✦ your data, handled with care

Privacy Policy

Effective Date: January 1, 2025 · Last updated: March 2026

We care deeply about your privacy. This policy explains what data we collect, why we collect it, and how it is protected when you use the Inhale & Exhale app (iOS & Android) and website. We collect the minimum necessary — nothing more. We do not sell your data. Ever.

1. Information We Collect

In the app:

  • Email address (for account creation and login)
  • Display name (if provided during sign-up)
  • Authentication identifiers from Google or Apple (when using Sign In with Google / Apple)
  • Saved preferences — favourites, meditation history, notification settings
  • Subscription status (active, expired, tier)
  • Anonymised usage data via Firebase Analytics — which screens are visited, session length, general app behaviour. No personally identifiable information is included.

On the website:

  • Anonymised browsing data via Google Analytics 4 (pages visited, session length, traffic source)
  • Email address if you subscribe to Yuna's newsletter via MailerLite
  • Cookie consent choice, stored locally in your browser (localStorage)

2. How We Use Your Information

  • Create and authenticate your account
  • Provide access to your meditation library and saved preferences
  • Manage your subscription status
  • Send essential service-related communications (e.g. password reset)
  • Send Yuna's newsletter, if you opted in (unsubscribe any time)
  • Understand how people use the app and website so we can improve them

We do not use your data for advertising, behavioural profiling, or third-party marketing.

3. Third-Party Services

We use the following services. Each processes only the minimum data needed for its function:

🔐 Firebase Authentication Google LLC

Manages sign-in and account creation. Processes your email and authentication tokens. Firebase Privacy Policy ↗

🗄️ Cloud Firestore Google LLC

Stores your account preferences, favourites, and subscription status. Google Cloud Privacy Notice ↗

📊 Firebase Analytics Google LLC

Collects anonymised, aggregated app usage data (screens visited, session length). No personally identifiable data is collected. You can opt out in your device settings (Limit Ad Tracking / opt out of analytics). Firebase Privacy Policy ↗

📈 Google Analytics 4 Google LLC (website only)

Collects anonymised browsing data on the website. Sets cookies such as _ga and _ga_*. Google Privacy Policy ↗ · Opt out ↗

🍎 Sign In with Apple Apple Inc.

Authentication via Apple ID. You may hide your email using Apple's private relay. Apple Privacy Policy ↗

🔵 Sign In with Google Google LLC

Authentication via your Google account. Only email and display name are shared with us. Google Privacy Policy ↗

📧 MailerLite (website newsletter only)

Processes your email address to send Yuna's newsletter, if you opted in. You can unsubscribe at any time via the link in any email. MailerLite Privacy Policy ↗

4. Payments & Subscriptions

Premium subscriptions are processed entirely by Apple App Store (iOS) and Google Play (Android). We do not collect, see, or store any payment information such as card numbers or billing addresses.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may only be disclosed if required by law or legal process, or if necessary to protect the safety of our users or the public.

6. Data Storage & Location

Your data is stored on servers operated by Google (Firebase / Google Cloud Platform), primarily in the United States. By using Inhale & Exhale, you acknowledge that your data may be transferred to and processed in the United States in accordance with Google's standard contractual clauses.

7. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, all associated personal data (email, preferences, favourites, subscription records) will be permanently removed within 30 days. Anonymised, non-identifiable analytics data may be retained for service improvement.

8. Security

We apply industry-standard security measures including encrypted data transmission (TLS/SSL) and secure authentication protocols. While no digital system can guarantee absolute security, we take responsible steps to protect your data.

9. Your Rights

AccessRequest a copy of data we hold about you
RectificationAsk us to correct inaccurate data
ErasureRequest deletion of your account and all data
PortabilityReceive your data in a portable format
Withdraw consentOpt out of analytics or newsletter at any time
ObjectObject to processing based on legitimate interest

We aim to respond to all data requests within 30 days.


10. GDPR European Users

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is your consent (provided at account creation) and legitimate interest (to operate and improve the service). You may exercise your rights as described in Section 9, or lodge a complaint with your local data protection authority.

11. KVKK Turkish Users

If you are located in Turkey, your personal data is protected under the Personal Data Protection Law No. 6698 (KVKK). You have the right to learn whether your data is being processed, request information about processing purposes, request correction or deletion, and object to processing. To exercise these rights, contact us at the email address below.

12. App Store Play Store Platform Compliance

The Inhale & Exhale app complies with:

  • Apple's App Tracking Transparency (ATT): We do not track you across apps or websites owned by other companies for advertising purposes.
  • Apple's App Store Privacy Nutrition Labels: Our data usage is accurately declared in the App Store listing.
  • Google Play Data Safety: Our data collection and sharing practices are accurately declared in the Play Store Data Safety section.

App Store listing: Inhale & Exhale on App Store ↗
Play Store listing: Inhale & Exhale on Google Play ↗

13. Children's Privacy

Inhale & Exhale is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Significant changes will also be announced on our social channels. Continued use of the app after changes constitutes acceptance of the revised policy.

15. Contact

Questions about your privacy or data? We read every message.

📧 support@inhaleexhale.app