Privacy Policy (ChatGPT App)

Effective date: March 27, 2026
Provider: Spheric Admin Ltd ("we," "us," "our")
Contact: privacy.widgets@olutely.com
Product: "Nature Sounds" (the "App"), a ChatGPT app

1) Scope

This policy explains how we process data through the Nature Sounds App when it is used inside ChatGPT. The App opens an interactive ambient audio player that can start with a selected nature sound, show a matching scenic image, and let you play, pause, move to the previous or next sound, and request inline, picture-in-picture, or fullscreen display modes. This policy covers Spheric Admin Ltd's processing through the App, its MCP server, widget hosting, and supporting logging and analytics systems. It does not replace OpenAI's policies for ChatGPT platform processing.

Current implementation summary:

  • The App currently exposes one public MCP tool named nature-sounds.
  • Current tool input fields: optional sound and optional reason. sound must be one of waves, forest-rain, crackling-fireplace, mountain-breeze, flowing-river, birds-at-sunrise, distant-waterfall, or night-crickets. If omitted, the App starts with waves.
  • Current structured tool output field: sound.
  • Current tool response metadata: timestamp (ISO datetime).
  • The tool also returns assistant-facing text confirming the selected sound in the form Opened the nature sounds player with '<sound>'.
  • The current widget reads tool input/output plus ChatGPT runtime context such as locale, theme, display mode, and device platform; it keeps temporary local state for the selected sound and whether audio is playing.
  • The widget currently loads bundled image and MP3 files from our hosted widget assets domain and loads the Howler audio library from cdn.jsdelivr.net.

2) Data categories, purposes, recipients, retention, and controls

2.1 Tool invocation data and tool response data

What: The current tool input fields sound and reason, the structured tool output field sound, response metadata timestamp, and the assistant-facing confirmation text returned by the tool. The optional reason field is free text describing why the tool was invoked and can therefore contain information drawn from the surrounding conversation if you or the ChatGPT model include it.
Why: To choose the initial nature sound, launch the player, render the widget with the selected sound, and return the current tool response to the ChatGPT runtime.
Recipients: Our MCP server, OpenAI/ChatGPT as part of the tool invocation flow, our hosting and infrastructure providers acting on our behalf, and the current server-side telemetry systems described in section 2.4.
Retention by us: We do not use a separate application database to keep a persistent history of nature-sound sessions. Tool inputs and outputs are processed to generate the response, but current operational logs and analytics telemetry may temporarily capture request parameters, including sound and reason, as described in section 2.4.
Your controls: You can choose whether to use the App, omit sound and rely on the default, and avoid putting personal or sensitive information into reason or the surrounding prompt.

2.2 In-session widget runtime and local playback state

What: Temporary runtime data used while the widget is open, including the selected sound, whether playback is active, the current display mode, and ChatGPT-provided context such as locale, theme, and device-platform information used for presentation. Under the current widget code, switching sounds, pressing play or pause, and requesting a different display mode happen during the active session and are not sent back to our MCP server as new tool calls unless ChatGPT later starts a new invocation.
Why: To show the widget in the right language and theme, keep playback responsive, display the correct image and sound, and adapt the UI to inline, picture-in-picture, or fullscreen presentation.
Recipients: Primarily the ChatGPT/OpenAI widget runtime for in-session presentation behavior. Requests for widget media assets are covered separately in section 2.3.
Retention by us: We do not intentionally store this temporary playback state in a separate application database. It is intended to exist only during the active session, subject to standard delivery logs described below.
Your controls: You can start or stop playback, switch to another sound, request a different display mode, or stop using the widget at any time.

2.3 Widget, media, and third-party script delivery

What: Requests for the widget HTML, JavaScript, CSS, scenic images, and MP3 audio files served from our widget hosting/CDN providers, plus a request for the Howler audio library currently loaded from cdn.jsdelivr.net. Those requests typically include standard web delivery data such as IP address, user agent, requested URL, date and time, and transfer or status information.
Why: To deliver the widget, show the current image, load the audio engine used by the player, and stream the selected sound to your browser or device.
Recipients: Our widget hosting/CDN providers and jsDelivr and its infrastructure providers for delivery of the Howler script.
Retention: We aim to minimize logs from our own hosting and CDN providers and generally retain them for no longer than 30 days unless a longer period is reasonably necessary for security investigations, abuse prevention, or legal obligations. We do not control how third-party delivery providers such as jsDelivr retain data once a request reaches them; their own policies apply.
Your controls: You can choose whether to open the App, whether to press play, and whether to continue loading different sounds. Browser or network tools that block third-party CDNs may reduce the data disclosed to those providers but can also stop the player from working properly.

