top of page

Privacy Policy

PRIVACY POLICY

Zan: Relax Rain Sleep & Radio

Developer: Grass Studio

Last Updated: August 17, 2026

​

1. INTRODUCTION

Grass Studio ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we handle information when you use our mobile application ZAN : RELAX RAIN SLEEP & RADIO (the "App").

Important Note: Grass Studio does not collect, store, or process any personal data from you directly. We do not create user accounts, we do not track your activity within the App, and we do not store any of your information on our own servers.

However, the App integrates third-party services to provide certain functionalities (such as payments, audio storage, and image hosting). These third-party services may collect and process your data according to their own privacy policies. This Privacy Policy describes these third-party services and their possible data processing activities to ensure compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) .

​

2. THIRD-PARTY SERVICES

The App uses the following third-party services. Each of these services may collect and process personal data independently. We encourage you to review their privacy policies:

​

2.1 Google Billing SDK

  • Purpose: To process in-app purchases for premium features and premium sounds.

  • Data Collected: Google Billing SDK may collect purchase information, transaction history, and device identifiers necessary to process payments.

  • Data Controller: Google LLC

  • Privacy Policy: https://policies.google.com/privacy

  • Legal Basis (GDPR): Contractual necessity (Art. 6(1)(b) GDPR) – processing is necessary for the performance of a contract (the purchase transaction).

 

2.2 Cloudflare

  • Purpose: To store and deliver audio files used in the App.

  • Data Collected: Cloudflare may collect IP addresses, device information, and usage data for security and content delivery purposes.

  • Data Processor: Cloudflare, Inc.

  • Privacy Policy: https://www.cloudflare.com/privacypolicy/

  • GDPR Compliance: Cloudflare is a privacy-first company and its policies align strongly with GDPR requirements.

 

2.3 Google Cloud

  • Purpose: To store and deliver audio files used in the App.

  • Data Collected: Google Cloud may collect data necessary for providing cloud storage and content delivery services.

  • Data Processor: Google LLC

  • Privacy Policy: https://cloud.google.com/privacy

  • GDPR Compliance: Google Cloud is committed to GDPR compliance and provides a Cloud Data Processing Addendum (CDPA) for customers.

 

2.4 Cloudinary

  • Purpose: To host and deliver audio files and images used in the App.

  • Data Collected: Cloudinary may collect IP addresses, browser/device identifiers, session information, and usage activity. If you upload content containing personal information, Cloudinary may process that data as well.

  • Data Processor: Cloudinary Ltd.

  • Privacy Policy: https://cloudinary.com/privacy

  • GDPR Compliance: Cloudinary is GDPR compliant and implements controls to allow clients to process personal data in compliance with GDPR.

  • CCPA Compliance: Cloudinary has invested efforts to comply with CCPA/CPRA requirements.

​

2.5 Firebase

  • Purpose: To provide core backend infrastructure and supporting functionalities for the App, which may include (but is not limited to): real-time database storage, user authentication, cloud functions, push notifications, in-app analytics, and performance/crash monitoring.

  • Data Collected: Firebase may collect data necessary to provide its services. This may include device identifiers, IP addresses, application usage data, crash logs, push notification tokens, and any other information related to the specific Firebase features integrated into the App (e.g., email addresses and hashed passwords if Firebase Authentication is used).

  • Data Controller and Processor: You (the app developer) generally act as the "Data Controller" (under GDPR) or "Business" (under CCPA/CPRA) for the personal data processed via Firebase. Google LLC (the provider of Firebase) generally acts as a "Data Processor" (under GDPR) or "Service Provider" (under CCPA/CPRA) that processes personal data on your behalf.

  • Privacy Policy: https://policies.google.com/privacy

  • GDPR Compliance: As a Data Processor, Google is fully committed to GDPR compliance and provides a Data Processing Addendum (DPA) that meets the requirements of Article 28 of the GDPR.

  • CCPA Compliance: As a Service Provider, Google is committed to complying with CCPA/CPRA requirements and prohibits the use of personal data for purposes other than those explicitly permitted under the agreement.

​

2.6 Pixabay API

  • Purpose: To provide royalty-free images, videos, and music content within the App.

  • Data Collected: Pixabay may collect information you provide directly (such as name, email address, and uploaded media), information received from third-party accounts (if you log in via Facebook or other services), and information collected automatically including user activity data, analytics event data, clickstream data, cookies, log file information, device identifiers, and location data.

  • Data Controller: Pixabay (Canva Germany GmbH)

  • Privacy Policy: https://pixabay.com/service/privacy/

  • GDPR Compliance: As a company based in Germany, Pixabay is fully subject to and compliant with GDPR requirements.

  • CCPA Compliance: Pixabay provides mechanisms for California residents to exercise their privacy rights as described in their Privacy Policy.

 

2.7 RadioBrowser API

  • Purpose: To fetch and display internet radio station information (metadata and stream URLs) from a community-driven, open-source radio station directory.

  • Data Collected: RadioBrowser is a free, open, community-maintained database that does not save per-user data. The API is publicly available and does not require authentication. RadioBrowser may collect anonymous usage data (such as station click counts) to help determine which stations are well-liked. The data provided by RadioBrowser is open data under the public domain.

  • Data Controller: RadioBrowser Community (open-source project)

  • Privacy Policy: https://www.radio-browser.info

  • GDPR Compliance: As a community-driven open-source project that does not collect personal data, RadioBrowser operates with minimal data processing. Users should review the project's privacy information available at radio-browser.info.

