Privacy Policy
Effective July 25, 2026 Last updated August 24, 2026
ZELUNA is an app for guided meditation, sleep stories, breathing, and relaxing sounds. This policy explains what personal information we collect when you use the app, why we collect it, who processes it on our behalf, and the choices you have.
1. Who we are and how to contact us
YUKIKO SAWADA (“we”, “us”) is the controller responsible for the personal information described in this policy. For any question about privacy, or to make a request about your data, email zeluna369@gmail.com.
This policy covers the ZELUNA iOS app and the pages published on this website. It does not cover Apple’s App Store or any other service that we do not operate.
2. Information we collect
Account information
You sign in with Sign in with Apple. Apple sends us a unique identifier for your Apple Account, and — only if you choose to share them — your name and an email address. If you use Apple’s Hide My Email option, we receive a private relay address instead of your personal one. We never receive your Apple Account password.
Subscription information
Purchases are processed by Apple. We do not receive or store your payment card details. We do receive the status of your subscription (for example: active, in free trial, expired), the product you purchased, and an app-specific customer identifier from our subscription provider, so that we can unlock the content you paid for and restore it on your other devices.
Content you enter and your activity in the app
The daily record that grows your garden — the days you finished a session, how many sessions you finished on each of them, how long you listened, and the completion streak we count from that record — together with the intention text you write in My intention, is saved to our database (Cloud Firestore) under your account once you sign in. Until you sign in it stays on your iPhone and we do not receive it; when you first sign in, what is already on the device is added to your account. We keep the record so that your garden and your intention are still there after you reinstall the app or sign in on another device. It is stored under your account identifier, and our security rules let only the signed-in owner of that account read or write it.
The identifiers of the sessions you played most recently — which the home screen uses to list them again under Recent — never leave your iPhone. We do not receive them, they are not uploaded to our servers, and they are deleted when you delete the app. Because they are not synced, they do not transfer to a new device.
Your activity in the app is different. We use Firebase Analytics to understand how the app is used, and the app sends events to it as you go: when you start a session, the identifier, category, and media type of that content; when a session finishes, the identifier and the number of seconds you listened. We also send the steps you pass through in the introduction, when the subscription screen is shown, when you start a purchase or a restore and how it ended, and when you sign in.
Firebase Analytics also records events on its own, without us writing code for them. These include the first time the app is opened on a device, the start of each app session, and the app version you moved to when you update. When a purchase or a subscription renewal goes through the App Store, it records that too, along with the details Apple provides about what was bought: the product identifier, the product name, the quantity, the price, and the currency. Apple still processes the payment itself, so neither we nor Firebase receive your payment card details.
These events do not carry your name, your email address, or your account identifier. Firebase does attach an identifier for this app on this device — Apple’s identifier for vendors and an app instance identifier — so the history builds up per device. Standard technical details are recorded alongside each event, such as your device model, iOS version, app version, and the country your connection comes from. We use this to see which sessions people finish and where they stop, so that we can improve the app. We do not use it to advertise to you.
Technical and diagnostic information
When the app requests content, our hosting and storage providers automatically record standard server information such as IP address, request time, device type, operating system version, and app version. If you have enabled sharing of crash and usage analytics with developers in your iOS settings, Apple may provide us with aggregated crash reports.
We do not use advertising SDKs, and we do not track you across other apps or websites. The app does not use Apple’s advertising identifier (IDFA), so you will not see an App Tracking Transparency prompt, and we do not combine what we collect with data from other companies. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined under United States state privacy laws.
3. How we use information
| Information | Purpose |
|---|---|
| Apple identifier, account identifier, email | Create and secure your account, sign you in, respond to support requests |
| Subscription status and product | Unlock premium content, restore purchases, manage free trials, handle billing questions |
| Streak, garden progress, My intention | Show your progress and garden, keep the intention you wrote, and bring both back when you reinstall the app or sign in on another device. Stored under your account once you sign in, and readable only by you. Until you sign in it stays on your device |
| Recently played session identifiers (device only) | List the sessions you played most recently on that device. We do not receive this data |
| Session events (content identifier, category, media type, seconds listened), subscription screen and purchase actions, automatic app events (first open, app sessions, app updates), automatic App Store purchase events (product identifier, product name, quantity, price, currency), device identifier | See which sessions are played and finished, where people stop, and how many people subscribe, so we can improve the app. Not used for advertising or for tracking across other apps |
| Server logs and diagnostics | Deliver audio and video, keep the service secure, detect abuse, fix crashes and playback errors |
We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects.
