Legal
Privacy Policy
Last updated: 27 May 2026. This policy explains what we collect when you use Breathely and how we handle it.
Who we are
Breathely (“we”, “us”) provides guided breathing exercises through our website and related services. This policy describes how we process personal data when you visit the site, create an account, or use our features.
What we collect
Depending on how you use Breathely, we may process:
- Account details — such as your name, email address, and password (stored in hashed form by our authentication provider).
- Profile information — optional details you add to your profile after signing up.
- Usage and session data — completed breathing sessions, streaks, and custom exercises you create when signed in.
- Technical data — basic server logs (for example IP address, browser type, and timestamps) needed to operate and secure the service.
- Cookies and similar technologies — mainly to keep you signed in and to protect your account.
You can browse premade exercises without an account. We only collect the items above when you register, sign in, or otherwise interact with account features.
How we use your data
We use personal data to:
- create and manage your account;
- provide guided breathing sessions, streaks, and custom exercises;
- send transactional emails (for example sign-up confirmation and password reset);
- maintain security, prevent abuse, and troubleshoot problems;
- improve Breathely based on aggregated, non-identifying usage patterns.
We do not sell your personal data. We do not use your data for third-party advertising.
Legal bases (UK / EEA users)
If you are in the UK or European Economic Area, we rely on:
- Contract — to provide the service you sign up for;
- Legitimate interests — to secure and improve Breathely, in ways that do not override your rights;
- Consent — where required, such as when you accept this policy during registration.
Service providers
We use trusted processors to run Breathely. They may access personal data only to perform services on our behalf and under appropriate safeguards. Our main providers include:
- Supabase — authentication, database, and hosting of account-related data;
- useSend (or equivalent email delivery) — sending transactional emails to you.
These providers may process data in countries outside your own. Where required, we use appropriate transfer safeguards.
Retention
We keep your account and session data while your account is active. If you delete your account or ask us to remove your data, we delete or anonymise it within a reasonable period, except where we must retain information for legal, security, or backup purposes.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You may also withdraw consent where processing is based on consent.
To exercise these rights, contact us using the details below. You may also lodge a complaint with your local data protection authority.
Children
Breathely is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be highlighted on the site or by email where appropriate.
Contact
Questions about this policy or your personal data? Send us a message through the contact form.
You can also review our exercise library without creating an account.