Stressless logo

Privacy Policy

Effective date: July 22, 2026

This Privacy Policy explains how StressLess: relax&rhythm (the “App”) and RelaxRhythm Innovations sp. z o.o. (the “Company”, “we”, “us”, “our”) process personal data of users in compliance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable laws.

1. Data Controller and Contact

2. Data We Collect

2.1. Data Provided by You

  • First and last name (used as your username in the App).
  • Email address and password.
  • One-time verification codes (OTP).
  • Data from Google or Apple accounts when using these login methods.

2.2. App Usage Data

  • Quiz results.
  • Mood and stress tracking records.
  • Meditation and breathing exercise history.
  • Progress and completion history within the App.

2.3. Subscription Information

  • Information about your subscription status and access to premium features.
  • Purchases and subscriptions are processed directly by Apple App Store or Google Play. We do not receive, collect, or store your payment card details.

2.4. Technical Data

  • Device identifiers, model, operating system.
  • Log data (IP address, timestamps, events in the App).
  • Cookies/SDKs that support app functionality and analytics.
  • App version.
  • Firebase Analytics events.

3. Purposes of Processing and Legal Bases (Art. 6 GDPR)

PurposeExamplesLegal Basis
Account creation and maintenance; core app functionalityRegistration, login, progress storageContract performance (Art. 6(1)(b))
Security and abuse preventionFraud detection, protection from attacksLegitimate interest (Art. 6(1)(f))
Transactional email notificationsAccount confirmation, important technical updatesContract performance (Art. 6(1)(b))
Analytics (Firebase Analytics)Aggregated statistics to improve the AppLegitimate interest (Art. 6(1)(f))
Subscription managementVerifying subscription status and providing access to premium featuresContract performance (Art. 6(1)(b))

3.1. Special Categories of Data (Art. 9 GDPR)

Stress and mood tracking data may be considered health data. We process it only based on your explicit consent (Art. 9(2)(a)). How to withdraw consent: contact us at software@relaxrhythminno.net. Withdrawal does not affect the lawfulness of processing before withdrawal.

If you do not provide such consent, some features (stress/mood tracking, personalized recommendations) will not be available.

4. Necessity of Providing Data

Account data (email, password, or Google/Apple ID) is mandatory to use core features. Analytics data is optional.

5. Data Recipients and Service Providers

We use service providers solely to provide services to us:

  • AWS (hosting)
  • Firebase Analytics
  • Google (authentication and subscription processing through Google Play)
  • Apple (authentication and subscription processing through Apple App Store)

Where required by applicable data protection law, we enter into appropriate data processing agreements with service providers. We do not sell personal data.

6. International Transfers

Data is stored in the European Union (AWS EU region). Some of our service providers may process personal data outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are implemented, including the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms.

7. Analytics (Firebase Analytics)

We use Firebase Analytics for aggregated statistics to improve the App. Google’s Privacy Policy: https://policies.google.com/privacy

8. AI-generated Content

  • Certain content available within the App, including audio narrations and guided sessions, may be created or enhanced using artificial intelligence technologies.
  • AI is used solely for creating or improving content and is not used for automated decision-making or profiling of users.

9. Data Retention and Deletion

  • Account/data deletion: through the App’s settings — performed immediately and irreversibly. Data cannot be restored.
  • No backups of user data are created.
  • Technical logs (including IP address and event timestamps) are retained for up to 30 days for security and diagnostic purposes, after which they are automatically deleted or anonymized.

10. Security

We apply technical and organizational measures, including encryption in transit, secure authentication, access controls, and monitoring, to protect your personal data.

11. Your Rights (GDPR)

You have the right to:

  • access your personal data;
  • rectify inaccurate or incomplete data (via support: software@relaxrhythminno.net);
  • erase your data and account (via the App or by contacting support);
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interest;
  • withdraw consent (where processing is based on consent).

Requests can be sent to software@relaxrhythminno.net. We will respond without undue delay.

Complaints: You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or, where applicable, with another competent supervisory authority.

12. Children

The App is not intended for individuals under 16 years old. If we discover that we have collected data from minors without parental consent, we will delete it.

13. Email Notifications

We may send you email notifications (e.g., account confirmation or important technical messages). You may opt out of non-mandatory notifications by contacting us at software@relaxrhythminno.net. We do not send marketing emails without your prior consent.

14. Push Notifications

  • We may send push notifications related to your account, reminders, wellness activities, subscription status, or important updates.
  • You can disable push notifications at any time through your device settings.

15. Changes to This Policy

We may update this Policy from time to time. The current version will always be available in the App and/or on our website. If significant changes are made, we will notify you by email or within the App.

16. Contact