Legal

Privacy Policy

Last updated 1 October 2026

BreathCare is a breathing app. It has no accounts and no server of its own. This page says exactly what happens to your data — what stays on your iPhone, what leaves it, and what you can ask us to do.

1. Who is responsible for your data

The controller of the personal data described here is:

Write to that address with any question about this policy or about your data. We have not appointed a Data Protection Officer; the same address reaches the person who decides how BreathCare handles data.

This policy covers the BreathCare app for iPhone and this website. It does not cover Apple, whose handling of your App Store purchase is governed by Apple's own privacy policy.

2. What stays on your iPhone

BreathCare has no backend of its own. Everything the app records about your practice is written to its own storage on your iPhone, inside the app's container, and it stays there. We have no copy and no way to get one.

This is what the app stores on the device:

• Your sessions One record for each finished session: when it started, which local day it belongs to, the mode, the pattern, how long it was planned to run, how long it actually ran, how many breaths you took, how it ended, and your answer to “Did it help?” (Yes, A little, or No) when you give one.
• Your daily totals Per-day totals worked out from those session records, so the app can draw your history without recounting everything.
• Your custom pattern The breathing pattern you built yourself and the session length you chose for it.
• Your reminders The name you gave a reminder, the time, the days of the week it repeats on, and which local notifications are currently scheduled.

Why: this is the app. Without it there is no history, no streak, no custom pattern and no reminder.

Lawful basis: Article 6(1)(b) GDPR — processing necessary to provide the service you asked for. In practice we are not a party to it: the data never reaches us.

How long: until you delete it in the app, or until you delete the app. Deleting BreathCare removes all of it from your iPhone. There is nothing left behind on a server, because there is no server.

A consequence worth knowing before you rely on it: there is no backup, no sync and no export. If you delete the app, or lose the phone without an iPhone backup, your history is gone and we cannot restore it.

3. Apple Health

BreathCare does not use Apple Health. It neither reads anything from Health nor writes anything to it.

4. Analytics

This and advertising measurement (section 4a) are the parts of BreathCare that send data off your phone, so they get the longest sections.

Who processes it, and where

We use PostHog as a processor, on its EU Cloud (https://eu.i.posthog.com). The events are stored in the European Union.

The identifier, honestly

The analytics library generates a random identifier for your installation of the app and stores it in the app's container on your device. It is not your name, your email address, your Apple ID, your phone number, your advertising identifier or your device's serial number — it is a random string created on your phone the first time you open the app.

It is still personal data under the GDPR, because it lets events be grouped together as coming from one installation. That is called a pseudonymous identifier, and calling it “completely anonymous” would be wrong. So we do not call it that. It disappears when you delete the app; a reinstall generates a new one, unconnected to the old one.

What is sent

A fixed list of events, written into the app by hand. Nothing else is collected:

• Progress through onboarding.
• A session started, completed, paused or resumed — with the mode, the length in minutes, and the shape of the pattern, such as “4-4-6-2”.
• Switching between the app's tabs.
• A reminder being set, and a reminder being switched on or off.
• The subscription screen being viewed, a subscription being started, and a subscription being cancelled.
• Changes to the tone, the soundscape and the guide voice.
• The screenshot-feedback dialog appearing and being answered.
• Your answer to the iPhone's “Allow tracking” prompt.

Every event also carries where this installation came from: “organic”, “Apple Search Ads” or “Meta”, and for Apple Search Ads the campaign, ad group and keyword numbers and the country that Apple reports (see section 4a). That label describes an ad, not you.

What is never sent

• Your answers to “Did it help?”.
• The names you give your reminders.
• Any free text you type.
• Your email address.
• Any health data.

What is switched off

• Autocapture is off. The library does not record taps, screens or gestures by itself.
• Session replay is off. Nothing records what your screen looks like.
• Application lifecycle events are off.
• Location from your IP address is disabled on every event ($geoip_disable), so no country, region or city is derived from it.
• We never call the library's identify() function. There is no person profile to attach anything to, because there are no accounts.

Why we do it

To see which parts of the app are used, where people give up, and whether a change made things better or worse. Without it we would be guessing.

Lawful basis: our legitimate interests — Article 6(1)(f) GDPR — in understanding and improving the app. We have weighed that against your privacy: the data is a short fixed list with no content in it, no profile is built, nothing is sold or shared for advertising, and the identifier cannot be linked to you by us or by anyone else.

How to object — read this, because there is no switch yet

The app does not currently have an in-app control to turn analytics off. We are telling you that plainly rather than describing a toggle that is not there.

You have two ways to stop it:

• Delete the app. That removes the identifier and the app stops sending anything.
• Object in writing under Article 21(1) GDPR, by emailing support@breathcare.app. Say that you object to analytics. We will reply and tell you exactly what we have done. Be aware of the limit that follows from the design: because we never learn which random identifier belongs to which person, we usually cannot find your events in order to delete them. If that is the case we will say so, rather than claim otherwise.

