Privacy policy

In short

Who we are

This policy explains how the Oxigen app for iPhone and Android (“Oxigen”, “we”, “us”) and this website handle personal data. The controller responsible for your data is the publisher of Oxigen, shown as the developer on the app’s App Store page. You can reach us at oxigen@thunder.red about anything in this policy.

Oxigen is a wellness app, not a medical device. It is built so that the most personal information you give it never leaves your phone.

What stays on your phone

Oxigen has no account and no server of its own that stores your information. Everything below is saved only in the app’s storage on your device:

• the name you give it, and your quiz answers (goal, situations, stress level, experience, time of day, minutes per day);
• your health check answers, which Oxigen uses to hide techniques or shorten breath holds;
• mood ratings before and after sessions, session history, “Felt worse” ratings and emergency stops with their reasons, safety pauses and readiness checks;
• your plan, programs, saved routine, custom rhythms, reminder time and settings.

Because this information stays on your device, we never receive it. You can export it as a file (You → Export my data; the file includes your health answers, so keep it somewhere private) or erase it (You → Delete all data). Deleting erases the app’s storage, cancels its reminders, resets its analytics ID and tells you how to cancel a subscription. Deleting the app also removes it. If your phone backs up apps (for example iCloud or Google backups), the app’s storage may be included in those backups under your Apple or Google account’s terms.

Apple Health and Health Connect

If you allow it, Oxigen saves each finished session as mindful minutes in Apple Health (iPhone) or Health Connect (Android). With Premium it can also read your heart-rate variability and resting heart rate to show them next to your practice.

• Readings are fetched when a screen needs them and kept in memory only. Oxigen doesn’t store them, upload them, or send them to analytics or crash reports.
• Health data is never used for advertising or data mining and is never stored in iCloud by Oxigen.
• You can change these permissions any time in the Health app or Health Connect settings. Deleting Oxigen’s data doesn’t remove samples already saved to Apple Health or Health Connect; you can remove them there.

Usage analytics

To learn which parts of Oxigen help people and to check every exercise is safe, the app sends usage analytics to Google Analytics for Firebase (Google). A short notice explains this during onboarding, before anything is sent, and you can turn analytics off any time in You → Help improve Oxigen. Turning it off stops collection at once, discards anything waiting to be sent and resets the app’s analytics ID.

What is sent:

• events from a fixed list, such as onboarding steps finished, sessions started and finished, plan and paywall views, and trial or subscription starts;
• when a session is stopped with “I feel unwell” or rated “Felt worse”: the technique, its risk class and where it was started, never the reason, your mood or your health answers, so we can check each exercise is safe;
• app version, platform and OS version, device region and language settings, and whether you have Premium or a trial;
• Firebase’s automatic app events (first open, session start, engagement time) and a random app-instance ID created for analytics.

What is never sent: your name, health answers, moods, situations, Apple Health or Health Connect data, the advertising identifier (IDFA or Android Advertising ID) or anything that identifies you directly. Google signals, ad personalization and granular location and device data collection are switched off, and the analytics project is linked to no advertising products. Google Analytics does not log or store IP addresses. The random ID isn’t shown in the app and isn’t linked to any account, so we cannot tell which records are yours.

Crash reports

When the app crashes or hits an error, it sends a crash report to Sentry, stored in Sentry’s EU region (Frankfurt, Germany). Reports contain technical details (the error, app version, device model, OS, language, whether you have Premium and the screen’s route pattern). They contain no user ID, no IP address (storing IP addresses is turned off), no screenshots or screen recordings, and your name is removed from any text before it is sent. Crash reports are always on, because they keep the app working; they are kept for at most 90 days.

Purchases

Subscriptions are sold and billed by Apple (App Store) or Google (Google Play); we never see your payment details. To know whether you have Premium, the app uses RevenueCat, which receives your purchase receipts under a random purchase ID created on your phone. We add no name, email or other attributes to it and use no advertising integrations. Delete all data doesn’t change this ID, so a subscriber keeps Premium; it is replaced when the app is deleted from the phone. For a question about purchase records, write to us with your store order ID.

Reminders

Reminders are local notifications scheduled on your phone at the time you pick. Oxigen doesn’t use push notifications or a notification server.

This website

This website uses no cookies, no analytics and no third-party trackers; its fonts and images are served from this site. Like any website, our hosting provider processes your IP address and browser details to deliver the pages and may keep short-lived server logs for security. Links to the App Store, Google Play or study publishers take you to sites with their own privacy policies.

Legal bases

Where the EU or UK GDPR or Türkiye’s KVKK (Law No. 6698) applies, we rely on:

• consent for usage analytics, including the safety events, given on the onboarding notice and withdrawn any time with the switch in You → Help improve Oxigen (GDPR Art. 6(1)(a), Art. 9(2)(a); KVKK Art. 5(1), 6);
• legitimate interests in keeping the app stable and secure for crash reports, which are minimal and scrubbed (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f));
• performance of a contract for providing purchased subscriptions (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).

Health answers and Health data are special-category (sensitive) data. Oxigen keeps them on your device and doesn’t process them on any server.

International transfers

Google, RevenueCat and Sentry may process data outside your country, including in the United States. These transfers rely on the providers’ data processing terms and the European Commission’s Standard Contractual Clauses (and the EU-US Data Privacy Framework where a provider is certified), and, for Türkiye, on the safeguards in KVKK Article 9.

How long data is kept

• On your phone: until you delete it or the app.
• Google Analytics: user-level event data is kept for 2 months; aggregated reports that identify no one may be kept longer. Everything is gone within 12 months at the latest.
• Sentry crash reports: up to 90 days.
• Purchase records: by Apple, Google and RevenueCat for as long as needed to provide the subscription and meet legal obligations.

Your rights

Depending on where you live, you can ask to access, correct or erase your personal data, restrict or object to its processing, receive it in a portable form, and withdraw consent at any time (GDPR Articles 15–22; KVKK Article 11; similar rights under laws such as the CCPA/CPRA). Most of this you can do yourself in the app: Export my data, Delete all data and the analytics switch.

For anything else, email oxigen@thunder.red. We answer within 30 days. Please note that analytics and crash reports carry only random IDs that aren’t linked to you and aren’t shown in the app, so we can’t find, return or delete records for a particular person; turning analytics off or deleting all data resets the analytics ID so nothing new is linked to the old one. For purchase records, include your store order ID.

You can also complain to your data protection authority, for example the authority in your EU country, the UK Information Commissioner’s Office, or Türkiye’s Personal Data Protection Authority (KVKK).

We don’t sell or share personal information for cross-context behavioral advertising, and we don’t use it for automated decisions with legal effects.

Children

Oxigen is for people aged 13 and over and isn’t directed at children under 13. If you believe a child under 13 has used Oxigen, contact us.

Security

Data leaves the phone only over encrypted connections, and the most sensitive data never leaves it at all. Keep your phone locked and your exports private.

Changes

If this policy changes, we’ll update the date at the top of this page, and for significant changes we’ll tell you in the app before they take effect.

Contact

Questions or requests about privacy: oxigen@thunder.red. Controller: the publisher of Oxigen, shown as the developer on the app’s App Store page.