Privacy Policy

Effective Date: October 1, 2025 | Last Updated: July 30, 2026

Oshn Meditation ("we," "our," or "us"), a service provided by Ilia Ilinskii PR Novi Sad (Mite Ruzica 3, Novi Sad, Serbia), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered meditation mobile application, our websites, and related services (the "Service").

If you are a resident of Washington or Nevada (USA), our separate Consumer Health Data Privacy Policy also applies to your health data.

1. Information We Collect

1.1 Account Information

Email address and display name when you create an account
Authentication data when you sign in with email or Sign in with Apple
Contact information if you reach out for support or feedback

1.2 Profile and Preferences

Age, gender, language, occupation, and meditation experience level you voluntarily provide
Meditation goals, stress triggers, preferred meditation time and duration
Voice, speech-speed, and background-music preferences
Time zone and locale (used for scheduling and localization)

1.3 Emotional and Wellness Input

Meditation requests: your descriptions of feelings, mood states, and concerns shared to generate a meditation
Mood check-ins: mood type, intensity, context, triggers, and any notes you choose to record
Oshn chat: your conversation with the in-app AI assistant. We store your chat history and a compact "memory" of recurring themes and preferences so the assistant can support you across days. You can ask us to delete this at any time (see Section 7)

1.4 Apple Health Data (optional, with your explicit permission)

If you choose to connect Apple Health, and only for the categories you approve in the iOS permission dialog, we access:

Data we read: steps, exercise minutes, active energy, stand hours, sleep duration, mindful minutes, and State of Mind (mood) entries
Data we write: your completed meditations as Mindful Minutes, and your mood check-ins as State of Mind entries
A small daily summary of these readings (for example, "slept 6.2 hours, 4,000 steps") is sent to our servers solely to personalize the tone, pacing, and content of your meditations

Apple Health data is special. We apply strict limits to it:

It is used only to personalize your meditations and show your own progress — never for advertising, marketing, or any form of use-based data mining
It is never sold, and never shared with third parties for their own purposes
We do not share your raw health measurements with AI providers; the AI receives only derived guidance (such as "use a slower pace tonight") without the underlying health values
It is stored on our servers for a maximum of 30 days, after which it is automatically deleted
We do not store your health information in iCloud
You can disconnect Apple Health at any time in the app or in iOS Settings, and you can erase the server-side copy instantly from the app (Settings → Health), independent of deleting your account

1.5 Technical and Usage Information

Device information: device model, operating system version, and app version
Usage analytics: first-party events such as screens viewed, features used, meditation playback progress, errors, and crashes. This is our own analytics system, on our own servers — the detail of how you use the app is not shared with anyone
Advertising measurement: the app also includes Google Analytics for Firebase, used for one narrow purpose — telling us whether our own ads work. Exactly three events reach Google (you created an account, you started a trial, you subscribed, the last one with the amount), plus the first launch, which Google's SDK records itself. Your meditations, chats, moods and health data never go there. We do not read your device's advertising identifier for this, and the app shows no tracking prompt: matching an install to a campaign happens on your device, not on Google's servers
IP address: used for security, service quality, and to derive your country (for localization and regional compliance). We do not collect precise location
Identifiers: an internal user ID; your device's vendor identifier (IDFV); and — only if you allow tracking in the App Tracking Transparency prompt — the advertising identifier (IDFA), which we use solely to measure the effectiveness of our own marketing campaigns
Install attribution: if you install the app after seeing one of our ads on the App Store, Apple gives us the campaign, ad group, keyword, and creative identifiers for that install through its AdServices framework. No advertising identifier is involved and nothing is linked to your activity in other companies' apps or websites — Apple can attribute the install itself because both the ad and the download happen inside the App Store. We store these identifiers with your account solely to measure how well our own advertising works. Campaign parameters (UTM tags) are also recorded if you reach us through one of our own links
Push notification token, if you enable notifications. Notifications are optional and the Service works without them

1.6 Audio Data

Generated audio: AI-synthesized meditation audio files created for your sessions
No voice recording: we do not record, access, or store your voice or microphone audio in any form

1.7 Website Data

If you contact us or subscribe on our websites, we collect the details you submit (such as name and email)
Our website uses Google Analytics to understand aggregate site traffic

2. How We Use Your Information

2.1 Service Provision

Generate personalized meditation content based on your emotional state, preferences, and (if connected) Apple Health context
Create AI-synthesized audio narration for your meditation sessions
Operate the Oshn chat assistant and remember context you have shared with it
Track your meditation progress, streaks, and mood trends and show them back to you
Validate your subscription and provide premium features

