Privacy Policy

Last updated: April 2, 2026

1. Who We Are

TwoBreath is developed by Matthias Buchhorn-Roth ("we", "us", "our"). TwoBreath is a couples breathing ritual app for iOS and Apple Watch.

For privacy inquiries, contact us at: info@twobreath.com

2. Data We Access

Apple HealthKit Data (Read)

With your explicit permission, TwoBreath reads the following health data types from Apple Health to display trends on your personal health dashboard:

Data Type	Purpose
Heart Rate	Display live heart rate during Watch breathing sessions
Heart Rate Variability (HRV)	Dashboard trend showing autonomic nervous system response
Resting Heart Rate	Dashboard trend showing cardiovascular health over time
Respiratory Rate	Dashboard correlation with breathing practice
Blood Oxygen (SpO2)	Dashboard showing blood oxygen trends
VO2 Max	Dashboard showing cardiorespiratory fitness
Sleep Analysis	Dashboard correlation between breathing practice and sleep quality
Mindful Sessions	Read own and partner sessions for streak tracking

Apple HealthKit Data (Write)

TwoBreath writes one data type to Apple Health:

• Mindful Sessions — When you complete a breathing session or ritual, the duration is saved as a mindful session so it appears in your Apple Health summary.

Session Logs (On-Device Only)

TwoBreath stores a log of your completed sessions on your device using Apple's SwiftData framework. This includes: date, duration, program used, comfort rating, and progression data. This data never leaves your device.

Device Name (Couple Pairing)

When you use the couple pairing feature, your device name is shared locally with your partner's device over WiFi or Bluetooth using Apple's MultipeerConnectivity framework. This is a direct device-to-device connection with no server involved.

3. Data We Do NOT Collect

• Personal identification information (name, email, phone)
• Location data
• Usage analytics or telemetry
• Advertising identifiers
• Crash reports (we rely on Apple's built-in crash reporting via App Store Connect)
• Financial or payment information
• Contact lists or social media data
• Photos, camera, or microphone data

4. Where Your Data Lives

All data resides exclusively on your device (iPhone, Apple Watch) and in your personal iCloud backup if you have iCloud backup enabled. We have no servers, no cloud storage, and no database.

If you enable iCloud backup on your device, your TwoBreath session logs may be included in your device backup. This is managed by Apple, not by us.

5. Third-Party Services

TwoBreath uses zero third-party SDKs, frameworks, or services. The app is built entirely with Apple's native frameworks:

• SwiftUI (user interface)
• SwiftData (on-device persistence)
• HealthKit (health data with your permission)
• AVFoundation (audio playback)
• MultipeerConnectivity (local couple pairing)
• WatchConnectivity (iPhone to Apple Watch communication)

No analytics SDK (Firebase, Mixpanel, etc.), no ad network, no crash reporting SDK, no social login.

6. Couple Pairing & Data Sharing

The couple pairing feature uses Apple's MultipeerConnectivity framework to create a direct, encrypted connection between two nearby devices over WiFi or Bluetooth.

• Pairing is always initiated manually by both users
• Data shared: ritual phase state, session completion status, device name
• Heart rate data from Apple Watch is shared between paired devices during active sessions only
• No data is sent to any server — communication is strictly device-to-device
• Pairing can be disconnected at any time

7. Your Rights & Control

You have full control over all your data:

HealthKit Permissions

• You can grant or revoke HealthKit access at any time via: Settings → Health → Data Access & Devices → TwoBreath
• TwoBreath functions fully without HealthKit — the health dashboard will simply show empty charts

Session History

• Delete individual sessions within the app
• Delete all data by uninstalling TwoBreath

HealthKit Data

• Mindful sessions written by TwoBreath can be deleted in the Apple Health app: Health → Browse → Mindfulness → Mindful Minutes → Show All Data

8. Data Security

Your data is protected by:

• iOS device encryption — All data at rest is encrypted by iOS
• HealthKit encryption — Health data is additionally encrypted by Apple's HealthKit framework
• Keychain protection — Sensitive settings are stored in the iOS Keychain
• MultipeerConnectivity encryption — Couple pairing uses Apple's encrypted peer-to-peer protocol

9. Children's Privacy

TwoBreath is not directed at children under the age of 13. We do not knowingly collect data from children. The app is rated 4+ in the App Store because it contains no objectionable content, but the couples ritual concept is designed for adult partners.

10. GDPR Compliance (European Users)

For users in the European Economic Area (EEA):

• Legal basis: Consent (you explicitly grant HealthKit access)
• Data minimization: We access only the health data types needed for the dashboard
• Right to access: All your data is visible in the app and Apple Health
• Right to deletion: Uninstall the app to delete all local data; revoke HealthKit access to stop reading
• Right to portability: Your data is stored in Apple Health, which supports data export
• Data Protection Officer: Not required (we process no data remotely)
• No cross-border transfers: Data never leaves your device

11. CCPA Compliance (California Users)

For California residents under the California Consumer Privacy Act:

• We do not sell personal information
• We do not share personal information with third parties
• We do not collect personal information beyond what is described above
• You can delete all data at any time by uninstalling the app

12. Medical Disclaimer

TwoBreath is a wellness application for informational purposes only. It is not a medical device and does not provide medical advice, diagnosis, or treatment. The health dashboard displays data from Apple Health for personal wellness tracking only.

Consult your physician before starting any breathing practice, especially if you have cardiovascular, respiratory, or neurological conditions.

13. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Since we have no way to contact you (we don't have your email), please check this page periodically.

14. Contact

If you have questions about this privacy policy or TwoBreath's data practices:

• Email: info@twobreath.com
• Website: ma3u.github.io/TwoBreath