4. Legal bases
If you are in the United Kingdom, the European Economic Area, or another region with comparable law, we rely on the following legal bases:
- Performance of a contract — to create your account, provide the content you subscribed to, and restore your purchases.
- Legitimate interests — to keep the service secure and reliable, prevent fraud and abuse, and improve the app, balanced against your privacy.
- Legal obligation — to keep transaction and tax records that applicable law requires us to retain.
- Consent — where we ask for it, for example before enabling an optional feature. You may withdraw consent at any time.
5. Service providers
We share personal information only with providers who process it on our instructions, and only as far as they need it to run the service:
- Apple Inc. — Sign in with Apple, App Store purchases and billing, subscription management. Apple processes your payment as an independent controller under Apple’s Privacy Policy.
- Google LLC (Firebase) — authentication, analytics, database (Cloud Firestore) for your garden record and your intention, media storage and delivery, and web hosting for these pages.
- RevenueCat, Inc. — subscription status management across devices.
We may also disclose information if we are legally required to do so, to enforce our terms, to protect the rights and safety of our users, or as part of a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.
6. How long we keep data
- Account data — for as long as your account exists. We delete or anonymise it after you delete your account, other than the exceptions below.
- Purchase and subscription records — retained for the period required by tax, accounting, and consumer protection law, and by our subscription provider’s own retention rules, even after account deletion.
- Server logs — retained for a short operational period and then deleted or aggregated.
- Streak, garden progress, and My intention — once you sign in, kept on our servers for as long as your account exists, and deleted when you delete your account. Until you sign in they are held only on your device. The copy on your device is removed when you delete the app.
- Recently played sessions — held only on your device and removed when you delete the app.
- App, session, and purchase events — kept by our analytics provider for the retention period set in that service, after which only aggregated reports remain.
7. Your rights and choices
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to certain processing, to receive a copy in a portable format, and to withdraw consent. Residents of California and other United States states with privacy laws have comparable rights, and we will not discriminate against you for exercising them.
To make a request, email us at the address in section 1 from the address associated with your account, or contact us from the same Apple Account you use to sign in. We will respond within the period required by applicable law. If you are in the UK or EEA and believe we have not handled your request properly, you may complain to your local data protection authority.
8. Deleting your account
You can start account deletion from inside the app, in Settings. When you do:
- Your authentication account and the data linked to it are deleted, including the garden record and the My intention text held on our servers.
- The app’s data stored on your device is removed.
- App, session, and purchase events already sent to our analytics provider carry no account identifier, so they are not linked to the account being deleted. They expire as described in section 6.
- Subscription and purchase records are retained or anonymised as described in section 6, because we are required to keep them.
Deleting your account does not cancel your subscription. Apple manages auto-renewing subscriptions. To stop future charges, cancel in Settings › Apple Account › Subscriptions on your device before the current period ends. See Support for step-by-step instructions.
9. Children’s privacy
ZELUNA is not directed to children. You must be at least 16 years old, or the minimum age required in your country, to create an account. We do not knowingly collect personal information from children below that age. If you believe a child has provided us with personal information, contact us and we will delete it.
10. International transfers
We and our providers operate internationally, so your information may be processed in countries other than the one where you live, including the United States and Japan. Where information is transferred out of the UK or EEA, we rely on the European Commission’s Standard Contractual Clauses or another approved safeguard in our agreements with those providers.
11. Security
Traffic between the app and our servers is encrypted in transit. Access to production data is restricted to the people who need it, and authentication is handled by Apple and Firebase rather than by passwords we store. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy as the app changes. We will update the “Last updated” date at the top of this page, and for material changes we will give notice in the app or by email before the change takes effect.