Last updated: ____________
TODO before publishing: replace the bracketed placeholders — legal entity /
developer name, contact email, and governing jurisdiction — then host this page at the URL
referenced in the app (currently https://kymaapp.com/privacy).
This Privacy Policy explains how [Developer / Legal Entity Name] ("we", "us") handles information in the Kyma iOS, watchOS and macOS apps ("Kyma", the "App"). Our guiding principle is data minimization: Kyma is designed to keep your personal data on your own devices and in your own iCloud account.
We do not sell your data, we do not use third-party advertising or analytics SDKs, and we do not use an advertising identifier. Kyma does not track you across other companies' apps or websites. We do collect first-party, anonymous usage analytics for the onboarding flow only — see section 6b.
With your explicit permission, Kyma reads heart-rate and Heart Rate Variability (HRV) data from Apple Health to measure how sessions affect your nervous system, and can write completed sessions to Apple Health as mindful minutes. This data is processed on your device and stored locally. It is never transmitted to us. Health data is never used for advertising and is never shared with third parties. You can revoke Health access at any time in the iOS Settings > Health > Kyma.
If you are signed in to iCloud, your programs, sessions and preferences may sync across your own devices using Apple's CloudKit into your private iCloud database. We do not have access to the contents of your private CloudKit data; it is governed by Apple's privacy policy.
Kyma may request microphone access solely to support active noise handling during playback. Audio from the microphone is processed in real time and is not recorded, stored, or transmitted.
Purchases (annual, monthly, and lifetime plans) are processed by Apple through the App Store. We do not receive or store your payment details. Apple provides us with anonymized/aggregated transaction information for accounting. Your purchase entitlement is verified on-device via StoreKit and synced to your Apple ID by Apple. See Apple's privacy policy.
App settings, onboarding responses, saved programs and listening statistics are stored locally on your device (in UserDefaults and the app's local database) and, if enabled, in your private iCloud.
To understand where people get stuck while setting up their first session, Kyma sends anonymous usage events from the onboarding flow to our own database (hosted by Supabase, in the EU). These events record which screens were shown, how long each one took, which options were chosen, the sound settings you adjusted, whether the paywall was reached, and basic technical context (app version, device model, OS version, language and country).
These events are not linked to your identity. They carry a random identifier generated on your device, not an account, an email address or an advertising identifier. The name you type during onboarding is never sent — we only record whether you provided one or skipped the step. Health and HRV data is never included. This data is used only to improve the app, never for advertising, and is never shared with other companies for their own purposes.
Kyma is not directed to children under 13 and we do not knowingly collect data from children.
Because your data lives on your device and in your iCloud, you control it directly: you can delete the app, revoke Health/iCloud permissions, and manage or delete iCloud data from your device.
Kyma is a wellness and relaxation product. It is not a medical device and does not diagnose, treat, cure, or prevent any disease or medical condition. It is not a substitute for professional medical care.
We may update this policy; the "Last updated" date will change accordingly.
Questions: [support@kymaapp.com].