Privacy Policy

1. Introduction

Welcome to CoBreathe ("we," "our," or "us"). We are TODOIT, a company registered at 85 Great Portland Street, First Floor, London, England, W1W 7LT.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application CoBreathe and related services (collectively, the "Service"). We are committed to protecting your privacy while providing a safe space for anonymous emotional support through synchronized breathing sessions.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register:

• Email address (for account creation and authentication)
• Display name (chosen by you, does not need to be your real name)
• General location (city/region level, not precise GPS coordinates)

2.2 Usage Analytics

We collect anonymous usage data to improve our Service:

• Session duration and frequency
• Feature usage patterns
• Technical performance metrics
• Anonymous interaction data during breathing sessions

2.3 Session Data

During breathing sessions:

• Breathing patterns (synchronized timing data, automatically deleted after session)
• Session metadata (duration, time of day, general emotional state indicators)
• Anonymous matching data (to pair users appropriately)

2.4 Technical Information

• Device type and operating system
• App version and technical logs
• IP address (for security and regional matching)

3. How We Use Your Information

We use your information to:

• Provide the Service: Enable anonymous breathing sessions and user matching
• Improve functionality: Analyze usage patterns to enhance user experience
• Safety and security: Prevent abuse and ensure user safety
• Communication: Send important updates about the Service
• AI Features: Power our AI companion "Lumi" (premium feature)

4. Information Sharing and Disclosure

4.1 We Do NOT Share

• Your personal identity with other users
• Your breathing session data with third parties
• Your emotional state or personal struggles

4.2 We May Share Anonymous Data

• Aggregated, non-personally identifiable analytics with research institutions studying mental health
• Technical data with service providers (see Section 5)

4.3 Legal Requirements

We may disclose information if required by law or to protect safety.

5. Third-Party Services

We use the following third-party services:

• Supabase: Cloud storage for user photos and data hosting
• Analytics providers: For anonymous usage statistics
• Payment processors: For Lumi AI subscription processing

These providers have their own privacy policies and security measures.

6. Data Security

We implement industry-standard security measures:

• Encryption of data in transit and at rest
• Anonymous session architecture
• Regular security audits
• Limited data retention policies

7. Data Retention

• Account data: Retained until you delete your account
• Breathing session data: Automatically deleted after each session
• Analytics data: Anonymized and retained for service improvement
• Support communications: Retained for 2 years

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Opt-out of non-essential communications
• Request data portability

To exercise these rights, contact us at app@breathing.app

9. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

10. International Users

If you access our Service from outside the UK, your information may be transferred to and processed in the UK, where our servers are located.

11. Changes to Privacy Policy

We may update this Privacy Policy occasionally. We will notify you of significant changes via email or in-app notification.

12. Contact Us

For privacy-related questions or concerns:

Email: app@breathing.app
Address: TODOIT, 85 Great Portland Street, First Floor, London, England, W1W 7LT