Privacy Policy for Practice - Meditation timer

Last Updated: August 2, 2026

1. About This Policy

This Privacy Policy explains how information is handled when you use Practice - Meditation timer (“Practice”, the “App”) or visit its privacy and support pages (together, the “Services”). It also explains the choices available to you.

Practice is designed to be local-first. The App does not require an account with us and we do not operate an application backend that receives your meditation data. Some features use Apple services, including a private iCloud database, and the public privacy and support pages are hosted by GitHub. Those providers process information under their own terms and privacy policies.

2. Who We Are

The provider of Practice and the data controller for processing described in this Policy that is under our control is:

Myroslava Verbytska
Ukraine
Email: practice.meditation.timer@gmail.com

The same email address is used for support questions and privacy requests.

3. Summary of Our Privacy Practices

• We do not require a developer-operated account.
• We do not operate an application backend that receives your meditation data.
• We do not sell personal information or use it for advertising or tracking.
• We do not include third-party advertising or analytics SDKs in the App.
• We do not access Apple Health or HealthKit data, location, contacts, photos, or the microphone.
• Meditation data is stored locally and, when iCloud is available, selected data is synchronized through your private iCloud database.
• Diagnostic and data-export packages are created locally. Nothing is sent to us automatically; you choose whether and where to share a package.
• We receive personal information only if you choose to contact us, such as by sending an email or attaching a diagnostic package.

4. Information Stored on Your Device

Depending on how you use Practice, the App may store the following information locally on your device:

• an optional profile display name and a selected built-in avatar identifier;
• completed meditation history, including dates, durations, outcomes, pauses, interruptions, and the session settings needed to represent the completed practice;
• custom preset names, phase names, phase durations, ordering, cue choices, and audio preferences;
• application preferences, such as display, haptic, sound, ambient-audio, and alarm-backup choices;
• active-session and recovery state needed to keep the timer reliable across interruption, backgrounding, and relaunch;
• technical identifiers and synchronization state created by the App; and
• a bounded local diagnostic journal described below.

This information is used to provide the timer, restore interrupted sessions, show history and statistics, apply your settings, and support reliable synchronization. We do not receive this on-device information automatically.

5. Information Stored in Your Private iCloud Database

If you are signed in to iCloud and iCloud is available, Practice uses Apple CloudKit to synchronize selected information across devices using the same Apple Account. The synchronized information may include:

• profile display name and built-in avatar identifier;
• completed meditation history and the related dates, durations, outcomes, and session plan;
• custom presets, preset and phase names, durations, and preset ordering;
• signal and background-audio defaults; and
• technical synchronization information such as record identifiers, revisions, timestamps, deletion markers, and conflict/recovery state.

Practice uses the private CloudKit database associated with your Apple Account. Apple states that the user owns the contents of this database and that private-database contents are not visible in the developer portal. The information counts toward your iCloud storage and is processed by Apple under Apple’s privacy policy and iCloud terms.

CloudKit may use silent background notifications to keep the local replica current. Practice does not use these notifications to display alerts, reminders, or marketing messages.

6. Diagnostics and Data Export

Local diagnostics

Practice keeps a bounded, device-local diagnostic journal for reliability and support. It retains at most the most recent 120 hours of technical events and is also limited by event and storage-size bounds.

A diagnostic package may contain:

• App version, build, configuration, and distribution-channel information;
• operating-system version and device family;
• the configured CloudKit environment;
• coarse runtime, persistence, backup-readiness, and synchronization status;
• recent typed technical events and reason codes; and
• a random, resettable diagnostic installation identifier and report identifier.

The package is designed not to contain profile content, meditation history, preset names, audio, Apple Account identifiers, Apple device identifiers, session or CloudKit record identifiers, file paths, raw provider errors, or persistence payloads.

Nothing is uploaded automatically. You must explicitly prepare a report and then choose a destination in the system share sheet. Locally prepared diagnostic exports are eligible for automatic cleanup after 24 hours. Using Clear Diagnostic History removes the local diagnostic events and resets the random diagnostic installation identifier without deleting meditation history.

Portable data export

The App can create a portable backup containing your profile, completed history, custom presets, and supported settings. The archive is created locally. You decide whether and where to share or store it using Apple’s system interfaces. Copies outside the App are controlled by you and by the service or recipient you select; Practice cannot delete those external copies for you.

7. Information You Send to Support

If you contact us, we may receive the information you choose to provide, including:

• your email address and any name shown in your email account;
• the contents of your message;
• information you provide about the App, device, or problem; and
• attachments you choose to send, including a diagnostic package.

We use this information only to respond to your request, investigate the reported problem, protect the reliability and security of the App, and comply with applicable law. We do not use support information for advertising, profiling, or newsletters.

Support email is processed by Google under Google’s privacy and security terms.

8. How Information Is Used and Legal Bases

Where applicable law requires a legal basis, information is handled on the following bases:

• Providing the App and requested features. Local processing and optional private-iCloud synchronization are necessary to provide the functionality you request and perform our service obligations to you.
• Responding to you and maintaining reliability. We process information you send to support because it is necessary to respond to your request and for our legitimate interests in supporting, securing, and improving the reliability of the App, provided those interests are not overridden by your rights.
• Legal obligations. We may retain or disclose limited information when required to comply with applicable law, legal process, or enforceable governmental requests.
• Consent. If we ask for consent for a future processing activity, you may withdraw it at any time, without affecting processing that was lawful before withdrawal.

