Privacy Policy

1. Who we are

PanchPrana is developed and operated by Saurav Verma ("we," "us," "our"). The Android app is distributed on Google Play under the developer name PavePulse; the iOS app is distributed on the Apple App Store under an individual Apple developer account. This policy covers the PanchPrana mobile app on both platforms and the panchprana.com website.

2. Short version

We ask before we collect anything, anywhere. The app and this website both use analytics, and the website also carries advertising measurement — but none of it starts until you say yes. We ask everyone, in every country, including the many places where the law doesn't require us to. If you decline, the app and the site work exactly the same.

Here is what we never do, regardless of what you choose. There is no account, so we hold no profile of you. Your practices, customizations, and session history never leave your device except through your own iCloud or Google backup, or your own health app, if you switch those on — and in every one of those cases the data goes to Apple or Google, never to us. We don't sell your data. And there are no ads inside the app — we buy advertising elsewhere to tell people PanchPrana exists, but the app itself shows you none.

If you subscribe, payment is handled entirely by Apple or Google, and we never see your card details.

3. What the apps collect

If you agree on first launch — or later, from Settings > Share usage data — the app sends us:

• Usage events. Which kinds of sessions get started and finished, how far through you got, when a reminder is switched on, when the subscription screen is shown, and when a subscription or free trial starts. A subscription event records which plan and what it cost, in your own currency. These tell us which parts of the app are worth building on and where people get stuck.
• Crash and performance diagnostics. If the app crashes, we receive the technical details of the crash, the device model, and the OS version, so we can fix it.
• An advertising identifier — on Android only. Used solely to tell whether an advert we paid for led to an install or a subscription. The iOS app does not read Apple's advertising identifier at all: it doesn't ship the Firebase component that can reach it, which is why iOS never shows you an App Tracking Transparency prompt. Measurement of iOS adverts, when we run them, comes from Apple's own SKAdNetwork, which reports to us in aggregate and identifies nobody.

What the app never sends, whatever you choose:

• The content of your practice. Your custom practices, timings, favourites, and session history stay on your device. We can't read them.
• No name, email, or password — there is no account to create.
• No health data reaches us. The app can add a completed session to Apple Health or Health Connect if you switch that on, but that write stays on your device — we never receive it, and the app cannot read anything back. See section 6.
• No location data. We don't request location permission on either platform.
• Nothing is sent to any AI system, and no AI is trained on it. The app has no chatbot and no generative feature.
• We never sell or rent personal data to anyone.

The tools doing this are Google Analytics for Firebase and Firebase Crashlytics, both operated by Google as our processor. Usage events are recorded against a random identifier Firebase generates for your installation, not against you — a pseudonym rather than a name, and one that resets if you reinstall. We deliberately keep the events coarse: we record that a sleep session was completed, never anything describing why you might have chosen it.

4. What the website collects

Until you choose, panchprana.com sets no cookies and loads nothing from any other company — no analytics, no advertising, no fonts, no video. The banner you see on your first visit is the whole of it, and the choice you make is stored on your own device rather than in a cookie.

If you accept, we use:

• Google Analytics, to see which pages get read, which links get followed, and how people arrive. This runs under the Analytics category.
• Google Ads and Meta advertising tools, to measure whether the adverts we run bring anyone here, and to show adverts to people who have visited before. This runs under the Advertising category.

You can accept one and refuse the other, and you can change your mind at any time through Your privacy choices in the footer of every page. Withdrawing is exactly as easy as consenting.

Separately, and unavoidably, our hosting provider Cloudflare processes standard connection information such as your IP address and request timestamps, as any web server must in order to answer your request at all. We don't use it to build a profile of you.

5. Sync & backup

Each platform offers one optional route that lets your practice follow you to another device. Both carry the same things: your practices, customizations, favourites, and recent session history.

• On iPhone and iPad — Sync with iCloud. Off unless you turn it on. When it's on, that data is mirrored through your own Apple iCloud account, using Apple's iCloud key-value storage, so it follows you between your Apple devices. Apple's handling of it is governed by Apple's Privacy Policy.
• On Android — Google account backup. Android backs up app data automatically as part of your device's Google account backup, which is controlled from your device's system settings rather than from inside PanchPrana. Google's handling of it is governed by Google's Privacy Policy.

In both cases the data goes to Apple or Google, not to us. We operate no account system and no server that stores your practice data, and we cannot read what is synced or backed up. Deleting the app removes the local copy; the copy held in your own account can be removed through your device's iCloud storage settings or your Google account's backup settings.

6. Health app integration

PanchPrana can add your completed sessions to your phone's own health store — Apple Health on iPhone and iPad, Health Connect on Android. It is off until you turn it on, in Settings, and turning it on is what asks for the permission; the app never requests health access at launch or as part of anything else.

