Privacy

• ·Your email address and the name you chose to give us.
• ·A one-way hash of your password. We cannot read your password, and it is never included in a data export.
• ·Your practice sessions: which practice, how long, when, and how you said you felt afterwards.
• ·Your breath-retention logs.
• ·Any reflections you write. These are private to your account and are never shown on a share card.
• ·Your settings: timezone, reminder time, intentions, reduced-motion preference.

• ·Health records, diagnoses, or anything you have not typed in yourself.
• ·Audio or video of you. Nothing in BreathFLOW listens to you.
• ·Your card details. If you subscribe, Stripe handles payment and we only keep an identifier to know your membership status.
• ·Location beyond the timezone you set.

We record product events — a practice started, a session completed, a share card opened — in our own database, not a third-party analytics service. Event records include which practice and how long, and never the contents of a reflection.

We send you account emails (welcome, password reset, a note when your password changes) and, if you turn them on, at most one practice reminder a day. Every non-essential email carries a one-click unsubscribe, and unsubscribing is immediate.

You can download everything as JSON, and delete your account entirely, from your account settings. Deletion is real deletion — the rows are removed, not flagged — and it cannot be undone.

Write to hello@breathflow.life with any question about your data, and a person will answer.