Skip to content
requielune
Sign inStart unlimited
Legal

Privacy policy

Last updated 9 September 2026.

requielune is a rest and sleep app. This policy describes what we collect, why we collect it, who processes it on our behalf, and what you can ask us to do with it. We do not sell personal data, and we do not use your practice history for advertising.

Who we are

[CONFIRM] requielune is operated by[LEGAL ENTITY NAME], registered in[JURISDICTION] at[REGISTERED ADDRESS]. For UK GDPR purposes we are the data controller for the data described below. You can reach us atprivacy@requielune.com.

What we collect

Account data

Your email address, and a display name if you set one. If you sign in with Apple or Google we receive an identifier from them and the email address you choose to share — including Apple’s private relay address, if you use it.

Practice data

Which sessions you played and when, how long you practised, and any courses you own. This is what produces your minutes, your practice history, and your downloads.

Check-ins and journal entries

If you use the daily check-in, we store the mood you selected and any note you wrote. Check-ins are stored so that the next day’s practice can follow from them. This is the most personal data in the app, it is never sold, and it is deletable at any time from Settings without deleting the rest of your account.

[CONFIRM] Mood data may qualify as health-related data under UK GDPR Article 9. If it does, the lawful basis is your explicit consent, given when you first use the check-in — this needs confirming in review, and the consent wording in the app must match whatever is decided here.

Usage and diagnostics

Session starts and completions, subscription events, crashes and errors. We use this to understand whether the product works, not to build a profile of you.

What we do not collect

  • We do not collect contacts, photos, precise location, or microphone audio.
  • We do not track you across other apps or websites, and we run no advertising SDKs.
  • Payment card details never reach us — see “Payments” below.

Why we collect it, and on what basis

  • To provide the app — account, playback, downloads, entitlements. Basis: performance of our contract with you.
  • To choose tomorrow’s practice — check-ins feed the daily recommendation. Basis: consent, withdrawable at any time.
  • To keep the app working — diagnostics and crash reports. Basis: our legitimate interest in a functioning product.
  • To meet legal obligations — transaction records we are required to keep. Basis: legal obligation.

Payments

Subscriptions and course purchases are billed by Apple or Google, depending on where you bought them. Your card details are handled by them and never reach our servers. We receive a record that a purchase happened, so we know what to unlock.[CONFIRM] Entitlements are managed through RevenueCat, which processes purchase events and an app-specific user identifier on our behalf.

Who processes data for us

[CONFIRM — final vendor list and data-processing agreements]

  • Supabase — database, authentication and audio storage.
  • RevenueCat — subscription and entitlement management.
  • Apple and Google — payments, and push notification delivery.
  • Cloudflare — website hosting and content delivery.
  • [CONFIRM] Analytics provider — product analytics.

Each of these acts as a processor under a data-processing agreement. Some are based outside the UK; where that is the case, transfers rely on the UK International Data Transfer Addendum or an adequacy decision.[CONFIRM per vendor]

How long we keep it

  • Account data — while your account exists, then deleted within 30 days.
  • Practice history, check-ins and journal — until you delete them, or your account.
  • Diagnostics — [CONFIRM] retained for a rolling period, then discarded.
  • Transaction records — kept as long as tax and accounting law requires.

Your rights

Under UK GDPR you can ask us to:

  • give you a copy of your data, in a portable format;
  • correct anything inaccurate;
  • delete your data — you can do this yourself in Settings, at any time;
  • restrict or object to a particular use, including withdrawing check-in consent;
  • stop sending you anything, which you can also do by turning notifications off.

Write to privacy@requielune.com and we will respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

requielune is not intended for children under[CONFIRM age], and we do not knowingly collect their data.

Changes

If we change this policy we will update the date at the top, and tell you in the app before anything material takes effect.