Privacy

1. Controller

Christian Hermann & Martina Hermann GbR, An Rainen 3, 72525 Münsingen, Germany. Email: apps@bitbeans.de.

2. Data in the app

Language, appearance and practice history stay on your device. If you switch on the optional mood before and after, the app stores the time, the kind of practice and both values only on your device, encrypted and excluded from device backups; they are never transmitted. The app keeps them only for the current and the previous month; switching it off, clearing the app’s data or uninstalling removes them. Of your practice choices, we only transmit the chosen situation as one of ten fixed categories in a daily counter without identifiers; which meditations you played and when stays on your device. Up to version 1.7, voice samples and four complete 3-minute Arriving meditations are included; from version 1.8, one complete 3-minute Arriving meditation per language in the first voice is included, and voice samples and the second voice download like other content. Other meditations (German and English up to version 1.7, all six languages from version 1.8) and nature sounds download individually from Cloudflare and are saved on your device. Downloads send the selected audio file identifier to the server. Review cadence is stored securely on the device. Apple or Google decide whether their review sheet appears; we receive neither your rating nor its text. Sending feedback transmits your message, optional email, app version, platform and language directly to our Cloudflare backend. Feedback is stored there for up to 180 days and forwarded internally by Cloudflare email. Abuse prevention briefly retains a protected IP hash, without linking it to purchases. Optional Android quiet mode requires system permission and uses its own Do Not Disturb rule during meditation. It does not read contacts or call contents. You can disable it; your other system rules remain independent.

If you switch on “Log mindful minutes” (off by default), the app records the start and end of every finished meditation or breathing exercise as a mindfulness session in Apple Health or Health Connect on your device. Taceora reads no data there, and these entries are not transmitted to us; they are governed by the settings of Apple Health or Health Connect, where you can also withdraw the permission. The home screen widget contains no personal data and loads nothing from the internet.

3. Purchases and restoration

Purchases are made only through the Apple App Store or Google Play; we receive no card or other payment-method details. From version 1.8, our own Cloudflare backend verifies the Taceora Complete one-time purchase directly with Apple or Google; the app no longer sends any data to RevenueCat. The backend creates a random pseudonymous session without name, email or account. When you buy, its random account identifier goes to Apple or Google as the purchase assignment; the app then sends the receipt to our backend, which verifies it with Apple or Google and receives their purchase and refund notifications. We store the encrypted receipt, hashed purchase identifiers and their assignment to the session, the entitlement, platform, test or real purchase, purchase time, price and currency where provided, and the place in the app from which the purchase page was opened (such as the introduction or the settings). The app remembers the last confirmed purchase status in encrypted form on the device, so Complete keeps working offline; a receipt that has not been confirmed yet stays encrypted on the device until the backend has verified it. Test and real purchases are handled separately. After a purchase, including a refunded one, the receipt and the assignment are retained without a fixed period for restoration and correct refund processing. A session without a purchase or restore is deleted after 12 months without use; for this, the backend stores when the app last used it. If needed, the app then creates a new one automatically. The app restores purchases made with version 1.7 through Apple or Google; RevenueCat is no longer used. After a reinstall, the app restores an existing purchase without a tap at the first start with a connection; Restore remains available at any time. No Taceora user account is required.

Up to version 1.7, purchases ran through RevenueCat (RevenueCat, Inc., USA). We ended this cooperation on 7 October 2026 and deleted the RevenueCat project together with all data stored there: app user IDs, store receipts and transaction data. Installations with version 1.7 can neither buy nor restore there any more; please update to version 1.8, which restores an existing purchase through Apple or Google. Our Cloudflare backend no longer reconciles any purchase status with RevenueCat.

