Privacy

Last updated: June 11, 2026

Swas is a breathing app. We collect as little as possible to make it work, we never run ads, and we never sell your data. This page explains the whole picture in plain English. If anything here is unclear, email [email protected]. Our terms of service cover how the app itself works.

Swas is operated by Bit Microsystems LLC (30 N Gould St, Ste R, Sheridan, WY 82801, USA), which is the data controller responsible for the information described here.

What we collect

  • Email address — from your Apple or Google sign-in, or the address you verify with a one-time code. Used so your streak can follow you across devices and so we can send essential account emails.
  • Name and avatar — if your sign-in provider shares them or you set them in your profile. Both are optional and only shown to you.
  • Sign-in provider ID — the opaque identifier Apple or Google gives us, used to recognize you on return visits.
  • Push token — if you opt in to reminders, the device token issued via Expo's push service, which delivers to Apple and Google.
  • Timezone — so streaks count correctly and reminders arrive at a sensible hour.
  • Session records — which technique you chose, which mode, when you started and finished, and the duration. Used for your streak and history. No biometric or audio data is ever recorded.
  • Marketing preference — whether you opted in to our occasional emails. Off by default.
  • Purchase records — if you subscribe to Swas Pro, we receive transaction metadata (plan, price, renewal status) from Apple or Google via RevenueCat. We never see or store your card number.
  • Affiliate details — only if you apply to the affiliate program: the name, social handles, and short bio from your application, plus the PayPal or Stripe account details needed to pay you, and a record of your earnings.
  • Server logs — request IPs and browser/device identifiers are kept for up to 30 days for security, then automatically discarded.
  • Crash reports — if the app crashes, a technical report goes to Sentry with personal details (email, identifiers) scrubbed before it leaves the device. Kept for 30 days.

What we do not collect

  • No advertising identifiers — no IDFA, no AAID, no ad networks, ever.
  • No microphone, no camera, no location, no contacts, no photos.
  • No health, fitness, heart-rate, or sleep data, and no card or bank numbers.
  • No third-party analytics or tracking SDKs.

A note on health data

Your session history records the fact that you used the app — a timestamp, a technique, a duration. It is not a health measurement: we collect no biometric or physiological data and we do not infer anything about your health. We therefore treat session records as ordinary personal data, not special-category health data. We state this position openly so you can challenge it if you disagree.

Who processes your data on our behalf

We use a small set of vendors strictly to operate the service. Each handles data only as needed to provide it:

  • Cloudflare — application hosting, CDN, and avatar storage.
  • Neon — managed Postgres database (US region).
  • Upstash — Redis for rate limiting and sign-in tokens.
  • Brevo — transactional and (opt-in) marketing email.
  • Expo — push-notification delivery to Apple and Google.
  • RevenueCat — subscription management for Swas Pro.
  • Apple and Google — sign-in and in-app billing.
  • PayPal and Stripe — affiliate payouts only, and only if you are an affiliate.
  • Sentry — crash reporting, with personal data scrubbed.

We will update this list here whenever it changes. We never sell or rent data to anyone.

How long we keep things

  • Breathing history — on a free account, our servers keep your last 2 days of daily breathing activity (raw session records up to 8 days); older records are deleted automatically. With Swas Pro your full history is kept. If Pro ends, history older than 2 days is removed again.
  • Account data (email, name, preferences, streak) — kept while your account exists.
  • IPs and device identifiers — up to 30 days.
  • Push delivery logs — 90 days. Crash reports — 30 days.

Deleting your account

You can delete your account any time from Profile → Delete Account in the app, or by emailing us. Here is exactly what happens:

  • Deletion is scheduled 7 days out and you are signed out on every device immediately.
  • Changed your mind? Sign back in within those 7 days and the deletion is cancelled — your account and history are untouched.
  • After 7 days, your account and personal data are permanently deleted, and we email you a confirmation. Records we are legally required to keep (for example payment and payout records) are anonymized so they no longer identify you.

Your rights

You can do any of these at any time:

  • Access and export — email us and we will send you a copy of everything tied to your account in a portable, machine-readable format.
  • Correct — your email comes from your sign-in provider, so it can't be edited directly in the app; email us and we will help.
  • Delete — in the app or by email, as described above. Cancel a deletion by signing back in within 7 days.
  • Opt out of marketing — toggle in the app, or the unsubscribe link in every marketing email. Essential account email can't be opted out of, but you can delete your account instead.
  • Turn off reminders — in the app or in your device's notification settings.
  • Complain — if you are in the EU, EEA, or UK, you can lodge a complaint with your local data-protection authority. We'd appreciate the chance to help first.

We aim to answer every request within 7 days, and always within 30.

Where GDPR applies: we process your account, session, and billing data because it's necessary to provide the service you signed up for (contract). Marketing email and push reminders run on your consent, which you can withdraw any time. Short-lived security logs and scrubbed crash reports rest on our legitimate interest in keeping the service safe and working.

Children

Swas is not directed at children. We do not knowingly collect data from children under 13 (or under 16 where local law sets a higher bar). If you believe a child has signed up, email us and we will delete the account.

Cookies

This website sets no cookies of any kind — which is why there is no cookie banner.

Changes

If we ever change what we collect or who processes it, we will update this page and notify you by email before the change takes effect.

Contact

Questions, requests, or anything privacy-related: [email protected].