Privacy Policy
Last updated: September 13, 2026
Pulmonaut is a breathing and breathwork app for iPhone. This page explains what the app collects, what it does with it, what stays on your phone, and how to delete all of it. It is written to be read, not skimmed past, so it is short.
The short version: your practice stays on your phone. If you choose to create an account, we keep your email address and, if your sign-in provider gives it to us, your name. We receive a record of how the app is used, which says that a practice was started or finished and which one, never how you performed in it. If the app crashes, we receive a crash report that does not identify you. If you allow it, each session you complete is also saved to Apple Health on your phone; we never read anything from Health and none of it reaches us. If you become a member, Apple takes the payment and we receive a record of the subscription, never your card. That is the whole list.
Who we are
Pulmonaut is made by Sebastian Corte, based in Mexico City, Mexico. For anything about your data, write to support@pulmonaut.app.
What stays on your phone
Everything about your practice is stored on your device and nowhere else:
- your session history, streaks and monthly activity;
- your breath-hold measurements and personal bests;
- trophies, favourites, recent searches and reminder settings;
- audio you have downloaded for offline use.
None of this is uploaded. What we receive about your practice is a usage record, described under Product analytics below: that a practice happened and which one, never your breath-hold times or personal bests. Everything above is included in your normal iPhone backup if you have backups turned on, under Apple's terms, not ours. You can erase all of it at any time in the app under Settings → Danger Zone → Delete All Data.
What we collect if you create an account
An account is optional. Every feature of the app works without one. If you do sign in, here is what we hold:
| What | Where it comes from | Why |
|---|---|---|
| Email address | You, or Apple or Google when you sign in with them | To identify your account and let you sign in again |
| Name | Apple or Google, if you allow it; Apple sends it only the first time | To greet you in the app |
| An account ID | Created when the account is created | To tell accounts apart, and to link your usage record and your membership to your account (see Product analytics and Membership) |
| Sign-in timestamps | Created automatically | To keep your sign-in working and detect abuse |
If you sign in with Apple and choose Hide My Email, we receive Apple's relay address instead of your real one, and that is what we keep.
Accounts are stored with Supabase, which hosts our account system. The connection between the app and Supabase is encrypted.
Today an account holds nothing but the sign-in itself. Your practice data is not uploaded. If a future version adds syncing between devices, this page will be updated first and the app will ask before anything is uploaded.
Signing in with Apple or Google
When you use Sign in with Apple or Continue with Google, you are also dealing with Apple or Google under their own privacy policies. They confirm who you are and pass us an email address and, optionally, a name. We do not receive your Apple or Google password, your contacts, or anything else from those accounts. We do not post to them or read from them.
Crash reports
If the app crashes or freezes, a report is sent to Sentry, a crash-reporting service, so we can fix the problem. The report contains technical details about the crash, the app version and the type of device. It is configured so that it does not include your IP address, your email, your name or your account ID. Crash reports are not linked to you.
Product analytics
To learn which parts of the app are used and which are not, the app sends usage records to PostHog, an analytics service. A record says that something happened and what: the app was opened, a practice was started or finished and which one, how long a session ran, a favourite was added or removed, audio was downloaded, a membership was bought or restored. It carries the app version and the type of device. It does not carry your breath-hold times, your personal bests or anything else you measured, and it never contains your email or your name.
Signed out, records are tied to a random identifier the app makes up on your phone. Signed in, they are tied to your account ID, so we can see how members use the app as a group. We do not use them to profile you individually, to show you different content, or for advertising.
Cookies
This website sets no cookies. It uses no analytics, no tracking and no third-party scripts, and it stores nothing in your browser. The app's own usage records are described under Product analytics above.
Membership
Pulmonaut Membership is an auto-renewing subscription sold through Apple's App Store. Apple takes the payment under its own privacy policy; we never see your card, your billing address or your Apple Account password.
To know who is a member, the app sends the App Store's purchase record to RevenueCat, a subscription service. The record says which plan you bought, when it started, when it renews or ends, and whether it was refunded, along with the app version, the type of device and the country the request came from. Signed out, it is tied to a random identifier the app makes up on your phone. Signed in, it is tied to your account ID, so your membership follows your account to a new phone. Nothing else about you reaches RevenueCat, and it uses the record for nothing but telling the app whether your membership is active.
Cancelling, changing plans and refunds all happen through Apple, in Settings → Apple Account → Subscriptions or from the app's Manage Subscription page. Every new install also gets three days of full access without a purchase; that is a clock on your phone, and nothing about it is sent anywhere.
Audio content
Some guided sessions and ambient sound are downloaded from our servers when you play them. Downloading a file does not identify you and no account is needed. That you played or downloaded it is part of the usage record described above.
Notifications
The optional daily reminder is a local notification scheduled on your phone. Nothing is sent to us, and we cannot send you notifications from outside the app.
Apple Health
Pulmonaut can save your completed sessions to Apple Health as Mindful Minutes. The first time you finish a practice, the app asks for your permission through the standard Apple Health prompt; you can also start from Settings → Health & Integrations → Apple Health. Nothing is written until you say yes.
What is written is one entry per completed session: that a mindfulness session took place, its start time and its end time. Your breath-hold times, personal bests and everything else you measure stay in the app and are never written to Health. The app only writes; it never reads your Health data, and no Health data reaches us or any of the services named on this page.
Entries written to Health belong to your Health store, not to the app. To stop sharing, open the Health app → your profile → Apps and turn off Pulmonaut, or use Settings → Privacy & Security → Health. Deleting the app's data or the app itself does not remove entries already in Health; you can delete those in the Health app under Browse → Mindfulness.
What we do not do
- We do not track you across other apps or websites.
- We do not use advertising identifiers and there are no ads.
- We do not sell, rent or share your personal information with anyone for their own purposes.
- We do not collect health data. The app never reads from Apple Health; with your permission it writes your completed sessions there, and that data stays on your phone.
- We do not give the analytics service your email, your name or any breath-hold result.
- We do not see your payment details. Apple handles every payment.
Who else sees your data
Only the services named on this page, and only to do the job described: Supabase to store accounts, PostHog to receive usage records, Sentry to receive crash reports, RevenueCat to keep track of memberships, Apple when you buy one, and Apple or Google when you sign in through them. Each of them handles data under their own published terms. We may also disclose information if the law requires it.
How long we keep it
Account details are kept until you delete your account. Usage records are kept by PostHog for one year. Crash reports are kept by Sentry for 90 days. Purchase records stay with RevenueCat while a membership could still be restored, and are deleted when you ask us to. Data on your phone is yours and stays until you delete it or the app.
Deleting your data
- Your account: in the app, Settings → Danger Zone → Delete Account. This removes your account and its sign-in from our servers immediately. It does not touch what is on your phone. Usage records already linked to the account ID stay with PostHog, and purchase records with RevenueCat so a membership can still be restored, until you ask us to delete them; email us and we will.
- Everything on your phone: Settings → Danger Zone → Delete All Data, or delete the app.
- Sessions saved to Apple Health: in the Health app, under Browse → Mindfulness. Deleting the app's data does not remove them.
- Anything else: email support@pulmonaut.app and we will handle it within 30 days.
Your rights
Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, receive a copy of it, or object to how it is used. Because we hold so little, the fastest way to exercise any of these is the account deletion above, or an email to support@pulmonaut.app. If you are in the European Union or the United Kingdom, you also have the right to complain to your local data protection authority.
Children
Pulmonaut is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
If we change what we collect or why, we will update this page and the date at the top, and where the change is significant, tell you in the app before it takes effect.