Privacy Policy

Selavo is a Christian breathwork and meditation app built by Rethinkerei (“Selavo,” “we,” “us”). This Privacy Policy explains what we collect when you visit selavo.app or use the Selavo mobile app (together, the “Service”), how we use it, who we share it with, and the rights you have over it.

We do not sell your personal data, we do not run third-party advertising, and we do not share what you pray, breathe through, or reflect on with advertisers. Where this policy uses the word “you,” we mean the person using Selavo.

Information we collect

Account information

When you create a Selavo account we collect your email address and, if you sign in with Apple or Google, the identifier and limited profile fields (name, email) returned by that provider. Passwords for email accounts are hashed by Supabase and are never visible to us. You may also add a display name and profile photo — both are optional and you can change or remove them at any time.

Activity and content

We store what you do inside the app so the experience makes sense across devices: sessions you start and complete, your favorites and library, preferred language, and similar settings. If you choose to share feedback or contact us, we keep that correspondence so we can help and improve.

Device and technical data

We collect data automatically when you use the Service: app version, operating system and device model, language and timezone, IP address, approximate location derived from your IP, crash and error logs, and basic performance metrics. We use this for reliability, security, debugging, and understanding which features are used.

Subscriptions

Paid subscriptions are sold and processed by the Apple App Store or Google Play. We do not see or store your payment card. We do receive a purchase token from the store so we can grant access to your subscription and handle refunds, cancellations, and renewals.

Sensitive content note

The sessions you choose — scripture, prayer, contemplative practices — can reveal your religious beliefs and practice. We treat this kind of activity as sensitive, restrict access to it inside our team, never share it with advertising partners, and never use it to build a profile outside of the Service.

How we use your information

We use the information described above to:

• Provide, personalize, and maintain the Service, including syncing your library across devices and remembering where you left off.
• Authenticate you and keep your account secure.
• Detect and prevent fraud, abuse, and security incidents.
• Diagnose crashes and fix bugs.
• Understand which features and content are useful so we can improve the app.
• Send transactional emails (account confirmation, password reset, important changes). We will not send marketing emails without your consent.
• Comply with our legal obligations and enforce our Terms.

Service providers we use

We rely on a small number of vendors to run the Service. They process personal data on our behalf, only for the purposes described here, and under contractual confidentiality and security obligations.

• Supabase hosts our database, authentication, and file storage. Your account, profile, sessions, and library are stored on Supabase infrastructure in the European Union (Ireland, eu-west-1).
• Apple and Googleprovide “Sign in with Apple” and “Sign in with Google.” If you use them, they share an identifier and your name/email with us. They also process subscription purchases through the App Store and Google Play.
• Superwall presents paywalls inside the mobile app and receives a pseudonymous user identifier and which paywall you saw, so entitlements can be matched and conversion can be measured.
• Sentry records crashes, errors, and performance traces so we can fix bugs. Reports include device and OS information, a pseudonymous user ID, and stack traces.
• PostHog is our product-analytics tool. It records events such as which screens you view, which sessions you start, and which features you use, tied to a pseudonymous user ID and, for signed-in users, your email so we can answer support requests.
• Vercel hosts the Selavo website and the admin dashboard and provides Vercel Analytics and Speed Insights, which collect aggregate, anonymized traffic and performance data.
• Expo / EAS (Expo Application Services) builds the mobile app and delivers over-the-air updates. EAS receives build and update telemetry tied to your device.

We may add or change service providers as the Service evolves; this section will be updated when we do.

How we share information

We share personal data only in these limited cases:

• With the service providers listed above, to operate the Service.
• With Apple or Google when you make a subscription purchase.
• To comply with law, a valid legal request, or to protect the rights, safety, and property of Selavo, our users, or the public.
• In connection with a merger, acquisition, or asset sale — in which case we will require the recipient to honor this Privacy Policy or notify you of a material change.
• With your consent, for anything else.

We do not sell personal data, and we do not share it for cross-context behavioral advertising.

International transfers

Selavo’s primary database is in the European Union, but some of our service providers — in particular Sentry, PostHog, Vercel, Expo, Apple, and Google — process data in the United States and other countries. Where transfers leave the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision as appropriate.

Data retention

We keep personal data for as long as your account is active and for a limited period afterwards to satisfy legal, accounting, security, and dispute-resolution obligations. Crash and analytics events have shorter retention windows configured with the relevant vendor. When you delete your account we delete your associated data from our systems within 30 days and request deletion from our analytics provider, except where retention is required by law.

Security

We use industry-standard safeguards: TLS in transit, encryption at rest with our database provider, hashed passwords, role-based access controls, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security — but we will notify you and the relevant authorities of any qualifying breach as required by law.

Your rights

Depending on where you live, you have some or all of the following rights over the personal data we hold about you:

• Access a copy of the data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your account and associated data.
• Port a machine-readable copy of your data to another service.
• Object to or restrict certain processing, and withdraw consent where we relied on it.
• Object to analytics or crash reporting by emailing us — we will exclude your account from those tools.
• Complain to your local data protection authority — in the EU, your national supervisory authority; in the UK, the ICO.

Residents of California, Colorado, Connecticut, Virginia, Texas, and other U.S. states with comprehensive privacy laws have equivalent rights under those laws, including the right to opt out of sale or sharing for targeted advertising. Selavo does not sell personal data or share it for targeted advertising, but you may still exercise the rights above.

To exercise any of these rights, email hey@selavo.app. We will respond within the time period required by applicable law. We may need to verify your identity before acting on the request.

Children

Selavo is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13 (or under 16 in regions where that is the applicable threshold, such as parts of the EU). If you believe a child has provided us with personal data, contact us at hey@selavo.app and we will delete it.

Tracking on Apple devices

We do not track you across other companies’ apps and websites and we do not share device identifiers with data brokers or advertising networks. Where iOS asks for App Tracking Transparency permission, declining will not reduce the functionality of the Service.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top and, where appropriate, notify you in the app or by email. Continued use of the Service after a change means you accept the updated policy.

Contact

Selavo is operated by Rethinkerei. Questions, complaints, or privacy requests can be sent to hey@selavo.app. See also our Terms of Service and Health Disclaimer.