Privacy Policy

Effective 2 September 2026

Everything stays on your device. Shoshin has no accounts, no analytics, no tracking, no ads — and no servers of ours that your data could travel to.

Who we are

Shoshin is made by Nuancebit GmbH, Brahmsstraße 4, 37085 Göttingen, Germany (Amtsgericht Göttingen, HRB 207939; VAT ID DE458081235), represented by its managing director Cornelius Brosche. For anything in this policy, write to info@nuancebit.com.

The short version

• We collect nothing. The app sends no data to us — we don't operate servers for it.
• Your sits, your vow, your notes, and every sensor reading are stored only on your device, protected with your operating system's file encryption.
• Deleting the app deletes everything. There is no copy anywhere else.

What the app touches on your device

Breath sensing (motion). During a sit, with your consent, the iPhone's motion sensors feel the slow rise and fall of your breath. The signal is processed live on the device; only quiet summaries (like your breaths per minute over a sit) are kept in your local history.

Heart rate (HealthKit). If you sit with an Apple Watch, the app reads your heart rate during the session to reflect it back to you afterwards, and — if you allow it — writes your sits to Apple Health as Mindful Minutes. Health data is read and written only on-device through Apple's HealthKit. We never receive it, and we never use it for anything besides showing it to you. Health data is never used for advertising or shared with anyone.

Session history. Your practice history lives in a local database on your iPhone, protected with complete file protection (encrypted whenever the device is locked). It is not synced to any cloud by the app.

Purchases. The one-time unlock is processed entirely by Apple. We receive no payment details and no identity — the app only learns from Apple that the purchase exists.

Android / Google Play

Everything above applies to the iPhone and Apple Watch app. The Android and Wear OS app works the same way, with these platform differences:

No cloud backup. Android's automatic backup is switched off for Shoshin, and everything the app stores is excluded from Android's cloud-backup and device-transfer rules. Nothing about your Shoshin install is ever copied to Google Drive or carried to a new device automatically — only your own device holds it.

Permissions, and why. Shoshin asks Android for a small set of permissions, each for one opt-in purpose. Notifications are requested only if you turn on the optional "Show your sit on the lock screen" setting, so a sit already in progress can appear there as a live update — Shoshin never asks for notifications otherwise, and never sends one to bring you back to the app. Motion sensors are read on-device to sense the rise and fall of your breath during a sit you start; without them, or if you decline, Shoshin offers "Sit without sensing" instead. Vibration plays the optional breath haptics you can turn on for a sit. A foreground service keeps a sit you started running — the guide voice, the sound, and the sensing — while your screen is off or you switch to another app; it starts only when you begin a sit and ends when the sit ends or you stop it.

Health Connect. If you allow it, Shoshin writes each sit of a minute or more to Health Connect as a mindfulness session — when it started, when it ended, and whether it was guided or silent. Shoshin only writes: it never reads anything from Health Connect. The data stays on your device, is never sent to us or anyone else, and is never used for advertising. In line with Health Connect's Limited Use requirements, this data is never sold, never transferred to any third party, never used to serve ads, and no one at Nuancebit reads it — it stays in Health Connect, on your device, under your control. You can turn this off, or delete these sessions, at any time in Health Connect. Deleting Shoshin removes everything the app stored; sessions you saved to Health Connect stay there, under your control.

Wear OS heart rate. If you sit with a Wear OS watch, your heart rate is read on the watch and relayed to the phone for display only — it stays between your watch and your phone, is never sent to us, and is never used for advertising.

Google Play Billing. Purchases on Android are processed entirely by Google. We receive no payment details and no identity — the app only learns from Google that the purchase exists. Separately, Google Play's own billing component sends diagnostic data to Google as part of processing a purchase (this is Google's billing infrastructure, not something Shoshin adds). Shoshin itself sends nothing beyond that.

No advertising ID, no analytics. Shoshin does not use the Android Advertising ID, and includes no analytics or advertising SDK of any kind, on Android or iOS.

What we don't do

• No user accounts, no sign-in.
• No analytics or telemetry SDKs — first- or third-party.
• No advertising, no tracking, no fingerprinting.
• No selling or sharing of data — there is nothing to sell.

Deleting your data

You can delete your practice history inside the app at any time, with Settings › Delete everything. Uninstalling Shoshin — on iPhone or on Android — removes everything the app itself ever stored; there is no copy anywhere else to also delete. On iPhone, revoke Health access in the iOS Settings and Health apps; Mindful Minutes you chose to save remain under your control in the Health app. On Android, turn off or delete sessions in Health Connect at any time; entries you saved there remain under your control, even after you delete Shoshin.

Your rights

Under the GDPR and similar laws you have rights of access, correction, deletion, and portability. Because we hold no personal data about you on any system of ours, there is nothing we could hand over, correct, or delete on our side — your data is already exclusively in your hands. If you have any question or complaint, contact us at the address above; you also have the right to complain to your data protection authority.

This website

This site is static: no cookies, no analytics, no third-party fonts or scripts. It is served by Cloudflare, Inc. (San Francisco, USA), which processes your IP address and request metadata for the moment it takes to deliver the page and to defend against abuse — our legitimate interest under Art. 6(1)(f) GDPR. Cloudflare acts as our processor under its Data Processing Addendum with the EU Standard Contractual Clauses; we have not enabled any Cloudflare analytics or script-injecting features. We keep no server logs of our own.

Children

Shoshin is not directed at children and collects no data from anyone, including children.

Changes

If we ever change how Shoshin handles data, we will update this policy and its effective date before the change ships. The promise this app is built on — your practice stays yours — is not going to change.