privacy
breathe keeps your practice history on your device and in your own device backups. An Eden account is optional. If you allow Connect your TV, finished session details are also sent to the account. There is no advertising or analytics. Optional cloud writing sends the labels, counts or messages described below through Cloudflare to Anthropic. It is for adults aged 18 and over and needs your permission and breathe+. The relay keeps usage logs, and the providers keep records for the periods explained below. Apple handles purchases and the Apple services you use.
This policy covers the breathe app across its supported platforms. It does not cover visits to poweredbyeden.com. The main description follows version 1.0.7. The Apple TV section explains its separate behaviour.
breathe is a wellness app for breathing practice. It is not a medical app.
Arian Rousta develops and publishes breathe by Eden and decides how personal data is used for the app [the controller].
Eden is the brand. In this policy, “the developer” means Arian Rousta.
The developer is based in the United States. For privacy questions or requests, email hello@poweredbyeden.com.
breathe stores these records on your device:
The cloud sections below identify the counts, labels and messages that can be sent from these records. When you sign in to an Eden account, your chosen name and profile photo are saved to it. Signing in alone does not upload practice information. Friends shares the details described in The optional Eden account section. Finished session details, including past sessions, are sent to the account only after you tap Allow for Connect your TV.
breathe does not exclude its storage from your iCloud or computer backups. Existing backups are separate from the copy in the app. Resetting or deleting the app does not remove those backups.
Open You ▸ Reset all data ▸ Erase everything.
Reset removes your profile, photo, practice history, Watch-synced sessions, custom breaths, breath holds, Passion progress, records, milestones and calm baseline. It also removes paused sessions and programs, HomeKit choices, scheduled reminders and Ask Eden conversations.
It clears both cloud answers, cloud-use counts, cached written lines, cached Health readings, Today’s plan and recent suggestions. It clears onboarding answers, the safety acknowledgement, the Aura profile and the widgets’ copy of today’s numbers.
It also clears the Watch heart-rate cache, wake time and waking heart rate, learned workout hour, morning and night rhythm logs, and latest displayed HRV. Reset all data also stops sharing your week and signs your phone out of your Eden account. It does not delete the Eden account.
After a reset, cloud writing needs permission again. A reset cannot be undone.
Reset keeps your subscription status, some sound settings and other preferences without personal information, and downloaded soundscape files. It does not cancel your subscription.
Reset does not delete records already in Apple Health, Apple’s purchase records, existing device backups, or information already held by Cloudflare or Anthropic. Their retention periods still apply. Remove Health records in the Health app and manage backups through Apple’s backup controls.
An Eden account is optional. Every part of breathe works without one.
You can sign in with an email address and a single-use 6-digit code. breathe also supports Sign in with Apple. There is no Eden account password. Your email address is kept as your Eden account identity so you can sign in again. Sign-in codes and account alerts are sent to this address. It is never used for marketing. The name and profile photo you choose are saved to your account.
Account information is held on Eden’s account service at account.poweredbyeden.com. Signing in alone does not upload practice information.
Friends you add through an invite link or code can see your name, profile photo, avatar breath, this week’s Life Force and minutes, and your streak in days. They cannot see your Health readings, body scores, which breaths you practiced or when you practiced. Hearts and “Breathe with me” invitations pass through the account to send notifications. You can turn off sharing your week. You can also remove, block or report friends. Reports are reviewed.
Connect your TV sends information only after you tap Allow. Your phone then sends your name, profile photo and finished session details, including past sessions. These details include which breath, minutes, Life Force and the day. This lets Apple TV show the same Life Force, minutes, streak and sessions.
There is no advertising or tracking. Account information is not sold or used to train a model.
You can delete the account inside breathe. This closes the whole Eden account across every Eden app and erases the profile, photo, progress and friendships it holds. Information stored only on your device stays there. Deleting the account does not cancel a subscription.
Signing out on your phone stops that phone from sending information to the account. Reset all data stops sharing and signs the phone out, but keeps the account. Only Delete removes the account.
With your permission, breathe reads nine types of Health data:
These readings support Compass and Today suggestions, the body readings page, your calm baseline, and explanations of suggested breaths. Workouts are used only to learn your usual training hour, so a breath can be suggested the hour before.