We do not make decisions that have legal or similarly significant effects using automated decision-making or profiling.

9. Apple, GitHub Pages and Other Services

Apple

Practice uses Apple platform services to provide private iCloud synchronization, optional alarm backup, Live Activities, system sharing, App Store distribution, and Apple-hosted managed assets. Apple may process technical, account, download, or service information as the platform provider under the Apple Privacy Policy. We do not receive access to the contents of your private iCloud database through the CloudKit developer portal.

GitHub Pages

The public privacy and support pages are hosted through GitHub Pages. We do not add analytics, advertising pixels, forms, or third-party scripts to those pages. GitHub may independently process information such as IP address, browser or device information, request timestamps, pages viewed, and essential cookie information to provide and secure its service. See the GitHub General Privacy Statement.

Services you choose

When you use the system share sheet, follow an external link, store an exported archive, or send an email, the destination you select may process the shared information under its own privacy policy. Review the destination before sharing. We do not control and are not responsible for the privacy practices of a service you independently choose.

We do not sell personal information and do not disclose it to advertisers or data brokers. Providers we engage to process information on our behalf may use it only to provide the described service and must protect it consistently with their terms, this Policy, and applicable law.

10. International Data Transfers

Apple, GitHub, Google, and services you independently choose may process information in countries other than your country of residence. Their processing and international-transfer safeguards are governed by their respective terms and privacy policies.

If you send information directly to us from another country, it will be processed in Ukraine and where our email provider operates. Where applicable law requires additional safeguards for an international transfer under our control, we will use legally recognized safeguards. International processing does not remove any rights available to you under applicable law.

11. Retention and Deletion

• On-device information: retained until you edit or delete it using available App controls or remove the App. Removing the App deletes its local container through the operating system, but it does not by itself delete data already stored in iCloud, copies you exported elsewhere, or data retained in an Apple-managed device backup. Apple backup retention is controlled through your Apple settings and Apple’s terms.
• Private iCloud information: retained in your private CloudKit database until it is deleted using Delete Cloud Data or otherwise removed through Apple’s iCloud controls. Delete Cloud Data removes the current synchronized cloud workspace, keeps the data stored on the current device, and pauses synchronization. Selecting Retry later may republish the remaining local data. To remove both copies using the App’s current controls, first delete the cloud data, do not restart synchronization, and then remove the App from the device.
• Local diagnostic journal: retained for no more than 120 hours and subject to additional event and size limits. You may clear it sooner in the App.
• Prepared diagnostic exports: eligible for local cleanup after 24 hours. A copy you share or move elsewhere follows the retention rules of the selected destination.
• Support correspondence: retained for no more than 90 days after the request is closed, unless a longer period is required to comply with law or establish, exercise, or defend legal claims.
• Website technical information: retained by GitHub according to GitHub’s own retention practices; we do not add or operate a visitor-analytics service for the static pages.

12. Security

Practice uses Apple platform protections, private CloudKit storage, file-protection attributes, bounded diagnostics, and data-minimization measures appropriate to the nature of the information it handles. We take reasonable steps to restrict access to the support mailbox to people who need it for support and privacy requests.

No storage or transmission method can be guaranteed to be completely secure. You should review the destination before sharing a backup or diagnostic package and protect exported files according to their sensitivity.

13. Your Rights and Choices

Depending on your location, you may have rights to request access to, correction of, deletion of, restriction of, or objection to processing of personal information we control, and to receive a portable copy. You may also have the right to lodge a complaint with a competent data-protection authority.

Practice provides the following controls:

• edit your profile and custom presets in the App;
• prepare a portable export of supported user data;
• clear the local diagnostic history and reset its random identifier;
• delete the synchronized cloud workspace using Delete Cloud Data; and
• remove the App to delete its local container.

Because we cannot inspect your private CloudKit database through the developer portal, we cannot retrieve or directly delete its contents on your behalf. Use the in-App and Apple iCloud controls described above. To exercise rights relating to support correspondence or other information you sent directly to us, email practice.meditation.timer@gmail.com. We may ask for information reasonably necessary to verify the request without requesting unnecessary identity documents.

14. Children’s Privacy

Practice is intended for a general audience and is not directed specifically to children under 13 or any higher minimum age required by local law. We do not knowingly collect personal information from children through an App account, analytics, or advertising. If you believe a child has sent personal information directly to us, contact practice.meditation.timer@gmail.com and we will take appropriate steps to delete it.

15. Changes to This Policy

We may update this Privacy Policy when the App, its data practices, or applicable requirements change. The updated policy will be posted at this URL with a revised Last Updated date. If a change materially affects how information under our control is used, we will provide additional notice where required by law.

16. Contact Us

For privacy questions, support requests, or requests concerning information you sent directly to us, contact:

Myroslava Verbytska
Ukraine
Email: practice.meditation.timer@gmail.com