Pranayama · Last updated 14 October 2026
Pranayama used to keep everything on your device and make no network requests. That changed when accounts and sync were added: to reach your practice from more than one device, we now store it for you. This page says exactly what that means.
Your email address. It creates your account and receives the six-digit codes you sign in with. There is no password.
Your practice. The sessions you complete — which practice, when, how long, and the settings you used — plus the days you practised, the practices you have favourited, the name you chose, and your app preferences.
Ordinary server records. Our hosting provider logs technical details such as IP addresses and timestamps, as any server does.
Usage analytics, only if you say yes. The app asks whether to share anonymous usage at the end of onboarding or after a session. If you choose "Not now", it asks again later, at most three times in all, and you can change your answer at any time in Settings → Share usage analytics. If you agree, the app sends anonymous usage events: the practices and flows you use and how you set them up, the features and settings you use, the app and system version, and a random identifier created on your device. They never include your name, email, notes, the names of flows you made, your exact reminder time, or setting values such as pace, rounds and counts, and the identifier is not linked to your account. A new identifier is created when you sign out, delete your account, or turn analytics off, and turning it off also discards anything not yet sent. Until you agree, nothing is sent.
No advertising and no tracking: nothing is shared with advertisers or data brokers, and the apps contain no advertising or attribution SDKs. We do not collect your location, contacts, photos, or health data, and we do not sell or share your information with anyone.
Reminders are scheduled on your device by your device. We are not told when — or whether — you practise, except insofar as a completed session is part of the practice history above.
Three providers, all acting on our instructions:
Supabase hosts the database and runs the sign-in system. Resend delivers the sign-in emails. PostHog receives the usage analytics, if you have agreed to share them, and stores them in the European Union with IP addresses discarded. None of them is given your data for any purpose of their own.
Your data is encrypted in transit and at rest, and access is restricted to your own account at the database level. Your practice is stored as a single opaque record that our servers never read into — there are no server-side features that inspect your history.
It is not end-to-end encrypted. That means we hold the ability to read it, even though nothing we run does. We would rather say so plainly than imply a guarantee we cannot yet make. End-to-end encryption is planned; this page will change when it lands, and not before.
Your account and practice: until you delete your account. There is no other expiry. Usage analytics are deleted automatically after 14 days. They are not tied to your account, so deleting the account cuts the link rather than finding and deleting the events.
In the app: Settings → your name → Delete account. It removes your account and everything stored against it, from every device, immediately and permanently. You do not need to email us, and there is no waiting period.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Deletion is in the app; for anything else, write to the address below and we will respond within 30 days. If you are in the UK, EU, or California, you have these rights under law — we extend them to everyone.
We process your data to provide the account and sync you asked for. Usage analytics, if you agree to them, are processed on the basis of that consent, to understand which parts of the app people use and what to build next. There is no other purpose.
Pranayama is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, write to us and we will delete it.
If this policy changes, the updated version is posted here with a revised date. If a change materially affects what we collect or what we do with it, we will say so in the app as well.