✦ your data, handled with care
Privacy Policy
Effective Date: January 1, 2025 · Last updated: 18 August 2026
We care deeply about your privacy. This policy explains what data we collect, why we collect it, and how it is protected when you use the Inhale & Exhale app (iOS & Android) and website. We collect the minimum necessary — nothing more. We do not sell your data. Ever.
1. Information We Collect
In the app:
- Email address (for account creation and login)
- Display name (if provided during sign-up)
- Authentication identifiers from Google or Apple (when using Sign In with Google / Apple)
- Saved preferences — favourites, meditation history, notification settings
- Purchase status (whether you own Full Access, the single one-time purchase that unlocks all content)
- Anonymised usage data via Firebase Analytics — which screens are visited, session length, general app behaviour. No personally identifiable information is included.
On the website:
- Anonymised browsing data via Google Analytics 4 (pages visited, session length, traffic source)
- Cookie consent choice, stored locally in your browser (localStorage)
2. How We Use Your Information
- Create and authenticate your account
- Provide access to your meditation library and saved preferences
- Manage your purchase status (which content you have unlocked)
- Send essential service-related communications (e.g. password reset)
- Send Yuna's newsletter, if you opted in (unsubscribe any time)
- Understand how people use the app and website so we can improve them
We do not use your data for advertising, behavioural profiling, or third-party marketing.
3. Guest access
You can use Inhale Exhale without creating an account. When you do, we create an anonymous identifier for your device so the app can save your progress, favourites, and any purchase you make. This identifier is not linked to your name or email address. If you later create an account, the same identifier is kept and your data continues without interruption. You can delete your data at any time from within the app.
4. Third-Party Services
We use the following services. Each processes only the minimum data needed for its function:
Manages sign-in and account creation. Processes your email and authentication tokens. Firebase Privacy Policy ↗
Stores your account preferences, favourites, and purchase status. Google Cloud Privacy Notice ↗
Collects anonymised, aggregated app usage data (screens visited, session length). No personally identifiable data is collected. You can opt out in your device settings (Limit Ad Tracking / opt out of analytics). Firebase Privacy Policy ↗
Collects anonymised browsing data on the website. Sets cookies such as _ga and _ga_*. Google Privacy Policy ↗ · Opt out ↗
Authentication via Apple ID. You may hide your email using Apple's private relay. Apple Privacy Policy ↗
Authentication via your Google account. Only email and display name are shared with us. Google Privacy Policy ↗
5. Payments & Purchases
Full Access, the single one-time purchase, is processed entirely by Apple App Store (iOS) and Google Play (Android). We do not offer subscriptions — there are no recurring charges and nothing renews automatically. We do not collect, see, or store any payment information such as card numbers or billing addresses. Your purchase can be restored on a new device via "Restore Purchase" inside the app.
6. Data Sharing
We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may only be disclosed if required by law or legal process, or if necessary to protect the safety of our users or the public.
7. Data Storage & Location
Your data is stored on servers operated by Google (Firebase / Google Cloud Platform), primarily in the United States. By using Inhale & Exhale, you acknowledge that your data may be transferred to and processed in the United States in accordance with Google's standard contractual clauses.
8. Analytics & Diagnostics
We use Google Firebase services to operate and improve the app: Firebase Analytics helps us understand how features are used (through aggregated, pseudonymous usage events), Firebase Crashlytics collects crash reports and diagnostic information (such as device model, OS version, and the app state at the time of a crash) so we can fix problems, and Firebase App Check helps protect our services from abuse by verifying that requests come from authentic app installations. This information is not used for advertising and is never sold. You can read how Google processes this data at firebase.google.com/support/privacy ↗
9. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, all associated personal data (email, preferences, favourites, purchase records) will be permanently removed within 30 days. Anonymised, non-identifiable analytics data may be retained for service improvement.
10. Security
We apply industry-standard security measures including encrypted data transmission (TLS/SSL) and secure authentication protocols. While no digital system can guarantee absolute security, we take responsible steps to protect your data.
11. Your Rights
We aim to respond to all data requests within 30 days.
12. GDPR European Users
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is your consent (provided at account creation) and legitimate interest (to operate and improve the service). You may exercise your rights as described in Section 11, or lodge a complaint with your local data protection authority.
13. KVKK Turkish Users
If you are located in Turkey, your personal data is protected under the Personal Data Protection Law No. 6698 (KVKK). You have the right to learn whether your data is being processed, request information about processing purposes, request correction or deletion, and object to processing. To exercise these rights, contact us at the email address below.
14. App Store Play Store Platform Compliance
The Inhale & Exhale app complies with:
- Apple's App Tracking Transparency (ATT): We do not track you across apps or websites owned by other companies for advertising purposes.
- Apple's App Store Privacy Nutrition Labels: Our data usage is accurately declared in the App Store listing.
- Google Play Data Safety: Our data collection and sharing practices are accurately declared in the Play Store Data Safety section.
App Store listing: Inhale & Exhale on App Store ↗
Play Store listing: Inhale & Exhale on Google Play ↗
15. Children's Privacy
Inhale & Exhale is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
16. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Significant changes will also be announced on our social channels. Continued use of the app after changes constitutes acceptance of the revised policy.
17. Contact
Questions about your privacy or data? We read every message.