Privacy Policy

The short version

• Attend has no ads, no advertising identifiers and no analytics or tracking SDKs.
• We never sell, rent or share your personal data with anyone for their own purposes.
• The only data that leaves your device is your breathing session history, stored under an anonymous account. No name, no email address, no sign-up.
• Kind words, body check-ins, saved patterns and settings stay on your device and are never uploaded.
• Crash reports are off by default and only sent if you turn them on in Settings.
• You can delete everything from inside the app, or ask us to delete your account.

What we collect and why

An anonymous account

When you first open Attend, Firebase Authentication creates an anonymous account with a random identifier. It carries no name, email address or other personal details. There is no sign-up and we never ask for your email address. We use the identifier to keep your session history together and to make sure only your device can read it.

Breathing sessions

When you complete a breathing session, the app records the technique's name and pattern, the number of rounds, how long it lasted, whether it was completed, the date and time, which animal was on screen if it was a Together session, and, if you answered them, your one-tap "How are you arriving?" and "How do you feel now?" answers. Sessions are stored in Google Cloud Firestore under your anonymous account. The key to that account lives only on your device, so if you uninstall the app the history can no longer be reached by anyone, including us, except to delete it. A running count of your sessions is kept alongside them, which is what grows the meadow on the Home screen.

Kind words and body check-ins

What you write in a kind word, and where you notice something in a body check-in, is stored only on your device. It is never sent to us or to anyone else. Deleting the app deletes it.

Settings and saved patterns

Your preferences (voice, sounds, visual, reminders and so on) and any breathing patterns you save are stored on your device only.

Crash reports (optional)

If you turn on "Crash reports" in Settings, the app sends crash and performance reports to Sentry, a crash reporting service, so we can find and fix bugs. A report contains technical information such as the device model, operating system version, app version, the screen you were on and what went wrong. It does not contain your name, email address, session history or anything you have written. This setting is off by default.

Apple Health (iOS, optional)

On iOS you can choose to have Attend write your completed sessions to Apple Health as Mindful Minutes. This is off until you turn it on in Settings and grant permission. The app only writes to Health; it never reads any Health data, and nothing from Health is sent to us.

Reminders

Daily reminders are local notifications scheduled on your device. There is no push notification server and nothing is sent to us when a reminder fires.

What we do not collect

• No location data.
• No contacts, photos, microphone or camera access.
• No advertising ID. The app explicitly declines the Android advertising ID permission.
• No analytics or behavioural tracking, and no third-party advertising SDKs.
• No data from the Together check-in. That flow writes nothing at all.

Service providers

We use a small number of service providers to run the app. They process data on our behalf and under our instructions, and are not permitted to use it for their own purposes.

• Google Firebase (Google LLC): anonymous authentication and the Firestore database that holds session history. See Firebase's privacy information.
• Sentry (Functional Software, Inc.): crash reporting, only if you have turned crash reports on. See Sentry's privacy policy.
• Apple and Google distribute the app through their stores. Everything in Attend is currently free. If a paid tier is introduced, purchases will be handled by the App Store or Google Play, and we never see your payment details.

Firebase servers may be located outside the country you live in, including in the United States. Google provides appropriate safeguards for international transfers, including the European Commission's standard contractual clauses.

Legal basis

Where data protection law requires a legal basis, we process your session history and anonymous account because it is necessary to provide the app you asked for (performance of a contract), and crash reports on the basis of your consent, which you can withdraw at any time by turning the setting off.

How long we keep data

Session history and your account record are kept until you delete them or ask us to delete your account. Data on your device stays there until you delete it in the app or uninstall the app. Crash reports are retained by Sentry for 90 days.

Your choices and how to delete your data

• Delete a single session: open Moments, open the session, and tap Delete.
• Delete all sessions: Settings, then "Delete all sessions". This removes your entire session history from our servers.
• Delete all kind words or body check-ins: Settings, then "Delete all kind words" or "Delete all body check-ins".
• Turn off crash reports or Apple Health: both are switches in Settings.
• Delete your account and everything we hold: "Delete all sessions" already removes everything we store about you. If you would rather we do it, email hello@taurosoftware.com from the device the app is installed on and we will delete the anonymous account and all session history within 30 days and confirm when it is done.
• Uninstall the app: this removes everything stored on the device, including the key to your anonymous account. Any session history still on our servers is unreachable from then on; email us if you want it deleted too.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to receive a copy in a portable format, to restrict or object to how we use it, and to withdraw consent. To exercise any of these, email hello@taurosoftware.com. You also have the right to complain to your local data protection authority.

Age

Attend is intended for adults and is not directed at minors. Breathe together is a co-regulation feature for an adult to use on their own device, and nothing about anyone else in the room is recorded. We do not knowingly collect personal data from anyone under the age of digital consent where they live. If you believe we hold such data, contact us and we will delete it.

Security

All data travels over encrypted connections. Session history is protected by Firebase security rules so that each account can only read and write its own data. No method of storage or transmission is completely secure, so we cannot promise absolute security, but we take reasonable measures to protect what we hold.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you in the app. Continuing to use Attend after a change means you accept the updated policy.

Contact

Questions, requests or concerns about your privacy: hello@taurosoftware.com.

Get in touch