Cool Off Privacy Policy

Last updated: November 11, 2026

Cool Off is made by Quiet Shrine. This policy explains what information the Cool Off app collects, what it does not collect, and the choices you have. It covers the app on iPhone, iPad, Mac and Apple Watch.

What stays on your device

The following information is stored only on your device. It is not sent to us or to anyone else, and deleting the app deletes it.

• Your safe word.
• Your answers to the quiz, and the profile the quiz produces.
• Your session history, which is when you used the app and for how long.
• Presets that you make or change, including their names and any lines you write.
• Your settings, such as the voice, the background and the outfit you choose.

The app does not record or keep audio from the microphone, and the audio is never sent to us. To hear your safe word, the app uses Apple's speech recognition. On a device that supports it, the audio is recognised on the device itself. On a device that does not, the audio is sent to Apple to be recognised, and Apple handles it under its own privacy policy.

Driving mode works out whether you are in a car on the device itself. It uses the audio connection that is in use and, if you have allowed it, the motion activity your device reports. None of this is sent anywhere, and the name of your car's audio connection stays on your device.

What the app sends

The app sends crash reports and anonymous usage data to Google Firebase, a service that Google provides to app developers. It also sends reports about installs and subscriptions to Singular, an ad measurement service. The app never asks for your name, your email address or your phone number, so none of this includes them.

Crash reports

When “Send crash reports” is on and the app crashes, it sends a report to Firebase Crashlytics. The report contains the technical details needed to fix the problem.

• Where in the app's code the crash happened.
• The device model, the iOS version and the app version.
• The free memory and storage on the device at the time.
• A random identifier for the installation. It lets us tell whether many crashes come from one device or from many.
• A short record of what the app was doing just before the crash, such as which screen was open. This part is included only when “Share anonymous usage data” is also on.

The app also reads the performance summaries that iOS prepares each day, such as how long the app was unresponsive, and adds a few numbers from them to crash reports. The summaries themselves stay on your device and are deleted after 14 days.

Anonymous usage data

When “Share anonymous usage data” is on, the app records how it is used and sends this to Google Analytics for Firebase. The app records the following.

• Which screens and help pages are opened.
• Which built-in preset a session uses, and how the session was started, for example from the app, Siri, a widget or the Watch.
• How long a session ran, how it ended, and which steps were skipped, repeated or paused.
• The time of day and the day of the week of a session, in broad groups such as “evening”.
• The kind of audio output in use, such as the speaker, headphones or a car. The name of the device is not recorded.
• Whether sound started after a start from Siri, and errors the app ran into.
• Which settings are changed, and how the app is set up. This includes the voice, the background and the outfit you chose, whether a safe word is set, whether the widgets are placed, the text size, and whether VoiceOver or Reduce Motion is turned on.
• The steps of subscribing, such as the plans being shown, a purchase being started, completed or cancelled, and whether a subscription is active.

A preset that you made or changed is recorded only as “custom”. The app never records your safe word, your quiz answers, what you say, or anything you type.

Google Analytics also collects the device model, the iOS version, the app version, the language, and an approximate location such as your country, which it works out from your device's network address. It gives each installation a random identifier so that events from the same installation can be counted together. Deleting the app discards the identifier.

Which ad brought you here

We advertise Cool Off on networks such as Facebook, Instagram and TikTok. To see which ads lead to installs and subscriptions, the app uses Singular, an ad measurement service. When “Share anonymous usage data” is on, the app tells Singular when it is opened for the first time, when the plans are shown, when a free trial begins, and when a paid subscription begins, with the plan and its price. Each report includes the device model, the iOS version and the app version, your device's network address, and Apple's identifier for vendors. That identifier is a code that Apple assigns to our apps on your device. Apple resets it when you delete our apps.

The first time you open the app, iOS asks whether to allow tracking. If you allow it, each report also includes Apple's advertising identifier. Singular then passes the install, the plans being shown and the subscription on to the network that showed you the ad. The network uses this to measure its ad and to show our ads to more people like you. The permission is not used for anything else, and nothing about your sessions is shared.

If you do not allow it, the app never reads the advertising identifier. The ad is then matched to the install by two systems from Apple that do not identify you. With SKAdNetwork, Apple itself tells the network that one of its ads led to an install. With the Apple Ads attribution token, Apple names the campaign for an ad that Apple showed.

