Privacy Policy

Who we are

Vayulume is run by The Third High Experience in India. We decide how your personal data is used (under India's Digital Personal Data Protection Act, 2023, we are the "data fiduciary"). This policy covers the Vayulume website at vayulume.com and the Vayulume apps for iPhone and Android.

What stays on your device

Vayulume works without an account. Without one, everything stays on your device:

• your practices, streak, Breath Score and other progress;
• your sound, voice, vibration and reminder settings;
• your health check and personal-care answers. These stay on each device even when you have an account, and are never sent to us.

You can download this data from Profile → Export my progress and erase it with Profile → Reset all practice data.

If you create an account

An account is optional. It saves your progress so you see the same practice on every device, and it is needed for Vayulume Ultra. When you sign in, we store:

• Your email address. If you sign in with Google or Apple, we also receive the basic profile they share, such as your name and profile picture.
• Your welcome answers: your goals, experience, usual practice time, the day you started, any studio or coach code, how you found Vayulume, and which kinds of device you use.
• Each practice: which practice, how long, the time of day, whether you finished it, and the tension or feeling rating you chose before and after, if you chose one.
• Your progress: streak, challenge level, experience points, Breath Score, lessons read and milestones, plus the saved state your other devices restore from.
• Each Third High Experience you start.
• Whether you want invitations from us, and when you said so. The box is unticked unless you tick it.

Tension and feeling ratings are your own notes on how you feel. They are not medical measurements, and Vayulume is not a medical service.

How we learn what works (analytics)

We use PostHog to understand how Vayulume is used and to find errors. It records events such as finishing the welcome, starting, finishing or ending a practice early (with the practice, its length and where you started it), sharing a result, and buying or restoring Ultra. It also records the pages and buttons you use, errors, your browser or device type, and an approximate location worked out from your IP address. It may occasionally show a short optional survey.

PostHog stores an identifier in your browser or app to recognise repeat visits. If you are signed in, these events are linked to your account and email address. This data is stored in the European Union and reaches PostHog through vayulume.com. We use it only to improve Vayulume, never for advertising. To have your analytics data deleted, write to us.

Purchases

Vayulume Ultra is bought through the App Store or Google Play. Apple or Google takes the payment; we never see your card details. RevenueCat manages subscriptions for us and links your subscription to your account, so Ultra opens on every device where you sign in. We receive each purchase event: the plan, the store, the price and currency, trial or renewal status, and dates.

Email

We email you a sign-in link and code when you ask for one. We send invitations or news only if you ticked the invitations box, and you can turn that off at any time in Profile.

Studio and coach codes

If you join with a studio or coach code, we use it to count how many people each studio or coach brings to Vayulume. Your coach or studio never sees your practice.

Who processes your data for us

These services handle your data only to provide their service to us. Some of them are outside India, so your data may be processed in those countries.

Keeping your data safe

All connections are encrypted. In our database, each signed-in person can read and change only their own rows; visitors without an account can read nothing.

How long we keep it

We keep your account data, including the purchase events linked to it, until you delete your account. Apple, Google and RevenueCat keep their own records of your purchases under their own policies. We delete analytics data when you ask us to, or once we no longer need it.

Deleting your account

In the app, sign in and open Profile → Delete account. This deletes your account and all of its data: profile, practices, progress, Third High Experience history, Ultra status and purchase events. Practice saved on a device stays there until you reset it in Profile. Deleting your account does not cancel a subscription; cancel it in your App Store or Google Play account.

If you cannot open the app, email work.thirdhigh@gmail.com from the address you sign in with, and we will delete your account and its data.

Your rights

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete it;
• delete it;
• stop sending you invitations, or withdraw any consent you gave;
• let someone you nominate act for you if you die or cannot act yourself.

Write to us and we will reply as soon as we can, and within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India. If you live in the European Union or the United Kingdom, you have the same rights under the GDPR, including the right to receive your data in a portable format, and you can complain to your local data protection authority.

Children

Vayulume is for adults aged 18 and over. We do not knowingly collect data from children. If you think a child has created an account, write to us and we will delete it.

Changes to this policy

If we change how we use your data, we will update this page and its date. For important changes, we will also tell you in the app before they take effect.

Contact

The Third High Experience, India
Email: work.thirdhigh@gmail.com
This address is also our grievance contact under India's Digital Personal Data Protection Act.