Privacy Policy

LAST UPDATED · 2026

Draft for review. This template reflects Orbreath's current data practices but must be reviewed by a qualified lawyer before publication.

Orbreath ("we", "us") provides science-led guided breathing on mobile and the web. This policy explains what we collect, why, and your choices. We collect the minimum needed to run the service and we never sell your personal data.

What we collect

Account — your email address and display name when you sign up or use Apple/Google sign-in.
Practice data — completed sessions, streaks, minutes, and the outcome (calm/focus/energy/sleep) you practised, so your progress syncs across devices.
Preferences — settings such as voice/haptics/ambient sound, and your reminders.
Subscription status — whether you have an active trial or membership (we never see your card details — payments are handled by Apple, Google, or our billing processor).

We do not collect contacts, precise location, or advertising identifiers.

Heart data

If you connect Apple Health, Orbreath reads your heart-rate data on your device to show your response to a session. Heart-rate values are never uploaded. Only a per-session verdict (settled, no change, or not enough data) syncs to your account. Your heart data is never sold or shared. Connecting Apple Health is optional — every other part of Orbreath works without it.

How we use it

To deliver the app — your library, progress, reminders, and synced settings.
To operate your account and subscription.
To send the daily nudge you opt into (you can turn this off any time).

Processors we use

Supabase — secure database + authentication (your account and practice data).
RevenueCat / Apple / Google — subscription management and payments.
Vercel — hosting for this website.

These providers process data on our behalf under their own security and privacy terms.

Your rights

You can access, correct, export, or delete your data. You can delete your account in the app under You → Delete account, which removes your data from our servers, including your profile, preferences, reminders, and session history. For any other request, email hello@orbreath.com. Depending on where you live, you may have additional rights under the GDPR, UK GDPR, or CCPA.

Data retention & security

We keep your data while your account is active and delete it on request. Data is protected by row-level security so each account can only access its own records, and is encrypted in transit.

Children

Orbreath is for people aged 18 and over. It is not directed to children, and we do not knowingly collect their data.

Changes

We'll update this page and the date above when our practices change.

Contact

Questions? hello@orbreath.com.