Legal / Privacy
Privacy Policy
How we handle your data, in plain language.
This revision corrects the description of existing app features and data handling. It does not record new consent or change your previous acceptance. The 9 September 2026 version remains available for reference.
The short version
- Your reflections and check-ins are not published to other members. They are stored for your history, and your check-in result is used to recommend sessions. Service providers process data to operate these features.
- We do not record co-regulation calls. Voice reflections you choose to record are a separate feature and are stored so you can play them back.
- We collect the minimum needed to run Attuned, we never sell data, and we show no ads.
- You can view your check-ins and reflections in the app and request account deletion in Settings. To request a copy of your data or exercise other privacy rights, contact support@attuned.world.
- Access to stored data is restricted through authentication and service access controls. Support, safety investigations and legal obligations may require authorised access.
1. Who we are
Attuned is operated by Attuned UG (haftungsbeschränkt), registered at c/o The Delta Campus, Donaustraße 44, 12043 Berlin, Germany (Amtsgericht Charlottenburg, HRB 286249 B) ("we"). We are the data controller. Contact: support@attuned.world.
2. What we collect and why
| Data | What it includes | Why | Legal basis |
|---|---|---|---|
| Account | First name, email address and authentication/provider identifiers used to create and secure your account | Creating and securing your account | Contract (Art. 6(1)(b)) |
| Check-in states | Your nervous system state entries, linked to your account identifier | Showing your check-in history and using your check-in result to recommend sessions | Explicit consent (Art. 9(2)(a)) |
| Reflections | Voice notes, text notes and diary entries you choose to record | Stored so you can revisit your private reflections, including playback of voice notes | Explicit consent (Art. 9(2)(a)) |
| Session data | Which self-regulation sessions you play; co-regulation request and session metadata (time, duration, who matched; never content) | Operating the service, matching you with an Anchor, safety | Contract; legitimate interests (safety) |
| Safety reports | Reports you file or that are filed about a session you were in | Investigating and acting on safety concerns | Legitimate interests (safety); legal obligation where applicable |
| Device & diagnostics | Device and installation identifiers, notification tokens, app/OS details, update and crash diagnostics, and call-quality, connection and security metadata | Keeping the app working | Legitimate interests |
| Usage analytics | First-party app and session events, including requests, starts, completions, cancellations, durations and errors. These records may include your account identifier, role and first name | Operating and troubleshooting the app and evaluating how its features are used | Consent |
During onboarding, the app asks you to tick a checkbox agreeing to the Terms and Privacy Policy and consenting to data processing in accordance with this policy. This is one combined choice; the current app does not offer a separate wellbeing-data or usage-analytics toggle. You can request withdrawal of consent, restriction or deletion by contacting support@attuned.world. Settings provides account deletion, not a separate consent-withdrawal switch. You may stop using the app or stop creating new check-ins and reflections while a request is being handled. Withdrawal does not affect processing that was lawful before withdrawal.
3. How we use and protect private content
- No advertising, no ad SDKs, no sale or rental of your data, ever.
- Your check-in result is used to recommend sessions to you. First-party usage records can be linked to your account, as described above; they are not limited to anonymous aggregate counts.
- We do not record co-regulation calls. Audio and video are transmitted in real time through Daily.co; call-quality and connection metadata are separate from call media.
- Your reflections are not a public feed. Authentication and service access controls restrict access to stored data; authorised support, safety or legal handling may involve access to relevant records.
4. Who helps us run Attuned
We use service providers to operate the app:
- Google Firebase for authentication, database, recording storage and backend services.
- Daily.co for live co-regulation calls and call-quality diagnostics. We do not enable recording of call media.
- Expo for app updates, update/crash diagnostics and notification delivery.
- Apple Push Notification service for notifications on iPhone.
- Resend for safety and support emails.
Processing locations depend on the service and configuration and may include locations outside the EU/EEA. International transfers remain subject to applicable data-protection requirements. Contact support@attuned.world for information about the safeguards applicable to your data.
5. How long we keep things
Retention depends on the purpose of the record, whether your account is active, and any safety or legal need to retain it. Personal data should not be kept longer than needed for those purposes. The current account-deletion process works as follows:
| Data | Deletion handling |
|---|---|
| Account, check-ins, reflections, recordings and account-linked usage records | Request account deletion in Settings. Your account is locked immediately and deletion is scheduled after 30 days. The backend processes deletion of account records, owned recordings and account-linked usage events; processing can require retries. |
| Co-regulation session metadata | During account deletion, your participant identifier is replaced and identifying fields are removed from retained shared session records. Shared records may remain for the other participant or safety handling. |
| Safety reports | Account deletion replaces the reporter identifier and removes the reporter's note from the app's stored report. Remaining safety records and emails require separate handling where they are still needed for safety or legal purposes. |
| In-app consent records | Included in the account-deletion process. |
| Backups and service-provider records | These follow separate retention and deletion processes. Removal from active account storage is not confirmation that every backup or provider copy has already been erased. |
There is no self-service cancellation of an account-deletion request. This policy does not promise automatic deletion of all session metadata at 90 days, all safety records at 12 months, or all backups at 35 days. Contact support@attuned.world for the status of a deletion request or the retention criteria applicable to a record.
6. Your rights
You can: access and export your data (contact support@attuned.world for a copy); correct it; request deletion of individual items or your whole account (request account deletion in Settings; the account is locked immediately and deletion is scheduled after 30 days); withdraw consent at any time by contacting us; object to or restrict processing; and complain to a supervisory authority. Our lead authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin, Germany); you may also complain to your local authority. We respond to requests within one month.
7. Age
Attuned is for adults. You must be 18 or older to use it. We do not knowingly process children's data; if we learn an account belongs to someone under 18 we will delete it.
8. Security
Data is encrypted in transit and at rest. Your account identifier links stored check-ins, reflections and session history to your account. Authentication and service access controls restrict access. We will notify you and the supervisory authority of any breach as the GDPR requires.
9. Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect and ask for fresh consent where the law requires it. Publishing this correction does not itself obtain fresh consent or extend a previous acceptance to new purposes. Version 1.1, 24 September 2026.
Attuned is a wellbeing tool. It is not therapy, medical care, or a crisis service, and it does not diagnose or treat any condition. Attuned supports moments of calm and regulation; it is not a substitute for professional care. If you are struggling, please speak to a doctor or mental health professional. In an emergency, call 112.
← Back to attuned.world