Privacy

Last updated 19 October 2026

Sonen holds as little about you as it can. There is no advertising, no tracking pixels, no analytics that could tell one person from another, and nothing is shared with anyone for marketing. This page says exactly what is kept and why.

What is stored

Your email address

So you can sign in, and so we can send the link and six-digit code that sign you in. It is the only thing identifying an account — there is no password.

Sign-in links, codes and sessions

Stored as one-way hashes, never as the original value, so a copy of the database would not let anyone sign in as you. Sign-in links and codes are single use and expire within the hour.

The IP address that requested a sign-in link

Kept with the request to limit abuse of the sign-in form, and deleted together with the token.

Your preferences

Mode, soundscape, tune position, tempo and volume, so the app is where you left it on another device. A small block of settings, nothing more.

Membership status

Whether a subscription is active, when the current period ends, and the reference Stripe uses for your billing account.

What is never stored

No card details ever reach Sonen. Payment happens entirely on Stripe’s own pages. Sonen does not record what you listen to, when, or for how long. Nothing you hear leaves your device, because nothing you hear is a file — the sound is generated on your device, in your browser or the app, as it plays.

The app, and the one permission it asks for

The Sonen app asks to show notifications. That is the only permission it asks for beyond playing sound, and it is worth saying plainly what it is for, because “allow notifications” usually means something we would never do.

It is the lock-screen player, and nothing else. It is what puts the play and pause controls on your lock screen, shows what is playing when the screen is off, and lets you stop the sound without unlocking your phone. It is also what tells Android that Sonen is a music app rather than a background task, which is what keeps the sound steady when you put your phone in your pocket.

We will never send you a notification. No reminders, no “we miss you”, no offers, nothing to come back for. If you refuse the permission the app still plays everything; you simply lose the lock-screen controls.

What is counted

Sonen keeps a daily tally, and only a tally: how many visits arrived, from what kind of place (a search, a social site, an app, a direct link) and on which page; how many free sessions were started, how many ran their full twenty minutes, and how many three-minute tastes of a members' mode ran out. Each is a number for the day. No address, cookie or identifier is read or kept to make it, and nothing is stored on your device. It tells us whether Sonen is being found and how free sessions are used, never who you are.

Cookies

One cookie, set only when you sign in, which keeps you signed in. It is HttpOnly, Secure and SameSite=Lax, and strictly necessary for the service to work. There are no advertising or analytics cookies, which is why you are never asked to consent to any.

Who else is involved

• Cloudflare — hosting and the database.
• Stripe — payments and subscription billing. They hold your card details; Sonen never sees them. New memberships are sold by Onelink, Stripe’s merchant of record service, on our behalf: for that sale Onelink is responsible for the payment, the tax and your receipts, under its own privacy policy, and you can ask it to delete its records of your purchases.
• Resend — sends the sign-in emails.

Each acts on our instructions as a processor. None are given your data for their own marketing.

Nothing else is fetched from anyone else. The page, the engine, the pictures and the typeface are all served from sonen.fm, so opening Sonen tells no third party that you did. Until 22 September 2026 the typeface came from Google’s servers, which meant your browser asked them for it on every visit; it is now served from here.

How long it is kept

Sign-in links and expired sessions are cleared nightly. Your account, preferences and membership record are kept until you ask for them to be deleted, or until the account has gone unused for two years.

Deleting your account

You can delete your account yourself, at any time: in the app, tap your account at the top of the screen and choose Delete account; on the website, open your account and choose Delete my account. It removes your email address, your saved settings, your sign-ins on every device and your membership record, at once and for good. If a paid membership is still running, you will be asked to cancel it first, so that nothing goes on being charged. How deleting your account works.

Your rights

Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Email hello@sonen.co.uk and it will be done within 30 days. Deleting your account removes your email address, preferences and membership record. Billing records held by Stripe must be kept for six years for tax purposes.

Children

Sonen is meant for adults and is not directed at children. We do not knowingly hold information about anyone under 18; if you believe a child has an account, email hello@sonen.co.uk and it will be deleted.

If you are unhappy with how a request was handled, you can complain to the Information Commissioner’s Office at ico.org.uk.

Contact

Sonen Ltd is the data controller for the information described above: a private limited company registered in England and Wales, company number 17434413, registered office 5 Brayford Square, London, England, E1 0SG.

Email hello@sonen.co.uk for anything at all — support, billing, data requests, or a complaint.