a quiet privacy policy.
effective 18 july 2026
ZenFlow is a meditation timer made by DJUMP, MB in Klaipėda, Lithuania. It is built to collect only what it needs to run, to keep your practice yours, and to never sell your data. This document explains what the app collects, what the website collects, and how to remove any of it.
1. what the app collects
You can use the timer without signing in. If you create an account — with email, Google, or Apple — or use Premium, the app collects a small, specific set of data:
- Your email address, to create and secure your account.
- Your meditation sessions — length, the sound you chose, whether you finished, and the time — so your history, streak, and daily goal can follow you across devices.
- An account identifier and device identifier, including a push token if you turn on reminders, to keep you signed in and to send the notifications you ask for.
- Product interactions — which screens and features you use — as anonymised analytics that help us understand what to improve.
- Purchase history, if you subscribe, so the app knows your Premium status.
- Crash reports, to find and fix what breaks. These are not tied to your identity.
2. what the website collects
If you submit your email through the signup form on www.zenflow.day, we store the email address, a hashed representation of your IP, your user agent, and the time of submission — only to let you know when something is worth knowing. If you write through the contact form, your name, email, and message are sent to our inbox via Resend; no copy is kept on the website.
3. what we never collect
- Payment or card details. Purchases run entirely through Apple or Google.
- Your location, contacts, photos, calendar, or health records.
- Microphone audio. The app plays sound; it never records it.
- Advertising identifiers, ad SDKs, marketing trackers, or social-media pixels.
4. how we use what we have
- To run your account, sync your sessions, and keep you signed in.
- To send the reminders and release notes you opt into.
- To understand which features help, through aggregate analytics.
- To keep the app stable by diagnosing crashes.
We do not sell your data, and we do not use it to track you across other companies' apps or websites.
5. who processes it for us
We use a few trusted providers strictly as processors acting on our behalf. They may not use your data for their own purposes.
- Supabase (EU region) — accounts and meditation-session data, behind row-level security.
- RevenueCat — subscription status and purchase history.
- PostHog (EU region) — product analytics.
- Sentry — crash diagnostics, not linked to your identity.
- Apple App Store and Google Play — distribute the app and process purchases under their own terms.
- Vercel and Resend — host the website and deliver its email.
6. your rights
You can see what we hold, correct it, export it, or delete it. To remove your account and its data, use Profile → Settings → Delete Account in the app, or follow how to delete your account. You can also write to start@djump.io and we will reply within a reasonable time.
7. children
ZenFlow is made for adults with a meditation practice. It is not directed at children, and we do not knowingly collect data from anyone under 16.
8. retention
Account and session data are kept until you delete your account, after which they are removed from our active systems. Website signups are kept until you ask us to remove them. Contact messages live in the inbox only as long as needed to reply. Purchase records held by Apple, Google, and RevenueCat follow their own retention terms.
9. changes
If we change this policy in any material way, the effective date at the top of this page changes, and a short note goes out with the next email to subscribers.
10. contact
start@djump.io
DJUMP, MB · Klaipėda · Lithuania