Privacy Policy

Tradu în limba română: 🔗 Politica de confidențialitate

Last updated: Apr 10, 2025

Introduction

Welcome to Răgaz, the Romanian mindfulness and mental health app.

Everyone says this, but we actually value your privacy and are committed to protecting your personal data. We wish to show you the same level of care and respect that we ourselves expect as citizens of the European Union 🩵. This Privacy Policy explains what information we collect, how we use it, and your rights. We aim to write this policy in clear, plain language in accordance with GDPR Article 12.

Răgaz (“we” or “us”) is available as a mobile app on iOS, Android and Web. We also operate a marketing website (https://ragaz.app) which does NOT use any cookies! 🚫🍪

For GDPR purposes, Space Magic SRL acts as the data controller of your personal data (i.e., the organization responsible for deciding how and why your data is processed). If you have any questions about this policy or your data, please contact us using the details at the end of this document.

Key points:

✅ We only collect the personal data we truly need to provide and improve the service (data minimization).
✅ We do not use any third-party analytics or advertising trackers.
✅ We never sell your data.
✅ We only share data with a few trusted service providers as explained below, and only for the purposes described.
✅ If we rely on your consent for any optional feature (like AI-driven recommendations or newsletters), you can opt in or out freely. You can withdraw your consent at any time.

By using Răgaz, you acknowledge that you have read and understood this Privacy Policy.

(Effective Date: April 10, 2025)

What Data We Collect

We collect the following types of personal data:

Email Address: When you create an account or log in, we collect your email. This is used as your login identifier and for sending login links, password resets, or important account-related messages.
Profile Information (Optional): During onboarding or in your profile, you may choose to provide information such as your name, age, occupation, or other details. This information is optional and is used to personalize your experience (for example, greeting you by name or tailoring content to your age group). You can skip or edit this at any time.
Journal Entries and Mood Tracker Data (Optional): Răgaz allows you to write journal entries, record your thoughts, and track your mood over time. Any notes you write in the in-app journal or inputs you provide to the mood tracker are stored so that you can view them later. This content is private to you and is only processed to provide the service (for example, syncing your entries across your devices). You have full control over this data - you can add, edit, or delete your journal entries at any time.
Usage and Diagnostics Information: We collect certain technical information and usage logs automatically to help us maintain and debug the app. This includes, for example, app usage events (e.g. which meditation or exercise you started), error logs or crash reports, and general device information (such as device model, operating system version, and timestamps). This data helps us troubleshoot issues and improve Răgaz's performance. We do not collect precise location data for analytics, and we do not use any third-party analytics libraries.
Payment and Subscription Data: If you choose to subscribe to premium features or make purchases in the app, payments are handled securely by our payment processor (Stripe). We do not store your credit card numbers. We do receive information about your purchase, such as your subscription status, the type of plan, and maybe partial information like the last four digits of your card or an identifier for the transaction. This information is used to activate your premium features and maintain your subscription. Stripe may also collect your billing name and address if needed for tax or payment verification purposes.
Communication Data: If you contact us for support or feedback (for example, via email), we will collect the information you provide (like your email address and the content of your message) in order to respond to you. Additionally, if you opt in to our newsletter or other marketing communications, we will collect your email for that purpose.
Push Notification Tokens: To send you push notifications (for mindfulness reminders or updates), we use a unique token provided by your device's operating system (iOS or Android). You will be asked to opt in to receive these notifications or you can refuse. This token is essentially an identifier that allows us (via our push service) to deliver notifications to your specific device. It does not reveal any personal information by itself and can be revoked by you by disabling notifications.

Sensitive Data: We do not actively collect any “special categories” of sensitive personal data about you (such as health data, racial or ethnic origin, etc.) except what you voluntarily input into the app (for example, during onboarding or in your mood journal). We treat all your journal and mood data as private and confidential. We will never ask for or require any government ID numbers, social security numbers, or any payment card details directly (payments are through Stripe as noted).

