Privacy Policy

1. Information we collect and why

• Launch notifications. If you ask to be notified when Fledin launches, we store your email address, signup date, and consent wording in Supabase to send that notification. You can withdraw your request or ask us to delete it by contacting us. Signup abuse prevention uses a keyed hash of your network address, not a stored raw IP address; rate-limit records older than 24 hours are removed when subsequent signups run.
• Account and profile information. Supabase provides authentication and account storage. We process your account identifier, email address, authentication information, and the profile details you supply, such as your display name, username, and profile photo. We use these to sign you in, secure your account, personalize the app, and synchronize your records. When you use Sign in with Apple, we receive the identifier and the name and email Apple makes available, which may be a private relay email address. A sign-in provider does not share its password with us.
• Wellness records. We store breathing-session dates, duration, settings and interaction events, together with episodes you choose to log. Episode records can include start and end times, intensity, triggers, and notes. These user-entered records are separate from Apple Health measurements, which Fledin reads without storing. We use these records to display your history, summaries, and trends. Recording a breathing session does not automatically classify it as a panic attack.
• Preferences and setup. We store your onboarding progress and choices, breathing and haptic settings, appearance, privacy and biometric visibility choices, and supported Watch or widget settings to remember how you want the app to work.
• Optional contacts and photos. If you choose a trusted contact or a profile photo, the app requests the relevant device permission. We use the contact details you select for the support-contact feature and the image you choose for your profile. Only provide another person’s details if you have permission to do so.
• Subscription information. Apple processes App Store purchases. RevenueCat handles purchase validation, subscription status, renewals, and restoration. This involves product and transaction identifiers, purchase and expiration dates, entitlement status, and an app user identifier. Before sign-in, RevenueCat may use an anonymous identifier; after sign-in, we associate purchases with your Supabase account identifier. Account attributes supplied to RevenueCat can include your name and email. Fledin does not receive your full payment card details.
• Support and technical information. When you contact us, we receive your email address, message, and any attachments you send. Our service providers also process connection and operational information, such as IP addresses, request times, device or app versions, and error information, to deliver and protect their services. Please do not send passwords, authentication codes, payment card details, or health records when reporting a routine issue.

2. Apple Health and sensitive wellness information

Apple Health access is optional. When you connect Apple Health during onboarding or in Health settings, Fledin requests permission to read heart rate, heart rate variability (HRV), and respiratory rate. You can choose individual permissions or skip the connection. The current app does not request permission to write to Apple Health.

We use authorized measurements to show health context and trends around your recorded episodes, including available measurements before and after an episode. Measurements can include their value, unit, timestamp, and source. These displays are for personal reflection, not diagnosis, continuous medical monitoring, or automatic panic detection.

Fledin reads authorized Apple Health measurements when needed to display them or generate a report. We do not store these measurements in Fledin, Supabase, or any other backend, and we do not upload or synchronize them to our servers. Your manually entered episode records and breathing history are separate account data.

We do not sell health or wellness information or use HealthKit information for advertising, marketing, tracking across other companies’ apps or websites, or unrelated data mining. We do not send your episode notes, triggers, or biometric samples to RevenueCat for subscription processing. Service providers handling account information and user-entered wellness records on our behalf must protect that information consistently with this policy and use it only to provide the relevant service. They do not receive Apple Health measurements from Fledin.

You can revoke Fledin’s Apple Health access at any time in your device’s Health permissions. This stops Fledin from reading those measurements. The original records remain in Apple Health, where you can manage them directly; Fledin has no stored copies to delete.

3. Storage, service providers, and sharing

Fledin keeps account preferences, user-entered episode records, breathing history, and pending changes on your device for offline use, and synchronizes account data with Supabase when a connection is available. This does not include Apple Health measurements. Supported iPhone and Apple Watch features can exchange settings and records between your devices. Authentication sessions use secure device storage. PDF reports and other exports are generated on demand. We do not retain a copy of your generated reports on our servers. If you save or share a report, the resulting file is held by you or the destination you choose and may contain health information.

