Your listening
belongs to you.

Who is responsible

Raumo is published by the person named below (“we”, “us”), based in Switzerland. We are the controller for the data described in this policy. This means we answer for it under the Swiss Federal Act on Data Protection (FADP). For people in the European Union, the European Economic Area and the United Kingdom, we also answer under the EU and UK General Data Protection Regulation (GDPR), because we offer Raumo there.

For anything about your data, write to support@raumo.app. We are not required to appoint a data protection officer.

What this policy covers

This policy covers:

• the Raumo app for iPhone, with its widgets, controls, Live Activity and Siri shortcuts;
• the share service that makes and plays shared links at raumo.app;
• this website, raumo.app; and
• email you send to us.

Apple’s own services (the App Store, iCloud, Apple Account, Siri and iOS itself) are run by Apple under Apple’s privacy policy, even when you use them with Raumo.

What stays on your iPhone

The app keeps these on your iPhone so it can resume your music, show your listening and remember what you made. None of it is sent to us.

• Listening history: recently played soundscapes (the last 12) and recent musical recipes (the last 24), so you can pick up where you left off.
• Listening journal: totals of how long you listened to each soundscape, by time of day and by month, and what you have discovered so far. Your Raumo uses it to show your listening. It has no time limit; you can clear it (see below).
• Listening diary: entries for listening of three minutes or more. Each entry holds its start and end, the musical recipe, the nature sound nearby, and whether the sleep timer ended it. Raumo does not measure sleep. Entries are deleted after 42 days, and at most 160 are kept.
• Taste: what Raumo learns from your skips, keeps, hearts, sound changes, mood settings and sleep timer, to choose music you are likely to enjoy. At most 1,500 examples are kept. This file is excluded from device backups.
• Things you make and keep: favourites, your rooms and stations with the names you give them, kept moments with their titles and notes, and the titles and notes of your profile chapters.
• Settings and your recent searches (the last six).
• Shared links: the list of links you made and the private key that lets you delete each one.
• Diagnostics: see Diagnostics and crash reports.

The widgets, Lock Screen controls and Live Activity on the same iPhone receive a short summary through a container shared only with them: what is playing, the sleep timer, suggestions, your listening amounts for the past seven days, and the names of up to twelve kept moments. While music plays, iOS shows its title and artwork on the Lock Screen and in Control Center. Anyone who can see your Lock Screen or widgets can see this.

Your iPhone’s own backups (to iCloud or a computer) include the app’s data, except the taste file. Those backups belong to you and are governed by Apple’s terms or your computer.

Clearing what is on your iPhone

• Settings › Clear Listening History clears recently played, the listening journal behind Your Raumo, the listening diary and composed variations. It keeps favourites, rooms, stations and kept moments.
• Reset taste (in Settings) makes Raumo forget what it learned about your taste.
• Recent searches can be cleared in Search. Favourites, rooms, stations, kept moments and profile chapters can be removed one by one.
• Deleting the app removes everything it stored on your iPhone, including diagnostics. Copies remain in older device backups until those are replaced or deleted.

Clear Listening History does not clear the taste file, recent recipes, recent searches, profile chapters or your list of shared links. Each of these has its own control above.

iCloud

If iCloud is on for Raumo, what you deliberately keep syncs between your devices through your own private iCloud database. It syncs for everyone, with or without Raumo Plus. This covers:

• favourites and the soundscapes you set aside;
• your rooms and stations, with their names and the words a station was made from;
• kept moments, with their recipes, titles and notes;
• the order of Yours and of your favourites, your choice in the first minute (sleep, focus or unwind), and your app icon; and
• a random number for each device that keeps new variations from repeating across your devices.

Your listening history, journal, diary, taste, profile chapters, shared links, purchases and settings never sync. They stay on the iPhone they were made on.

This database belongs to your Apple Account. Apple stores it under its terms and privacy policy. We cannot read it, and Raumo has no server copy of it. To stop syncing, turn Raumo off under Settings › [your name] › iCloud on your iPhone. To delete the data from iCloud, remove the items in Raumo, or delete Raumo’s data under iCloud › Manage Account Storage. Delete it there after removing the app from your devices; otherwise an installed copy will upload its items again.

Sharing a link

Nothing is shared unless you choose Share… in the player. A shared link lets someone else hear the same soundscape composed again on their own iPhone.

What a link sends to us

• The soundscape’s name. If you named the room or station, that name is used. We remove control characters and keep up to 80 characters.
• Its musical recipe: the settings, sounds and seed that compose it, the engine version and how far into it you were. If the soundscape comes from a room you named, the recipe includes that room’s name. Your kept moment’s note and its internal identifiers are removed before upload.
• A still picture of its procedural artwork.
• A random install ID, created on this iPhone the first time you share. It is used only to limit how many links one device can make.
• As with any internet request, your IP address and standard technical information, such as the app version in the request header.

