Privacy Policy

• Your health answers. Whether you told the app about a heart condition, epilepsy, glaucoma, pregnancy, panic attacks, recent surgery or asthma. They decide which breathing patterns the app offers you. They are stored on your phone and are never sent to us or to anyone else, whether or not you sign in. A new phone asks again.
• How you said you felt after a session, if you answered.
• Your practice history, unless you choose to sign in (section 3). The days you practised, which room, how long. Your streak is worked out on your phone.

• A random id. On first launch the app makes a random identifier and keeps it on your phone. It is not your advertising id, not your phone's hardware id, and not connected to your name. It exists so that rejoining a room five times in an hour counts as one person rather than five. Uninstalling the app throws it away.
• Which room you are in, and when. So the app can say how many people breathed in a room today. We store the hour and the random id, nothing else. These records are deleted automatically after eight days.
• Your approximate city. The app never asks your phone where you are and has no location permission. When you connect, our server sees your city the way every web server does, from the connection itself, and shows the room "somebody joined from Baku". It is held in memory while you are connected and written down nowhere.
• Anonymous usage, only if you turn it on. Off unless you switch it on, and switching it off deletes anything waiting to be sent. When on, the app sends which screens you used and whether a session finished, keyed to a second random identifier, to PostHog, who process it for us. It never includes anything about your health.
• Which features are switched on. So we can turn a feature on or off without an app update, the app asks PostHog which features are on. It sends a random token used for nothing else, and nothing about you or what you do in the app.

Signing in is never required. It exists for one reason: so your streak and the days you practised follow you to your next phone. You sign in with Apple on iPhone or with Google on Android.

What we receive

• Apple: a sign-in token that proves the sign-in is yours. The app asks Apple for no name and no email, so Apple shares neither.
• Google: Google's sign-in token always includes your email address and may include your name. Our server reads only the account identifier from it and discards the rest without storing or logging it.

The account identifier is turned into an account code with a secret key, and only that code is kept. It cannot be turned back into your Apple or Google account without the key.

What we keep, tied to that code

• Your practice sessions: which room, when, how long, and how many people breathed with you
• How many hearts you have sent and received, as counts
• The name and face you chose inside the app
• Your streak setting (every day, 5 a week or 3 a week)

What we never keep

Your email address, your real name, your health answers, or how you said you felt.

This is kept until you delete your account. Deleting removes it at once; our server provider's recovery history, which only we can reach, clears itself within 30 days, and we never restore a deleted account from it. Signing out stops syncing and deletes nothing: everything stays on your phone and on our server until you delete it.

If you turn it on, Same Breath writes each finished session as a mindfulness session to Apple Health on iPhone, or to Health Connect on Android, on the same phone. The app asks for permission to write mindfulness records and nothing else. It cannot read your health data, including the sessions it wrote itself. Nothing from Apple Health or Health Connect is sent to us, used for advertising, or shared with anyone. You can turn it off at any time in the app or in Apple Health or Health Connect, and the app keeps working without it.

• Cloudflare runs our server: the rooms, and the synced data of people who sign in.
• PostHog receives anonymous usage only if you turn it on, and answers which features are on.
• Apple and Google handle the sign-in, only if you sign in.

Everything the app sends travels encrypted (HTTPS).

We do not sell your data. We do not use it for advertising. We do not build a profile of you, and there is no way inside the app for anybody to message you.

• If you signed in: in the app, go to You, then Account and sync, then Delete account and synced data. It removes the sign-in and our copy at once and for good. Full steps, including what to do without the app, are on the account deletion page.
• On your phone: Privacy and data in the app's Settings erases what the app holds on your phone. Uninstalling the app does the same.
• Room records delete themselves after eight days without you doing anything.

To have anything removed sooner, or to ask what we hold, write to store@tribe.az and we will act on it within 30 days.

Same Breath is not directed at children under 13, and we do not knowingly collect anything from them.

If this policy changes we will update the date at the top and, if the change matters, say so in the app.

Email: store@tribe.az

App: Same Breath

Developer: Tribe Solutions LLC, tribe.az