In 1.0.7, the app does not automatically send Health numbers, dates or samples to a cloud model; readings you type into a cloud message are sent as text. The question opened with Explore this with Eden also leaves out Health numbers and dates.
If you confirm you are 18 or over and give cloud permission, a breathe+ request can carry one Health-derived word while body signals are on: charged, steady, strained or depleted. Written suggestion lines also carry a yes-or-no value saying whether a personal baseline supports that word. That value can be yes only while body signals are on.
These are still information about your health. Cloudflare handles them on the way to Anthropic.
The app adds no workout-derived context to cloud requests; workout details you type into a cloud message are still sent as text.
Health data is not used for advertising, marketing or data mining. It is not sold or given to data brokers.
After your first guided breath, the Your signals card offers Connect Health or Not now. Apple’s Health permission sheet opens only if you choose Connect Health.
You can also choose Connect Apple Health on the body readings page, the body readings board or in Ask Eden.
The Watch app asks separately at its first launch. It requests permission to read heart rate and write workouts, without the iPhone’s introductory card.
With permission, a completed iPhone session is saved as Mindful Minutes. A session with zero counted minutes is not written. A session run on Apple Watch is saved as a Mind and Body workout.
On update, breathe runs a one-time cleanup of respiratory-rate samples written by earlier versions of breathe. It deletes only its own samples, not readings from your wearable.
There is no in-app switch in 1.0.7 that stops Health reading. Open iOS Settings ▸ Privacy & Security ▸ Health ▸ breathe by Eden and turn off any or all reading categories. You can also open breathe’s permissions through Health ▸ Data Access and Devices.
Reset all data turns body signals off and clears the app’s Health caches. It does not erase records already in Health.
You ▸ Sync to Apple Health stops the iPhone writing Mindful Minutes. The Watch follows its own Health permission. You can revoke writing permissions in Apple’s Health settings.
To stop Health-derived context being sent to cloud services, turn off Written lines and Ask Eden in You. This does not stop local Health reading.
During a Watch session, breathe reads live heart rate at about one sample a second. A background observer is registered when the Watch app first opens. It forwards readings only while a session is open on your iPhone.
Apple’s Watch Connectivity handles transfers of readings and completed sessions to your paired iPhone under Apple’s terms. The readings become part of the session record. Your subscription status is also copied to the Watch.
The Watch uses its own membership copy to offer the two free breaths and lock the other ten without breathe+.
Widgets and complications use a private breathe container on the same device. It holds your streak, today’s Life Force, minutes, session count, suggested breath, update time and custom breaths. It also holds membership status and the breaths you can start without breathe+.
This shared-container information stays on the device. Live Activities update locally. There is no remote push server.
Light sync is for breathe+ members and is off by default. Without breathe+, the app does not ask for HomeKit permission.
breathe stores the identifiers of your selected lights and your light-sync settings on your device. During a session, it reads and watches those lights’ power, brightness and colour. This lets it follow your breath, restore the lights afterwards, and leave a light alone if someone changes it by hand.
It also reads the selected light’s manufacturer to recognise Philips Hue lights. This information is handled on your device and is not sent to the developer or cloud-writing services.
Turn light sync off in the app, or revoke permission in iOS Settings ▸ Privacy & Security ▸ HomeKit.
Soundscapes, songs and small configuration files come from Apple’s public CloudKit database. The configuration files contain authored guidance and shape settings. breathe does not upload your data to that database.
A missing soundscape downloads when you choose it. The app does not download the whole library in the background. One soundscape is built in.
On cellular, the app shows the download size and asks once before downloading. It remembers your answer. There is no switch in 1.0.7 that disables downloads. To avoid a soundscape download, choose one already on your device.
breathe reads your phone’s tilt while a room or rotating stone is on screen. The movement is used live, without being stored or sent. iOS does not ask for permission for this kind of motion.
AirPods head tracking is off in this release, so breathe does not ask for head-motion permission.
Two kinds of line can use a cloud model: why a breath is suggested on Compass or Today, and the line after a session.
Apple’s model runs on your phone on this path. It can use the readings themselves because they are not sent to Apple. Apple’s Private Cloud Compute is not used in 1.0.7.
