Privacy Policy

Effective 17 October 2026 · replaces the version dated 16 September 2026

This policy explains what information the Prana Vidya mobile application for iOS and Android (the “App”) handles, and how. The App is developed and provided by Vedran Vucko, an individual (referred to as “we”, “us” or “the Service Provider”). Our Terms of Use also apply.

1. The short version

• You can use the App without an account. Used that way, your practice data stays on your device, and in your own Google or iCloud device backup if your device settings include it.
• If you create an account, with Apple, Google or an email address, your practice data is synced to our servers so it follows you across devices.
• We never see your payment details. Subscriptions are handled by Apple or Google.
• The App can write your sessions to Apple Health on iOS, or to Health Connect on Android. It reads nothing from either.
• Usage analytics are not linked to your account.
• We do not sell your data and we do not show advertising.
• You can delete your account, and everything synced with it, at any time.
• Our servers are in the United States. Wherever you live, you have the rights listed in section 10.

2. Information the App handles

Practice data

The App records the sessions you complete, the notes you add to Trainer sessions and BOLT tests, your BOLT scores, your position in the Trainer’s progression, your presets and bundles, your achievements, your progress through lessons, and your settings. Your streaks are worked out from your sessions. Without an account, all of this stays on your device, and it can be included in your own Google or iCloud device backup, which your device settings control. With an account, it is also stored on our servers so it can sync.

Account information

Creating an account is optional. If you sign in with Apple (on iOS) or Google, they give us an account identifier and, depending on your choice at sign-in, your name and email address. If you create an account with an email address, we store that address, the display name you enter, and your password in a form we cannot read. We use this information only to identify your account, to sync your data, and to send the emails described in section 3.

Purchase information

Subscriptions are bought through the Apple App Store or Google Play. When you subscribe, we use RevenueCat, a subscription management service, to recognise your purchase and confirm whether you have an active subscription. RevenueCat receives the purchase record from the store and an app user identifier: a random one if you have no account, or your account identifier once you sign in, so that your subscription follows your account. We never receive your card number or billing details.

Crash and performance reports

If the App crashes or runs into an error, a report is sent to Sentry, a crash-reporting service. A report includes technical details such as your device model, operating system version, App version, the error itself, and your IP address. A sample of sessions, and every session in which an error occurs, may include a short replay of the App’s screens leading up to the problem, and a sample of sessions records performance timings. We use these reports only to find and fix problems, and we do not attach your account to them.

Usage analytics

We use PostHog, an analytics service, to understand how the App is used: which screens are opened; when the App is installed, updated, opened or sent to the background; how far people get through the first-run introduction; when a free trial starts or a subscription is purchased; and when a session summary is shared. These events carry technical device information, a random analytics identifier, and your IP address, from which PostHog may work out an approximate location. They are not linked to your account: we do not send PostHog your name, email address or account identifier, and never your BOLT scores, notes or health data.

Sound downloads

Background sounds are delivered through Amazon CloudFront, Amazon Web Services’ content delivery network. Like any web server, it sees your IP address when it serves a file.

The App does not collect your precise location, does not access your contacts, camera or microphone, does not use cookies, and does not use advertising identifiers. The App does not use artificial intelligence (AI) to process your data or to provide its features.

3. Emails

• Account emails. If you create an account with an email address, we may send you an email to verify that address (you can use the App before verifying it), and a password-reset email when you ask for one. These are sent through Zoho Mail, our email provider.
• New account notice. When an account is created, we receive an internal email telling us so. It contains only the sign-in method and the time, not your email address or account identifier, and is sent through Resend, an email delivery service. It is not sent to you.
• Practice emails. When you create an account, and in Settings → Account → Practice emails, the App asks whether you would like practice tips and a weekly summary by email. This is off unless you turn it on, and we store your choice with your account. We do not send practice emails yet. Before we start, we will update this policy and name the service that sends them, and every such email will include an unsubscribe link.

We do not send advertising for other companies, and we do not give your email address to anyone else for marketing.

4. Apple Health and Health Connect

On iOS, and only if you grant permission, the App writes each completed breathing session to Apple Health as Mindful Minutes. On Android, and only if you grant permission, the App writes each completed breathing session to Health Connect as a mindfulness session. The App does not read any data from Apple Health or Health Connect.

