COOWIK

Privacy Policy

Last Updated: October 4, 2026
Effective Date: October 4, 2026
Application: Breathify (also distributed as Pommi)
Developer / Publisher: Coowik (“we”, “us”, or “our”)

1. Introduction & Privacy Philosophy

Coowik is committed to respecting and protecting your privacy. This Privacy Policy explains how Breathify (also distributed as Pommi, referred to as the “App”) collects, uses, stores, and protects information when you use our mobile application and related services.

We believe that your breathing, mindfulness, and mental wellness routines are deeply personal. We design Breathify with a local-first, privacy-by-default architecture:

  • No User Account Required: You do not need to register, create a profile, or provide your name, email, or password to use our core breathing features.
  • We Do Not Sell Your Data: We never sell, rent, monetize, or broker your personal information or wellness activity to advertisers or third parties.
  • Local Storage: Your breathing logs, mindfulness streaks, custom session timers, and widget configurations are kept directly on your device.

By downloading, installing, or using Breathify, you acknowledge and agree to the practices outlined in this Privacy Policy.

2. Information We Process

2.1 Information Stored Locally on Your Device (On-Device Data)

The core functions of Breathify process and store information locally on your device using Apple’s standard storage mechanisms (UserDefaults and local storage):

  • Breathing Session History: Time completed, session duration (in seconds), timestamp, and the breathing pattern used (e.g., Box Breathing, 4-7-8, Rescue).
  • Streak & Habit Statistics: Current streak, best streak, total mindful minutes, and daily practice status.
  • User Preferences: Preferred breathing pace, sound chime preferences, haptic feedback toggles, selected app icon, and widget themes.
  • Local Custom Reminders: Scheduled reminder times, daily notification preferences, and snooze timers.
Note: This data is stored strictly on your device. We do not transmit, sync, or host your session history on our own servers. If you delete the App from your device, this locally stored data is permanently deleted unless backed up in your personal iCloud device backup.

2.2 Diagnostic & Analytics Data (Third-Party Services)

To help us understand app performance, diagnose technical issues, and improve user experience, Breathify integrates two industry-standard diagnostic and analytics services:

A. Microsoft Clarity (Product Analytics & Session Telemetry)

We use Microsoft Clarity to understand how users interact with our user interface, detect layout hitches, track feature adoption, and optimize navigation flows.

  • What Clarity Collects: Anonymous screen views, user navigation paths, interaction metrics (taps, gestures, scroll depth), device type, operating system version, and general non-precise geographic region (country/city level).
  • Session Replays & Privacy Masking: Clarity may capture visual session replays of UI navigation. Sensitive data entry is masked by default.
  • Configuration & Control: Clarity operates in accordance with strict privacy safeguards. For more details on Microsoft Clarity’s data handling, visit Microsoft Privacy Statement.

B. Google Firebase Crashlytics (Crash Reporting & Stability)

We use Firebase Crashlytics (a Google service) to identify and troubleshoot app crashes, software bugs, and stability issues.

  • What Crashlytics Collects: Crash stack traces, memory state at time of crash, device model, operating system version, app build version, and unique diagnostic installation IDs.
  • Purpose: Crashlytics allows us to rapidly release fixes for unexpected crashes. Crash logs do not contain your personal session content or breathing logs.
  • For more details on Firebase Crashlytics privacy, visit Google Privacy & Terms.

2.3 Apple In-App Purchases & Subscriptions (StoreKit 2)

When you purchase a Breathify Plus (or Pommi Plus) subscription or lifetime license:

  • Purchases are processed directly through Apple’s native StoreKit 2 framework and your Apple ID.
  • Coowik never collects, stores, or sees your credit card number, billing address, or payment details. All payment transactions are governed exclusively by Apple’s Privacy Policy and Media Services Terms.
  • The App queries Apple’s cryptographic StoreKit receipts solely to verify your active entitlement status on your device.

2.4 Apple Health / HealthKit Integration (Mindful Minutes)

Breathify provides an optional feature allowing you to sync completed breathing sessions to the Apple Health app as Mindful Minutes.

🔒 Strict HealthKit Compliance (Apple App Store Guideline 5.1.3):

  1. Explicit Permission: Breathify will never access Apple Health without your prior, explicit consent granted through the iOS system permission dialogue.
  2. Write-Only / User Control: You can toggle HealthKit sync on or off at any time in the App or in your iOS Settings (Settings > Health > Data Access & Devices > Breathify).
  3. No Marketing or Advertising: We NEVER use data gathered through HealthKit for advertising, marketing, profiling, or data mining purposes.
  4. No Third-Party Sharing: HealthKit data is NEVER shared with, sold to, or disclosed to third parties, advertising networks, or analytics services (including Microsoft Clarity or Firebase Crashlytics).
  5. Local Processing: HealthKit data is written directly to your personal Apple Health database on your device and synced across your personal Apple devices via end-to-end encrypted iCloud Health sync managed by Apple.

2.5 Local Notifications (Reminders)

If you enable daily practice reminders:

  • Reminders are scheduled and delivered entirely locally on your device using Apple’s UNUserNotificationCenter.
  • We do not operate an external push notification server, and we do not collect or transmit your Apple Push Notification Service (APNs) device token.