The explanatory note on the body readings page never uses a cloud model in 1.0.7. It is written on the phone or taken from the authored set.
Before either cloud permission question, breathe asks whether you are 18 or over. If you answer no, both cloud features stay off. Ask Eden and written lines still work on your phone. You can correct a mistaken age answer in You.
An age answer is not permission to send anything. Written lines and Ask Eden have separate permission questions. Each cloud feature needs its own explicit yes. An unanswered question leaves that cloud feature off. A no to Written lines also keeps Ask Eden on your phone.
After an age answer of yes, the Written for you question appears on Compass if it needs an answer. You can answer without breathe+, but a yes sends nothing until you become a member. A trial with breathe+ access counts as membership.
The cloud permission questions are renewed in 1.0.7. Earlier answers do not enable cloud writing. If you confirm you are 18 or over, each feature asks for permission again before it can send. Each yes is tied to the wording you answered. A yes to an older version does not authorise a changed question.
Open You ▸ Written lines to change your answer. Open You ▸ Ask Eden to change the separate chat answer. The Ask Eden row says Answers online or Answers on phone.
Your permission is checked again immediately before a cloud request leaves. Turning a cloud feature off stops new requests. It does not withdraw requests already sent or delete provider-held records.
The request contains labels and small whole numbers:
No sentence you type in Compass is included. The workout-derived occasion phrase is excluded.
The request contains the breath’s catalogue name, part of day, session minutes from 0 to 240, and your streak. It also contains the recovery word while body signals are on.
For a custom breath, the breath-name field is left out entirely. Your custom name is not sent.
Written lines are cached on your device and reused. A line is normally requested about once a day.
Automatic writing fields exclude Health numbers, dates and samples, detailed signal labels, words typed in Compass, your name, photo and avatar, and custom breath names. The app adds no Eden account identifier, device identifier or advertising identifier to cloud-writing requests.
If a request contains a field outside the allowed list, the app drops the whole request. Ask Eden messages you type are a separate category, described next.
Ask Eden first checks your message on the phone for recognised crisis or self-harm wording. A match receives a local reply and is not sent.
For other messages, a breathe+ member who confirms they are 18 or over and gives the separate cloud permission gets Claude through the relay. The fallback is Apple’s on-device model, then replies written in advance. Cloud replies are limited to 20 turns a day and 200 a month, counted on your phone.
After an age answer of yes, the permission question appears when you open Ask Eden if it needs an answer. You can reopen it in You ▸ Ask Eden. Permission is checked on every turn.
That is at most five messages in total, including your current message.
Reading cards, app-written explanations of readings, on-device replies and prewritten replies are excluded from cloud history. The questions answered by those local replies are excluded too. Profile fields, custom breath names and Compass text are not added.
If you start from Explore this with Eden, the outgoing question contains no Health number or date. The conversation on your phone can still display the readings.
What you type is sent as typed, up to the limit. If you type your readings, name or other identifying details, those words go too. Do not type anything you would not want to leave your phone. This is a breathing app, not a medical record.
The crisis check does not recognise every message. Unrecognised crisis wording can reach the cloud when you have enabled it. If the relay declines the request, the app shows its local crisis reply.
Ask Eden keeps conversations from the last 30 days on your device and deletes older conversations automatically. You can start a new chat while keeping an earlier one.
Stored conversations include the words shown on screen, including readings the app displays there. iOS protects these files so they cannot be read while your phone is locked. They are also included in your device backups.
Delete a conversation in chat history, or use Reset all data. Deleting local history does not delete copies already held by a cloud provider.
Every cloud request carries the app’s build label, a member-or-not value, and iOS’s standard networking user agent. That user agent includes app, networking and system version information. Cloudflare also sees your network address, called an IP address.
Ask Eden adds the fixed access label free2-v1 to identify the current breath-access rules. It is the same for everyone on those rules. It does not identify you or enable cloud chat without breathe+.
The app adds no personal identifier, but your IP address and the words you type can still be personal information.
Cloudflare, Inc. runs breathe’s relay. The developer operates that relay, which also serves other Eden apps. It holds the Anthropic API key so the app does not need one.
The relay receives the request, its headers and your IP address. It uses the address to limit requests from the same network address. It does not put that address in its own usage log.