Sessions written to Apple Health or Health Connect are stored on your device by that app, under your control. Health data is never sent to our servers, never used for analytics, advertising or any purpose other than recording your session in your health app, and never sold or transferred to anyone else. You can withdraw the permission at any time in the Health app, in Health Connect, or in your device settings, or turn off Settings → Mindful Minutes in the App.

5. Services we rely on

The App uses these third-party services, each with its own privacy policy:

• Apple and Google: sign-in, app distribution, purchases, and Apple Health and Health Connect on your device.
• Supabase: account storage, sign-in and sync of your practice data.
• RevenueCat: subscription status, when you subscribe.
• Sentry: crash and performance reporting.
• PostHog: usage analytics.
• Amazon Web Services: delivery of background sound files through Amazon CloudFront.
• Zoho: sending account emails, and our support mailbox.
• Resend: sending our internal new-account notice.

These providers process data on our behalf and are not permitted to use it for their own purposes beyond providing their service.

6. Where your data is stored

Our servers are hosted by Supabase in the United States (the AWS us-west-2 region, Oregon). Sentry, PostHog and RevenueCat also process data in the United States, and our Zoho mailbox and account emails are handled in Zoho’s Australian data centre. Sound files are served from Amazon CloudFront’s worldwide network. If you live in the European Union, the United Kingdom, Australia or elsewhere, your information is therefore transferred to and stored in the United States. Each of these providers commits to appropriate safeguards for international transfers, such as standard contractual clauses, under their own agreements with us.

7. When we share information

We do not sell your information and we do not share it with advertisers. We share it only with the service providers above, and otherwise only if the law requires it, or if it is necessary to protect someone’s safety, investigate fraud, or protect our rights.

8. How long we keep it

• Practice and account data is kept for as long as your account exists. When you delete your account it is removed from our servers. We do not keep backups of the database, so no copy remains in a backup.
• Crash reports, including screen replays and performance data, are kept by Sentry for 30 days and then deleted.
• Analytics events are kept by PostHog for one year and then deleted. They are held separately from your account, which they are not linked to.
• Purchase records are held by Apple, Google and, if you subscribed, RevenueCat under their own retention rules.
• Your practice-email choice is kept with your account and deleted with it.

9. Deleting your account and data

You can delete your account and all synced data from inside the App, under Settings → Account → Delete Account, or by following the steps on our account deletion page. Deletion removes your account and every practice record linked to it from our servers and cannot be undone.

If you use the App without an account, deleting the App from your device removes your data from that device. It does not remove copies in a Google or iCloud device backup you keep; those are controlled by your device settings. Sessions already written to Apple Health or Health Connect remain there until you delete them in that app.

You can stop all collection of information by the App at any time by uninstalling it, using the standard uninstall process for your device or app store.

10. Your rights

Wherever you live, you can ask us to:

• access the personal information we hold about you;
• correct it if it is wrong;
• delete it (see section 9, which you can do yourself at any time);
• export a copy of your practice data in a portable format;
• object to or restrict a particular use of it;
• withdraw consent where we rely on it, for example the Apple Health and Health Connect permissions or your practice-email choice, which you can turn off yourself.

Email support@pranavidya.io and we will respond within 30 days. We may need to confirm you own the account first. You can also complain to your data protection regulator, for example the Office of the Australian Information Commissioner in Australia, the Information Commissioner’s Office in the United Kingdom, or your national authority in the European Union.

If you are in the European Union or the United Kingdom, our legal bases are: performing our agreement with you (accounts, sync, subscriptions, account emails), our legitimate interest in keeping the App working and secure (crash reports, analytics, the new-account notice), and your consent (Apple Health, Health Connect, practice emails). If you are in California, note that we do not sell your personal information and do not share it for cross-context behavioural advertising.

11. Children

The App is not directed at children under 13, or under the higher age of digital consent where you live, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact us at support@pranavidya.io and we will delete it.

12. Security

Data in transit between the App and our servers is encrypted, and access to stored data is restricted. No system is perfectly secure, and we cannot guarantee against every possible breach, but we take reasonable steps to protect your information.

13. Changes to this policy

We may update this policy as the App changes. We will post the new version on this page, update the effective date above and, where the change is significant, take reasonable steps to let you know.

14. Contact

Questions about privacy: support@pranavidya.io.

See also our Terms of Use and account deletion page.