Privacy

Last updated 20 September 2026.

Wind Down Daily is operated by CARDIGITAL - FZCO, Dubai, United Arab Emirates (“we”). This page says what we collect, why, where it sits, and how to get rid of it. It is written to be read, not to be skipped.

What we collect

• Your email address. So you can sign in on a new phone without losing your progress. We sign you in with a code sent to that address. We do not store a password because there is not one.
• Three numbers an evening, if you turn them on. How you slept, how tight you feel, how much energy you have, each on a scale of one to five. This is what picks that same evening’s practice. Nothing else about your day is collected, and if you leave them off we do not store them at all.
• Your first name, if you give one, your time zone, and which of the two voices you chose.
• Which practices you started and finished, and when.
• A push notification token, if you turn reminders on, and the reminder time you chose.
• Crash and performance data, through the stores. We do not put any analytics or crash reporting into the app ourselves. Apple and Google collect this from your device under their own rules and show it to us in aggregate: app version, operating system version, device model, approximate region, and what the app was doing when it stopped.
• Whether you have an active subscription. Apple and Google handle the payment. We never see your card. We only receive a yes or no on whether the purchase is active, through RevenueCat.

What we do not collect

No diagnosis, no medication, no medical history, no free-text notes, no voice recordings, no contacts, no precise location, no advertising identifier used to build a profile of you. We do not ask, and there is nowhere in the app to enter it.

Sensitive data and your consent

The three daily numbers are about how you feel. Under European and UK data protection law that can count as data concerning health, which needs your explicit consent. So the app asks for it plainly, in its own step, before you log anything. Saying no is a real option on that screen. The app still works, you get the same practices in a fixed order instead of one picked for your evening, and nothing about how you feel is stored. You can turn it on later, or withdraw it later, in Settings. Withdrawing deletes the numbers you have logged and leaves your account alone.

Why we are allowed to hold it

• To run the thing you signed up for (performance of a contract): your email, your subscription status, which practices you did.
• Your explicit consent: the three numbers an evening, if you turned them on.
• Your consent, separately: push notifications.
• Our legitimate interest in the app not crashing: the aggregate crash and performance data the stores show us.

Where it is stored and who else touches it

• Supabase (database, sign-in, and the email carrying your sign-in code), on servers in the European Union, Frankfurt region.
• RevenueCat (subscription status only).
• Apple and Google (the payment itself, and push delivery). We never receive your payment details from them.

That is the whole list. We do not sell data, we do not share it with advertisers, and we do not run third-party advertising inside the app.

How long we keep it

While your account exists. When you delete it from Settings, your three numbers and your practice history are deleted straight away, in that moment, not queued for later. The account record itself is marked deleted at once and removed from live systems within thirty days, and from backups within a further ninety. Anonymous, aggregate counts that cannot be traced back to you may be kept.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, withdraw consent, or object to what we are doing with it. Write to privacy@winddowndaily.com and we will answer within thirty days. The fastest route to deletion is this page or Settings inside the app, which does it without waiting for us.

If you are in the European Union or the United Kingdom and you think we have handled your data badly, you can complain to your national data protection authority.

Children

Wind Down Daily is for adults. It is not intended for anyone under 16, we do not knowingly collect data from anyone under 16, and if we learn that we have, we delete it.

Changes

If we change this page in a way that matters, we will say so in the app before the change takes effect, and the date at the top will move.