  • CCPA Compliance: RadioBrowser does not collect personal data and therefore does not fall under CCPA requirements.

 

2.8 Apple Podcasts API

  • Purpose: To enable podcast discovery, playback, and library integration within the App.

  • Data Collected: Apple may collect podcast listening and interaction data to improve and personalize services, including information about which podcasts you listen to, your listening progress, listening time, and when episodes are streamed, downloaded, or followed. This data is associated with a random device identifier and is not stored with your Apple account. Apple may also collect usage data such as items you tap on. A device trust value may be calculated to help identify and prevent fraud. When you play or download podcasts from third-party hosting platforms, your device connects directly to those platforms and your IP address may be visible to them.

  • Data Controller: Apple Inc.

  • Privacy Policy: https://www.apple.com/legal/privacy/

  • GDPR Compliance: Apple provides detailed privacy information and complies with GDPR requirements for users in the European Economic Area.

  • CCPA Compliance: Apple provides California residents with the ability to exercise their privacy rights as described in Apple's Privacy Policy.

 

2.9 Podcastindex API

  • Purpose: To provide podcast search, discovery, and metadata access within the App.

  • Data Collected: When users browse the Podcast Index websites, limited non-personal information is collected automatically in server logs, including IP addresses, browser/app type, browser/app language, date and time of requests, query parameters, and any geolocation data from CloudFlare. Server logs are automatically deleted after 90 days. For developers using the API, Podcast Index collects the email address used to create the developer account, a hashed (non-reversible) password, and details of how the API token was used (such as search queries or device user-agents). Podcast Index links to podcast RSS feeds, which may contain email addresses and other personal information published by podcasters – however, Podcast Index does not process or retain email addresses from RSS feeds.

  • Data Controller: Podcast Index, LLC

  • Privacy Policy: https://github.com/Podcastindex-org/legal/blob/main/PrivacyPolicy.md

  • GDPR Compliance: Podcast Index collects minimal personal data and provides transparency about its data collection practices.

  • CCPA Compliance: Podcast Index does not collect significant personal data from end-users and provides a privacy policy that describes its data practices.

​

2.10. GPodder.Net Api

When your App interacts with gpodder.net (e.g., to fetch tags, directories, or if user authentication is implemented):

  • Your IP address, User-Agent string, and request timestamps are processed by the gpodder.net service.

  • If your App implements user login via gpodder.net, authentication data (username and hashed credentials) is handled directly by their servers according to their policies.

We recommend that you review gpodder.net’s privacy practices for further details.

 

3. DATA COLLECTION BY GRASS STUDIO

As stated above, Grass Studio does not collect, store, or process any personal data from you. We do not:

  • Create user accounts or profiles

  • Track your usage within the App

  • Store your personal information on our servers

  • Share, sell, or rent your data to anyone

Any data processing that occurs is performed exclusively by the third-party services listed in Section 2 above, each acting as an independent data controller or data processor.

 

4. DATA SECURITY

While we do not collect your data ourselves, we take reasonable steps to ensure that the third-party services we use implement appropriate security measures. Each third-party service:

  • Uses encryption for data in transit (HTTPS)

  • Implements industry-standard security practices

  • Complies with applicable data protection regulations

However, please note that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of any information processed by third-party services.

 

5. YOUR RIGHTS UNDER GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights under the GDPR:

  • Right to Access – You have the right to request copies of your personal data.

  • Right to Rectification – You have the right to request correction of inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten") – You have the right to request deletion of your personal data.

  • Right to Restrict Processing – You have the right to request restriction of data processing.

  • Right to Data Portability – You have the right to request transfer of your data to another organization.

  • Right to Object – You have the right to object to data processing.

  • Right to Withdraw Consent – You have the right to withdraw your consent at any time.

To exercise any of these rights, please contact the relevant third-party service provider directly using the contact information provided in their privacy policies. Since Grass Studio does not collect or store your personal data, we are unable to facilitate these requests on your behalf.

For more information about your GDPR rights, you may contact your local data protection authority.

 

6. YOUR RIGHTS UNDER CCPA

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know – You have the right to request disclosure of the categories and specific pieces of personal data collected about you.

  • Right to Delete – You have the right to request deletion of personal data collected about you.

  • Right to Opt-Out – You have the right to opt-out of the sale of your personal data. (We do not sell your data.)

  • Right to Non-Discrimination – You have the right not to receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, please contact the relevant third-party service provider directly. Since Grass Studio does not collect or store your personal data, we are unable to facilitate these requests on your behalf.

California residents may also contact us using the information in Section 8 below for further assistance.

 

7. CHILDREN'S PRIVACY

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information through the App, please contact us so that we can take appropriate action.

 

8. CONTACT US

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Grass Studio
Email: grasstudio77@gmail.com

Whatsapp : +628827415617

 

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

 

10. DISCLAIMER

This Privacy Policy is provided as a template and does not constitute legal advice. Privacy laws and regulations vary by jurisdiction and may change over time. You should consult with a qualified legal professional to ensure that your Privacy Policy is fully compliant with all applicable laws and regulations, including GDPR and CCPA, and accurately reflects your specific data processing activities.

​

Grass Studio is committed to transparency and protecting your privacy. We believe in providing you with a relaxing experience without compromising your personal data.

bottom of page