Privacy Policy – Eunai

Last updated: September 12, 2026

Thank you for trusting Eunai – the mobile and web application (eunai.zone). Protecting your privacy is our top priority.

The data controller is:
Eunai Zone Samuel Pydych
Zimorodka 10/10, 44-122 Gliwice, Poland
Contact: contact@eunai.zone

1. Data we collect

We collect data solely to provide our services and ensure the proper functioning of the Eunai application.

We may collect the following information:

• Email address – for account creation, login, and communication,
• Health data – such as heart rate (HR), heart rate variability (HRV), and workout data, accessed only with your explicit permission through Apple HealthKit,
• Session and usage data – such as meditation logs, session results, notes, and personalization settings,
• Device and technical data – such as language, app version, device type, and technical information necessary for security and proper app operation,
• Login and session data – cookies, authentication tokens, and local cache used to maintain login sessions and improve user experience.

We do not collect location data, contacts, photos, microphone recordings, or payment card information.

We do not collect data for advertising, behavioral tracking, or marketing profiling.

2. How we use your data

Your data is used to:

• enable core app functionality, including heart rate synchronization, session logging, and personalization,
• manage user accounts, authentication, and access,
• support subscriptions handled through the Apple App Store,
• communicate important account, security, or service-related information,
• maintain the security, stability, and proper functioning of the app,
• improve the app using aggregated or anonymous usage information where possible.

We never sell your personal or health data or share it with third parties for advertising or marketing purposes.

HealthKit data is used only to provide health, fitness, mindfulness, or wellness-related functionality directly to you.

3. Third-party services

We rely on trusted providers necessary to operate Eunai:

• Supabase – database and authentication (policy),
• Apple HealthKit – health data on supported devices (policy),
• Apple App Store – subscriptions and payments (policy),
• Google, Apple, Facebook – third-party login (Google, Apple, Facebook).

These providers process only the data necessary to provide their respective services and may act as independent data controllers or processors depending on the service.

Where personal data is transferred outside the European Economic Area (EEA), such transfers are carried out in accordance with applicable data protection law and appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses, where required.

4. Legal basis for data processing

Your personal data is processed based on one or more of the following legal grounds:

• contract performance – where processing is necessary to create and maintain your account and provide Eunai services,
• your consent – where consent is required, including access to certain health information through Apple HealthKit,
• explicit consent – where required for processing health data as a special category of personal data,
• legitimate interest – ensuring the security, stability, performance, and proper operation of Eunai,
• legal obligations – where processing is necessary to comply with applicable law.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

HealthKit permissions can also be changed or revoked at any time through Apple Health or your device settings.

5. Cookies and local storage

• On eunai.zone website – cookies or similar technologies may be used where necessary to maintain login sessions and provide website functionality,
• In the mobile app – local storage and cache are used for authentication, session handling, image caching, settings, and user experience improvements.

We do not use cookies, local storage, or similar technologies for behavioral advertising or marketing profiling.

6. Data storage and security

• Data required to operate Eunai is stored securely using Supabase infrastructure and appropriate access controls.
• HealthKit data is accessed only after you grant the relevant permissions.
• Where health measurements are saved as part of your Eunai session history, the relevant data may be securely stored with your account.
• Access to personal data is limited to what is necessary to provide and maintain Eunai.
• Data transmitted between Eunai and its backend services is protected using encrypted connections such as TLS/SSL.
• HealthKit data is never sold or used for advertising, marketing, or behavioral profiling.

We apply appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

7. Your rights

Under applicable data protection law, including the GDPR, you may have the right to:

• access your personal data,
• correct inaccurate or incomplete data,
• request deletion of your personal data,
• restrict processing,
• object to certain types of processing,
• receive your data in a portable format where applicable,
• withdraw consent at any time where processing is based on consent.

You may also file a complaint with the President of the Personal Data Protection Office (UODO) or another competent supervisory authority if you believe your data protection rights have been violated.

To exercise your rights, contact us at support@eunai.zone.

8. Data deletion and account removal

You can manage your data directly in the Eunai app.

• Deleting session data and health metrics
  Within the app, you can remove stored session results, personal notes, and health-related measurements such as heart rate or HRV.
  This option allows you to clear your saved insights and meditation history while keeping your account active.

• Deleting your entire account
  You can permanently delete your account and associated personal data via:
  Settings → Account → Delete Account.

For security reasons, the process requires confirmation via password or biometric authentication (Face ID or Touch ID).

Once confirmed, account deletion is irreversible.
Associated personal data, including sessions, notes, and stored health metrics, will be deleted or anonymized, except where limited retention is required or permitted by law or where data temporarily remains in secure backups subject to normal deletion cycles.

If you have an active subscription, it must be canceled separately through your Apple ID → Subscriptions settings.

9. Data retention

• We retain personal data only for as long as necessary to provide Eunai services, fulfill the purposes described in this Privacy Policy, or comply with applicable legal obligations.
• When you delete session data, the selected information is removed while your account remains active.
• When you delete your account, associated personal data is deleted or anonymized unless limited retention is required or permitted by law.
• Data contained in secure backups may remain temporarily until the relevant backup is overwritten or deleted as part of the normal backup lifecycle.

10. Minimum user age

Eunai is not intended for children under 16 years of age.

Users under the age of 16 may use Eunai only where permitted by applicable law and with the authorization of a parent or legal guardian where such authorization is required.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically.

The most recent version will always be available at eunai.zone, and the app will link directly to this page.

Significant updates will be communicated within the app or via email where required by law.

12. Contact

For privacy or data-related inquiries:
support@eunai.zone

🙏 Thank you for choosing Eunai — your safe space for inner connection.