Privacy Policy

Effective 2 September 2026

Everything stays on your device. Shoshin has no accounts, no analytics, no tracking, no ads — and no servers of ours that your data could travel to.

Who we are

Shoshin is made by Nuancebit GmbH, Brahmsstraße 4, 37085 Göttingen, Germany (Amtsgericht Göttingen, HRB 207939; VAT ID DE458081235), represented by its managing director Cornelius Brosche. For anything in this policy, write to info@nuancebit.com.

The short version

• We collect nothing. The app sends no data to us — we don't operate servers for it.
• Your sits, your vow, your notes, and every sensor reading are stored only on your iPhone, protected with iOS file encryption.
• Deleting the app deletes everything. There is no copy anywhere else.

What the app touches on your device

Breath sensing (motion). During a sit, with your consent, the iPhone's motion sensors feel the slow rise and fall of your breath. The signal is processed live on the device; only quiet summaries (like your breaths per minute over a sit) are kept in your local history.

Heart rate (HealthKit). If you sit with an Apple Watch, the app reads your heart rate during the session to reflect it back to you afterwards, and — if you allow it — writes your sits to Apple Health as Mindful Minutes. Health data is read and written only on-device through Apple's HealthKit. We never receive it, and we never use it for anything besides showing it to you. Health data is never used for advertising or shared with anyone.

Session history. Your practice history lives in a local database on your iPhone, protected with complete file protection (encrypted whenever the device is locked). It is not synced to any cloud by the app.

Purchases. The one-time unlock is processed entirely by Apple. We receive no payment details and no identity — the app only learns from Apple that the purchase exists.

What we don't do

• No user accounts, no sign-in.
• No analytics or telemetry SDKs — first- or third-party.
• No advertising, no tracking, no fingerprinting.
• No selling or sharing of data — there is nothing to sell.

Deleting your data

You can delete your practice history inside the app at any time, and revoke Health access in the iOS Settings and Health apps. Deleting Shoshin from your device removes everything the app ever stored. Mindful Minutes you chose to save to Apple Health remain under your control in the Health app.

Your rights

Under the GDPR and similar laws you have rights of access, correction, deletion, and portability. Because we hold no personal data about you on any system of ours, there is nothing we could hand over, correct, or delete on our side — your data is already exclusively in your hands. If you have any question or complaint, contact us at the address above; you also have the right to complain to your data protection authority.

This website

This site is static: no cookies, no analytics, no third-party fonts or scripts. It is served by Cloudflare, Inc. (San Francisco, USA), which processes your IP address and request metadata for the moment it takes to deliver the page and to defend against abuse — our legitimate interest under Art. 6(1)(f) GDPR. Cloudflare acts as our processor under its Data Processing Addendum with the EU Standard Contractual Clauses; we have not enabled any Cloudflare analytics or script-injecting features. We keep no server logs of our own.

Children

Shoshin is not directed at children and collects no data from anyone, including children.

Changes

If we ever change how Shoshin handles data, we will update this policy and its effective date before the change ships. The promise this app is built on — your practice stays yours — is not going to change.