You can change the permission at any time in the Settings app, under Privacy & Security and then Tracking. Turning off “Share anonymous usage data” stops these reports altogether. Singular's privacy policy is at singular.net/privacy-policy.

Permissions the app asks for

The app asks to track once, the first time you open it. It asks for each of the other permissions only when you turn on the feature that needs it. You can change each one at any time in the Settings app on your device.

• Tracking. This lets the app read Apple's advertising identifier, so that the network that showed you our ad can be told that it led to an install or a subscription. The section “Which ad brought you here” explains this.
• Microphone and speech recognition. These let the app listen for your safe word while the app is open or in driving mode. The app does not record the audio. Apple's speech recognition turns it into text, on your device where the device supports it and otherwise on Apple's servers.
• Siri. This lets Siri start a session when you say a phrase, including when your phone is locked. Apple handles what you say to Siri under its own privacy policy.
• Motion. If you allow it, driving mode uses the motion activity that your device reports to tell when you are in a car. This stays on your device.

Cool Off does not ask for your location, your contacts, your photos or your health data.

Subscriptions

Subscriptions are sold and billed by Apple through your Apple Account. Cool Off never sees your payment details. Apple tells the app whether a subscription is active, and the app keeps that answer on your device.

This website

startcooloff.com uses PostHog to count visits. It sets no cookies, stores nothing on your device, does not record sessions, and does not keep your IP address. It records the page you viewed, how far down the page you scrolled, how quickly the page loaded, the site that sent you, the browser and device type, the campaign link if you arrived from one, and whether you tapped a link to the App Store. PostHog processes this data for us. Its privacy policy is at posthog.com/privacy.

Who receives the information

• Google. Google processes crash reports and usage data for us, using Firebase Crashlytics and Google Analytics for Firebase. Google may process this information in the United States and in other countries where it operates. Google's privacy policy is at policies.google.com/privacy.
• Apple. Apple handles purchases, Siri requests, and speech recognition when it is not done on your device. It does so under its own privacy policy, which is at apple.com/legal/privacy.
• Singular. Singular processes the ad measurement reports for us under its own privacy policy, which is at singular.net/privacy-policy.
• The ad network that showed you our ad. If you allowed tracking, Singular tells that network, such as Meta or TikTok, about the install, the plans being shown and the subscription.

We use the information to find and fix crashes, to see which parts of the app people use, and to see which of our ads work. We do not sell it. The only advertising use is measuring our own ads and showing them to people who may want the app.

How long the information is kept

• Google Analytics keeps the usage data that is connected to an installation identifier for 14 months. After that, only totals remain.
• Firebase Crashlytics keeps crash reports for 90 days.
• Singular keeps the ad measurement reports for as long as its own privacy policy says.
• Information stored on your device is kept until you delete it or delete the app.

Your choices

• You can turn off “Send crash reports” and “Share anonymous usage data” in Settings, under Privacy. When you turn off usage data, the app notes that the switch was turned off and then stops recording. It also stops the ad measurement reports.
• You can turn tracking off or on in the Settings app, under Privacy & Security and then Tracking.
• You can turn off the microphone, speech recognition, Siri or motion permission in the Settings app as well.
• Deleting the app deletes everything it stored on your device and discards the installation identifiers.

Children

Cool Off is not directed to children under 13, and we do not knowingly collect personal information from children.

Your rights

Depending on where you live, you may have the right to ask what information we hold about you, to get a copy of it, to have it corrected or deleted, or to object to how it is used. The app has no accounts, so the information it sends is connected only to identifiers for your installation and your device. We do not know your name. If you want to make a request, write to info@quietshrine.com and we will work with you to find the information from your installation.

If you live in the European Economic Area or the United Kingdom, our legal reason for collecting this information is our legitimate interest in keeping the app working and improving it. You can object at any time by turning the two switches off. Information is passed to an ad network only if you gave permission when iOS asked, and you can take that permission back in the Settings app. You also have the right to complain to your local data protection authority.

If you live in California, we do not sell your personal information. If you allow tracking, the reports that reach an ad network may count as “sharing” under California law. You can opt out by turning tracking off in the Settings app, or by turning off “Share anonymous usage data”.

Changes to this policy

If this policy changes, the date at the top changes with it. A change to what the app collects will come with a new version of the app, and this policy will be updated in the app at the same time.

Contact

If you have a question about this policy, write to Quiet Shrine at info@quietshrine.com.