For technical quality assurance, we aggregate purchase stages and errors by day, platform, app version and a fixed event or error code. We also count app use as aggregate daily counters per platform, app version, app and meditation language: introduction started, finished or skipped; the chosen situation as one of ten fixed categories; start and natural end of a meditation or nature sound, each only marked as free or Complete; the first Complete content; the second to fourth completed session; moments after which a review request would be possible; success or failure type of a download; opening the purchase page, tapping Buy and a purchase per entry point; the start time in coarse steps; whether the daily reminder is on or off, turning it on or off and whether it opened the app (without its time). Each report also carries the coarse origin of the installation (store, test or developer build), so tests are counted separately. These reports contain no receipts, no personal, device or transaction identifiers, no meditation history (no single recording, length, time or order) and no free text. Aggregate counters and processed webhook events are deleted from the Taceora backend after 90 days. Verified purchase and refund events are also evaluated for operations. Cloudflare processes connection data needed for online requests. There are no ads or advertising trackers. We also count the review-request flow in aggregate by day, app version and platform: whether a request was possible, the fixed reason it was postponed or failed, whether it went to Apple or Google, and whether the store page was opened from the settings. These reports contain no identifiers, no meditations and no rating, text or result; we do not learn whether the dialog actually appeared. We also copy aggregate daily counters without identifiers into our internal operations overview: purchase stages and errors without a fixed deletion date, the review-request flow for up to 120 days.

4. Ratings and feedback

The app may request the Apple or Google review sheet after suitable usage moments; the store decides whether it appears. Frequency control remains local. Feedback is sent directly over an encrypted connection to our backend only after you tap Send. It includes your message, optional reply email, app version, platform and language. No email app opens, and we do not receive your store rating.

5. Website and Cloudflare

This website is delivered through Cloudflare Workers. Cloudflare processes technically required connection data, particularly IP address, requested URL, time, browser and device information, to deliver the site securely and reliably and to mitigate attacks. Our legal basis is the legitimate interest in a secure and stable service under Article 6(1)(f) GDPR. We use no advertising trackers, contact forms or marketing cookies. For reach measurement we use Umami on our own server in Frankfurt am Main, Germany (analytics.bitbeans.de), processing the page visited, referrer, country of origin, device type, screen size, browser and operating system without cookies and without any identifier on your device. We also count clicks on the App Store and Google Play buttons; only the store, the app, the page language and the place on the page where the button sits are transmitted. The store links carry a campaign tag made of page language and place, with which Apple and Google count where a download came from in their statistics; it contains no personal data. Visits are distinguished by a daily rotating, non-reversible hash value, the IP address is not stored, no user profiles are created and the measurement data is deleted after 14 months. The legal basis is Article 6(1)(f) GDPR; the server is hosted by OVHcloud in Frankfurt am Main, Germany and operated exclusively within the EU. If the browser sends “Do Not Track”, the visit is not measured; you can also object at any time at support@taceora.app. An optional appearance choice is stored only in your browser.

6. Recipients and transfers

Our technical service provider is Cloudflare, Inc., USA. Processing may also take place outside the European Economic Area. Cloudflare describes appropriate safeguards and international transfers in its privacy policy and data processing addendum. Apple and Google act independently for their store services. From version 1.8, our own Cloudflare backend verifies purchases directly with Apple or Google; the app no longer sends any data to RevenueCat. Our former cooperation with RevenueCat, Inc., USA, has ended; the project and all data stored there were deleted on 7 October 2026.

7. Retention

Local app and browser preferences remain until you change them, remove the app or clear site data. We keep no visitor database for this website. Cloudflare processes necessary security and network data under its applicable retention periods. Support emails are kept only as long as needed to answer them and satisfy legal retention or evidence duties. From version 1.8, after a purchase, including a refunded one, we keep the encrypted receipt and its assignment to the session for restoration and refunds without a fixed period. A session without a purchase or restore is deleted after 12 months without use. Aggregate usage and diagnostic counters and processed webhook events are deleted from the Taceora backend after 90 days.

8. Your rights

Within the limits of applicable law you have rights of access, correction, erasure, restriction, portability and objection. You may also complain to a data protection authority; in Germany, this includes the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

9. Changes

These notes are updated when features or data processing change. The described app features reflect Taceora 1.8 (as of 4 October 2026); differences up to version 1.7 are stated explicitly.