4a. Advertising measurement

We advertise BreathCare, and we want to know which ads actually bring people to it. Two things in the app serve that, and neither shows you an ad.

Meta (Facebook)

The app contains Meta's software development kit (the “Facebook SDK”, core part only — there is no Facebook login and no sharing). It sends to Meta Platforms Ireland Limited:

• From the first launch: that the app was installed and opened, together with technical information the SDK reads from your device — such as the device model, iOS version, app version, language, time zone and the IP address of your connection.
• Only if you allow tracking: your iPhone's advertising identifier (IDFA). The app asks once, right after setup, with the iPhone's own “Allow BreathCare to track your activity…” prompt. If you choose “Ask App Not to Track”, iOS gives Meta no advertising identifier, and Meta can only measure ads through Apple's privacy-preserving reporting (SKAdNetwork), which does not identify you.
• Only once BreathCare sells a subscription: that a free trial started, or that a purchase was made, with its price and currency. The current version sells nothing, so nothing of the kind is sent.
• The app also asks Meta once whether the installation came from one of our ads that carried a link into the app.

Never sent to Meta: your sessions, patterns, answers, reminders or their names, any health data, your email address, and anything you type.

Meta uses this data under its own privacy policy, facebook.com/privacy/policy, which also describes what Meta does with it for its own purposes.

Apple Search Ads

Once per installation, the app asks iOS for an attribution token and sends it to Apple's attribution service. Apple answers whether the installation came from an Apple Search Ads ad and, if it did, the campaign, ad group and keyword numbers and the country. No advertising identifier is involved and no permission prompt is needed. The answer is stored on your iPhone and added to the analytics events described in section 4.

Why we do it

Lawful basis: our legitimate interests — Article 6(1)(f) GDPR — in knowing whether our advertising works. Reading your advertising identifier is based on your consent, Article 6(1)(a), which you give or refuse in the iPhone's prompt.

How to stop it

• The advertising identifier: iPhone Settings → Privacy & Security → Tracking → switch BreathCare off. That withdraws your consent at once.
• Everything else in this section: there is no in-app switch. Delete the app, or object in writing under Article 21(1) GDPR by emailing support@breathcare.app, as for analytics.

5. When you email us

“Contact us” and “Report a bug” do not send anything themselves. They open your own Mail app with a message already addressed to support@breathcare.app. You decide whether to send it. Your mail provider carries it, and we receive whatever your mail identity shows — normally your email address and the name on the account.

A bug report can attach a diagnostics block. If you leave it in, it contains:

• the app version and build number;
• your iOS version;
• your device's hardware identifier, such as iPhone16,2;
• your locale, whether you use a 12- or 24-hour clock, and your calendar settings;
• your text size setting, and whether the app's fonts loaded;
• whether the pacing tone and haptics are switched on;
• whether notifications are allowed, and how many reminders are scheduled;
• your subscription status as the App Store reports it, such as “in trial” or “expired”, without any transaction or account identifier;
• how many sessions you have finished in total;
• the last error the app's data store produced, as text, if there was one.

It contains no advertising identifier, no identifier for vendor and no location, and nothing about your sessions beyond that one total — no times, dates, lengths, modes or answers. You can see the whole block before you send it, and you can delete it.

Lawful basis: Article 6(1)(b) GDPR where you are asking for support with a subscription, and Article 6(1)(f) — our legitimate interest in answering messages and fixing the app — otherwise.

How long: we keep support correspondence for 24 months after the matter is closed, then delete it. If a message matters for a legal claim or a tax record, we keep it for as long as the law requires.

6. Subscriptions and the App Store

BreathCare's subscription — annual or monthly, with a 7-day free trial — is sold through the App Store. Apple takes the payment and manages renewal and cancellation.

We never see your card number, your billing address or the email address on your Apple Account. Apple does not give them to us.

Cancelling happens in the App Store, in your Apple subscription settings — not in BreathCare and not by writing to us.

The “Billing history” screen in the app shows the transactions Apple has recorded for this app, read from the App Store on your device. It is your device asking Apple about your own purchases; it does not send anything to us.

Apple is its own controller for the purchase, the payment and the subscription record. What Apple does with that data is described in Apple's privacy policy.

Lawful basis for the part that happens in the app: Article 6(1)(b) GDPR — giving you the subscription you paid for.

7. Reminders and notifications

Reminders are scheduled entirely on your device, through iOS's own notification system. Nothing is sent from a server, and there is no push token — we have no technical way to send you a notification.

The reminder's name, its time and its days live on your phone with the rest of your data, and are covered by section 2.

Lawful basis: Article 6(1)(b) GDPR. iOS also asks for your permission before it will show notifications at all, and you can withdraw that at any time in Settings.

