Privacy

Last updated: October 29, 2026 (Swas 2.0)

Swas is a breathing app. We collect as little as possible to make it work, we never run ads, and we never sell your data. This page explains the whole picture in plain English. If anything here is unclear, email hello@getswas.com. Our terms of service cover how the app itself works.

Swas requires an account. You sign in with Apple, Google, or an email one-time code before using the app, because your plan, progress, check-ins, journal, streak, and Swas Pro are stored with your account so they follow you across devices and survive a reinstall.

Swas is operated by Bit Microsystems LLC (30 N Gould St, Ste R, Sheridan, WY 82801, USA), which is the data controller responsible for the information described here.

What we collect

  • Email address — from your Apple or Google sign-in, or the address you verify with a one-time code. Used so your streak can follow you across devices and so we can send essential account emails.
  • Name and avatar — if your sign-in provider shares them or you set them in your profile. Both are optional and only shown to you.
  • Sign-in provider ID — the opaque identifier Apple or Google gives us, used to recognize you on return visits.
  • Push token — if you opt in to reminders, the device token issued via Expo's push service, which delivers to Apple and Google.
  • Timezone — so streaks count correctly and reminders arrive at a sensible hour.
  • Your plan answers — the optional onboarding questions (your goals, how stressed you feel, how well you sleep, when you like to practice, your reminder time, and your experience level). Used only to build your personal plan and suggestions. Any question can be skipped.
  • Mood check-ins — the mood you pick (for example "calm" or "tense") and any short note you add, with the time. Used to show your mood history and to tailor suggestions.
  • Journal entries — the reflections you choose to write, with the prompt and time. Only you can see them.
  • Program progress — which days of a guided program you have completed.
  • Session records — which technique you chose, which mode, when you started and finished, and the duration. Used for your streak and history. No biometric or audio data is ever recorded.
  • Marketing preference — whether you opted in to our occasional emails. Off by default.
  • Purchase records — if you subscribe to Swas Pro, we receive transaction metadata (plan, price, renewal status) from Apple or Google via RevenueCat. We never see or store your card number.
  • Affiliate details — only if you apply to the affiliate program: the name, social handles, and short bio from your application, plus the PayPal or Stripe account details needed to pay you, and a record of your earnings.
  • Server logs — request IPs and browser/device identifiers are kept for up to 30 days for security, then automatically discarded.
  • Crash reports — if the app crashes, a technical report goes to Sentry with personal details (email, identifiers) scrubbed before it leaves the device. Kept for 30 days.

What we do not collect

  • No advertising identifiers — no IDFA, no AAID, no ad networks, ever.
  • No microphone, no camera, no location, no contacts, no photos.
  • No card or bank numbers. Heart-rate readings from Apple Health or Health Connect never leave your device (see below).
  • No third-party analytics or tracking SDKs.

A note on health data

Your session history records the fact that you used the app — a timestamp, a technique, a duration. It is not a health measurement: we collect no biometric or physiological data and we do not infer anything about your health. We therefore treat session records as ordinary personal data, not special-category health data. We state this position openly so you can challenge it if you disagree.

Apple Health / Health Connect (optional). If you allow it, Swas reads your heart rate for the minutes just before and after a session to show how it eased. This is read-only, happens entirely on your device, and is never sent to our servers or anyone else. You can revoke access any time in the Health app or Health Connect settings.

Plan answers, moods, and journal entries are things you choose to tell us about how you feel. We use them only to run your Swas experience, never for advertising, and never share or sell them. They are deleted with your account.

Who processes your data on our behalf

We use a small set of vendors strictly to operate the service. Each handles data only as needed to provide it:

  • Cloudflare — application hosting, CDN, and avatar storage.
  • DigitalOcean — hosts the server running our own Postgres database.
  • Upstash — Redis for rate limiting and sign-in tokens.
  • Brevo — transactional and (opt-in) marketing email.
  • Expo — push-notification delivery to Apple and Google.
  • RevenueCat — subscription management for Swas Pro.
  • Apple and Google — sign-in and in-app billing.
  • PayPal and Stripe — affiliate payouts only, and only if you are an affiliate.
  • Sentry — crash reporting, with personal data scrubbed.

We will update this list here whenever it changes. We never sell or rent data to anyone.

How long we keep things

  • Breathing history — on a free account, our servers keep your last 2 days of daily breathing activity (raw session records up to 8 days); older records are deleted automatically. With Swas Pro your full history is kept. If Pro ends, history older than 2 days is removed again.
  • Account data (email, name, preferences, streak) — kept while your account exists.
  • Plan answers, mood check-ins, journal entries, and program progress — kept while your account exists; you can delete individual journal entries at any time in the app.
  • IPs and device identifiers — up to 30 days.
  • Push delivery logs — 90 days. Crash reports — 30 days.

Deleting your account

You can delete your account any time from You → Delete account in the app, or by emailing us. Here is exactly what happens:

  • Deletion is scheduled 7 days out and you are signed out on every device immediately.
  • Changed your mind? Sign back in within those 7 days and the deletion is cancelled — your account and history are untouched.
  • After 7 days, your account and personal data are permanently deleted, and we email you a confirmation. Records we are legally required to keep (for example payment and payout records) are anonymized so they no longer identify you.

Your rights

You can do any of these at any time:

  • Access and export — email us and we will send you a copy of everything tied to your account in a portable, machine-readable format.
  • Correct — your email comes from your sign-in provider, so it can't be edited directly in the app; email us and we will help.
  • Delete — in the app or by email, as described above. Cancel a deletion by signing back in within 7 days.
  • Opt out of marketing — toggle in the app, or the unsubscribe link in every marketing email. Essential account email can't be opted out of, but you can delete your account instead.
  • Turn off reminders — in the app or in your device's notification settings.
  • Complain — if you are in the EU, EEA, or UK, you can lodge a complaint with your local data-protection authority. We'd appreciate the chance to help first.

We aim to answer every request within 7 days, and always within 30.

Where GDPR applies: we process your account, plan, mood, journal, session, and billing data because it's necessary to provide the service you signed up for (contract). Marketing email and push reminders run on your consent, which you can withdraw any time. Short-lived security logs and scrubbed crash reports rest on our legitimate interest in keeping the service safe and working.

Children

Swas is not directed at children. We do not knowingly collect data from children under 13 (or under 16 where local law sets a higher bar). If you believe a child has signed up, email us and we will delete the account.

Cookies

This website sets no cookies of any kind — which is why there is no cookie banner.

Changes

If we ever change what we collect or who processes it, we will update this page and notify you by email before the change takes effect.

Contact

Questions, requests, or anything privacy-related: hello@getswas.com.