A link never contains audio, your diary, your history, your taste, your notes, your Apple Account or anything that names you, unless you wrote it into the soundscape’s name.

Who can see it

Anyone who has the link can open its page at raumo.app and read the name, picture and recipe. The page does not show who made it. Links are not listed anywhere, but people you send them to can pass them on, and messaging apps may make their own previews. Please do not put personal information in a name you share.

How long it stays

A link stays until you delete it in Settings › Listening › Links you shared, or until we remove it under our rules for shared links. Deleting removes the name, recipe and picture from our storage at once. Caches may still serve them for up to an hour; we cannot remove copies other services made.

The key to delete a link stays on the iPhone that made it and does not sync. If you deleted the app or changed iPhone, write to support@raumo.app with the link and we will delete it.

Limiting abuse

One device can make 10 links a day, and one network address 100. To count this, the share service stores a shortened SHA-256 hash of the install ID and one of the IP address, each with the day and a number. An automatic job deletes these counts every day once their day has passed, so none is kept longer than about two days. Our hosting provider also counts requests per IP address for one minute to block floods.

These hashes are not anonymous: in principle an IP address could be worked out from its hash. We treat them as personal data and use them for nothing but these counts. They are never linked to your shared links.

Raumo Plus and purchases

Raumo Plus is sold by Apple through the App Store with your Apple Account. Apple processes the payment, taxes, refunds and Family Sharing under its own terms. We never receive your name, Apple Account, payment details or billing address from a purchase.

The app asks Apple’s StoreKit on your iPhone whether Raumo Plus is active and keeps that answer on the iPhone. We run no purchase server. Apple gives developers sales and subscription reports that do not identify buyers.

If you start a free trial, the app asks iOS whether it may show one notification, a reminder the day before the trial ends. The reminder is scheduled on your iPhone and is not sent by us.

Head tracking, notifications and system features

Head tracking is off until you turn it on in the player’s menu. With compatible headphones, Raumo then reads how your head turns, so sounds stay where you placed them, and iOS asks for Motion access. It runs only while music plays or the player is open. It uses only the left-and-right turn of your head, processes it on the iPhone, and stores none of it. Turn it off in the player menu, or withdraw Motion access at any time in iOS Settings › Privacy & Security.

Notifications: besides the trial reminder, iCloud sends silent notifications that tell the app new kept items are ready to sync. These contain none of your content.

Siri, Shortcuts and Focus: actions such as Play, Sleep or Keep this moment run on your iPhone. A Focus filter you set up stores its mood and world on your iPhone. Siri requests are handled by Apple.

Recording a clip: the Engine view can record a short clip of the screen and sound of up to 20 seconds, using iOS screen recording with the microphone off. The clip goes to iOS’s preview, where you decide whether to save or share it. Raumo does not upload it.

Raumo never uses the microphone, camera, location, contacts, photos, health data or Bluetooth scanning, and it does not track you across apps or websites.

Diagnostics and crash reports

To help find audio problems, the app writes diagnostic files in its own storage on your iPhone, and it updates them while music plays:

• a session record: the engine version, the soundscape and its seed, recent musical events and changes, the name of the audio output (for example your headphones’ name), and the device’s temperature state;
• a performance history of processor, memory and energy use, limited to about 4 MB; and
• performance and crash reports that iOS delivers to the app (MetricKit).

Raumo never uploads these files, and they contain no recordings of your surroundings. They stay until you delete the app, and they are included in your device backups.

Separately, if you turned on Share with App Developers in iOS Settings › Privacy & Security › Analytics & Improvements, Apple sends us crash reports and aggregated usage statistics for Raumo. Apple asks for your consent and does not identify you to us. You can turn it off there at any time. We use these reports only to fix problems.

This website

raumo.app and its shared-link pages are delivered by Cloudflare, our hosting provider. To deliver each page, Cloudflare processes your IP address, the address requested, the time, and browser information such as the user agent. It also uses them to protect the site from attacks. Raumo itself writes no logs of these requests.

The website sets no cookies and runs no analytics, advertising or third-party scripts. It loads no external fonts or embeds. Your browser’s reduced-motion setting is read, not stored. The site writes nothing to your browser’s storage; it only removes a motion setting that an earlier version may have saved there. Listening examples play only after you press Play. Your browser may cache pages and media like any website.

Links to other services, such as YouTube, Apple or the apps on our comparison page, take you to sites with their own privacy practices.

Writing to us

If you email us, from Send Feedback in the app or otherwise, we receive your email address, your message and anything you attach. Mail sent from the app is drafted by iOS Mail and may include your device and iOS version if you leave them in. We use this only to answer you.

