Privacy Policy

Last Updated: 01 September 2026

This Privacy Policy explains how Wayfulness, Inc., a Delaware corporation ("Company," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you use the Wayfulness mobile application and related services (the "Services").

By using the Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information You Provide

• Account information: Email address, name (optional), and password when you create an account.
• Profile and preferences: Meditation preferences, goals, reminders, and settings you configure in the App.
• Communications: Information you provide when you contact us for support or feedback.
• Payment information: If you purchase a subscription, payment is processed by the Apple App Store or Google Play Store. We do not collect or store your full payment card details; we receive only transaction confirmations and subscription status.

Information Collected Automatically

• Usage data: Sessions completed, content played, listening duration, streaks, and in-app activity.
• Device and technical data: Device type, operating system and version, app version, language settings, IP address, and unique device identifiers.
• Crash and performance data: Diagnostic information to help us identify and fix problems.

Sensitive Information

Your use of a mindfulness app, and data such as mood check-ins or wellness goals (if you choose to provide them), may be considered health-related or sensitive information in some jurisdictions. We treat this data with additional care, use it only to provide and improve the Services, and do not sell it or use it for third-party advertising.

2. How We Use Your Information

We use your information to:

• Create and manage your account;
• Provide, personalize, and improve the Services, including recommending content;
• Track your progress, streaks, and preferences;
• Process subscriptions and manage billing status;
• Send service-related communications (e.g., account notices, reminders you enable, updates to our terms);
• Send marketing communications where permitted, which you can opt out of at any time;
• Monitor and analyze usage to improve features and content;
• Detect, prevent, and address technical issues, fraud, and abuse;
• Comply with legal obligations.

3. Legal Bases for Processing (EEA, UK, and Similar Jurisdictions)

Where applicable law requires a legal basis for processing, we rely on:

• Contract: To provide the Services you have requested;
• Legitimate interests: To improve and secure the Services, in ways that do not override your rights;
• Consent: For optional features such as marketing communications or optional data you choose to provide (you may withdraw consent at any time);
• Legal obligation: To comply with applicable laws.

4. How We Share Your Information

We do not sell your personal information. We share it only in the following circumstances:

Service Providers

We use third-party providers to operate the Services, who process data on our behalf under contractual safeguards:

• Supabase — database hosting, authentication, and backend infrastructure. Your account data and app data are stored with Supabase.
• Cloudflare — content delivery and storage of audio content (Cloudflare R2). Cloudflare may process technical data such as IP addresses when delivering content to your device.
• Apple / Google — payment processing and app distribution, if you purchase through their app stores.
• [Analytics provider, if any] — usage analytics to help us understand how the App is used.

Other Circumstances

• Legal requirements: When required by law, subpoena, or legal process, or to protect the rights, safety, or property of the Company, our users, or the public.
• Business transfers: In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred, subject to this Policy or one that offers comparable protection.
• With your consent: In any other case, we will share your information only with your consent.

5. International Data Transfers

We are based in the United States, and our service providers may store and process data in the United States and other countries. If you are located outside the U.S., your information will be transferred to jurisdictions that may have different data protection laws than your country. Where required, we use appropriate safeguards for such transfers, such as standard contractual clauses.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce agreements. Anonymized or aggregated data that no longer identifies you may be retained.

7. Data Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and secure hosting infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights:

• Access: Request a copy of the personal information we hold about you;
• Correction: Request that we correct inaccurate or incomplete information;
• Deletion: Request deletion of your personal information;
• Portability: Request your data in a portable format;
• Objection / restriction: Object to or request restriction of certain processing;
• Withdraw consent: Where processing is based on consent;
• Opt out of marketing: Use the unsubscribe link in any marketing email or adjust your notification settings.

To exercise any of these rights, contact us at support@wayfulness.com or use the relevant controls in the App. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

Jurisdiction-Specific Notes

• California (CCPA/CPRA): California residents have rights to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA/CPRA. We do not discriminate against you for exercising your rights.
• EEA/UK (GDPR): The legal bases in Section 3 apply, and you may contact your supervisory authority with concerns.
• South Africa (POPIA): You may have rights of access, correction, and deletion under the Protection of Personal Information Act, and may complain to the Information Regulator.

(Adjust this list with your attorney based on where the App will be distributed.)

9. Children's Privacy

The Services are not directed at children under 13 (or the higher minimum age required in your jurisdiction). We do not knowingly collect personal information from children under this age. If you believe a child has provided us personal information, contact us at support@wayfulness.com and we will delete it promptly.

10. Push Notifications and Reminders

If you enable reminders or push notifications, we will send them through your device's notification service. You can disable them at any time in the App or your device settings.

11. Do Not Track

Some browsers and devices transmit "Do Not Track" signals. The App does not currently respond to these signals.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means before the changes take effect. The "Last Updated" date at the top indicates when this Policy was last revised. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Wayfulness, Inc. Email: support@wayfulness.com