnitus
Ringing that is new (under 3 months), in one ear only, or pulsing with your heartbeat warrants an exam by an ENT or audiologist.
Questions
Write to us through the contact page.