Privacy policy

requielune is a rest and sleep app. This policy describes what we collect, why we collect it, who processes it on our behalf, and what you can ask us to do with it. We do not sell personal data, and we do not use your practice history for advertising.

Who we are

requielune is operated by REQUIELUNE LTD, a company registered inEngland and Wales under number 17490166, with its registered office at128 City Road, London, EC1V 2NX, United Kingdom. For UK GDPR purposes we are the data controller for the personal data described below. You can reach us about anything in this policy atinfo@requielune.com.

What we collect

Account data

Your email address, and a display name if you set one. Sign-in is by email and password, or a one-time email link; we do not use third-party sign-in. Your password is stored only as a secure hash.

Practice data

Which sessions you played and when, how long you practised, your progress through courses, and any breathing patterns or sound mixes you save. This is what produces your minutes and your practice history.

Check-ins and journal entries

If you use the daily check-in, we store the mood you selected and any note you wrote, so that the next day’s practice can follow from it. How you feel can count as health information (special category data under UK GDPR Article 9), so we store check-ins only with your explicit consent, which the app asks for before your first check-in. You can withdraw it at any time from the You screen — doing so erases every check-in you have kept.

Journal entries are notes you choose to write. They are kept so you can read them back, are never read by us except when you ask for help with them, and can be deleted at any time.

Messages you send us

If you email us, we keep the message and our reply so we can help you and follow up.

Usage and diagnostics

We do not run a third-party analytics or crash-reporting service, and there are no advertising or tracking tools on the site or in the app. Our hosting providers keep short-lived technical logs (such as IP address and request time) to deliver the service and protect it from abuse.

What we do not collect

• We do not collect contacts, photos, precise location, or microphone audio.
• We do not track you across other apps or websites.
• We never see or store your card details — see “Payments” below.

Why we use it, and on what legal basis

• To provide the app — your account, playback, history, courses, saved settings and, if you subscribe, Premium. Basis: performance of our contract with you (Article 6(1)(b)).
• To store check-ins and suggest your next practice from them. Basis: your explicit consent (Articles 6(1)(a) and 9(2)(a)), withdrawable at any time.
• To answer you when you write to us, and to keep the service secure.Basis: our legitimate interest in supporting users and running a safe service (Article 6(1)(f)).
• To meet legal obligations, such as keeping business records. Basis: legal obligation (Article 6(1)(c)).

We do not make decisions about you by automated means that have legal or similarly significant effects. The daily suggestion is a simple rule that picks a practice.

Payments

If you subscribe to Premium, your payment is taken by Paddle.com, our reseller and the merchant of record for all our orders. Your card details go straight to Paddle and never reach our servers. Paddle tells us only what we need to run your subscription: a customer and subscription reference, your plan, whether it is active, and when it renews or ends. We keep that while you subscribe and for six years afterwards, as UK tax law requires for business records. Paddle is an independent controller of the payment data it collects, under its own privacy policy.

Who processes data for us

• Supabase — database, authentication, sign-in emails and audio storage.
• Cloudflare — website and app hosting, and content delivery.
• Paddle — takes payments for Premium as our reseller and merchant of record, if you subscribe (an independent controller, see “Payments”).
• Our email provider — to receive and answer messages sent toinfo@requielune.com.

Each acts as a processor on our instructions, under a data-processing agreement. Some process data outside the UK, including in the United States; where that happens, the transfer is covered by the UK–US data bridge or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Cookies and storage on your device

We do not use advertising or analytics cookies. The app keeps a small amount of data in your browser that it needs to work — your sign-in session, your theme choice, and the app’s own files so it opens offline. See the cookie policy.

How long we keep it

• Account data — while your account exists. Deleting your account erases it immediately; copies in our providers’ backups expire within 30 days.
• Practice history, journal and saved mixes and patterns — until you delete them, or your account.
• Check-ins — until you delete them, withdraw consent, or delete your account.
• Emails you send us — up to two years after the conversation ends.

Your rights

Under UK GDPR you have the right to:

• get a copy of your personal data, and to have it in a portable format;
• have anything inaccurate corrected;
• have your data deleted — you can delete your account and everything in it yourself, from the You screen, at any time;
• restrict or object to a particular use of your data;
• withdraw consent to check-ins at any time, from the You screen, without affecting anything done before you withdrew.

We do not send marketing email or push notifications, so there is nothing to unsubscribe from.

Write to info@requielune.com to use any of these rights; we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office atico.org.uk or on 0303 123 1113 — though we would appreciate the chance to put it right first.

Children

requielune is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has made an account, write to us and we will delete it.

Changes

If we change this policy we will update the date at the top, and tell you in the app before anything material takes effect.