Privacy Policy

iKima ("we", "our", or "the app") is a breathing and heart rate wellness app for iPhone and Apple Watch. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

iKima collects only the minimum data necessary to provide its features:

• Health data — heart rate, heart rate variability (HRV), and resting heart rate, read from Apple HealthKit with your explicit permission.
• Camera pulse reading (optional, iPhone) — with your camera permission, a 20-second fingertip reading before or after a session uses the rear camera and flash to estimate heart rate. Frames are processed live in memory on your phone; no image, video or raw signal is ever saved, uploaded, or written to Apple Health. Only the resulting estimate is stored with the session.
• Session data — breathing session records (pattern, duration, cycles, mood check-ins) stored locally on your device using SwiftData.
• App preferences — settings such as weekly session goals, reminder times, and language preference, stored locally via UserDefaults.
• Usage analytics (only if you agree) — see Section 4 below.

2. Data We Do NOT Collect

• The app does not collect your name, email address, or account information.
• We do not transmit heart-rate or HRV readings, camera frames, raw pulse signals, or session records to any external server.
• We do not collect device advertising identifiers (IDFA/IDFV) or precise location.
• We do not use advertising SDKs or social media SDKs.
• We do not sell your data. If you opt in to usage analytics, the limited analytics data described in Section 4 is sent to Mixpanel.

3. HealthKit

Health data accessed through Apple HealthKit is used solely to display real-time heart rate during sessions and to show personal wellness trends within the app. This data is never transmitted outside your device. We do not request access to Health Records or any HealthKit categories beyond heart rate, HRV, and resting heart rate. The app does not write any data back to HealthKit.

4. Usage Analytics (Opt-In)

iKima asks before collecting any usage analytics. New installs are asked once during setup ("Help Improve iKima?"), with Share and Don't Share as equal choices. Installs that had already completed setup before this version were treated as having agreed, and can turn sharing off at any time. If you do not agree, no analytics events are created, stored or sent.

Examples of events collected when you agree:

• App launched, session started, session completed or abandoned
• Which breathing pattern was selected and for how long
• Limited categorical signals about a session, such as whether a heart-rate source was recorded, whether an optional mood check-in indicated improvement, and the outcome of an optional camera-pulse measurement — never heart rate, HRV or any other reading, camera frame, raw pulse signal, or mood selection
• Whether HealthKit permission was granted or skipped; subscription screen views and purchase outcomes
• Device platform (iPhone or Apple Watch), iOS/watchOS version, device model, language and region settings
• Hour of day and day of week

Events are tied to a random analytics ID created on your device (shown as "Support ID" in Settings), so that your iPhone and Apple Watch count as one user. This ID is not linked to your name, email or Apple ID, but because it is persistent the data is pseudonymous rather than anonymous. No advertising identifier is collected, and your IP address is not used to determine location.

Events are sent to Mixpanel, a third-party analytics service, and stored in the European Union (Mixpanel EU data residency). Mixpanel's privacy policy is available at mixpanel.com/legal/privacy-policy.

The legal basis for this processing is your consent. You can withdraw it at any time in the app (Section 8); withdrawal does not affect processing that took place before it.

5. How We Use Your Data

6. On-Device Insight

Session feedback (heart rate delta and HRV chip) is computed entirely on your device. No data is sent to any AI or cloud API to generate this feedback. The app works fully offline.

7. Data Storage & Security

• Personal data (health, sessions, preferences) — stored locally on your Apple Watch and iPhone only. iCloud sync, if enabled by you, is governed by Apple's iCloud Privacy Policy.
• Usage analytics — transmitted over HTTPS (TLS 1.2+) to Mixpanel's EU data centre and stored with encryption at rest. The app can only send events; it cannot read stored events back.

8. Your Rights — Opt-Out & Data Deletion

You have full control over your data:

• Revoke HealthKit access — Go to iPhone → Settings → Health → Data Access & Devices → iKima → turn off Heart Rate. The app continues to work without biometric data.
• Export your data (GDPR Art. 20) — iPhone app → Settings → Your Data → Export My Data. iKima creates a JSON file with the data it stores on your iPhone: your practice history (including the per-session heart-rate summaries iKima saved), your settings and app state. You choose where the file goes using the iOS share sheet; we never receive it.
• Delete your data (GDPR Art. 17) — iPhone app → Settings → Your Data → Delete All Data permanently deletes your practice history and settings from your iPhone and resets the analytics ID. This can't be undone. It does not affect:
  • Apple Health — iKima only reads heart-rate data and never writes to Health. Manage that data in the Health app.
  • Apple Watch — the iKima Watch app keeps its own data. To delete it, remove iKima from your Apple Watch.
  • One-time trial flag — a small flag recording that the one-time free technique trial has been used stays on your iPhone (in the device Keychain, never synced). It contains no personal information and is kept to prevent repeated use of the trial (our legitimate interest, GDPR Art. 17(3)). It is removed if you reset your iPhone.
  • Analytics already sent — see the last item below. Your Support ID changes after Delete All Data, so note it — or export your data, which includes it — before deleting.
• Delete the app — Deleting iKima from your iPhone also removes its data there, except the trial flag above. Data on Apple Watch remains until iKima is removed from the watch.
• Turn off usage analytics — iPhone app → Settings → Your Data → Share Usage Data. Turning it off stops collection immediately, deletes any events not yet sent from your device, and stops your Apple Watch too. Note: an Apple Watch still running a version of iKima from before this change does not read this setting; update the Watch app.
• Delete analytics already sent — Email ikima@sentiralabs.app with subject "Analytics Deletion" and your Support ID (Settings → Your Data). We will delete the events associated with that ID from Mixpanel within 30 days.

9. Third-Party Services

iKima and its website use the following third-party services:

• Mixpanel (analytics, only if you agree) — receives usage events tied to a random analytics ID and stores them in the EU. It does not receive biometric readings, camera frames, raw pulse signals, session records, names, email addresses, or Apple IDs. See Mixpanel Privacy Policy.
• Cloudflare (website hosting and content delivery) — hosts and delivers sentiralabs.app. Cloudflare may process technical connection data, such as IP address and request logs, to provide delivery and security. See Cloudflare's privacy policy.

10. Website — Free Offer Code Requests

The following additional processing applies only if you choose to request a free iKima Premium offer code through our website.

• Email address and language preference — stored in Cloudflare D1 to limit claims to one code per email address and present the claim flow in your chosen language. We do not use this information for newsletters, marketing, or follow-up emails.
• One-way hash of your IP address — used only to limit repeated requests and retained for at most one hour. The IP address itself is not stored in the offer-code database.
• Turnstile verification — Cloudflare Turnstile processes the verification request, including technical browser and connection information, to prevent automated or abusive requests. See Cloudflare's privacy policy.

Offer-code request data is not linked to app analytics or health data. To request deletion of an offer-code email record, contact us at ikima@sentiralabs.app.

11. Children's Privacy

iKima is not directed at children under 13. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy from time to time. The updated date at the top of this page will reflect any changes. Continued use of the app constitutes acceptance of the revised policy.

13. Contact

For purposes of data protection law, the controller for iKima is Hsin Ti Wu, operating as Sentira Labs.

If you have questions about this privacy policy or want to exercise your privacy rights, contact us at ikima@sentiralabs.app.

Postal correspondence address:
P.O. Box 36
Tamkang University / Tamsui
New Taipei City 251928
Taiwan