Halebloom — Privacy Policy

Last updated: 1 October 2026

Halebloom is a breathing app. It is built to work on your device, and it collects as little as possible.

What stays on your device

• Your practice. Your sessions, minutes, streak, techniques, settings, and the answers you give during onboarding (goal, time of day, experience) are stored only on your iPhone and Apple Watch.
• Your pulse. Pulse readings from the camera or from Apple Watch are processed on the device. They are never sent to us.
• Apple Health. If you allow it, Halebloom writes Mindful Minutes and pulse readings to Apple Health and reads heart rate during a session. We never receive Health data. It does not leave the Health app except in the ways you choose.
• The camera. It is used only while you measure your pulse. Nothing is recorded or stored.

What we collect

We use Google Firebase to understand how the app is used and to fix crashes:

• Usage data (Firebase Analytics): anonymous events such as "onboarding step completed", "paywall shown" or "session finished", with the technique, the look and the session length. These events are tied to a random app-instance identifier, not to your name, email or Apple ID.
• Crash data (Firebase Crashlytics): when the app crashes, a technical report of the crash (device model, OS version, the code that failed).
• Performance data (Apple MetricKit, sent through Firebase): about once a day, anonymous numbers such as stutters, hangs, launch time and memory use, so we can keep the app smooth on older iPhones.
• Purchases (Firebase Analytics): when you start a trial or buy Pro, an event records which plan was chosen, and Firebase records the in-app purchase (product and price). Never your Apple ID or payment details.
• Approximate region: Firebase estimates a coarse location (such as your country or city) from your IP address. We don't receive or store the IP address itself.

We do not use an advertising identifier, we do not track you across other apps or websites, and we do not sell or share data for advertising.

Purchases

Purchases and subscriptions are handled by Apple. We never see your payment details. To confirm your subscription we receive its status directly from Apple.

Your choices

• Usage, performance and crash reports can be switched off at any time in the app: Settings › Share anonymous usage. In the EU, the EEA, the UK and Switzerland nothing is collected until you say yes.
• You can remove all Halebloom data from your device by deleting the app.
• Health permissions can be changed at any time in Settings › Health › Data Access & Devices › Halebloom.
• To ask about or delete analytics data, write to us. We will respond within 30 days.

Children

Halebloom is not directed at children under 13, and we do not knowingly collect their data.

This website

halebloom.com sets no cookies and shows no ads. Cloudflare, which serves the site, counts visits with its privacy-first Web Analytics: no cookies, no fingerprinting and nothing that identifies you — only totals such as page views, countries and the pages people came from. The site keeps a note or two in your browser's own storage (for example, your language, or that you have already seen a hint); it never leaves your device. To offer the Ukrainian version to visitors from Ukraine, the site asks Cloudflare once for your country code, which it already knows from your request; it goes nowhere else. If you write to hello@halebloom.com, your message is forwarded to our inbox and used only to answer you.

How the page is used. To learn which parts of the page people reach and what they tap — the film, the questions, the language switch, the App Store buttons — the page counts those moments and sends the counts to Cloudflare. Each carries only a random number made for that one page view, which is never stored and is gone when you leave, so the counts can be added up without knowing who anyone is; with it go the page and its language, whether you are on a phone, a tablet or a computer, the site you came from (not the page) and your country as Cloudflare sees it. No cookies, nothing kept in your browser, no IP address, nothing that identifies you. The counts are kept for three months.

If the page breaks. When something on a page of this site fails in your browser, the page sends us a short technical report so we can fix it: what went wrong and where in our code, the page and its language, your browser and its version, the size of your window, and the country Cloudflare sees the request coming from. It carries no cookies and nothing that identifies you, is kept in Cloudflare’s logs for a few days, and goes nowhere else.

The launch list. If you ask to be told when Halebloom launches, your email address goes to Kit (kit.com), which keeps the list for us. Kit sends one email to confirm, and later the launch email — nothing else. Every email has an unsubscribe link, and you can ask us to delete your address at any time by writing to hello@halebloom.com. Kit handles the list as our processor.

Contact

Kyrylo Kovalin — hello@halebloom.com