Privacy Policy

We collect the following types of information:

We retain each category of data only as described below:

• Training data and preferences: stored only on your device until you delete individual records or uninstall the app. Uninstalling BreathHold deletes this locally stored data. We have no server copy to recover or delete.
• Analytics and session replay data: retained in our Mixpanel and PostHog analytics accounts while needed to understand usage, diagnose problems, and improve the Service. We review this data at least annually and delete or anonymize data that is no longer needed. You may request earlier deletion.
• Subscription and purchase data: retained by RevenueCat and the applicable app store while needed to provide subscription access, restore purchases, prevent fraud, and satisfy legal or accounting requirements.
• Feedback and support correspondence: retained until the request is resolved and for up to 12 months afterward, unless a longer period is required for legal or security reasons.
• Website submissions: retained for as long as needed to provide the requested newsletter, waitlist, consultation, or support service, or until you unsubscribe or request deletion.

To request deletion of information held by us or our processors, email our contact form. We will verify and process valid requests within 30 days. Some purchase records may be retained when required by law. Because training data is stored only on your device, we cannot delete it remotely.

We use reasonable administrative and technical safeguards for information transmitted to us and our processors. No method of electronic storage or transmission is completely secure.

We use the following third-party services:

• PostHog — For product analytics and session replay. Learn more at posthog.com/privacy.
• Mixpanel — For app usage and product analytics. Learn more at mixpanel.com/legal/privacy-policy.
• RevenueCat — For subscription status and purchase management. Learn more at revenuecat.com/privacy.
• Telegram — For delivering feedback and support messages you choose to send from the app.
• Apple App Store / Google Play Store — For app distribution, payment processing, and purchase records.
• Cloudflare and website service providers — For website hosting, security, analytics, mailing-list signups, waitlists, and consultation requests.

We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes.

Our website uses essential cookies required for the site to function properly. Site measurement uses Cloudflare Web Analytics, which is cookieless and does not track you across sites. The website does not load PostHog.

If you dismiss the website's app download banner, we store the first-party browser value breathhold:app-upsell:dismissed-at:v1 for seven days so the banner does not repeatedly appear. It contains only the dismissal time.

App-download funnel events (eligibility, display, dismissal, direct store clicks, redirect attempts, and manual fallback choices) describe the device platform, browser family, page campaign, language, CTA position, and prompt variant. As of 3 August 2026 the website sends these to no analytics provider. The consent gate below still governs them: nothing is sent unless you choose "Allow analytics", and Global Privacy Control or Do Not Track blocks sending outright. The authoritative preference uses breathhold:analytics-consent:v1 with the value granted or denied and remains until you change it below or clear website data.

When an analytics-consented visitor reaches /mobile with a referral label, we keep a key such as breathhold:mobile-referral:<label>:v1 in session storage to avoid counting the same referral twice during that browser session. We send the sanitized referral label to Supabase, which increments an aggregate counter; the counter does not contain a user identifier and is retained until we delete the aggregate statistics. Session storage is removed when the browser session ends.

You can allow, decline, or withdraw analytics consent below. Browser privacy controls remain authoritative; Global Privacy Control and Do Not Track prevent analytics delivery even if a saved preference says granted.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete personal data held by us or our processors
• Object to or restrict certain processing where applicable
• Withdraw consent where processing relies on consent

To exercise any of these rights, contact us at our contact form.