Privacy Policy

1. Information we collect

We collect information you provide, information created through your use of the Service, and limited technical information needed to operate it.

Account and authentication information

• Email address and a unique account identifier.
• If you use Sign in with Apple or Google, the name, email address, and identifier that you authorize that provider to share with us.
• Authentication and session information needed to keep your account signed in.

Optional profile information

You may choose to provide your first name, gender, pronouns, birth date, city, state, and country. These fields are optional and self-described. We do not collect precise GPS location.

Check-ins and wellness information

When you create a constellation or use related features, you may choose to record sleep, energy, nervous system state, body regions and sensations, emotions and intensity, glimmers, resources, intentions, session days, session notes, flags, and free-form text. This information may reveal sensitive details about your physical or emotional wellbeing and may be considered consumer health data under some laws.

Subscriptions and purchases

Apple or Google processes purchases made through its app store. We do not receive your full payment-card details. We receive subscription product, purchase-status, entitlement, and transaction-event information needed to provide paid features and maintain purchase records.

Notifications, device information, and diagnostics

• If you enable notifications, we collect a push token, time zone, preferred invitation time, quiet days, and notification-delivery status.
• We collect limited crash and error information, such as application version, device and operating-system information, and technical details about a failure. Crash reporting is configured not to send default personally identifying information, journal content, console logs, network-request breadcrumbs, session replay, or performance traces.
• Our website may use essential cookies or similar storage for authentication, security, and core functionality.

2. How we use information

We use information to:

• Create, authenticate, secure, and support your account.
• Save your entries and generate personal timelines, patterns, and observations.
• Honor your notification choices.
• Process subscriptions and provide the features included in your plan.
• Send service messages, invitation emails, and notifications you request.
• Diagnose crashes, prevent abuse, protect the Service, and comply with law.
• Respond to support, privacy, and account requests.

We do not use your check-in or consumer health data for advertising, data-broker activities, or automated decisions that produce legal or similarly significant effects.

3. How we disclose information

We disclose information only in the circumstances described below.

Service providers

We use companies that process information on our behalf to provide the Service. They may access information only as needed to perform their contracted services, subject to their agreements with us. Our current providers include:

• Clerk for authentication and account management.
• Convex for application databases, server functions, and protected file storage.
• RevenueCat for subscription and entitlement management.
• Sentry for limited crash reporting.
• Expo for push-notification delivery.
• Resend for transactional email.
• Apple and Google when you use their sign-in or app-store services.

Legal, safety, and business circumstances

We may disclose information if reasonably necessary to comply with law or valid legal process; protect the rights, safety, and security of users, the public, or the Service; investigate fraud or abuse; or complete a merger, financing, reorganization, or sale of all or part of the business. Where legally required, we will provide notice and obtain consent before transferring sensitive or consumer health data in a business transaction.

4. No sale, advertising, or cross-app tracking

We do not sell your personal information or consumer health data. We do not share it for cross-context behavioral advertising. The Service does not contain third-party advertising, and we do not track you across apps or websites owned by other companies for advertising purposes.

5. Consumer health data

Depending on where you live, your check-ins, sensations, emotions, sleep, energy, wellness notes, and inferences generated from them may be regulated as consumer health data. We collect this information directly from you and derive personal observations from the entries you choose to make. We use it to provide the wellness features you request.

We disclose consumer health data only to processors needed to operate the Service. We do not sell consumer health data and do not use it to infer characteristics for advertising.

6. Retention and deletion

We retain account and wellness information while your account is active so that you can access your history. We retain consent records, transaction records, security records, and limited diagnostic information for as long as reasonably necessary for the purposes described above, including legal, fraud-prevention, accounting, dispute-resolution, and safety obligations.

You may initiate account deletion from the app's Settings screen or use our external account-deletion process. In-app account deletion removes your account and associated application data from active systems, including check-ins, personal notes, sessions, subscriptions, and notification records. Some limited information may remain temporarily in backups or with processors according to their deletion cycles, or be retained where required by law.

7. Your choices and privacy rights

Depending on your location, you may have the right to:

• Know whether we process your information and access a copy of it.
• Correct inaccurate profile information.
• Delete your account and personal information.
• Receive certain information in a portable format.
• Obtain a list of third parties with whom consumer health data was disclosed.
• Appeal a decision we make about a privacy request.

You can manage notifications in Settings and in your device settings. To exercise another right, email kelly@universewithinbodytherapy.com. We may need to verify your identity before completing a request. An authorized agent may submit a request where permitted by law. To appeal a decision, reply to our response with “Privacy Appeal” in the subject line.

We will not discriminate against you for exercising a privacy right.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Protect your sign-in credentials and contact us if you believe your account has been compromised.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information without appropriate authorization, contact us and we will take appropriate steps to delete it.

10. International processing

We and our providers may process information in the United States and other countries where we or they operate. Those countries may have privacy laws different from those in your country. Where required, we use appropriate safeguards for international transfers.

11. Changes to this policy

We may update this policy as the Service or legal requirements change. We will post the updated policy here, revise the effective date, and provide additional notice when a change is material or when law requires consent.

12. Contact us

Universe Within
Email: kelly@universewithinbodytherapy.com

For privacy requests, use the subject line “Privacy Request.”