Privacy Policy
Last updated: June 12, 2026
This Privacy Policy describes how Humberto Pedraza (“Breathe,” “we,” “us,” or “our”) handles information in connection with the Breathe mobile app and website (together, the “Service”).
1. Our privacy principles
- Guest-first. Core features work without an account; your data stays on your device until you choose otherwise.
- Data minimization. We collect only what a feature actually needs to function.
- No ads, no sale. We do not sell or share your personal information for advertising or cross-context behavioral tracking.
- You stay in control. You decide whether to sign in, sync, connect a heart-rate sensor, or share health data — and you can withdraw at any time.
2. Information we process
| Category | What & when | Purpose |
|---|---|---|
| Account data | Your email address and authentication identifiers — only if you create an account. | Signing you in and securing your account. |
| Session history & preferences | Breathing technique, durations, timestamps, streaks, and app settings. Stored on your device by default; synced to your account only if you sign in. | Tracking your progress and keeping it consistent across your devices. |
| Health & biometric data | Heart rate and heart-rate variability (HRV) from a Bluetooth sensor you connect, and resting heart rate / HRV read from Apple Health or Android Health Connect — only with your explicit permission. We may also write completed mindfulness sessions back to Apple Health / Health Connect at your request. | Showing live biofeedback during sessions and tailoring recommendations. |
| Subscription data | Purchase and entitlement status from the app stores, via our billing processor. We never receive or store your full payment-card details. | Unlocking Breathe Pro and managing your subscription. |
| Diagnostics | Crash reports and basic error/device context — only when diagnostics are enabled in a given build. | Finding and fixing stability problems. |
We do not sell your personal information, and we do not use it for cross-context behavioral advertising.
3. How we handle health data
Health and biometric information is treated with extra care:
- Permission first. We access heart rate, HRV, or any Apple Health / Health Connect data only after you grant the specific system permission, and only for the features you use.
- On-device by default. Live readings from a connected sensor are used during your session and are not uploaded unless they are part of session history you have chosen to sync.
- No advertising or resale. We never use health or biometric data for advertising, and we never sell it or share it with data brokers.
- Your control. You can revoke sensor or health permissions at any time in your device settings, and disconnect a Bluetooth sensor from within the app.
Where applicable, our use of Apple Health and Android Health Connect follows those platforms’ user-data policies, including their restrictions on how health data may be used and disclosed.
4. Service providers
We share limited data with vetted processors that help us operate the Service:
- Supabase — authentication and database hosting for accounts, session sync, and preferences.
- RevenueCat, with the Apple App Store and Google Play — processing subscription purchases and entitlement status.
- Sentry — crash and error diagnostics (only when enabled in a build).
Each provider processes data under its own terms and security commitments, and only as needed to provide its service to us.
5. Legal bases & retention
Where required (for example under the GDPR/UK GDPR), we process data to perform our contract with you (providing the Service), on the basis of your consent (for example, connecting a health sensor or enabling optional diagnostics), or for our legitimate interests in operating, securing, and improving the Service. We keep personal data only as long as needed for these purposes or as required by law, and we delete or anonymize it afterward. You can remove account data sooner by deleting your account.
6. Your choices & rights
- Use Breathe as a guest to keep your history on-device only.
- Access, correct, export, or delete your account and synced data by contacting us at the address below.
- Revoke Bluetooth and health permissions anytime in your device settings.
- Cancel a subscription anytime through your App Store or Google Play account settings.
- Depending on your region (for example the EEA, UK, or California), you may have additional rights such as access, deletion, portability, and objection. We do not discriminate against you for exercising them.
7. Security
We use industry-standard safeguards — including encryption in transit and access controls at our hosting providers — to protect your information. No method of transmission or storage is perfectly secure, but we work to protect your data and to limit who can access it.
8. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us personal data, please contact us and we will delete it.
9. International transfers
Your information may be processed in countries other than your own, including the United States. Where applicable, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
10. Wellness disclaimer
Breathe is a wellness and relaxation tool, not a medical device, and it does not provide medical advice, diagnosis, or treatment. Heart-rate and HRV readings are for general wellness and informational purposes only. See the Terms of Service for important health and safety information.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, through an in-app notice. Continued use of the Service after an update means you accept the revised policy.
12. Contact
Questions, requests, or privacy concerns: hpedraza2333@gmail.com