The relay stores no messages, request content or replies in a database. It writes one usage-log entry for each answered request. The entry records the route, screen or feature, model, membership status, four token counts, response time and an outcome label. It contains no message text.
This usage logging began on 3 September 2026.
Cloudflare separately keeps an event record for every request. These records include approximate location, network operator, user agent and build label. They can also include your IP address.
The relay’s usage entries and Cloudflare’s request-event records are kept in Workers Logs for up to seven days.
The relay does not export or copy these logs to another destination.
The relay uses Cloudflare’s rate limiter, keyed by your IP address, with a limit of 20 requests per 60 seconds per address. A separate limit is 200 requests per 60 seconds across the relay and is not keyed to a person. Cloudflare manages the counters in 60-second counting windows. The relay stores no IP address for rate limiting and cannot read the counters back.
Anthropic receives the relay’s request, not your IP address. The relay does not forward that address or add user metadata to its Anthropic call.
Anthropic, PBC receives the fields or messages described above, together with breathe’s instructions for writing that line or reply.
Anthropic’s published commercial terms say it does not train models on customer content from its services. Its published API policy normally deletes inputs and outputs within 30 days. Agreements, safety enforcement, model-specific requirements and legal duties can change that retention.
If its safety systems flag a request as a Usage Policy violation, inputs and outputs can be kept for up to two years. Safety classification scores can be kept for up to seven years. Legal requirements can require longer retention.
breathe’s API account uses Anthropic’s standard Commercial Terms, which incorporate its data processing terms. There is no separate agreement or zero-data-retention arrangement. Both Ask Eden and written lines use claude-sonnet-5.
Cloud-written lines and cloud Ask Eden were introduced with version 1.0.3 in September 2026.
Version 1.0.5 was released on 4 October 2026. In the source reviewed for that release, unanswered cloud questions were treated as yes. This affected breathe+ members, including people in a free trial. An explicit no stopped the cloud path.
That source also allowed app-written Health readings and local replies containing those readings into later cloud chat history. The question opened from the body readings page could include readings too.
The previous policy said Health readings never left your device and that no Health number or date was sent. Those statements did not match these code paths.
The reviewed source is strongly associated with build 936, but the distributed app has not been independently matched to it. The review establishes that these paths existed. It does not establish that any particular person’s Health text was sent. No customer request, Health record or provider log was inspected for that review.
The same behaviour has not been established for versions 1.0.3 or 1.0.4. Whether 1.0.4 offered cloud chat to people without breathe+ is also unconfirmed.
At 23:47:59 UTC on 28 October 2026, the relay began refusing cloud requests from every breathe build before reading them or contacting Anthropic. From that pause until reopening, lines and replies came from the phone or the authored set. Refused requests could still reach Cloudflare and leave its short-lived event records.
With this policy, cloud writing resumes only for version 1.0.7 and newer builds. It is for adults aged 18 and over. The app asks the age question before either cloud permission question.
The cloud permission questions are renewed in 1.0.7. Earlier answers do not enable either feature. Each feature needs its own current explicit yes. An unanswered choice sends nothing for that feature.
If you update from 1.0.5 or earlier, a one-time Privacy update notice appears before either cloud feature can send. Acknowledging the notice does not give cloud permission. A fresh installation does not show this historical notice.
Cloud chat history now excludes app-written readings, on-device replies and the questions those replies answered. The body-page question excludes Health numbers and dates. Workout-derived context is not sent.
Build 936 and older remain blocked before the relay reads their requests. If you stay on 1.0.5, lines and replies continue to come from your phone or the authored set.
The relay has also kept limited usage logs since 3 September 2026. The previous policy’s claim that it wrote no logs was incorrect. Cloudflare’s own event logs are separate. Their contents and retention are described above.
Apple handles breathe+ payments, billing, renewals, refunds and cancellation. breathe does not receive your card details, billing address or Apple ID email. Receipts are checked on your device and are not sent to a developer server.
breathe receives your subscription status and stores a copy on your device, Watch and widget container. A member-or-not value goes with each cloud request and appears in the relay’s usage log.
Monthly and annual plans have a one-week free trial for eligible people. Apple supplies the price for your region. An earlier lifetime purchase is still recognised for people who hold one, but it is no longer sold.
