Last updated: April 12, 2026
This Privacy Policy describes how Lotus Breath (“the App”, “we”, “us”, or “our”) collects, uses, and shares information when you use our iOS application. By using the App, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.
The App uses Sign in with Apple for account registration. Signing in is required before making or restoring in-app purchases.
When you sign in, we receive and store an Apple user identifier — an opaque, app-specific string generated by Apple. This identifier cannot be used to determine your name, email address, or other Apple account details. We request no personal information scopes (no name, no email) during the sign-in process.
The Apple user identifier is stored on your device and in Apple’s iCloud key-value storage (which syncs it across your devices). It is not sent to any server operated by us or any third party. It is used solely to gate access to purchases and to enable cross-device purchase restoration.
The Apple user identifier constitutes personal data under GDPR as it is a unique identifier tied to your Apple account. See the “Legal Basis for Processing” section for the legal basis under which we process it.
We use Mixpanel, a third-party analytics service, to understand how the App is used and to improve it. We also use Sentry, a third-party error monitoring service, to detect and fix crashes and errors. When analytics is enabled, the following data is collected:
We do not collect or send to any server:
The Apple user identifier stored on your device is never included in analytics events or crash reports. Mixpanel’s automatic event tracking is disabled. Only the events listed above are sent. Sentry only collects data when an error or crash occurs.
You can disable anonymous analytics at any time from the Settings screen in the App. When you opt out:
Crash and error reporting via Sentry remains active regardless of the analytics setting, as it is necessary to maintain app stability. This data is minimal, anonymous, and collected only when an error occurs.
The App stores your breathing exercises, practice history, settings, streak data, and in-app purchase records locally on your device using Apple’s on-device database. This data is automatically synced across your devices through your private iCloud account via Apple’s CloudKit service. The synced data is stored in your personal iCloud storage and is not accessible to us. Apple’s iCloud terms and privacy policy govern this data.
We do not operate any custom servers. We do not have access to your iCloud data.
If you enable Sync to Apple Health, completed breathing sessions are written to Apple HealthKit on your device. This data is governed by Apple’s privacy policies and is never accessed by us.
We do not use your data for advertising, profiling, or selling to third parties.
We process data under the following legal bases:
When you sign in, the authentication is handled by Apple’s Sign in with Apple service. We receive only an opaque user identifier. We do not receive or store any authentication tokens, passwords, or Apple ID credentials. Apple’s terms and privacy policy govern the authentication process. For more details, see Apple’s Privacy Policy.
Analytics data is sent to Mixpanel, Inc., based in the United States. Mixpanel acts as a data processor under GDPR and processes data solely on our instructions. Mixpanel is SOC 2 Type II certified.
As the App is provided by a Finnish company, transfers of data to Mixpanel in the US are covered by Standard Contractual Clauses in accordance with GDPR requirements.
For more details on how Mixpanel handles data, see:
Crash and error reports are sent to Functional Software, Inc. (Sentry), based in the United States. Sentry acts as a data processor under GDPR and processes data solely on our instructions. IP address scrubbing is enabled, so Sentry does not store your IP address. Sentry is SOC 2 Type II certified.
As the App is provided by a Finnish company, transfers of data to Sentry in the US are covered by Standard Contractual Clauses in accordance with GDPR requirements.
For more details on how Sentry handles data, see:
If you opt in to Apple Health sync, session data is written to HealthKit. We do not read from or access your HealthKit data beyond writing completed sessions. Apple’s HealthKit privacy policy applies to this data.
The App offers optional in-app purchases, including XP boosts and streak freezes. All payment processing is handled entirely by Apple through the App Store. We do not collect, process, or store any payment information such as credit card numbers, billing addresses, or Apple ID credentials.
When you make a purchase, the App stores a purchase record on your device and in your private iCloud account containing:
These records are used for cross-device purchase restoration and are stored only in your personal iCloud storage. We do not have access to them.
We track anonymous analytics events related to purchase actions (e.g. that a purchase was completed and which product was involved) through Mixpanel, as described in the Analytics section. These analytics events contain only the product identifier and the event type. They do not include StoreKit transaction identifiers, prices, payment methods, or receipt data.
Apple’s App Store terms and privacy policy govern the payment transaction itself. For more details, see Apple’s Privacy Policy.
When you sign out (without deleting your account), the Apple user identifier is removed but your purchase records and app data remain in iCloud.
When you delete your account, all app data (exercises, progress, streaks, purchase records) is permanently deleted from your device and iCloud across all synced devices. The Apple user identifier is also removed. To fully revoke the App’s access to your Apple ID, you must additionally remove the App from your Apple ID settings (Settings > Apple ID > Sign-In & Security > Sign in with Apple).
Analytics data previously sent to Mixpanel and Sentry is not affected by account deletion, as it is anonymous and not linked to your identity. To request deletion of analytics data, see “Your Rights” below.
If you are in the European Economic Area, you have the right to:
You can delete your account and all associated data directly in the App:
This permanently deletes all your data (exercises, progress, streaks, purchase records) from your device and iCloud across all synced devices, clears your Sign in with Apple credential, and resets the App to its initial state. To complete the process, we recommend also revoking the App’s access in your Apple ID settings.
To request deletion of any anonymous analytics data associated with your device identifier, email us at valtteri.e.laine@gmail.com with the subject “Data Deletion Request”. We will remove the data from Mixpanel and Sentry within 30 days.
You can also disable analytics in Settings at any time to stop all future analytics data collection.
The App does not knowingly collect any personally identifiable information from children under the age of 13. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
We will update this Privacy Policy when our data practices change. If we make material changes, we will notify you through an in-app notice or by updating the App Store listing before the changes take effect. Changes will be posted on this page with an updated “Last updated” date.
The following reflects what we declare in our App Store privacy labels:
If you have any questions about this Privacy Policy, you can contact us by email:
valtteri.e.laine@gmail.com