2.2 Service Improvement

Analyze aggregated usage patterns to improve the app and personalization quality
Debug technical issues and improve performance and reliability
Measure how well our own advertising works — which campaign brought people to the app, and whether they found it useful — using the install attribution described in Section 1.5. We do not use your data to target you with ads, in this app or anywhere else

2.3 Communication

Send sign-in codes, service updates, and security notifications by email
Respond to your support requests
Send optional meditation reminders and encouragement via push notifications (only if you enable them)

3. AI Processing (Important)

Oshn is an AI-powered service. To provide it, some of your data is processed by third-party AI providers acting on our behalf:

OpenAI (USA): processes your meditation requests, your chat messages, and a short personalization context (such as your first name, goals, and recent moods) to generate meditation scripts and chat responses
ElevenLabs (USA): processes the generated meditation script text to synthesize the voice audio. Your own voice is never sent — the app has no microphone input

These providers process data under data processing agreements, are contractually bound to protect it, and do not use your data to train their models. Your raw Apple Health measurements are never shared with them (see Section 1.4).

The Oshn chat assistant and meditation narration are generated by artificial intelligence, not by a human.

4. Information Sharing and Disclosure

We do not sell your personal information, and we do not share it with anyone for advertising. We share information only with service providers that help us operate the Service, under contracts requiring the same or equal protection of your data as described in this policy:

AI providers: OpenAI and ElevenLabs (see Section 3)
Infrastructure: Supabase (authentication and database hosting) and DigitalOcean (secure storage and delivery of generated audio files)
Apple: subscription purchases and validation (App Store), and delivery of push notifications. We never see your payment card details — payments are handled entirely by Apple
Google: advertising measurement only, through Google Analytics for Firebase — the three conversion events described in Section 1.5, so we can tell which of our ads brought people to the app. Google does not receive your meditations, chats, moods or health data, and we do not use any of it to target ads at you
Email delivery: Resend, to send sign-in codes and service emails
IP-based country lookup: a geolocation service receives your IP address to determine your country (not your precise location)

We may also disclose information if required by law, to protect our rights or the safety of our users, or as part of a merger or acquisition (in which case this policy's protections continue to apply). We may share aggregated, non-personally identifiable statistics (for example, "average session length") publicly or with partners.

5. Data Security

All data transmission uses TLS encryption
Access to production data is restricted and authenticated
We collect only the information necessary to provide the Service, and apply shorter retention to the most sensitive data (health context: 30 days)

6. Data Retention

Apple Health context: maximum 30 days on our servers, then automatically deleted
Account, profile, meditation history, mood logs, and chat history: retained while your account is active
Analytics events: retained while your account is active, then deleted with the account
Generated audio files: stored temporarily for playback and cleaned up automatically
Account deletion: when you delete your account (Section 7), your data is removed from our production systems immediately; residual copies in encrypted backups are purged within 30 days. Some minimal records may be retained longer where the law requires (for example, transaction records for tax purposes)

7. Your Rights and Choices

7.1 Controls Built Into the App

Delete your account and all associated data: Settings → Security → Delete Account. Deletion is immediate and does not require contacting us. Note: deleting your account does not cancel an active Apple subscription — manage subscriptions in your Apple ID settings (apps.apple.com/account/subscriptions)
Disconnect Apple Health and wipe the server-side health context: Settings → Health
Turn off push notifications: Settings, or iOS notification settings
Withdraw tracking permission (IDFA): iOS Settings → Privacy → Tracking

7.2 EU/EEA and UK Residents (GDPR)

We process your data on these legal bases: performance of our contract with you (providing the Service), your consent (Apple Health data, mood and emotional input, optional notifications, tracking), and our legitimate interests (security, service improvement). Health and mood data are treated as special-category data and are processed only with your explicit consent, which you can withdraw at any time as easily as you gave it (Section 7.1).

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact us at privacy@oshn-ai.com. We respond within one month.

7.3 California Residents (CCPA/CPRA)

You have the right to know, correct, and delete the personal information we hold about you, and the right to limit the use of sensitive personal information. We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use sensitive personal information for purposes beyond providing the Service you requested. We will not discriminate against you for exercising your rights.

7.4 Washington and Nevada Residents

Your consumer health data is additionally covered by our Consumer Health Data Privacy Policy.

8. International Data Transfers

We are based in Serbia and use service providers in the United States and the European Union. Where personal data is transferred internationally, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission and equivalent mechanisms.

9. Children's Privacy

Our Service is intended for users aged 13 and older. Users aged 13–17 need the consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13; if you believe we have, contact us and we will delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy here with a new "Last Updated" date, and for material changes we will notify you in the app or by email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

Email: privacy@oshn-ai.com (or support@oshn-ai.com)
Controller: Ilia Ilinskii PR Novi Sad, Mite Ruzica 3, Novi Sad, Serbia
We respond to privacy requests within 30 days