How We Use Your Data

We use your personal data only for the following purposes, and we ensure we have a valid legal basis for each use under the GDPR:

To Provide and Maintain the Service: We use your information to create and manage your Răgaz account, allow you to log in, and use the app's features. For example, we use your email to authenticate you and (if applicable) to sync your data across devices. Processing your data for these core functionalities is necessary to perform our contract with you (GDPR Article 6(1)(b)) - in other words, we can't provide the service without this data.
To Personalize Your Experience: Optional profile information (like your name or age) and your in-app activities help us tailor the content in the app to you. For instance, we might address you by your chosen name in app or in communications, or suggest content that fits your age group or interests or is appropriate for your particular struggles. This personalization is done to improve your experience and is based on your consent (since providing such info is optional) and/or our legitimate interest in offering relevant content.
To Provide Mindfulness Features (Journals & Mood Tracking): Your journal entries and mood tracker inputs are used to provide you with those features - e.g., to display your past journal entries to you, show mood trends over time, or allow you to reflect on past entries. We process this content solely to deliver these features to you (performance of contract under Art. 6(1)(b)) and to ensure your data is available whenever you need it.
To Offer AI-Powered Recommendations (Optional): If you explicitly opt in to our AI-driven personal recommendations feature, we may process some of your inputs through AI services to give you personalized mindfulness tips or content suggestions. For example, if you choose to use an AI-powered journaling assistant or request personalized meditation recommendations, the text you provide (e.g., a journal entry or a query) may be sent to our AI partners (like OpenAI or Anthropic) to generate a tailored response. Importantly, we anonymize or remove personal identifiers from these inputs before sending them to the AI. We will never send your name, email, or other direct personal identifiers to the AI service. This AI feature is completely optional and will only happen with your consent, which we will obtain via an in-app opt-in prompt. The legal basis for this processing is your consent. You can withdraw your consent at any time by turning off the AI features in settings, and we will stop sending your data to the AI service.
To Communicate with You: We use your email address to send you important communications about the app. This includes messages for account verification, password reset emails, notifications about critical updates or changes to the service, and responses to any inquiries you send us. These communications are necessary for us to provide you with the service (legal basis: Art. 6(1)(b), performance of contract, and our legitimate interest in keeping you informed of important information). If you opt in to our newsletter or marketing updates, we will also use your email to send occasional news about Răgaz (such as new features or mindfulness tips). Such marketing communications will only be sent with your consent (legal basis: Art. 6(1)(a)), and you can unsubscribe at any time.
To Process Payments and Subscriptions: If you make a purchase, we use the information provided by Stripe (our payment processor) to activate your subscription and maintain your account's access to premium content. We might also send you a receipt or invoice via email, or let you know when your subscription is about to renew. Processing payments is done to fulfill our contract with you (Art. 6(1)(b)) and to comply with legal financial record-keeping obligations (Art. 6(1)(c), as we must maintain transaction records for accounting and tax purposes).
To Improve, Debug, and Secure the App: We analyze the usage and diagnostics data (like crash logs or how often features are used) to fix bugs, troubleshoot issues, and inform our development of new features or improvements. It helps us understand what is working and what might need enhancement. We also monitor for any suspicious activity on accounts to protect against unauthorized access. We rely on our legitimate interests (GDPR Article 6(1)(f)) to process data for these purposes, as we have a business interest in ensuring the service works well and is secure, and we balance this against your rights and freedoms. For example, using an error log with a user ID helps us quickly resolve an issue you might be experiencing.
To Comply with Legal Requirements: In some cases, we may need to process or retain certain data to comply with laws - for instance, keeping payment transaction records for financial regulations or responding to lawful requests from authorities. The legal basis in such cases is Art. 6(1)(c) (compliance with a legal obligation).

We do not use your data for any purposes other than those described above. In particular, we do not use your personal data for advertising profiling, and we do not share it with advertisers or data brokers.

