BreatheNow Privacy Policy

Effective date: 2026-04-04 Last updated: 2026-04-04

This Privacy Policy describes how BreatheNow ("we", "us", "our") collects, uses, discloses, and protects personal information when you use the BreatheNow mobile application for iOS ("App"). The App is provided by BreatheNow. This Policy applies globally and is intended to meet the requirements of major privacy laws including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), COPPA, and other applicable laws.

Please read this Policy carefully. By using the App you consent to the collection and processing of your information as described below.

1. Introduction and Purpose

• Purpose: We provide guided breathing exercises, programs, progress tracking, Apple Health integration, and related features to help reduce stress, improve sleep, and increase focus.

• Scope: This Policy explains what information we collect, why we collect it, how we use it, how long we store it, your privacy rights, and how to contact us.

2. Information We Collect

We collect information required to operate the App, provide features, comply with legal obligations, and improve our services. Information we collect may include:

A. Personal Data (Personal Information)

• Account and profile data you supply: email address, display name (if you create a profile), profile photo (optional).

• Contact information when you contact support: email content and any optional attachments you provide.

• Purchase & subscription status: purchase receipts, subscription state provided by Apple and RevenueCat (we do not collect your full payment card details).

B. Sensitive Data

• Health and Fitness Data: session durations, breathing technique used, mood before/after sessions, session timestamps, mindful minutes synced from Apple Health, streaks and program progress. This data is treated as sensitive and handled with heightened protections.

C. Usage Data & Technical Data

• Device and technical information: device model, iOS version, app version, device language, unique device identifiers, IP address (for service delivery and security), crash logs and diagnostics (if you opt-in to send diagnostics).

• Interaction data: session start/end times, features used, settings (e.g., haptic enabled), notification preferences.

D. Derived & Aggregated Data

• Non-identifying aggregated statistics about use patterns, averages, and trends (used for analytics and product improvement).

Notes:

• We do not collect contact lists or background location data.

• Apple Health data is shared only with your explicit permission via HealthKit. See Apple Health section below.

3. How We Use Your Information

We use collected data for the following purposes:

• To provide and operate the App and its features (guided sessions, haptic, ambient sounds, session history, program progress).

• To sync mindful minutes and session data with Apple Health (with your consent).

• To manage your account, subscription, free trials, and in-app purchases.

• To communicate with you about your account, updates, changes, notifications, and support requests.

• To analyze and improve the App, fix bugs, conduct diagnostics, and improve performance (using aggregated or pseudonymized data where possible).

• To personalize your experience (program suggestions, reminders, streak nudges).

• To detect, prevent and address technical issues and abuse; to improve security.

• To comply with legal obligations and enforce our Terms of Use.

We will not use collected health data for medical diagnosis or treatment; BreatheNow is a wellness/fitness app, not medical advice.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal bases include:

• Performance of a contract: for account, subscription, and service delivery.

• Consent: for optional features such as Apple Health sync and diagnostics/error reporting.

• Legitimate interests: for improving the App, fraud detection, and security (balanced against your privacy rights).

• Compliance with legal obligations where required.

5. Third-Party Services and Disclosure

We work with a limited set of third-party providers to enable payments, distribution, and platform integrations. We do not use third-party advertising networks.

Third parties that may receive your data include:

• Apple, Inc. (App Store, Apple In-App Purchases, HealthKit). Apple’s privacy information: https://www.apple.com/legal/privacy/ and HealthKit docs: https://developer.apple.com/documentation/healthkit

• RevenueCat (subscription and purchase management). RevenueCat privacy policy: https://www.revenuecat.com/privacy/

What these third parties receive:

• RevenueCat: purchase/subscription receipts, user identifiers relevant to subscription management. RevenueCat does not receive your full payment card details; payments are processed by Apple.

• Apple: Apple may have access to purchase transactions, app analytics (if enabled), HealthKit data only with your permission, and any data required by Apple for App Store operations and legal compliance.

We may share aggregated or anonymized data with third parties for analytics, benchmarking, or research. We will never sell your personal data.

Disclosure for legal reasons: We may disclose information if required by law, to respond to lawful requests or legal process, to protect rights, property, or safety, or to enforce our policies.

6. Apple Health Integration

• The App integrates with Apple Health (HealthKit) to read and/or write certain health and fitness data (for example: mindful minutes, session durations). We only access the Health data you explicitly authorize in the iOS Health app.

• You can enable or disable HealthKit access in the iOS Health app Settings at any time.

• Health data synced to Apple Health remains under your control in the Health app. A copy of session data stored within BreatheNow will remain in our App data until you request deletion (see Data Retention and Your Rights).

• We will not use HealthKit data for advertising or sell it to third parties.

7. Data Retention

We retain personal data only for as long as necessary to provide the App and for legitimate and lawful purposes:

• Account & profile information: retained until you request deletion or for as long as your account is active.

• Health & session data (session history, mood entries, program progress, Apple Health synced copies): retained until you request deletion. Aggregated and anonymized data may be retained indefinitely for analytics and product improvement.

• Purchase & subscription records: retained for a minimum of 2 years for accounting, tax, and legal compliance; transactional metadata may be retained longer as required by law.

