← Pranayama

Privacy Policy

Pranayama · Last updated 5 September 2026

Pranayama used to keep everything on your device and make no network requests. That changed when accounts and sync were added: to reach your practice from more than one device, we now store it for you. This page says exactly what that means.

What we collect

Your email address. It creates your account and receives the six-digit codes you sign in with. There is no password.

Your practice. The sessions you complete — which practice, when, how long, and the settings you used — plus the days you practised, the practices you have favourited, the name you chose, and your app preferences.

Ordinary server records. Our hosting provider logs technical details such as IP addresses and timestamps, as any server does.

What we don't collect

No analytics, no advertising, no tracking. The apps contain no third-party analytics or advertising SDKs of any kind. We do not collect your location, contacts, photos, or health data, and we do not sell or share your information with anyone.

Reminders are scheduled on your device by your device. We are not told when — or whether — you practise, except insofar as a completed session is part of the practice history above.

Who else handles it

Two providers, both acting on our instructions:

Supabase hosts the database and runs the sign-in system. Resend delivers the sign-in emails. Neither is given your data for any purpose of their own.

How it is protected

Your data is encrypted in transit and at rest, and access is restricted to your own account at the database level. Your practice is stored as a single opaque record that our servers never read into — there are no server-side features that inspect your history.

It is not end-to-end encrypted. That means we hold the ability to read it, even though nothing we run does. We would rather say so plainly than imply a guarantee we cannot yet make. End-to-end encryption is planned; this page will change when it lands, and not before.

How long we keep it

Until you delete your account. There is no other expiry.

Deleting your account

In the app: Settings → your name → Delete account. It removes your account and everything stored against it, from every device, immediately and permanently. You do not need to email us, and there is no waiting period.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Deletion is in the app; for anything else, write to the address below and we will respond within 30 days. If you are in the UK, EU, or California, you have these rights under law — we extend them to everyone.

We process your data to provide the account and sync you asked for. That is the whole of it; there is no other purpose.

Children

Pranayama is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, write to us and we will delete it.

Changes

If this policy changes, the updated version is posted here with a revised date. If a change materially affects what we collect or what we do with it, we will say so in the app as well.