We treat your personal data with care and confidentiality. We do not share or disclose your information except in the following situations, and only to the extent necessary:

Service Providers (Processors): We use a few trusted third-party services to help us run Răgaz. These providers process data on our behalf, under our instructions, and are bound by strict confidentiality and data protection obligations (Data Processing Agreements under GDPR). The main services we use are:
- Stripe (Payment Processing): When you make a purchase or subscribe, your payment details are handled by Stripe. Stripe will process your credit card or payment information securely in compliance with PCI-DSS standards. We may share with Stripe the information necessary to process the payment (such as the amount and your email or user ID to associate the payment). Stripe may also store your payment method for subscription billing. We do not receive your full credit card number or bank details from Stripe - only confirmation that payment was completed and basic info needed for receipts. (Stripe is a data processor for us in this context, and is GDPR-compliant.)
- SendGrid (Email Delivery): We use SendGrid (a service by Twilio) to send out emails (for example, the signup confirmation email or a password reset link). We provide SendGrid with your email address and the content of the email to deliver it to you. SendGrid acts as our processor for sending these emails.
- Firebase Cloud Messaging (Push Notifications): For sending push notifications to your mobile device, we use Google Firebase Cloud Messaging. This service uses the device push token (see “Push Notification Tokens” above) to deliver notifications. We share the push token and the message content with Firebase for the purpose of sending you the notification. Firebase may also briefly process device information (like device model or OS) as part of delivering messages. We do not send any sensitive personal content in push notifications.
- Cloudflare (Website Hosting & Static Asset Delivery): We use Cloudflare to host our landing page (ragaz.app) and to securely store and efficiently deliver static assets such as audio files and images used in the Răgaz app. When accessing these resources, your device may communicate with Cloudflare's servers, which could log basic connection data such as IP addresses and device information. Cloudflare processes this data solely to securely serve and optimize the delivery of these assets. Cloudflare operates under strict data protection standards and is GDPR-compliant.
- AI Providers (OpenAI and Anthropic): If you opt in to the AI-driven features, we send your anonymized input text to OpenAI or Anthropic's AI systems to generate a response (as described in “AI-Powered Recommendations” above). These providers will receive the text of your prompt but not information like your name or email. They will process the text to return a helpful result. We have agreements in place to ensure they do not use your data for any purpose other than providing the response to us. However, note that the AI processing might occur on servers outside your country (often in the United States), so we treat this as an international data transfer (see International Data Transfers below for how we protect that). Only users who opt in will have their data sent to these AI services.
Legal Compliance and Protection: We may disclose personal data if we are required to do so by law or valid legal process (for example, in response to a court order or a subpoena). We may also disclose data if necessary to enforce our Terms of Service or other agreements, or to protect the rights, property, or safety of Răgaz, our users, or others. For instance, if we detect fraudulent activity on an account, we might share data with law enforcement agencies. We will only do this in accordance with applicable laws.
Business Transfers: If in the future Răgaz (or the company operating it) is involved in a merger, acquisition, investment, or sale of all or a portion of its assets, personal data of users may be transferred to the new owner or partner as part of that deal. If that happens, we will ensure the new owner is bound by terms that are at least as protective of your privacy as the terms in this policy. We will also notify you (for example, via email or a notice in the app) of any such change in ownership or control of your personal information.
With Your Consent: Apart from the cases above, if we ever want to share your information for any other purpose, we will ask for your consent. You would have the choice to explicitly allow or deny such sharing.

No Third-Party Marketing: We do not share your personal data with third parties for their own marketing or advertising purposes. We don't sell or rent your information to data brokers. All the third parties we interact with are solely to help us provide the service to you, not to market to you.

Cookies and Tracking Technologies

We are proud to say that our landing website uses no cookies at all 🚫🍪. The informational site at ragaz.app does not set any cookies in your browser, and we do not use any third-party analytics or tracking scripts on it. We have nothing to track there, we just provide you information about Răgaz.

As for the Răgaz web app (the in-app web version) and mobile apps: we similarly do not use analytics or advertising trackers. We may use local storage or similar mechanisms to keep you logged in or to remember your preferences (for example, your theme choice or language), which are essential for the service to work. These are analogous to “necessary cookies” but within the app environment. They are only used for functional purposes, not for tracking your behavior across different sites or apps.

Because we don't use cookies or external trackers, when you use Răgaz you will not see cookie banners on our website. There's simply no non-essential cookies to opt into. If in the future we ever introduce a feature that uses cookies or tracking, we will update this policy and (if required) ask for your consent.