What gets written is one mindfulness session per completed practice, carrying a start time, an end time, and nothing else. It does not record which practice you did — not the technique, not the collection, not the category. A finished sleep session and a finished breathing session are indistinguishable in the record, which is the same line we hold everywhere else in this policy: we record that a session happened, never anything describing why you might have chosen it.

The app only ever writes. It asks for no permission to read your health data at all, and that is enforced by the platform rather than promised by us. On Android it requests the mindfulness write permission and no read permission, so a read would be refused by Health Connect; on iOS it ships no read usage description, so a read would fail outright. It cannot see your steps, your heart rate, your sleep, or anything else held there.

None of this reaches us. The entry goes into your own health store on your own device, where Apple's or Google's privacy policy governs it, and we operate no server that could receive it. Switching the setting off stops new entries; anything already written is yours, and you can delete it in the Health app or in Health Connect. On Android the option only appears where Health Connect is present and new enough to store a mindfulness session — on devices without it, there is nothing to switch on.

7. Subscriptions & payment

PanchPrana offers an optional Premium subscription, monthly or annual. All payment is processed entirely by the Apple App Store or Google Play — we never receive or store your card number or other payment details. Apple or Google shares limited transaction information with us (such as subscription status and a purchase receipt) so the app can unlock Premium content on your device. Review Apple's Privacy Policy or Google's Privacy Policy for how they handle payment data.

8. Guided audio streaming

The PanchPrana catalog — every technique, pose, practice, course, and Learn guide — ships inside the app itself, so browsing and self-guided practice work with no network connection at all.

The one exception is guided audio: the narrated breathwork, meditation, and sleep recordings are streamed on demand from content.panchprana.com, served by Cloudflare, so the app download stays small. Playing a session sends a request for that audio file, together with proof that your subscription entitles you to it. Those requests carry only standard network metadata (such as IP address and timestamp) — no account and no advertising identifier. We don't use them to build a profile or to track individual users, and they are not linked to the usage events described in section 3.

9. Cookies & similar technologies

Nothing in the two lower rows below exists on your device unless you have agreed to that category. Cookie names set by Google and Meta are theirs, and may change without notice on their side.

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal of the Advertising category and lock it off, whatever else you press. That is a real behaviour of this site, not a statement of intent.

10. Advertising, remarketing & attribution

We advertise PanchPrana on Google (including YouTube and Search) and on Meta's platforms (Instagram and Facebook). Two consequences follow, and we would rather state them plainly than bury them.

Remarketing. If you visit this website with the Advertising category enabled, Google and Meta may later show you a PanchPrana advert elsewhere. We never tell them anything about what you did in the app, and we don't build advertising audiences around health topics.

Attribution. When someone installs the app after clicking one of our adverts, the advertising platform tells us that an install happened and which campaign caused it. This is how we know whether the money was well spent. On Android it relies on the advertising identifier described in section 3; on iOS it relies on Apple's SKAdNetwork, which reports installs in aggregate and gives us no identifier at all.

You can limit or switch this off at several levels, independently of us:

• On this site — Your privacy choices, at any time.
• In the app — Settings > Share usage data.
• Across Google — Google Ads Settings, the Google Analytics opt-out add-on, and how Google uses data from sites that use its services.
• Across Meta — your Facebook ad preferences.
• Industry-wide — NAI, DAA, and Your Online Choices in Europe.
• On your phone — reset or delete the advertising identifier under Settings > Privacy > Ads on Android. There is nothing equivalent to switch off on iOS, because the app never reads Apple's advertising identifier in the first place.

11. Embedded content

Where we embed a video on this site, it is shown as a still image with a play button, and nothing is requested from YouTube until you press play. If you do, the video loads from youtube-nocookie.com, Google's privacy-enhanced embed host, and from that point Google may set its own cookies and receive your IP address under Google's Privacy Policy. Pressing play is your decision to allow that; not pressing it costs you nothing else on the page.

12. How we share data

We don't sell personal data. Data is shared with:

• Apple and Google, as your app stores and (for subscribers) payment processors.
• Apple or Google, if you use iCloud sync or Google account backup — that copy sits in your own account, not ours.
• Google (Analytics, Ads, and Tag Manager) and Meta, for the analytics and advertising measurement described above, and only where you have consented.
• Cloudflare, our hosting and content-delivery provider, which processes standard web traffic to stream guided audio and serve this website.
• Authorities, if required by law.
• A buyer, if PanchPrana is ever acquired or its assets are sold. The analytics described in section 3 and section 4 would transfer with the app, and the buyer would stay bound by this policy until you are told otherwise. There is no user database to go with it, because no account is ever created.