2.4 Technical delivery data, server logs, and analytics telemetry

What: Technical data generated when the App is invoked or delivered, such as IP address, user agent, URL path, timestamp, response status, response time, JSON-RPC request ID, MCP method name, and request parameters. In the current codebase, our MCP server uses server-side Mixpanel middleware, so telemetry may also include tool arguments such as sound and reason, along with any OpenAI subject identifier or similar request metadata that the platform provides for a tool call.
Why: Security, abuse prevention, service reliability, debugging, performance monitoring, and incident response.
Recipients: Our hosting, CDN, and infrastructure providers acting on our behalf, personnel who need access for operations or security, and Mixpanel as a current analytics and telemetry processor for the MCP server path.
Retention: We aim to minimize operational logs and generally retain them for no longer than 30 days unless a longer period is reasonably necessary for a security investigation, abuse review, or legal obligation. Mixpanel telemetry is retained in our analytics environment until deleted by us or until any applicable account retention setting removes it.
Your controls: You can avoid submitting unnecessary information through the App, especially in the optional free-text reason field, choose not to use the App, and contact us with rights requests or questions.

2.5 Contact data if you email us

What: Your email address and the contents of your message.
Why: To respond to privacy, legal, or support requests and maintain a record of the request.
Recipients: Spheric Admin Ltd and our email or support providers acting on our behalf.
Retention: Up to 24 months after final resolution unless a longer period is required by law or reasonably needed to establish, exercise, or defend legal claims.
Your controls: You can choose how much information to include in your message and may ask us to delete data we still hold, subject to legal limits.

3) What we do not do

  • No account creation or sign-in through this App.
  • No requirement to provide your name, email address, phone number, payment details, or precise location to use the current nature-sounds tool.
  • No microphone, camera, contacts, or device-photo-library access through the current widget.
  • No sale of personal information.
  • No current widget-to-server tool calls for play, pause, next, or previous actions after the initial tool launch.
  • No advertising SDKs or ad-personalization profiling through the current widget.

4) Cookies and similar technologies

We do not intentionally set advertising or cross-site profiling cookies through the Nature Sounds widget. ChatGPT/OpenAI, our hosting providers, your browser, and third-party delivery providers such as jsDelivr may use their own operational cookies or similar technologies for platform operation, security, or content delivery under their own policies.

5) Sharing and disclosure

We do not sell personal information. We may disclose data only as necessary to:

  • Operate, host, deliver, monitor, and secure the App through service providers such as hosting, CDN, infrastructure, analytics, and email providers.
  • Load the current widget resources and script dependencies needed for audio playback.
  • Comply with law, regulation, legal process, or enforceable government request.
  • Protect the rights, safety, and security of users, us, and the service.

6) User rights and controls

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of personal data we hold.

To exercise rights or ask questions, contact privacy.widgets@olutely.com. We may need to verify your identity before fulfilling a request.

Because the App runs inside ChatGPT, you can also manage conversation and account data through OpenAI controls. OpenAI's privacy policy: https://openai.com/policies/privacy-policy.

7) International processing

The App may be accessed globally, and data may be processed in countries where we or our service providers operate. Where required, we use appropriate safeguards for international data transfers.

8) Security

We implement reasonable technical and organizational safeguards designed to protect data processed through the App. No system can guarantee absolute security.

9) Children's privacy

The App is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

10) ChatGPT / OpenAI platform notice

OpenAI independently processes chat content, account data, platform telemetry, some widget runtime data, and display-mode handling under OpenAI's own terms and privacy practices. This policy describes Spheric Admin Ltd's processing through Nature Sounds only.

11) Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date above so the policy continues to reflect the App's current tool inputs, outputs, and disclosed data uses.

12) Contact

Questions about this policy or App privacy practices: privacy.widgets@olutely.com (Spheric Admin Ltd).