Legal

Privacy Policy

Last updated 1 July 2026

This policy explains what personal data Cetody Sound Healing collects, why, and the rights you have under the UK GDPR and EU GDPR.

Who we are

Cetody Sound Healing (“Cetody”, “we”) is the data controller for the personal data described here. For any privacy question or to exercise your rights, contact privacy@cetody.com.

Data we collect

  • Account data: your name, email address and authentication details, managed by our provider Supabase.
  • Billing data: subscription status and customer identifiers. Card details are handled entirely by Stripe; we never see or store them.
  • Listening activity: the tracks you play, progress and completion, used to power your history and aggregate analytics.
  • Essential cookies: required to keep you signed in. Optional analytics cookies are only set with your consent.

How we use your data

We process your data to provide the service (a contractual basis), to take payment, to keep the platform secure, and (where you have consented) to send product updates and measure anonymous usage. We do not sell your personal data.

Sharing & processors

We share data only with the processors that run Cetody: Supabase (authentication & database), Stripe (payments) and Cloudflare R2 (audio delivery). Each is bound by a data-processing agreement and appropriate safeguards for any international transfers.

Retention

We keep account and billing records for as long as your account is active and as required by law. When you delete your account, we remove or anonymise your personal data within 30 days, except where we must retain records for legal or accounting reasons.

Your rights

You have the right to access, correct, export, restrict or delete your personal data, and to withdraw consent at any time. To exercise any right, email privacy@cetody.com. You may also complain to your local supervisory authority (in the UK, the ICO).