Data Storage and Security

Your data is stored securely. We use industry-standard security practices to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Some of the measures we take include:

Encryption: All network communication between your app or browser and our servers is encrypted using HTTPS/TLS. This means that when your data is in transit (for example, syncing your journal entries or sending your login credentials), it's protected from eavesdropping. We also encrypt sensitive data at rest in our databases where applicable. For example, your password never leaves the app unencrypted and is stored in hashed form (not in plain text).
Access Controls: Personal data is accessible only to a limited number of authorized personnel who need it to operate and develop the service (for example, support staff or engineers debugging an issue), and even then, they are bound by confidentiality obligations. We never access your private journal content unless you explicitly ask us to (for example, if you contact support about a journal syncing issue, with your permission we might look at the data strictly to fix the problem and for this we will request your explicit consent).
Data Centers: We host data with reputable cloud infrastructure providers that have strong physical and network security. (For instance, our servers may be located in secure data centers in the European Union.) We choose providers that comply with GDPR and provide robust security certifications. Additionally, as mentioned, some data (like emails via SendGrid, or files via Cloudflare) may be processed on their secure infrastructure as well.
Pseudonymization & Anonymization: Where possible, we reduce the identifiability of data. For example, our debugging logs might reference user IDs instead of real names, and as noted, any data sent to AI services is stripped of personal identifiers. By using techniques like this, we adhere to the GDPR's principles of data protection by design and by default.
Regular Updates and Testing: We keep our software and systems up to date to protect against security vulnerabilities, and we periodically review our security measures. We also have procedures in place to deal with any suspected data breach. In the unlikely event of a data breach that affects your personal data, we will notify you and the relevant authorities as required by GDPR (Articles 33 and 34 require notification of personal data breaches in certain circumstances).

Remember that you also play a role in keeping your data safe. Always use a strong, unique password for your Răgaz account and do not share your login credentials with others. If you suspect any unauthorized access to your account, please notify us immediately.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. This means:

Account Information (Email, Profile Info): We keep your account data for as long as your account is active. If you decide to delete your Răgaz account, we will delete or anonymize your personal data associated with your account (such as your email, name, etc.) from our active databases, usually within a short period after your request (typically within 30 days). We may retain encrypted backups for a limited time after deletion, but we have procedures to purge those as well. If you simply stop using Răgaz, we will generally retain your account in case you return, but we may delete accounts that have been inactive for a very long time (if we do so, we will try to notify you in advance via email).
Journal Entries and Mood Data: All your journal and mood entries remain in our system until you delete them or delete your account. You can delete individual entries at any time from within the app, in which case they are removed from our databases. If you delete your account entirely, all your journal/mood data will be deleted along with the account data, after a short grace period. We do not retain copies of your personal entries after account deletion, except possibly in transient backups as noted above.
Communications: If you contact support or email us, we may retain those communications (including your email address and correspondence) for a period of time to ensure we have a history of your support requests and to improve our support services. Typically, we would keep support emails for a couple of years at most, unless there's a specific reason to keep them longer (for example, a legal issue).
Newsletter/Marketing List: If you have opted into our newsletter, we will retain your email on our mailing list until you unsubscribe or until we decide to discontinue the newsletter service. If you unsubscribe, we will remove your email from the mailing list promptly. (We may keep a record that you opted out, so we don't accidentally send you emails again, as required by law.)
Payment and Subscription Records: We retain payment transaction records and subscription details as long as needed for accounting and compliance purposes. For example, financial regulations might require us to keep records of transactions (invoices, etc.) for a number of years (e.g., for tax or audit purposes). However, any payment details stored by Stripe on our behalf (like card tokens) are subject to Stripe's retention policies. If you cancel a subscription, we keep the record of the subscription and its cancellation for our records.
Usage Logs and Diagnostics: Our application logs and diagnostic data are generally kept for a short period (usually a few weeks or months) unless we need to retain them longer to investigate a specific issue. We periodically purge old logs. Aggregate analytics (if any internal analytics are compiled) would not contain personal data and might be kept longer for statistical purposes.
AI Interaction Data: If you use the AI features, the prompts and responses might be temporarily logged (anonymously) for debugging and quality purposes, but we do not store them long-term attached to your account. We treat them similarly to other usage logs. And if you disable the AI feature, we cease processing your data through the AI.

When we no longer need personal data, we will ensure it is either deleted or anonymized so you can no longer be identified. For example, we might aggregate usage information so it is no longer tied to any individual.

