Privacy Policy

Last updated: March 24, 2026

This Privacy Policy describes how BreathFlow ("we", "our", or "us") collects, uses, and protects your information when you use the BreathFlow mobile application (the "App").

1. What Data We Collect

BreathFlow collects the following data to provide and improve the App experience:

• Breathing session data: technique used, duration, cycles completed, retention times, and optional mood ratings.
• App settings and preferences: sound style, haptics, theme, reminder configurations.
• Achievement and streak data: badges earned and daily breathing streaks.
• Account information: anonymous user ID or Apple ID email (if you sign in with Apple).

2. Health Data (Apple HealthKit)

If you grant permission, BreathFlow integrates with Apple HealthKit to write Mindful Minutes after each completed breathing session. We do not read any health data from HealthKit.

HealthKit integration is entirely optional and can be enabled or disabled at any time in the App settings. Health data written through HealthKit is never stored on our servers or shared with third parties.

3. Data Storage and Cloud Sync

BreathFlow is designed as an offline-first application. All your data is stored locally on your device first.

When you are signed in, your data is also synced to our cloud servers (hosted on Supabase) to enable backup and cross-device sync. This includes your breathing sessions, statistics, settings, and badges. All cloud data is protected by Row Level Security — only you can access your own data.

Authentication sessions are stored securely using the iOS Keychain (SecureStore).

4. Third-Party Services

BreathFlow uses the following third-party services:

• Supabase — cloud database and authentication. Your synced data is stored on Supabase servers. Privacy policy
• RevenueCat — purchase management for the one-time Pro upgrade. Privacy policy
• Sentry — crash reporting. Receives anonymous crash reports and device information to help us fix bugs. No personal data is included. Privacy policy

We do not sell, trade, or rent your personal data to any third parties for marketing or advertising purposes.

5. Data Security

Your local data is protected by your device's built-in security features (passcode, Face ID, Touch ID). Cloud data is protected by encryption in transit (TLS) and at rest, with Row Level Security ensuring only authenticated users can access their own data.

6. Data Deletion

You can delete your account and all associated data at any time from Settings > Delete Account. This will permanently remove all your data from both your device and our cloud servers, including breathing sessions, statistics, badges, and settings. This action cannot be undone.

7. Children's Privacy

BreathFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in the App with an updated "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: app.support.535@gmail.com