top of page

Privacy Policy

Last updated: 30 January 2026​

At Aluma Breath, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use and safeguard your data when you use our services, including the Aluma Breath app and website.

1. Data Collection

We may collect the following categories of data, depending on how you use the Service:

 

a) Data you provide:

  • Account and contact data: name, email address.

  • User content and app inputs: preferences, settings, breathwork selections and any information you submit via forms or support requests.

  • Other Information you may provide: language settings, goals, previous meditation experience, sleep habits and moods and reflections you may provide.

​

b) Information we may collect when you use the Services or interact with us:

  • Usage information: the sessions you use, videos you view, content you listen to, screens or features you access, and other similar types of usage and performance metrics information.

  • Transactional information: information about a purchase, such as product description, price, subscription or free trial expiration date, and time and date of the transaction.

  • Log information: the app version, access times and dates, your IP address.

  • Device and technical data: information about the mobile device you use to access the Services, including the operating system and version, device identifiers set by your device operating system, and mobile network information.

  • Identifiers: device identifiers or app instance identifiers used for analytics, fraud prevention, and subscription management (exact identifiers depend on SDK configuration).

  • Communications: if you provide us with feedback, we may record our communications via emails etc.

 

c) Subscription / purchase data:

If you purchase a subscription, we receive and process information necessary to manage entitlements, such as purchase status, product identifiers, and transaction/receipt metadata (processed via Apple and our subscription provider).

2. How We Use Your Data (purposes)

We use personal data to:

  • Provide and operate the Service: create/login accounts, save preferences, deliver features.

  • Manage subscriptions and entitlements: confirm access, prevent fraud, handle refunds/charge disputes where applicable.

  • Communicate with you: service emails such as verification, log-in reset, important updates.

  • Improve and secure the Service: analytics, troubleshooting, crash reporting, monitoring, preventing abuse.

  • Comply with legal obligations: tax/accounting records where required, responding to lawful requests.

​

Information we Collect from Other Sources:

  • Social media data: if you create or log into your account through a social media service account, we will have access to information from that account, such as your name and other account information, in accordance with your data sharing settings on that social media service.

  • Cookie data: we may collect information via cookies.

  • Information you make public: finally, we may obtain information you have made publicly available, including from websites and online services you use, consumer research platforms.

3. Legal Bases (EEA, UK, Switzerland users – GDPR)

We process personal data under the following legal bases:

  • Contract: to provide the Service and subscription features you request.

  • Legitimate interests: to secure, maintain and improve the Service (e.g., diagnostics, preventing fraud).

  • Consent: where required (e.g., marketing communications, certain optional analytics settings, or tracking if ever used).

  • Legal obligation: to meet applicable laws (e.g., accounting/recordkeeping).

 

You may withdraw consent at any time where processing is based on consent.

4. How We Share Data (processors and third parties)

We do not sell your personal information. We share information only as needed to operate the Service, including with trusted service providers who help us deliver core functionality such as: hosting and infrastructure; database storage; subscription and purchase entitlement management; email delivery (e.g., verification and support emails); and analytics/crash reporting used to maintain performance and fix bugs. These providers may process identifiers and technical information (such as device information, IP address, app version, usage events and diagnostics) strictly to provide services to us under contractual obligations.

​

We may also share information:

  • For legal and safety reasons; and

  • In aggregated/de-identified form

 

If we offer in-app settings to limit analytics or communications, you can use them at any time. You can also manage certain device-level permissions in your iOS/ Android settings.

5. Data Transfers

Aluma Breath is based in Italy and hosts its data in the EU. Some of our infrastructure and service providers may process limited technical data (such as logs, diagnostics, or email delivery metadata) in other countries depending on configuration and operational needs. Where personal data is transferred outside the European Economic Area (“EEA”), we rely on appropriate safeguards required by applicable law, such as European Commission adequacy decisions and Standard Contractual Clauses.

 

You may request more information about these safeguards by contacting us at info@alumabreath.com

6. Data Retention

We keep personal data only as long as necessary for the purposes described above. Account data is retained while your account is active and is deleted or anonymized when you request deletion, unless we must retain certain information for legal, security, or fraud-prevention purposes. Technical logs and diagnostics are retained for a limited period to maintain and secure the Service. Purchase/subscription records may be retained as required for accounting and compliance purposes.

7. Data Subject Requests

You can access, correct, or delete your personal data, subject to certain legal limitations and have the right to object to certain processing (like receiving direct marketing), or request that we restrict processing in certain circumstances.

 

Depending on where you live and where applicable, you may have the right to request access to, correction of, or deletion of your personal information and to opt out of certain uses. We do not sell personal information, and if you believe we “share” personal information for cross-context behavioral advertising (as defined by California law), you may request to opt out by contacting us at info@alumabreath.com. We will not discriminate against you for exercising your privacy rights.

​

You can delete your account directly within the app by going to Settings → Account Information → Delete Account and following the instructions. When you request deletion, we delete your account and associated personal data from our active systems unless we are required to retain certain information for legal, tax, security, or fraud-prevention purposes.
Please note that removing the app from your device does not automatically delete your account or data. If you are unable to access the app, you may also request deletion by emailing us at info@alumabreath.com with the subject “Account Deletion Request.”

8. Security

We apply industry-standard safeguards designed to protect personal data, including technical and organizational measures that help prevent unauthorized access, disclosure, or misuse.

9. Changes To This Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the effective date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us by email at info@alumabreath.com.

bottom of page