Privacy Policy

Dod Nôl at ein Coed

Last updated: 10/02/2026

This Privacy Policy explains how Coming to Our Senses (“we”, “us”, or “the app”) collects, uses, and protects your information when you use the app.

We are committed to collecting only what is necessary and to handling your data with care and transparency.

1. Information We Collect

a) Account Information (Email Address)

To use the app, you are required to create an account using an email address.

Your email address is used solely to:

Create and manage your user account
Authenticate you when you sign in
Communicate essential service-related messages (e.g. account or security updates)

We do not use your email address for marketing unless you explicitly opt in.

b) Journal Entries & Reflections

The app allows you to create journal entries and reflections as part of your mindfulness practice.

These entries are private
We do not read, analyse, or monitor journal content
Journal data is stored securely and associated with your account so it remains accessible across sessions and devices (if applicable)

Your journal content is never shared with third parties and is not used for profiling, research, or advertising.

c) Usage & Technical Data

We may collect limited, anonymised usage data, such as:

App feature usage
Crash or error reports
Basic device and operating system information

This data:

Does not identify you personally
Is used only to maintain and improve the app

2. How We Use Your Information

We use your information only to:

Provide access to the app
Maintain account security
Store and retrieve your personal journal content
Improve app reliability and functionality
Respond to support requests

We do not:

Sell your data
Share your data with advertisers
Use your data for targeted advertising or behavioural profiling

3. Legal Basis for Processing (GDPR)

Under UK GDPR / GDPR, we process your data based on:

Contractual necessity – to provide the app you signed up for
Legitimate interest – to maintain app security and functionality
Consent – where you explicitly choose to opt in to optional communications

4. Data Storage & Security

Your data is stored securely using appropriate technical and organisational safeguards.

Where third-party service providers are used (e.g. secure hosting or authentication services), they operate under data-processing agreements compliant with GDPR.

While we take reasonable steps to protect your data, no digital system can be guaranteed to be completely secure.

5. Data Retention

Your account data is retained for as long as your account is active
If you delete your account, your email address and associated personal data will be permanently deleted within a reasonable timeframe, unless retention is required by law