13. International data transfers

We operate from India. Cloudflare serves this website and streams guided audio from a globally distributed network, so your request is normally answered by a server near you rather than in one fixed country. Google and Meta process data on infrastructure in the United States and elsewhere.

Where data originates in the EEA or the UK, we rely on appropriate safeguards for the transfer: the European Commission's Standard Contractual Clauses, incorporated into Google's and Meta's data processing terms, and those companies' certifications under the EU–US Data Privacy Framework where applicable. We hold no database of users ourselves, because no account is ever created.

14. Legal bases for processing (EEA & UK)

If you are in the European Economic Area or the United Kingdom, the GDPR requires us to name a legal basis for each use of your personal data. Ours are:

• Analytics and advertising, in the app and on this site — your consent, which you give on first use and can withdraw at any time without penalty. Withdrawing doesn't affect anything already processed before you withdrew.
• Crash diagnostics — your consent, given alongside analytics.
• Support correspondence — our legitimate interest in answering the question you asked us, and, where your message concerns a subscription, performance of our contract with you.
• Standard technical data (IP address, timestamps, audio requests) — our legitimate interest in delivering the app reliably, keeping it secure, and preventing abuse.
• Subscription status received from Apple or Google — performance of our contract with you, so the app can unlock what you paid for.

We do not process special-category data, and we make no decisions about you by automated means that produce legal or similarly significant effects. Where advertising is concerned, note that in the EEA we and Meta Platforms Ireland act as joint controllers for the data collected by Meta's pixel on this website; Meta's responsibilities and the essence of that arrangement are described in Meta's own controller addendum. For everything else described here, Google and Meta act as our processors.

15. Data retention & deletion

Your practice data lives on your device, so deleting the app deletes it. If you use iCloud sync or Google account backup, that copy lives in your own Apple or Google account and can be removed there. There is no server-side account for us to delete, because none is ever created.

Analytics event data is retained for 14 months and then deleted automatically. Crash diagnostics are retained for up to 90 days. Advertising cookies expire as set out in section 9. Support emails are retained only as long as needed to resolve your inquiry, then deleted or archived.

16. Children's privacy

PanchPrana is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information (for example, via a support email), contact us and we'll delete it.

17. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you — for example under India's Digital Personal Data Protection Act, 2023, the GDPR, or other applicable law. Because we hold so little, and none of it identifies you by name, most requests can be resolved by emailing support@panchprana.com. We don't charge for this, and we'll respond within the period the applicable law requires.

If you are in the EEA or the UK, you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. Because analytics and advertising run on consent, the most direct way to exercise your rights over them is to withdraw it — in the app's Settings, or through Your privacy choices here. You also have the right to lodge a complaint with your local data protection supervisory authority. We would rather hear from you first, but that route is always open to you.

If you are in California, you have the rights to know, delete, and correct personal information, and to opt out of its sale or sharing. We do not sell personal information. However, using Google and Meta advertising tools on this website may constitute "sharing" for cross-context behavioural advertising as the CPRA defines it. You can opt out at any time through Your privacy choices, which is also our "Do Not Sell or Share My Personal Information" control — and if your browser sends a Global Privacy Control signal, we honour it automatically without your having to click anything. We will not discriminate against you for exercising any privacy right.

18. Security

Our website and content servers are served over HTTPS. The app holds no credentials and creates no account, and your practice data never leaves your device, which removes whole categories of risk rather than mitigating them. No method of transmission or storage is 100% secure, but we don't collect the kind of sensitive data that would make PanchPrana a high-value target.

19. Changes to this policy

This version is a significant change from the one before it. Previously PanchPrana used no analytics and no advertising tools at all, and the policy said so. We have started measuring how the app and site are used, and we advertise PanchPrana on Google and Meta, so this policy now describes that.

Two things about how we made that change. It applied only from the effective date of that revision — there was no earlier data to reinterpret, because none was collected. And nothing is switched on by an update: consent is asked for afresh, and if you don't give it, nothing is collected.

The August 19, 2026 revision adds one thing: section 6, describing the optional writing of completed sessions to Apple Health or Health Connect. That feature is off until you turn it on, sends nothing to us, and reads nothing from your health data — but the previous version of this policy said the app did not integrate with those services at all, which is no longer true, so the statement has been corrected rather than left to stand.

The August 21, 2026 revision adds one thing: a line in section 12 naming a buyer as a possible recipient, if PanchPrana is ever acquired or its assets are sold. Nothing about what is collected, who receives it today, or the legal basis for any of it has changed — the sharing list simply now accounts for the analytics, which would move with the app in a sale. If we make another material change, we'll update the effective date and ask again where consent is the basis.

20. Contact us

Questions about this policy or your data? Email support@panchprana.com.