We delete the correspondence once your request is settled, at the latest 24 months after our last exchange. The exception is anything the law requires us to keep longer, such as business records.

Purposes, legal bases and retention

We do not process the data that stays on your iPhone or in your private iCloud, so there is no purpose or legal basis to state for it. For everything else, the table shows why we process it and how long we keep it. The FADP does not require a legal basis for each processing. For people in the EU, EEA and UK, the table also names the GDPR basis.

Where we rely on legitimate interests, we weighed them against yours. The data is minimal and short-lived. It is not used to profile you and is not combined with anything else.

Who else receives data

• Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) hosts the website and share service and stores shared links. It acts as our processor under a data processing agreement. See Cloudflare’s privacy policy.
• Apple provides the App Store, purchases, iCloud, notifications and crash reports as an independent controller under its own privacy policy.
• Our email provider stores the messages you send us, as our processor.
• Authorities receive data only where the law obliges us to provide it.

We do not sell personal data, share it for advertising, or give it to anyone else.

Transfers abroad

Cloudflare may process data in the United States and in other countries where it runs servers. Cloudflare, Inc. is certified under the Data Privacy Framework. The framework has three parts: the Swiss–US framework, which the Swiss Federal Council recognised as adequate (Art. 16(1) FADP); the EU–US framework, which the European Commission found adequate (Art. 45 GDPR); and the UK extension. Cloudflare’s data processing agreement also includes the EU Standard Contractual Clauses, with the adjustments needed for Switzerland and the UK (Art. 16(2) FADP, Art. 46(2)(c) GDPR). You can ask us for a copy of these safeguards. Switzerland is recognised by the European Commission as providing adequate protection, so data you send to us from the EU or the UK may be processed by us in Switzerland.

Storage on your device

The app stores the data described above on your iPhone. It creates the install ID the first time you share. Each of these is strictly necessary for a feature you asked for. This policy is the information that Swiss law (Art. 45c of the Telecommunications Act) requires about it. Under the EU’s ePrivacy rules (for example §25(2) No. 2 of the German TDDDG) and the UK’s PECR, storage that is strictly necessary needs no separate consent. You can avoid it by not using the feature, or by deleting the data as described above. The website stores nothing on your device.

Your rights

Wherever you live, you can ask us to:

• tell you whether we process personal data about you, and give you access to it and a copy (Art. 25 FADP, Art. 15 GDPR);
• correct it (Art. 32 FADP, Art. 16 GDPR) or delete it (Art. 32 FADP, Art. 17 GDPR);
• restrict how we use it, or stop using it (Art. 30 and 32 FADP, Art. 18 GDPR);
• give you data you gave us in a common machine-readable format, or send it to someone else (portability, Art. 28 FADP, Art. 20 GDPR); and
• accept the withdrawal of your consent at any time, without affecting what happened before (Art. 7(3) GDPR).

Raumo has no account, so we hold almost nothing that tells us who you are. To find a shared link, we need its address. We cannot see what is on your iPhone or in your iCloud: you control that directly with the tools described above. We answer requests within one month and confirm complaints within 30 days.

Complaints

Please tell us first if something concerns you: support@raumo.app. You can also turn to a supervisory authority:

• in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern;
• in the EU and EEA, a supervisory authority of your choice, especially where you live or work or where you believe your rights were infringed (Art. 77 GDPR); they are listed here; and
• in the UK, the Information Commissioner’s Office.

Is providing data required?

No. You can use all of Raumo without giving us any personal data. A shared link needs its name, recipe and picture, and the request reveals your IP address. If you do not want that, do not share.

Automated decisions

We make no decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects (Art. 21 FADP, Art. 22 GDPR). When the daily share limit is reached, the service simply makes no new link until the next day.

Children

Raumo is a music app for a general audience, not a service directed at children. It needs no account and collects no personal data from anyone to play music. We do not knowingly collect personal information from children under 13 (or the minimum age where you live). We ask children to share links only with a parent’s help. If you believe a child has sent us personal data, write to us and we will delete it.

California and other US states

We do not sell or share personal information, as these terms are defined in the California Consumer Privacy Act or similar state laws. We do not use it for targeted advertising or profiling. The categories we receive are described above: shared link content, network identifiers and hashed identifiers for limiting abuse, and email correspondence. You may ask us what we hold about you and ask us to correct or delete it, and we will not treat you differently for asking.

Do Not Track: Raumo and this website do not track you across websites or apps, so there is no tracking to switch off. We treat every visitor as if Do Not Track and Global Privacy Control were on, and no third party tracks you through our site.

Changes to this policy

When Raumo changes how it handles data, we update this policy before the change takes effect and change the date at the top. If a change means data you have already provided would be used in a new way, we will ask for your consent first where the law requires it, and say so in the app.

Also see our terms of use and our publisher information.