International Data Transfers

Răgaz is based in the European Union, and we aim to store and process data within the EU whenever feasible. However, some of our service providers are located in or have servers in countries outside the European Economic Area (EEA). In particular, the United States is a country where some of our third-party processors operate (for example, Stripe, SendGrid, Cloudflare, OpenAI, and Anthropic may process data in the U.S.).

The GDPR has strict rules for transferring personal data outside the EEA. When we transfer your data to a “third country” (outside EEA), we ensure that appropriate safeguards are in place to protect it. These are the measures we take:

Standard Contractual Clauses: For our service providers outside the EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) as part of our agreements with them. These are standardized legal clauses that ensure your data has essentially the same protection as it has in Europe. For instance, our contracts with providers like Stripe or SendGrid include commitments under these clauses.
Adequacy Decisions: We also check if the country has an EU “adequacy decision” (meaning the EU has decided that the country's laws offer sufficient data protection). If such a decision exists, we may rely on it. (For example, as of the date of this policy, the EU is implementing a new framework for EU-US data transfers; if applicable, we will align with that.)
Data Processing Agreements: All our third-party processors have data protection agreements in place requiring them to safeguard your information, use it only for the services they provide to us, and to notify us if anything goes wrong.
Security Measures: Regardless of location, we require that our service providers implement robust security measures to protect your data. Many of these providers (like Cloudflare or Google for Firebase) are certified under internationally recognized security standards.

By using Răgaz, you understand that your data may be transferred to our partners in other countries as needed to provide the service. However, rest assured that we take steps to ensure any such transfers comply with GDPR Chapter V requirements and that your data remains protected to European standards.

If you want more information about our international data transfers or the specific safeguards in place, feel free to contact us (see Contact Us below).

Third-Party Content (Podcasts)

The Răgaz app includes curated podcast episodes, which are publicly accessible content obtained directly from podcast publishers' RSS feeds. These podcast episodes (including titles, descriptions, audio files, and images) are hosted and served directly by the respective podcast providers. We cache episode metadata to improve performance but do not modify any of this metadata, nor do we store static assets such as audio files or images on our infrastructure. Importantly, accessing these podcasts within Răgaz does not involve collecting, processing, or sharing additional personal data about you with third-party podcast providers.

Your Rights

As a user of Răgaz and as a data subject under the GDPR, you have a number of important rights regarding your personal data. We respect and uphold these rights. They include:

Right to Access: You can request a copy of the personal data we hold about you, and information about how we use it. This allows you to confirm we're processing your data lawfully and to verify the accuracy of the data. (GDPR Art. 15)
Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected or updated. For example, if you change your email or you realize we have your name spelled wrong, you can correct this (either through the app's profile settings or by contacting us). (GDPR Art. 16)
Right to Erasure: You have the right to request deletion of your personal data in certain circumstances - this is also known as the “right to be forgotten”. For instance, if you no longer want to use Răgaz, you can delete your account and we will erase your personal data (except for data we are required to keep by law). You can also ask us to delete specific data (like a particular journal entry), or all of your data at any time. We will comply provided we don't have a compelling reason to keep the data (e.g., a legal obligation). (GDPR Art. 17)
Right to Restrict Processing: In certain situations, you can ask us to suspend or limit the processing of your data. For example, if you contest the accuracy of your data, you can request we hold off on processing (other than storing it) until we verify and correct it. Or if you have objected to processing (see below), you can request restriction while we consider your objection. (GDPR Art. 18)
Right to Data Portability: You have the right to obtain your personal data in a common, machine-readable format, and to have that data transmitted to another service (when technically feasible). In practice, this means you can ask for an export of the data you provided to us (for example, your journal entries or profile info) in a format like JSON or CSV, so that you could back it up or use it in another app. (GDPR Art. 20)
Right to Object: You have the right to object to certain types of processing. Most importantly, you can object to any processing done on the basis of our legitimate interests or for direct marketing. For example, if we were to send you marketing emails based on our legitimate interest, you can opt out (though in our case, we rely on consent for marketing). If you simply don't want us to use your data for a particular feature anymore and that use is not essential to providing the service, you can object and we will consider it. If an objection is upheld, we will stop that processing. Specifically, you can object at any time to processing of your personal data for direct marketing purposes, and we will honor that (this is an absolute right). For other purposes based on legitimate interests, we may have to assess whether we have compelling grounds to continue. (GDPR Art. 21)
Right to Withdraw Consent: If we are processing any of your data based on your consent, you have the right to withdraw that consent at any time. For example, if you opted into the AI recommendations or the newsletter and then change your mind, you can withdraw your consent (by toggling off the feature in the app or clicking “unsubscribe” in emails, or simply contacting us). Once you withdraw consent, we will stop the processing that was based on it. (This will not affect any processing already done while your consent was in effect.)
Right not to be Subject to Automated Decisions: The GDPR gives you the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects or similarly significant effects for you (Art. 22). In plain terms, this means you have the right to have a human involved in important decisions about you. In Răgaz's context, we do not make any such decisions - we do not, for example, algorithmically deny you a service or make any legal determination about you. Any AI-generated tips we provide do not have legal or significant personal impact - they are simply for your self-improvement. Nevertheless, you have this right and if you ever felt a feature of our service was making a significant automated decision about you, you could object or request human intervention.
Right to Complain: If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority (a data protection regulator). You can do this in the EU member state where you live, where you work, or where the issue took place. For example, if you are in Romania, you can contact the National Supervisory Authority for Personal Data Processing (ANSPDCP). If you're in another EU country, you can reach out to your country's Data Protection Authority. We would appreciate the chance to address your concerns first, so please feel free to contact us, but this right is there for you. (GDPR Art. 77)