Reminders are scheduled by iOS on your phone after you allow notifications. Nothing is sent from a remote push server.
A new installation uses automatic day parts: up to four reminders, around 8:00, 12:00, 19:00 and 21:00 local time. A set-time reminder runs once a day. If you already chose a reminder time, that choice is kept.
Turn reminders off in the app or in iOS Settings ▸ Notifications ▸ breathe by Eden.
The How are you feeling? Siri shortcut opens Compass with your words. Apple handles your voice request under its own terms. breathe uses the resulting Compass words on your phone and does not add them to cloud-writing requests.
Version 1.0.7 includes optional Friends sharing through an Eden account. With your permission, friends you add through an invite link or code can see your name, profile photo, avatar breath, this week’s Life Force and minutes, and your streak in days. They cannot see your Health readings, body scores, which breaths you practiced or when. You can turn off sharing your week. Hearts and “Breathe with me” invitations pass through the account, and Friends push notifications are sent only after you allow them. You can remove, block or report friends. Reports are reviewed by Eden.
Compass links to findahelpline.com and the 988 service for help in a hard moment. These are independent services with their own privacy practices. Apple’s standard app licence provides breathe’s Terms of Use.
The support button opens your own Mail app. If you email hello@poweredbyeden.com, the developer receives your email address, message and anything you attach. Google hosts the mailbox.
Support messages are used to answer you, resolve the issue and retain a necessary record of the exchange. There is no fixed retention period. The period depends on whether the issue remains open, whether follow-up or a dispute needs the record, and any legal duty to preserve it.
When those reasons no longer require the information, the developer deletes it or removes identifying details. A useful technical explanation can be kept without your identity.
Send only the details needed to explain the issue. Support does not usually need your Health records. Avoid sending readings, medical history or screenshots containing health information.
If health information is needed to resolve your request, the developer explains what is needed and asks for your explicit consent before asking you to send it. Health details that are not needed to answer your request are deleted.
When you test through TestFlight, Apple can provide the developer with your tester email, device and system details, crash details and feedback.
For the released app, Apple provides crash reports when you enable Share With App Developers in iOS. breathe contains no separate crash-reporting software.
The developer uses this information to investigate faults, contact a tester when needed, and check whether a fix works. There is no fixed retention period. Identifiable records are kept while needed for that work, related follow-up, a dispute or a legal preservation duty.
When those reasons no longer apply, the developer deletes the records or removes identifying details. Apple’s own copies follow Apple’s retention rules.
breathe offers optional Eden account sign-in. It has no analytics, advertising, attribution software or third-party software packages. It does not track you across other companies’ apps or websites and does not request an advertising identifier.
It does not request location, contacts, calendar, camera, microphone or photo-library access. Your profile photo comes through Apple’s picker. Cloudflare’s network records can still include an approximate city without location permission.
No third-party software packages does not mean no outside services. Cloudflare and Anthropic handle cloud writing, Google hosts support email, and Apple provides the Apple services described here. The Eden account service is hosted on Vercel, uses Neon Postgres for account records and Cloudflare R2 for profile photos, and sends sign-in codes and account alerts through Resend.
The EU and UK rules require a legal reason for using personal data.
An operational reason for keeping a log does not authorise unrelated use of your Health data or message content. Health information is not used for advertising, marketing or model training by the developer.
You can use the app without enabling Health or cloud writing. Without those permissions, the related personalised or cloud features are unavailable. On-device processing does not send those records to the developer.
Withdraw cloud permission in You ▸ Written lines and You ▸ Ask Eden. Withdraw Health access through Apple’s Health permissions. Withdrawal stops future processing based on that consent. It does not change whether earlier processing was lawful.
These providers handle the information described here to provide those services.
Apple separately operates purchases, Siri, TestFlight, crash-report sharing, iCloud downloads and Watch Connectivity under its own terms. Apple also handles your iCloud backups if you use them.
The developer uses Cloudflare, Anthropic, Google, Vercel, Neon and Resend under their standard terms, with no custom contract.
The developer is based in the United States. Cloudflare uses a global network. Cloud requests, Eden account records and support email are processed outside the EU and UK, including in the United States.