• Supabase: account authentication, database hosting, backend functions, and storage used by app features. Supabase privacy policy.
• RevenueCat: subscription validation, purchase records, customer attributes, and access management. RevenueCat privacy policy.
• Apple: App Store purchases, Sign in with Apple, and device services such as HealthKit and permission controls. Apple handles its own account and transaction information under its policies. Apple privacy information.
• Logo.dev: supplies the Apple logo shown on this website. Loading that image sends a request from your browser to Logo.dev, which can receive connection information such as your IP address. No app account or Apple Health information is included in the image request. Logo.dev privacy policy.
• Hosting and email services: providers supporting website delivery, account emails, and support correspondence receive the technical or message information needed for that work. Account emails are coordinated by Supabase; the delivery provider does not need your episode history or biometric records.
• People and services you choose: recipients of messages or reports you explicitly share receive the information included in that message or export.

We do not sell your personal information or operate an advertising-supported app. We may disclose information when legally required, to address fraud or security threats, or to protect someone’s rights or safety. If the service changes ownership, any transfer of personal information must remain subject to appropriate privacy protections and applicable notice requirements.

Providers may process information outside your country. Where data-protection law requires it, transfers must use an appropriate legal safeguard, such as an adequacy decision or standard contractual clauses. Contact us for information about the safeguards applicable to your data.

4. Retention and deletion

We keep account information, preferences, and synchronized wellness history while your account is active and the information is needed to provide the service, unless you delete it sooner. We retain support correspondence for handling your request and necessary follow-up. Limited transaction, security, or legal records may need to be retained to satisfy legal obligations, resolve disputes, or prevent abuse; they are not retained for unrelated purposes.

Apple Health measurements are not retained by Fledin and are not part of our database or backend backups. The following retention and deletion provisions apply to the account and user-entered records we do store. Retention depends on the type of record, whether your account is active, your deletion requests, and applicable legal requirements. Backup copies may remain until the provider’s backup retention cycle expires and are not used as active account records. Contact us if you need information about a particular record or deletion request.

• Delete an episode: use the episode’s deletion option to remove that user-entered episode. A separately recorded breathing session can remain.
• Reset tracking history: in the app, open Settings → Your data → Delete data from account and confirm. This deletes episodes, breathing sessions, and session events. It keeps your account, profile, preferences, contacts, and subscription. A connection is required; other devices reconcile when they next synchronize.
• Delete your account: use the account-deletion control in the app’s Settings. You can also contact support@fledin.com for assistance or a deletion request. We may need to verify account ownership. Account deletion concerns your account and associated personal data, subject to the limited retention exceptions above; it is different from resetting tracking history.

Deleting Fledin records does not delete the original measurements in Apple Health, files you previously exported, or copies already shared with other people. Manage those separately in Apple Health or with the relevant recipient. Deleting the app, your history, or your Fledin account does not cancel an Apple subscription. Apple may retain its transaction records under its own policies.

5. Your permissions and privacy rights

You control Health, Contacts, Photos, and notification permissions in your device settings. Declining an optional permission limits the associated feature rather than granting Fledin access to that data. You can also change biometric visibility inside Fledin. Hiding a chart changes what is displayed; to stop Health access, revoke the permission in your device settings.

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal data, restrict processing, object to certain processing, and complain to your local data-protection authority. You may withdraw consent for optional processing at any time without affecting processing that was lawful before withdrawal.

Where European or UK data-protection law applies, we rely on providing the service you request for account and subscription processing, consent for optional Health access and sensitive-health-data processing where required, legitimate interests for proportionate security and support, and legal obligations for required records. Device permission alone does not replace any separate consent required by law.

Send requests to support@fledin.com or visit Account & privacy choices. We may request information necessary to verify your identity and will respond within the time required by applicable law. You do not need to sign in to this website to contact us.

6. Website and security

This website provides product, support, and legal information; it does not offer account login or take subscription payments. Its current pages do not use advertising trackers or analytics cookies. Hosting infrastructure can process technical request information needed to serve and secure the site.

We use access controls, secure authentication storage, and encrypted connections to protect information. No device, transmission, or storage system can be guaranteed completely secure. Protect your devices and account credentials, and contact us if you suspect unauthorized access.

7. Children and young users

Fledin is intended for users aged 9 and older (9+). Children and young users must have a parent or guardian’s permission or involvement where required by applicable law. The 9+ age designation does not replace those consent requirements. If you believe a child has provided personal information without legally required parental authorization, contact us so we can investigate and take appropriate action, including deletion where required.

8. Policy changes and contact

We will update the date on this page when this policy changes. For material changes, we will provide additional notice through the app or another appropriate channel, and obtain fresh consent where required before using data for a new purpose.

For privacy questions, contact Fledin at support@fledin.com. For app issues, visit Support.