2.6 User Communications & Feedback

If you choose to contact us for customer support or feedback via the in-app email composer:

  • Your inquiry is sent to itsrisalea@gmail.com.
  • The template may automatically append your app version and device model (e.g., iPhone 15 Pro, iOS 18.0) to assist with debugging.
  • We use your email address and message content solely to respond to your inquiry and resolve technical issues. We never use support emails for marketing campaigns or share them with third parties.

3. How We Use Information

We process the limited data described above solely for the following legitimate purposes:

  1. Core Functionality: To display your breathing history, streaks, milestone badges, and saved preferences.
  2. Subscription Management: To unlock and verify your access to Breathify Plus features via Apple StoreKit.
  3. App Diagnostics & Quality: To monitor crash rates, debug code errors, and ensure compatibility across iOS devices and versions.
  4. Product Improvement: To analyze aggregated user engagement trends (e.g., which breathing exercises are most helpful) to refine future updates.
  5. Customer Support: To assist you with troubleshooting and respond to your direct inquiries.

4. Disclosure and Sharing of Information

We do not sell, trade, or rent your personal information. We disclose information only under the following limited circumstances:

  1. Third-Party Service Providers: As described in Section 2, we use trusted infrastructure providers (Microsoft Clarity for analytics, Google Firebase Crashlytics for crash logging, and Apple for StoreKit and HealthKit sync). These providers process data on our behalf subject to confidentiality obligations and industry-standard security.
  2. Legal Requirements: We may disclose information if required to do so by applicable law, regulation, subpoena, or legal process, or if we believe in good faith that such disclosure is necessary to protect the safety, rights, or property of our users, the public, or Coowik.
  3. Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, anonymous analytical data and app ownership may be transferred to the acquiring entity.

5. Data Retention & Deletion

  • Local Session Data: All session records, streaks, and preferences are retained locally on your device for as long as you keep the App installed.
  • Deleting Your Local Data: You can delete all your stored data at any time by simply deleting / uninstalling Breathify from your iOS device.
  • Analytics & Crash Data: Data stored by Microsoft Clarity and Firebase Crashlytics is retained in aggregated, pseudonymous format according to their standard data retention schedules (typically 30 to 90 days for crash logs and up to 13 months for aggregated analytics), after which it is automatically deleted.
  • Support Correspondence: If you contact us via email, we retain email correspondence only as long as necessary to address your inquiry, after which it is archived or securely deleted.

6. Children’s Privacy (COPPA & Global Standards)

Breathify is not intended for or directed to children under the age of 13 (or under 16 in certain jurisdictions, including the EU/UK). We do not knowingly collect, request, or solicit personal information from children under 13.

If you are a parent or legal guardian and believe that your child has provided us with personal information, please contact us immediately at itsrisalea@gmail.com. If we learn that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will promptly delete that information.

7. International Data Transfers & European Rights (GDPR / UK GDPR)

If you are a resident of the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, your data protection rights are governed by the General Data Protection Regulation (GDPR) and UK GDPR.

7.1 Legal Bases for Processing

We process data under the following legal bases:

  • Performance of a Contract: Providing the App’s core services and fulfilling subscription entitlements purchased through StoreKit.
  • Legitimate Interests: Analyzing crashes and app stability via Firebase Crashlytics and monitoring feature usage via Microsoft Clarity to improve product performance.
  • Consent: Writing mindful minutes to Apple Health (where you provide permission via the iOS system prompt) and sending local notifications.

7.2 Your Data Rights

Under the GDPR, you have the right to:

  • Access: Inquire about what personal data is processed.
  • Rectification: Request correction of inaccurate information.
  • Erasure (“Right to be Forgotten”): Request deletion of your data (you can immediately delete on-device data by uninstalling the App).
  • Restrict or Object to Processing: Object to or restrict certain types of data processing.
  • Data Portability: Receive your data in a structured, commonly used format.
  • Withdraw Consent: Withdraw consent at any time (e.g., revoking Apple Health access in iOS Settings).

To exercise any of these rights, please contact us at itsrisalea@gmail.com. You also have the right to lodge a complaint with your local Data Protection Supervisory Authority.

8. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures:

  • No Sale or Sharing of Personal Information: Coowik does NOT sell your personal information, nor do we “share” personal information for cross-context behavioral advertising.
  • Categories of Collected Information: In the preceding 12 months, we have collected identifiers (pseudonymous device identifiers, crash logs) and internet/electronic network activity (app usage telemetry via Microsoft Clarity) solely for business operations.
  • Non-Discrimination: We will never discriminate against you (e.g., by denying services or altering pricing) for exercising your privacy rights.
  • Exercising Your Rights: California residents may exercise their rights to know, delete, or correct personal information by emailing us at itsrisalea@gmail.com.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect information against unauthorized access, loss, misuse, or alteration. All telemetry sent to Microsoft Clarity and Firebase Crashlytics is transmitted using modern Transport Layer Security (TLS/HTTPS) encryption. However, please remember that no method of transmission over the Internet or electronic storage is 100% secure.

10. Third-Party Links & Services

The App may contain links to external sites (such as our support email or Apple’s subscription management pages). This Privacy Policy applies solely to Breathify. We are not responsible for the privacy practices, content, or policies of third-party websites or services. We encourage you to read the privacy policies of any third-party service you visit.

11. Changes to this Privacy Policy

We may update or revise this Privacy Policy periodically to reflect changes in our practices, new app capabilities (such as expanded health integrations), or legal requirements. When we post changes, we will update the “Last Updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of Breathify after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your privacy, or our data handling practices, please contact us at: