Hushlo — Privacy Policy

Last updated: 25 April 2026

Hushlo is a meditation timer and journal. It’s built to be quiet — and that includes how it handles your data.

What Hushlo collects

Account email. When you create an account or sign in with Apple, your email address is stored by our authentication provider, Supabase. We use it to recognise you across devices and to recover access if you lose your phone. We never email you marketing.

Your sit log. Each meditation session — duration, type, mood before and after, and any notes you write — is stored on your device. If you are signed in, a copy is also stored in our Supabase database so you can see the same history on a new phone. Notes stay yours; we do not read them.

Apple Health (optional). If you grant permission, Hushlo writes each sit to Apple Health as Mindful Minutes and reads your heart rate variability so it can quietly notice when a sit softened your heart. This data never leaves Apple Health — Hushlo only reads it locally to render in your own app. You can revoke this at any time in iOS Settings → Health → Hushlo.

Anonymous usage signals. We use TelemetryDeck to count how often basic things happen — app opens, sit completions, screen views. These signals carry no personal identifiers. TelemetryDeck is privacy-by-design and does not fingerprint users. You can read their policy at https://telemetrydeck.com/privacy

Tips. If you choose to leave a tip, the payment is handled entirely by Apple via the App Store. Hushlo never sees your card details. We see only that a tip was made.

What Hushlo does not collect

• No location data.
• No contacts, photos, microphone, or camera access.
• No third-party advertising or analytics SDKs.
• No tracking across other apps or websites.
• No selling, renting, or sharing of your data with anyone.

Where your data lives

• On your device (SwiftData), always.
• In Supabase (https://supabase.com), if you have an account. Supabase is GDPR and SOC 2 compliant. Database hosted in the EU.
• In Apple Health, if you opted in.
• In TelemetryDeck (https://telemetrydeck.com), as anonymous counters only.

How long we keep it

For as long as you have an account. If you delete your account from the Settings tab, your sits and account email are removed from our database within 30 days. Local data on your device is removed when you uninstall the app.

Your rights

You can:

• Export your sit log from Settings.
• Delete your account from Settings → Account.
• Revoke Apple Health permission in iOS Settings.
• Email us to ask what data we hold or to delete it manually.

Children

Hushlo is not directed at children under 13. We do not knowingly collect data from anyone under that age.

Changes

If we change this policy, we will update the date at the top. Material changes will be flagged in the app the next time you open it.

Contact

mikeyhurdle+hushlo@gmail.com