The providers’ standard data processing terms apply to these transfers.
Email hello@poweredbyeden.com for details or a copy of the relevant safeguards.
There is no fixed period for support, testing or crash records held by the developer. Once their stated purposes no longer require identification, the developer deletes the information or removes identifying details.
Email hello@poweredbyeden.com to exercise your rights. Depending on the data and the reason it is processed, you can:
Use the cloud and Health controls described above to withdraw permission. This does not erase information already processed or make earlier processing automatically lawful.
Describe the record or request in your email. The developer asks only for information needed to verify your identity and locate the record. You do not need an Eden account to make a privacy request.
You normally receive a response within one calendar month. If a lawful extension is needed, you receive the reason and revised deadline within the original response period. A refusal explains the reason and your complaint rights.
The developer cannot access records stored only on your devices. Eden account records are stored on the server. The relay keeps no conversation content or account-based index for retrieving your past requests. A message can still identify you if you type identifying details.
If the developer cannot identify the relevant records, you are told what additional details could help. Your rights over records that can be located apply whether or not you have an Eden account.
You can complain to the data protection authority in your EU country. In the UK, you can complain to the Information Commissioner’s Office at ico.org.uk. You do not have to contact the developer first.
breathe does not sell personal information, share it for cross-context behavioural advertising, or show targeted ads. It does not use profiling to make decisions with legal or similarly significant effects.
The information handled falls into these categories:
The sources are you, the Apple services you enable, and records generated when you use the app or its cloud services. These categories are used for the features, support, troubleshooting and operational purposes described in this policy.
Cloudflare and Anthropic receive the cloud information described above. Google handles support email. Apple operates its own services under its terms. The What changed section explains the earlier code paths, including the possible disclosure of Health readings.
You can ask to access, correct or delete personal information held by the developer. These request options are available to everyone using breathe. Your state’s law can give you additional rights, including a portable copy or information about recipients.
Email hello@poweredbyeden.com and describe your request. You can make a privacy request whether or not you have an Eden account. You can also delete your Eden account inside the app. The developer asks only for information needed to verify the request and locate relevant records. You can use an authorised agent where your state’s law permits.
US requests receive a response without undue delay and within 45 days of receipt. If the law permits an extension, you receive the reason and revised deadline within the original period. Any shorter legal deadline takes priority.
To appeal a refusal, reply to the decision email or send a new email to hello@poweredbyeden.com saying you want to appeal. Appeals receive a written decision and reasons within 45 days. A denied appeal includes the relevant attorney general’s complaint route.
Ordinary requests are free. An unusual fee or refusal for an excessive or repetitive request is used only where the law allows it and is explained to you.
Exercising a privacy right does not result in unlawful discrimination. A feature that needs information cannot use it after you withdraw permission.
Where the CCPA covers your information, you have its rights to know, access, correct and delete information, and to exercise applicable rights over sensitive information. The request process above is available to you.
There is no sale or advertising sharing to opt out of. Health-derived information is used for the optional features you request, and you can stop that use through the Health and cloud controls described above.
This policy does not certify that breathe is subject to the CCPA or claim a small-business exemption. The no-sale and no-advertising statements apply regardless of those thresholds.
This section describes health information handled for breathe, including the choices available to people in Washington, Nevada and Connecticut. Arian Rousta is responsible for this processing. Contact hello@poweredbyeden.com with a health-data request.
The separate Washington Consumer Health Data Privacy Policy gives the full Washington notice.
Health readings and practice records support the app’s suggestions, body readings, practice history and related features on your device. Optional cloud context and messages are used to write the line or reply you request. Technical records support delivery, security and troubleshooting.
The sources are you, Apple Health and your Watch when connected, and information generated from your practice and use of the app.
In 1.0.7, the app does not automatically add Health numbers, dates or workout-derived context to cloud requests. With your cloud permission, Cloudflare and Anthropic receive the permitted recovery context and the messages or practice labels described in this policy.
Cloudflare provides hosting, network delivery and security. Anthropic provides the cloud writing. Google hosts health information you choose to include in support email. Your words can contain health details even though the app excludes automatic Health readings from cloud requests.
Your Health records, Watch transfers, device backups and Apple-provided testing or diagnostic information also involve Apple under the services you use.
