The app
BreathKit: Box Breathing is made by SGWNI. It doesn't ask for your name, email address or an account. It doesn't show ads and doesn't track you across other apps or websites.
What stays on your devices and in your iCloud
Your sessions (the date, length, pattern, cycles, your mood check-in and, from Apple Watch, the start and end heart rate) and your custom patterns are stored on your device. If iCloud is on, they sync through Apple's private CloudKit database under your Apple ID, so your iPhone and Apple Watch see the same history. Streaks are worked out from those sessions. Settings, reminder times and your onboarding answers stay on the device and don't sync. Your iPhone sends your patterns and Premium status to your paired Apple Watch directly. SGWNI can't read any of this. Apple's privacy policy covers iCloud.
Apple Health
If you allow it, BreathKit writes each completed session to Apple Health as a mindful minute. The Apple Watch app reads your heart rate during a session to show the start and end values in the summary. Those two values are stored with the session and sync through your private iCloud. To read heart rate, the Watch app runs a mind and body workout while you breathe, which is why it asks to save workouts; the workout is discarded when the session ends and isn't saved to Health. The iPhone app writes mindful minutes and reads nothing from Health. Health data isn't sent anywhere else, isn't used for advertising and isn't sold. You can change or revoke access in the Health app under Sharing. Apple's Health privacy policy covers Health itself.
Reminders
Daily reminders and the streak reminder are local notifications, scheduled on your device. No server sends them and they don't use a push service. You can turn them off in the app or in iOS Settings, Notifications.
Purchases
Apple handles payment. BreathKit uses RevenueCat to check purchases, restore them and keep Premium access in sync. RevenueCat receives a random app user ID generated by its SDK, your App Store transactions and, like any server the app talks to, your device's IP address and basic device details. It doesn't receive your name or email from BreathKit. RevenueCat's privacy policy explains what it keeps and for how long.
Usage signals
BreathKit sends usage signals through TelemetryDeck so SGWNI can see which parts of the app are used and where people get stuck. Each signal carries a hashed device identifier, not your name, together with the app version, iOS version, device model and language. The signals record:
- opening the app, and starting, completing or discarding a session, with the pattern (custom patterns are sent as "custom", never by name), its length and the number of cycles;
- the mood you choose after a session, as a number from 1 to 5, your streak length and streak freezes used;
- the answers you pick during onboarding (what you want help with, such as sleep or stress, and when you'd like to breathe) and the reminder times you set;
- changes to settings such as sounds and reminders, Home Screen widgets added, and whether Apple Health access was granted (never any Health data; on Apple Watch, only whether heart rate was measured, not the readings);
- the Premium screen: shown or closed, the plan chosen, and a purchase started, completed, canceled or restored, with the product.
The signals contain no name, email address, Apple ID or free text, and they aren't used for advertising or sold. TelemetryDeck's privacy policy explains its handling and retention.
This website
squarebreathing.app is a static site served by Cloudflare. There is no account and no newsletter.
Cloudflare Web Analytics
The site uses Cloudflare Web Analytics to count page views. It uses no cookies and doesn't fingerprint you or track you across sites. Cloudflare's privacy policy covers the data it processes.
The tool counter
The site sends one anonymous count when you start a timer, finish a session, change a setting, copy a link, install the site as an app or tap an App Store link. The count holds the event name, the page path and a short label such as the pattern, the shape, the session length, whether you stopped a session yourself, or whether a setting was turned on or off. It holds no cookie, IP address, user agent or text you typed. It is skipped when your browser sends Do Not Track or Global Privacy Control. Cloudflare keeps the counts in Workers Analytics Engine; we read them only as totals. Cloudflare’s rate limiting uses your IP address briefly at the edge to block abuse; we don’t store it. There is no cross-site tracking and no profile of you.
Settings in your browser
The timer remembers your session length, shape, cues and custom pattern, and the site remembers whether you chose light or dark, in your browser's local storage. To work offline, the site also keeps a copy of its own pages and files in your browser's cache. None of this is sent anywhere. Clearing site data removes it.
If you email hello@squarebreathing.app, we see your address and whatever you write. We keep it only to answer you.
Children
The app and this site aren't directed at children under 13. The website has a guide for adults teaching breathing to children; it doesn't collect anything from a child.
Changes
If this policy changes, the date at the top changes too. Material changes to what the app sends will be described here before we release a version that makes them.
Contact
Questions about privacy: hello@squarebreathing.app. SGWNI, the studio that makes BreathKit, is at www.sgwni.com.