Eclipta Get Eclipta

Privacy Policy

Eclipta (“we,” “us,” or “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your data.

1. INFORMATION WE COLLECT

We collect data to provide a synchronized experience across your devices.

  • Identity Data: Name and email address (via Apple, Google, or manual entry).
  • Meditation Data: Timestamps of sessions, duration, and streaks.
  • Health Data (HealthKit): With your explicit permission, Eclipta reads the following from Apple Health to calculate your Clarity score and wellness insights: sleep analysis, resting heart rate, heart-rate variability, heart rate, and time in daylight. These readings are processed and stored only on your device, in encrypted storage — they are never uploaded to our servers or shared with anyone. With your permission Eclipta also writes “Mindful Minutes” to Apple Health to record your meditation sessions. We never use HealthKit data for marketing or advertising.
  • Setup Answers: When you first set up Eclipta we ask a few questions — your age, gender, occupation, meditation experience, and your goals for using the app. These are stored with your account and used to understand who uses Eclipta and to improve it. They are never sold or used for advertising.
  • Usage Data (Screen Time API): We use the FamilyControls framework to access individual screen time usage statistics. This data is used solely to provide you with insights into your meditation-to-screen-time ratio. We do not transmit individual app names or usage durations to our servers (see Section 4).
  • Setup Analytics: We record which onboarding steps you complete (timestamps and app version) so that we can improve the setup flow.
  • Feature Suggestions: If you send us a suggestion from Settings → Suggest Improvements, we store what you wrote, whether you tagged it an idea, a bug or something else, and your app version, iOS version and language, so that we can reproduce problems and reply in the right language. If you are signed in, the suggestion is linked to your account; if you are signed out, it is stored without any account link. Suggestions are stored in Supabase and are not published anywhere. Our public suggestions board is a separate website that opens in your browser — anything you choose to post there is public and is covered by that site's own terms, not by this policy.

2. DATA PROCESSING & THIRD PARTIES

We do not sell your personal data. We use the following service providers (“processors”):

  • Supabase (Storage): We store your account profile, meditation history, setup answers and any feature suggestions you send us in a secure PostgreSQL database hosted in the European Union (Ireland).
  • RevenueCat: We share an anonymous User ID and purchase history to manage your subscription status. RevenueCat processes this data in the United States under the EU Standard Contractual Clauses.
  • Resend: Delivers our sign-in and account emails; receives your email address and the contents of those messages.
  • Apple (Health/FamilyControls): Data remains within the Apple ecosystem except for the specific statistics processed within Eclipta.

3. HEALTHKIT PRIVACY POLICY (MANDATORY)

In accordance with Apple Guideline 2.5.11:

  • We will not use or disclose any data gathered through the HealthKit framework to third parties for advertising, promotion, or other data mining purposes.
  • We will only write data to HealthKit with your explicit consent.

4. SCREEN TIME DATA PRIVACY

Data accessed via the Screen Time API is handled with the highest level of restriction. We do not transmit individual app usage names or durations to our servers; we only store aggregated “Daily Screen Time” totals to generate your wellness reports.

5. YOUR RIGHTS (GDPR/CCPA)

Depending on your location, you have the following rights:

  • Access/Portability: Request a copy of your data stored on Supabase.
  • Rectification: Correct inaccurate personal data.
  • Deletion: The right to have your account and data erased (also available in-app under Settings → Account).
  • Objection/Restriction: Object to, or restrict, certain processing.
  • Opt-Out: You can revoke HealthKit or Screen Time permissions at any time through iOS System Settings.
  • Withdraw consent: Where we rely on your consent, you can withdraw it at any time.
  • Complain: You may lodge a complaint with your data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

Legal bases (EU/EEA users). We process your account and sync data to perform our contract with you; your HealthKit readings and setup answers on the basis of your consent; and setup analytics on the basis of our legitimate interest in improving the app. Where personal data is transferred outside the EU (for example, to RevenueCat in the United States), we rely on the EU Standard Contractual Clauses as the safeguard.

6. DATA SECURITY

We use industry-standard encryption for data in transit and at rest within Supabase. However, no method of transmission over the internet is 100% secure.

7. CHANGES TO THIS POLICY

We may update this policy to reflect changes in iOS regulations. If we make “Significant Changes” (as defined by 2026 age-assurance laws), we will notify you via a prominent in-app notification.

8. CONTACT US

For any privacy-related questions or to exercise your data rights, please contact eclipta.focus@gmail.com.