Last updated: 2026-09-15. Effective: 2026-09-15.
This is the Privacy Policy for Water Eject & Dust Remover (the "App"), an iPhone application published by Cloud Motion Lab LLC ("we", "our", "us"). It explains what the App collects, why, who processes it, how long it is kept, and the rights you have. If a section is unclear, write to dev@slyapp.co.
We collect the following categories of personal information when you use the App: identifiers (a pseudonymous, hashed device identifier used by our analytics provider), commercial information (whether this device has made the App's one-time purchase, read from Apple), and internet or other electronic network activity (anonymous in-app usage signals). We use this information to deliver the App, unlock the purchase, and understand which parts of the App work. Retention is described in the Retention section below. We do not sell your personal information and we do not share it for cross-context behavioral advertising. Your California privacy rights and the route to exercise them appear in the State Privacy Rights section below.
The App asks for microphone access the first time you tap Start. You can refuse, and every run still plays.
micProof, carrying whether access was granted and two numbers: the average level difference in decibels and the difference at 3,000 Hz. No audio, no recording and no speech is ever part of it.The App sends anonymous usage signals to TelemetryDeck so we can see which parts of the App are used and where people stop. A signal records that something happened, never anything you typed: the App has no text fields.
The signals the App sends, and what they carry:
| Signal | When | Values |
|---|---|---|
onboardingAnswered | The welcome pages finish | The reason you picked (splash, dropped, swim, muffled, dust, or not sure) |
runStarted | A run's tone begins | Mode (water or dust) and what started it (first run, again, after purchase, after relaunch) |
runStopped | You tap Stop | Seconds of tone played |
runCompleted | A run finishes | Mode, pulses, seconds, frequency range |
micProof | A run finishes | Microphone access granted or not, the level differences in decibels described above |
handoffOpened | Apple's page for a wet iPhone opens | None |
paywallShown | The purchase screens open | Which button opened them |
paywallDismissed | The purchase screens are closed | None |
purchaseStarted, purchaseCompleted, purchaseCancelled | The purchase flow | None |
ratePageShown, rateNativeRequested | A rating request is shown or handed to Apple | Which moment led to it |
volumeBelowMax | A run starts with the volume below the top | None |
outputNotSpeaker | Start is refused because headphones or a speaker are connected | None |
Attached to every signal by the App: the App's version and build number, the region setting of the device (for example US or BR, taken from iOS settings, not from location), and the number of whole days since the App was first opened.
Added by TelemetryDeck's software: technical context such as the device model, iOS version, the App's language and locale, the device's preferred language and region, time zone, screen size and orientation, light or dark appearance, text direction (left-to-right or right-to-left), whether the App came from the App Store or TestFlight, and a session-start signal when the App is opened. It also adds accessibility settings (the text size, and whether Bold Text, Reduce Motion, Reduce Transparency, Invert Colors, Increase Contrast and Differentiate Without Color are on); when the signal was sent, as the hour, day of the week, day of the month, day of the year, week, month and quarter, and whether it is a weekend; and session statistics: the date of the first session, the total number of sessions, the length of the previous session, the average session length, and how many distinct days the App has been used, in total and in the last month. TelemetryDeck identifies a device only by a SHA-256 hash of the App's vendor identifier, computed on the iPhone before any signal is sent; the vendor identifier itself is never transmitted, it is not an advertising identifier, and it differs between app developers. No signal carries your name, email, Apple Account, or location.
The App offers one one-time in-app purchase, processed by Apple under Apple's Media Services Terms. We never see your card number, billing address, Apple Account, or email. The App reads Apple's signed record on the device to know whether the purchase was made, and whether this device has already used its included first run. Payment data is governed by the Apple Privacy Policy.
None of this is sent to us except as the usage signals listed above.
After two runs in Water mode, the App can open Apple's support page for a wet iPhone inside an in-app Safari view. That page is Apple's, and Apple's Privacy Policy governs it.
| Category | Purpose | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Anonymous usage signals | Operate and improve the App | Legitimate interest, Art. 6(1)(f) |
| Microphone level check (on the device) | Show the before-and-after level you asked for by granting access | Consent, Art. 6(1)(a), via the iOS permission prompt |
| Purchase state | Unlock the runs you bought | Performance of contract, Art. 6(1)(b) |
| Keychain and settings on the device | Remember your mode and whether the included run was used | Performance of contract, Art. 6(1)(b) |
| Subprocessor | Purpose | Region | Transfer mechanism (EU and UK) |
|---|---|---|---|
| TelemetryDeck | Anonymous usage signals | As stated in the TelemetryDeck privacy policy | As stated in the TelemetryDeck privacy policy |
| Apple App Store, StoreKit | App distribution and the one-time purchase | Global, governed by Apple | Apple's own Data Privacy Framework certification and SCCs, see Apple Privacy Policy |
We do not sell personal information for money or other valuable consideration, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act as amended. We honor the Global Privacy Control signal where it reaches us; because the App performs no sale or share, no opt-out is needed to stop one.
If you live in a U.S. state with a comprehensive consumer privacy law, you have the rights below. The current list of states is California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.
Because the only identifier we receive is a one-way hash, we usually cannot match a request to your signals. To exercise any right, email dev@slyapp.co with the words "Privacy Request" in the subject line and tell us which app and what you want. We respond within 45 days, with one 45-day extension where reasonably needed. If we deny a request, you may appeal by replying to the same thread within 60 days, and we will respond to the appeal within 45 days. If you are not satisfied, California residents may contact the California Privacy Protection Agency, and other state residents may contact their state Attorney General. We treat all U.S. residents the same.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights of access, rectification, erasure, restriction of processing, portability, objection, and not to be subject to a decision based solely on automated processing that has legal or similarly significant effects. The App makes no such decisions. To exercise a right, email dev@slyapp.co. You may also lodge a complaint with your local supervisory authority; UK users may complain to the Information Commissioner's Office. We will respond within one month of receipt and may extend by two further months for complex requests, with notice.
The App is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If we learn that we have, we will delete it within 30 days. If you believe a child has provided us with personal information, contact dev@slyapp.co.
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure. If we determine that a personal-data breach affecting your information has occurred, we will notify you and applicable regulators in accordance with applicable law; for users in the EU and UK, within 72 hours after we become aware, in line with GDPR Article 33. Microphone audio never reaches any infrastructure, so a breach cannot expose it.
We may update this Privacy Policy. For material changes, including new categories of data, any transmission of microphone audio, or new subprocessors, we will give at least 30 days' advance notice through an in-app notice and will update the effective date at the top of this page. Minor changes such as typographical or formatting fixes may be made without separate notice. Continued use of the App on or after the effective date of an updated version constitutes acceptance.
For privacy questions, complaints, or rights requests: dev@slyapp.co. Our registered postal address is Cloud Motion Lab LLC, 30 N Gould St Ste R, Sheridan, Wyoming 82801, United States. We currently process EU and UK personal data at a scale below the threshold that requires a designated GDPR Article 27 or UK GDPR representative; the same contact email is the route to a response. We will appoint and publish a representative if and when our processing reaches that threshold.