We will not charge any fee for you to exercise these rights (except in rare cases of excessive or unfounded requests, where the law allows a fee). We will respond to your requests as soon as possible and at least within one month, as required by GDPR. This period can be extended by another two months for complex requests, but we will inform you if that is the case. To exercise any of your rights, you can contact us at the email address provided below under Contact Us. For certain requests (like accessing or deleting data), we may need to verify your identity to ensure we don't give your data to the wrong person.

Children's Privacy

Răgaz is a general audience app and is suitable for users under 18 (we do not provide any harmful or age-inappropriate content). We allow teenagers to use the app, and we encourage mindful practices for young people. However, protecting children's personal data is especially important. If you are under the age of 16 (or the equivalent minimum age for valid consent in your country), please obtain permission from your parent or guardian before using Răgaz or providing your personal data. We comply with GDPR Article 8, which requires parental consent for processing personal data of children under 16 (with member states allowed to set a lower age, as low as 13).

We do not knowingly collect personal data from children under 13 without parental consent. The app is not directed to kids younger than 13, though we encourage parents to explore our products and decide for themselves if they are appropriate and useful for their children. If you are a parent or guardian and you learn that your child under 13 has created an account without your consent, please contact us immediately so we can take appropriate action (such as deleting the account and associated data).

For users between 13 and 18, we encourage them and their parents to discuss the use of Răgaz and to ensure that the young user understands this privacy policy. We have written this policy in plain terms that young users can understand, in line with GDPR's transparency requirements for information addressed to children.

We do not use the personal data of minors for marketing or profiling purposes. We simply provide the mindfulness service to them. Any optional features (like the newsletter or AI recommendations) are equally optional for minors, and require the same opt-in consent.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time as our services or legal requirements change. If we make significant changes, we will notify you through appropriate channels - for example, by emailing you (to the address associated with your account) or by displaying a prominent notice in the app. Minor changes (such as clarifications or typo fixes) may be posted by updating the policy document on our website or in-app, with a new effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. The “Effective Date” at the top indicates when the policy was last updated. Your continued use of Răgaz after any changes to this policy will signify your acceptance of the updated terms, to the extent permitted by law.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please do not hesitate to contact us. We are here to help.

Email us at [email protected] (This is our dedicated email for privacy inquiries. You can also reach us at [email protected] for general questions.)
Contact us directly through our contact form.

We will gladly respond to your inquiries and work with you to resolve any issue.

Thank you for trusting Răgaz with your personal development journey. We hope to put you at ease by keeping your data safe and private, while you focus on your mindfulness practice.

Peaceful days! 🩵