Health information is not sold or used for targeted advertising. breathe does not authorise recipients to use it for advertising across other apps or websites.
Apple Health permission controls the app’s access to readings. Optional cloud writing requires an age answer of yes to 18 or over, breathe+, and the separate feature permissions described in this policy. An age answer or privacy-policy update alone is not consent to an additional health-data use or disclosure.
Turn off Written lines and Ask Eden in You to stop new cloud requests. Revoke Apple’s Health permissions to stop Health reading. Reset all data removes the local practice records described above; it does not delete your records from Apple Health or existing backups.
Email hello@poweredbyeden.com to request access, withdraw consent, ask for deletion, or request the recipient information your state’s law provides. You can ask for correction of information the developer holds. You do not need a new account.
The developer verifies requests using only the information needed. When a valid deletion request covers information sent to a provider, the developer also sends that provider the deletion request as the law requires. An ordinary retention schedule does not override a valid deletion right.
Requests are answered without undue delay and within 45 days of receipt. A lawful extension is explained within that period. Any shorter legal deadline takes priority.
For Nevada consumer health data, a valid deletion request is completed within 30 days after authentication, subject to legal exceptions.
Turning off a cloud feature stops new requests immediately. For a withdrawal sent by email, processing that depends on your consent stops as soon as practicable and within 15 days. Withdrawal does not undo a request already processed. Deletion is a separate right.
To appeal a refusal, reply to the decision email or email hello@poweredbyeden.com with your appeal. You receive a written decision and reasons within 45 days. A denied appeal includes information for contacting the relevant state attorney general.
Exercising these rights does not result in unlawful discrimination. Withdrawing information needed for an optional feature stops that feature from using it.
The app is available at any age. breathe is not specifically directed to children under 13. Cloud-written lines and online Ask Eden are for adults aged 18 and over.
Before either cloud permission question, breathe asks whether you are 18 or over. If you answer no, both cloud features stay off. Ask Eden answers on your phone, and lines are written on your phone or taken from the set written in advance.
You can correct a mistaken answer in You under cloud choices. Answering yes to the age question does not give either cloud permission. Each feature still needs its own explicit yes.
The App Store’s 4+ content rating does not establish permission to send personal information to cloud services.
If you believe a child has sent personal information, email hello@poweredbyeden.com. breezy is a separate app and is not covered by this policy.
breathe’s suggestions choose a breathing practice; they do not make decisions about you with legal or similarly significant effects.
Requests use HTTPS. Cloud-writing connections use no cookies, network cache or stored credentials. The app holds no Anthropic API key; the relay holds it.
Ask Eden conversation files use iOS file protection that prevents access while the phone is locked. These protections do not prevent Cloudflare or Anthropic from processing content that you permit the app to send.
This policy covers:
Where Apple’s App Store makes the iPhone or iPad app available on a Mac or Apple Vision Pro, this policy covers that app too. Features depend on the device and its available permissions.
The Apple TV app plays guided breaths and rooms using built-in sound. It stores its sound, soundscape and theme settings on the Apple TV.
It has no Apple Health, cloud writing, Ask Eden or downloads. After you allow Connect your TV on your phone, the TV signs in to your Eden account. It connects to the account service to read and send session details, including which breath, minutes, Life Force and the day. It also receives your name and profile photo. Apple provides the purchase system.
Apple handles breathe+ purchases. The iPhone 1.0.7 free-tier change does not apply to the separate Apple TV app.
Changes to this policy are published on this page with a new Last updated date.
If you update from 1.0.5 or earlier, the one-time Privacy update notice appears before either cloud feature can send. Acknowledging it does not give cloud permission. A fresh installation does not show this historical notice.
In 1.0.7, both cloud features require an age answer of yes to 18 or over, breathe+, and an explicit yes to their current permission questions. Earlier cloud answers do not enable them. If a permission question changes, an earlier yes does not authorise the new wording.
Posting a policy update does not by itself authorise a new use of your information. Any consent or direct notice required for a change must come before the processing it covers.
For privacy questions or requests, email hello@poweredbyeden.com.
Arian Rousta, developer of breathe by Eden, United States.
breathe by Eden · hello@poweredbyeden.com