Privacy Policy

InhaleExhale

Effective Date: January 1, 2025

We care deeply about your privacy. This Privacy Policy explains how your information is collected, used, and protected when you use the InhaleExhale mobile app and related services.

1. Information We Collect

We only collect minimal data required to operate your account:

• Email address (for account creation and login)
• Display name (if provided during sign-up)
• Authentication identifiers provided by Google or Apple when you use Sign In with Google or Sign In with Apple

We do not collect analytics data, location data, device identifiers, or any unnecessary personal information.

2. How Your Information Is Used

Your information is used solely to:

• Create and authenticate your account
• Provide access to your meditation library and saved preferences (such as favorites)
• Manage your subscription status
• Send essential service-related communications when necessary

We do not use your data for advertising, profiling, behavioral tracking, or marketing purposes.

3. Third-Party Services

InhaleExhale uses the following third-party services to operate. Each service processes only the minimum data necessary for its function:

• Firebase Authentication (Google LLC): Manages user sign-in and account creation. Processes your email address and authentication tokens. Firebase Privacy Policy
• Cloud Firestore (Google LLC): Stores your account preferences, favorites, and subscription status. Google Cloud Privacy Notice
• Google Sign-In (Google LLC): Provides authentication via your Google account. Only your email and display name are shared with us. Google Privacy Policy
• Sign In with Apple (Apple Inc.): Provides authentication via your Apple ID. You may choose to hide your email address using Apple's private relay. Apple Privacy Policy

We do not use any analytics SDKs, crash reporting tools, or advertising frameworks.

4. Payments and Subscriptions

Premium subscriptions are processed entirely by Google Play (for Android) and Apple App Store (for iOS). InhaleExhale does not collect, process, or store any payment information such as credit card numbers or billing addresses.

Subscription management, billing, and refunds are handled directly by the respective platform. Please refer to:

• Google Play Subscriptions
• Apple App Store Subscriptions

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for commercial purposes. Your data may only be disclosed if:

• Required by law or legal process (for example, by court order)
• Necessary to protect the safety of our users or the public

6. Data Storage and Location

Your data is stored on servers operated by Google (Firebase / Google Cloud Platform). These servers are primarily located in the United States. By using InhaleExhale, you acknowledge that your data may be transferred to and processed in the United States.

7. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, all associated personal data (email, preferences, favorites, subscription records) will be permanently removed within 30 days. Anonymized, non-identifiable data may be retained for service improvement purposes.

8. Security

We apply industry-standard security measures to protect your information, including encrypted data transmission (TLS/SSL) and secure authentication protocols. While no digital system can guarantee absolute security, we take responsible steps to safeguard your data.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Withdraw consent for data processing at any time
• Request a copy of your data in a portable format

For any data-related requests, contact us at:
📧 support@inhaleexhale.app

We aim to respond to all data requests within 30 days.

10. European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is your consent (provided at account creation) and legitimate interest (to operate the service). You may exercise your rights as described in Section 9, or lodge a complaint with your local data protection authority.

11. Turkish Users (KVKK)

If you are located in Turkey, your personal data is protected under the Personal Data Protection Law No. 6698 (KVKK). You have the right to learn whether your data is being processed, request information about processing purposes, request correction or deletion, and object to processing. To exercise these rights, contact us at the email address above.

12. Children's Privacy

InhaleExhale is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the revised policy.

14. Contact

For any questions regarding this Privacy Policy or your data, please contact:
📧 support@inhaleexhale.app