• Diagnostic logs & crash reports: retained for up to 1 year (or otherwise for as long as needed to resolve technical issues) unless you opt-out of sharing diagnostics.

To request deletion of your data, please contact us (see Contact Us). We will comply with valid deletion requests, subject to any legal obligations that require retention.

8. Security

We take technical and organizational measures designed to protect your data:

• Data in transit is protected using TLS encryption.

• Sensitive data stored on servers is protected by industry-standard access controls and encryption mechanisms where appropriate.

• Access to personal data is limited to authorized personnel and vendors who need access to perform their functions.

• We follow best practices for secure software development and regularly maintain and patch our systems.

Despite these measures, no system is completely secure. If we become aware of a data breach affecting your personal data, we will follow applicable legal requirements to notify affected users and authorities.

As a health app, we maintain heightened security practices and will never sell your personal or health data.

9. Children’s Privacy

• BreatheNow is not directed to or designed for children under the age of 13. We do not knowingly collect personal information from children under 13.

• If you are under the minimum age required in your jurisdiction (for example under 16 in some countries), do not use the App without parental or guardian consent.

• If we discover that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information. To request deletion, contact us at breathenow@forvibe.app.

10. Your Privacy Rights (GDPR, CCPA and Others)

If you are an applicable resident (e.g., EEA, UK, California), you have certain rights regarding your personal data. These include:

• Right to Access: You may request access to the personal data we hold about you.

• Right to Rectification: You may request correction of inaccurate or incomplete data.

• Right to Deletion (Right to be Forgotten): You may request deletion of your personal data, subject to legal retention obligations.

• Right to Restrict/Limit Processing: You may request limits on how we process your data.

• Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable format.

• Right to Object: You can object to processing based on legitimate interests or direct marketing (we do not use your data for advertising).

• Right to Opt-Out of Sale: We do not sell personal data. If you believe otherwise, contact us.

• CCPA-specific rights: California residents also have the right to request disclosure of categories of personal information collected, to request deletion, and to opt out of targeted advertising. We do not engage in targeted advertising using your data.

How to exercise your rights:

• Submit a request to breathenow@forvibe.app. We may require verification of your identity to process requests. We will respond to valid requests within 30 days where required by law (may be extended by up to 60 days with notice).

Non-discrimination: Where applicable (e.g., CCPA), you will not be discriminated against for exercising your privacy rights.

11. AI-Powered Features

• BreatheNow does not rely on external AI services (such as OpenAI or Anthropic) to process your personal or HealthKit data. Any content generation, ambient sound generation, and session guidance are produced locally on-device or by non-AI deterministic algorithms unless otherwise disclosed in-app.

• If we introduce AI-powered features in the future that process personal or health data via third parties, we will update this Policy, obtain necessary consents, and clearly disclose data flows.

12. In-App Purchases, Subscriptions, Free Trials and Refunds

• Business model: Freemium. The App offers optional in-app purchases and subscription plans for Pro features and structured programs.

• Payment processing: All payments and billing are processed through Apple In-App Purchase (Apple) and subscription management may be supported by RevenueCat. We do not collect or store your full payment card details.

• Auto-renewal: Subscriptions auto-renew via the App Store unless canceled. You can manage and cancel subscriptions through your Apple ID account settings: https://support.apple.com/en-us/HT202039

• Free trial: We offer a 3-day free trial for certain subscription plans. If you do not cancel the trial before it ends, you will be billed according to the subscription terms.

• Refund policy: Our standard refund policy is 14 days. For refund requests, first contact Apple support for App Store purchases; you may also contact breathenow@forvibe.app for assistance.

13. Advertising and User Tracking

• BreatheNow does NOT display third‑party advertising and does NOT use advertising identifiers for tracking or ad targeting.

• We do not sell or share your personal or health data for advertising purposes.

14. Transfers of Data

• Your data may be processed by our service providers (such as RevenueCat or cloud-hosting providers) located in various countries, including the United States. Where data is transferred outside your jurisdiction, we implement appropriate safeguards (standard contractual clauses, where applicable) to ensure an adequate level of protection.

• By using the App, you consent to such transfers in accordance with this Policy.

15. Changes to This Privacy Policy

• We may update this Policy from time to time to reflect changes in our practices, new features, or legal requirements. We will post the updated Policy in the App and indicate the "Last updated" date at the top.

• For material changes that affect your rights, we will provide more prominent notice (e.g., in-app notification or email) and, where required, obtain consent again.

16. Cookies and Similar Technologies

• The App may use local storage and similar technologies on your device to store preferences and session state. We do not use web cookies while running the native iOS app.

• Any use of analytics or diagnostics (only if you opt-in) may use minimal device identifiers for crash reporting and diagnostics.

17. How to Delete Your Account or Withdraw Consent

• To request deletion of your account or personal data, or to withdraw consent for optional processing (e.g., Apple Health sync), contact us at breathenow@forvibe.app with the subject line "Data Deletion Request" or "Privacy Request". Please include the email address associated with your account and details of your request.

• We may need to verify your identity before fulfilling the request. We will comply within applicable legal timeframes.

• Note: Deleting your account will remove your profile and session history