8. What BreathCare does not do

Stated as a list so you do not have to infer it from silence:

• We do not sell or rent your data. There is no price at which this changes.
• There is no advertising in the app. Meta's software in it measures BreathCare's own ads and shows none.
• We obtain the advertising identifier (IDFA) only if you allow tracking when your iPhone asks, and only to measure our ads (section 4a).
• The only third-party software in the app that collects data is PostHog (section 4) and Meta's SDK (section 4a).
• We do not build a profile of you and make no automated decisions about you within the meaning of Article 22 GDPR.
• These legal pages set no cookies and run no scripts at all.

9. How long data is kept

• Sessions, daily totals, custom pattern, reminders Until you delete them in the app or delete the app. We hold no copy. On your iPhone
• The random analytics identifier Stored in the app's container until you delete the app. On your iPhone
• Analytics events Kept for 12 months from the day the event is received, then deleted. PostHog EU Cloud
• Where the installation came from Stored in the app's container until you delete the app. On your iPhone
• Advertising-measurement data sent to Meta Kept by Meta for as long as Meta's own privacy policy provides. Meta
• Support email 24 months after the matter is closed, unless a legal claim or a tax rule requires longer. Our mailbox
• Purchase and subscription records Held by Apple, for as long as Apple's own policy provides. We do not hold them. Apple

10. Where your data is processed

Most of it is not processed anywhere but your own phone.

Analytics events go to PostHog's EU Cloud and are stored in the European Union. We have not authorised any transfer of PostHog analytics data outside the European Economic Area. We are established in Poland, and support email reaches us in Poland.

Advertising-measurement data goes to Meta Platforms Ireland Limited, and Meta may transfer it to Meta Platforms, Inc. in the United States. Meta Platforms, Inc. is certified under the EU–U.S. Data Privacy Framework, which the European Commission recognises as adequate protection.

Apple processes your purchase under its own arrangements, which may involve transfers outside the EEA under the safeguards Apple describes in its privacy policy. That part is Apple's decision, not ours, and we have no access to that data.

11. Your rights

Under the GDPR you have the right to:

• Access your personal data and get a copy (Article 15).
• Correct data that is wrong (Article 16).
• Erasure — have your data deleted (Article 17).
• Restrict how we process it (Article 18).
• Portability — receive data you gave us in a machine-readable form (Article 20).
• Object to processing based on legitimate interests, which here means the analytics and the advertising measurement (Article 21).
• Withdraw consent at any time, where consent is the basis — that is the permission to track, which you withdraw in iPhone Settings → Privacy & Security (Article 7(3)).
• Not be subject to automated decision-making (Article 22). There is none in BreathCare.

To exercise any of them, write to support@breathcare.app. We answer within one month, and tell you if we need longer, as Article 12(3) allows.

What having no account means in practice

Because there is no sign-up, we hold nothing that connects you to an identity. Honestly stated:

• For the data on your phone, you already have these rights in your own hands and do not need us. You can see it in the app, change your pattern, delete a reminder, and erase everything by deleting the app. There is no “delete my history” button in the app today — deleting the app is how you erase it all. We cannot access any of it, so we cannot do it for you.
• For analytics, the only handle that exists is a random identifier we cannot link to a person. Article 11 GDPR covers this: where a controller cannot identify a data subject, the access, correction, erasure, restriction and portability rights do not apply unless you supply information that makes identification possible. If you write to us, we will explain what we can and cannot do in your case, and we will not pretend to have done something we have not.
• For the data Meta receives (section 4a), Meta holds it under its own policy and offers its own tools for access and deletion; we receive nothing from Meta that would let us find you in it.
• For your email to us, the rights apply normally: we know your address, so we can find, correct and delete your correspondence.

12. Complaining to a supervisory authority

If you think we have handled your data unlawfully, you can lodge a complaint with the Polish supervisory authority:

If you live in another EEA country, you can complain to your own national data protection authority instead. You can also go to court. Please consider telling us first — it is usually faster.

13. Children

BreathCare is not directed at children under 16, and we do not knowingly process their personal data. If you are under 16, please use the app only with a parent's or guardian's agreement.

If you are a parent and want the app's data gone from a child's phone, deleting the app does it completely. If you want to raise anything else, write to support@breathcare.app.

14. Security

Data the app stores sits inside the app's own container, protected by iOS's sandbox and by the device encryption that your passcode unlocks. Keeping a passcode on your iPhone is the single most effective thing you can do for this data.

Analytics events travel over an encrypted HTTPS connection. PostHog holds them as our processor and handles them only on our instructions, under Article 28 GDPR.

No system is perfect, and we will not claim otherwise. What we can say is that the amount of your data we hold is deliberately as close to nothing as we could make it.

15. Changes to this policy

When this policy changes, the date at the top of the page changes with it, and this page always carries the current version.

Because you have no account, we have no way to email you about a change — we do not know your address. If we make a change that materially affects your rights, we will say so on this page, and we will describe it rather than leave you to compare two versions.

16. Contact

BreathCare is a wellness app, not a medical device. It does not diagnose, treat or prevent anything. A wellness practice, not medical care — stop if you feel unwell.