Privacy Policy

1. Overview

ZeroEntropy ("we," "us," or "our") is a breathwork, meditation, and self-reflection app operated by ZeroEntropy Lab. This Privacy Policy explains what information ZeroEntropy processes, why it is used, the service providers involved, how long information is retained, and the choices available to you.

2. Information We Collect and Process

ZeroEntropy collects or processes the following categories of information:

• Account and sign-in information: If you create an account, ZeroEntropy processes your account identifier, sign-in provider, email address, and authentication session information. Google or Apple may provide limited profile information, such as a name or profile image, when you choose their sign-in service.
• Device-local practice information: Recordings, recording takes, playlists, Favorites, activity history, reminder choices, Breath settings, and meditation preferences are stored locally by ZeroEntropy on your device in the current product. ZeroEntropy does not upload this practice information to its servers.
• Subscription information: Apple processes App Store payments. ZeroEntropy and RevenueCat process a customer identifier, product and entitlement information, subscription status, and transaction status needed to provide Premium access and Restore Purchases. ZeroEntropy does not receive your full payment-card details.
• Account-deletion information: The deletion service temporarily processes your authentication credential and, when applicable, Apple authorization material to confirm that the request belongs to the same account. These raw credentials are not stored in the deletion-operation record. The service stores pseudonymous hashes, coarse completion state, retry count, and timestamps so interrupted or delayed deletion can be reconciled safely.
• Service-request and security information: Hosting, authentication, subscription, and content-delivery providers may process standard technical information such as IP address, request route, timestamp, response status, device or app information, and security events when providing their services.
• Support communications: If you contact support, ZeroEntropy Lab receives the information you send, such as your email address, message, and any attachments you choose to provide.

3. How We Use Information

We use information only as needed to:

• create and secure your account and maintain your signed-in session;
• provide playback, playlists, recordings, reminders, and other app functionality;
• determine subscription access, present purchase options, manage subscriptions, and restore purchases;
• deliver streamed meditation content and protect service reliability;
• process and safely reconcile account-deletion requests;
• prevent abuse, investigate failures, and maintain security; and
• respond to support and privacy requests.

4. Service Providers and Sharing

We do not sell your personal information. We use service providers only to operate ZeroEntropy and require them to protect personal information consistently with this policy and applicable privacy requirements.

• InstantDB: account creation, authentication, and the developer-controlled account identity;
• Apple: App Store purchases, subscription management, and Sign in with Apple;
• Google: Google sign-in when you choose that method;
• RevenueCat: subscription status, entitlements, customer records, and purchase restoration;
• Superwall: paywall presentation and related subscription surfaces when configured;
• Cloudflare: the isolated account-deletion service, short-lived operation state, abuse protection, and operational logs;
• Bunny.net: delivery of streamed meditation audio and the content catalog; and
• Our email provider: delivery and retention of communications you send to support.

These providers may process information in countries other than your own under their applicable privacy and data-protection terms. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

5. Tracking and Advertising

ZeroEntropy does not sell personal information, display third-party advertising, or use your information for cross-app advertising tracking.

6. Device-Local Data

Your recordings and other practice information remain on your device unless you delete them, complete account deletion, or remove the app and its data. Apple-controlled device backups may retain copies according to your device and backup settings. Streamed or bundled meditation audio is supplied for use inside ZeroEntropy and is not a user-recording upload.

7. Data Retention

• Device-local data: retained on your device until you delete it, successfully complete account deletion and device cleanup, or remove the app and its data.
• InstantDB account: retained while your account exists and deleted through the verified in-app account-deletion flow.
• RevenueCat customer record: retained to provide subscription and entitlement services and submitted for deletion as part of the verified account-deletion flow. Apple-controlled subscription and transaction records are separate.
• Deletion-operation record: the minimal pseudonymous operation record is automatically removed no later than 30 days after creation or the most recent final outcome.
• Cloudflare operational logs: retained according to the Cloudflare account plan for no more than seven days. ZeroEntropy's custom deletion logs contain event names and coarse outcomes, not email addresses, raw account identifiers, authentication tokens, purchase data, or recording paths.
• Support communications: retained only as long as reasonably necessary to respond, manage follow-up, protect the service, and meet legal obligations. You may request deletion by contacting us, subject to information we must retain for security or legal reasons.

8. Deleting Your Account

You can initiate account deletion in Profile → Account → Delete Account. ZeroEntropy explains the permanent effect, provides access to Manage Subscription, asks you to confirm your intent, and requires a recent sign-in using the same account.

After verification, ZeroEntropy attempts any applicable Sign in with Apple revocation, deletes or reconciles the RevenueCat customer record, and deletes the ZeroEntropy account identity in InstantDB. Device-local recordings, takes, playlists, Favorites, activity, reminders, and preferences are removed only after the required remote deletion is confirmed.

If a provider is temporarily unavailable or deletion cannot yet be confirmed, ZeroEntropy does not begin local cleanup or report success. The request remains safe to retry. If remote deletion succeeds but device cleanup is interrupted, the app keeps a minimal local retry marker and asks you to finish cleanup.

For a legacy Sign in with Apple authorization that cannot be revoked automatically, deletion of ZeroEntropy-controlled data still completes and the app explains how to remove ZeroEntropy manually from Sign in with Apple settings.

9. App Store Subscriptions

Deleting a ZeroEntropy account does not cancel an App Store subscription, issue a refund, or delete records controlled by Apple. If you have an active subscription, billing may continue until you cancel it with Apple. ZeroEntropy provides a Manage Subscription action before and after account deletion.

10. Your Choices and Requests

You may:

• review or change device-local preferences in the app;
• delete individual recordings and other supported local content;
• manage or cancel an App Store subscription through Apple;
• initiate deletion of your ZeroEntropy account inside the app; and
• contact us to ask about, correct, or request deletion of personal information handled by ZeroEntropy Lab.

11. Security

We use administrative, technical, and organizational safeguards designed to protect information. Account deletion requires same-account reauthentication, uses encrypted network connections, limits repeated requests, and avoids storing raw account credentials in the deletion-operation record. No method of storage or transmission is completely secure.

12. Children's Privacy

ZeroEntropy is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.

13. Changes to This Policy

We may update this policy when ZeroEntropy's features, providers, or legal obligations change. The effective date shown above will identify the current version. Material changes will be communicated in the app or through another appropriate notice when required.