1. Who we are
The RO Breath mobile app (“App”) and the ro.wiltshirelabs.com website are developed and operated by Wiltshire Labs, the data controller for your personal data. Contact: [email protected].
2. Data we collect
Account (optional)
If you create an account, your email address, username, password (stored only as a one-way hash) and garden name are processed; for sync, garden progress (drops, pieces, active plant), breath test result, pantry / subscription status, and preferences (sound, language) are stored on our server.
What stays on the device
Mood choices, finished sessions, local preferences, plant state and your profile photo are stored on your device. For the profile photo we use the system photo picker and receive only the single photo you choose; we never access your whole gallery and the photo is never uploaded. Without an account, no account profile is created on the server.
Location and weather (optional)
If you allow location, approximate location is used to reflect weather on the scene. Without permission, only the time of day from the device clock is used. Location history is not sold for ads.
Purchases
In-app purchases are processed through Apple App Store / Google Play. Card details never reach us; transaction IDs needed for receipt verification may be kept.
Technical logs
The App contains no advertising or third-party analytics tools. Our server may keep request logs (IP address, time, request path) briefly for security and error diagnosis.
Notifications (optional)
If you allow it, reminders are sent at the time you choose. Reminders are scheduled on your device; no extra data is sent to the server for them. You can turn the permission off in your device settings at any time.
3. Purposes
- To offer breath sessions, growth, and the garden
- Optional cross-device sync with an account
- To manage subscription and pantry rights
- Security, abuse prevention, support
- Legal obligations
Legal bases (KVKK Art. 5 / GDPR Art. 6): performance of a contract for the account and sync; your consent for location and notifications; our legitimate interest for security and abuse prevention. Data is collected electronically through the App and the website. You can withdraw consent at any time in your device settings.
4. Sharing
We do not sell your data or use it for advertising. It is shared only with parties needed for the service: hosting (our server provider), app stores (Apple / Google, purchase verification) and, if you allow location, the weather service (Open-Meteo) for your approximate location. Disclosure to authorities may occur where legally required.
5. Retention
Account data is kept while the account is active and for a reasonable period after a deletion request. Technical logs are usually short-lived. You can clear device data by deleting the app.
6. Your rights
Under applicable law you may request access, correction, deletion, restriction, objection, and portability. GDPR rights apply in the EU / UK; KVKK rights in Türkiye. Request: [email protected].
Account and data deletion
In the app: you → delete account, or write from the account deletion page. We usually complete the request within seven days; within thirty days at the latest.
7. Children
The app is not directed at children under 13. We do not knowingly collect data from that age group. If a parent writes to us, we delete the relevant record.
8. International transfer
Servers or processors may be in other countries. Appropriate safeguards (e.g. contractual clauses) are used for transfers.
9. Changes
We may update this policy. For material changes we notify in the app or on the web. The “last update” date is at the top of this page.
10. Contact
Privacy questions: [email protected] · General support: help center.