✦ your data, handled with care

Privacy Policy

Effective Date: January 1, 2025 · Last updated: 18 August 2026

We care deeply about your privacy. This policy explains what data we collect, why we collect it, and how it is protected when you use the Inhale & Exhale app (iOS & Android) and website. We collect the minimum necessary — nothing more. We do not sell your data. Ever.

1. Information We Collect

In the app:

  • Email address (for account creation and login)
  • Display name (if provided during sign-up)
  • Authentication identifiers from Google or Apple (when using Sign In with Google / Apple)
  • Saved preferences — favourites, meditation history, notification settings
  • Purchase status (whether you own Full Access, the single one-time purchase that unlocks all content)
  • Anonymised usage data via Firebase Analytics — which screens are visited, session length, general app behaviour. No personally identifiable information is included.

On the website:

  • Anonymised browsing data via Google Analytics 4 (pages visited, session length, traffic source)
  • Cookie consent choice, stored locally in your browser (localStorage)

2. How We Use Your Information

  • Create and authenticate your account
  • Provide access to your meditation library and saved preferences
  • Manage your purchase status (which content you have unlocked)
  • Send essential service-related communications (e.g. password reset)
  • Send Yuna's newsletter, if you opted in (unsubscribe any time)
  • Understand how people use the app and website so we can improve them

We do not use your data for advertising, behavioural profiling, or third-party marketing.

3. Guest access

You can use Inhale Exhale without creating an account. When you do, we create an anonymous identifier for your device so the app can save your progress, favourites, and any purchase you make. This identifier is not linked to your name or email address. If you later create an account, the same identifier is kept and your data continues without interruption. You can delete your data at any time from within the app.

4. Third-Party Services

We use the following services. Each processes only the minimum data needed for its function:

🔐 Firebase Authentication Google LLC

Manages sign-in and account creation. Processes your email and authentication tokens. Firebase Privacy Policy ↗

🗄️ Cloud Firestore Google LLC

Stores your account preferences, favourites, and purchase status. Google Cloud Privacy Notice ↗

📊 Firebase Analytics Google LLC

Collects anonymised, aggregated app usage data (screens visited, session length). No personally identifiable data is collected. You can opt out in your device settings (Limit Ad Tracking / opt out of analytics). Firebase Privacy Policy ↗

📈 Google Analytics 4 Google LLC (website only)

Collects anonymised browsing data on the website. Sets cookies such as _ga and _ga_*. Google Privacy Policy ↗ · Opt out ↗

🍎 Sign In with Apple Apple Inc.

Authentication via Apple ID. You may hide your email using Apple's private relay. Apple Privacy Policy ↗

🔵 Sign In with Google Google LLC

Authentication via your Google account. Only email and display name are shared with us. Google Privacy Policy ↗

5. Payments & Purchases

Full Access, the single one-time purchase, is processed entirely by Apple App Store (iOS) and Google Play (Android). We do not offer subscriptions — there are no recurring charges and nothing renews automatically. We do not collect, see, or store any payment information such as card numbers or billing addresses. Your purchase can be restored on a new device via "Restore Purchase" inside the app.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may only be disclosed if required by law or legal process, or if necessary to protect the safety of our users or the public.

7. Data Storage & Location

Your data is stored on servers operated by Google (Firebase / Google Cloud Platform), primarily in the United States. By using Inhale & Exhale, you acknowledge that your data may be transferred to and processed in the United States in accordance with Google's standard contractual clauses.

8. Analytics & Diagnostics

We use Google Firebase services to operate and improve the app: Firebase Analytics helps us understand how features are used (through aggregated, pseudonymous usage events), Firebase Crashlytics collects crash reports and diagnostic information (such as device model, OS version, and the app state at the time of a crash) so we can fix problems, and Firebase App Check helps protect our services from abuse by verifying that requests come from authentic app installations. This information is not used for advertising and is never sold. You can read how Google processes this data at firebase.google.com/support/privacy ↗

9. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, all associated personal data (email, preferences, favourites, purchase records) will be permanently removed within 30 days. Anonymised, non-identifiable analytics data may be retained for service improvement.

10. Security

We apply industry-standard security measures including encrypted data transmission (TLS/SSL) and secure authentication protocols. While no digital system can guarantee absolute security, we take responsible steps to protect your data.

11. Your Rights

AccessRequest a copy of data we hold about you
RectificationAsk us to correct inaccurate data
ErasureRequest deletion of your account and all data
PortabilityReceive your data in a portable format
Withdraw consentOpt out of analytics or newsletter at any time
ObjectObject to processing based on legitimate interest

We aim to respond to all data requests within 30 days.


12. GDPR European Users

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is your consent (provided at account creation) and legitimate interest (to operate and improve the service). You may exercise your rights as described in Section 11, or lodge a complaint with your local data protection authority.

13. KVKK Turkish Users

If you are located in Turkey, your personal data is protected under the Personal Data Protection Law No. 6698 (KVKK). You have the right to learn whether your data is being processed, request information about processing purposes, request correction or deletion, and object to processing. To exercise these rights, contact us at the email address below.

14. App Store Play Store Platform Compliance

The Inhale & Exhale app complies with:

  • Apple's App Tracking Transparency (ATT): We do not track you across apps or websites owned by other companies for advertising purposes.
  • Apple's App Store Privacy Nutrition Labels: Our data usage is accurately declared in the App Store listing.
  • Google Play Data Safety: Our data collection and sharing practices are accurately declared in the Play Store Data Safety section.

App Store listing: Inhale & Exhale on App Store ↗
Play Store listing: Inhale & Exhale on Google Play ↗

15. Children's Privacy

Inhale & Exhale is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Significant changes will also be announced on our social channels. Continued use of the app after changes constitutes acceptance of the revised policy.

17. Contact

Questions about your privacy or data? We read every message.

📧 support@inhaleexhale.app