Privacy Policy

CARLON — Breathe Beyond | Effective: March 22, 2026

1. Controller (Art. 4(7) GDPR)

Jan Rohwedder
Vitalkultur
Kapellenstraße 9
76473 Iffezheim, Germany
Email: jan@vitalkultur.com

2. Principle: No Data Collection

CARLON does not collect, store, or transmit any personal data to servers, third parties, or the developer. The app works entirely offline.

3. Locally Stored Data

The following data is stored exclusively on your device:

• Session history: Date, duration, preset name, retention times — stored locally on your iPhone and Apple Watch.
• Settings: Language preference, haptic intensity, sound configuration, color theme.
• Custom presets: Breathing presets you create with name and timing configuration.
• Coach profile (optional): Name, tagline, profile photo — local only, never transmitted.

This data never leaves your device. It is not sent to servers, not analyzed, and not shared with third parties.

4. Apple HealthKit

With your explicit consent, CARLON uses Apple HealthKit:

• Write: Mindful minutes (Mindful Sessions) are saved to Apple Health.
• Read: Heart rate, HRV (SDNN), and resting heart rate are read to provide post-session insights.

HealthKit data is processed locally only. It is never transmitted to servers, never used for advertising, and never shared with third parties. You can revoke HealthKit access at any time in your iOS Settings.

5. No Analytics, No Tracking, No Ads

CARLON uses:

• No analytics tools (no Google Analytics, no Firebase, no Mixpanel)
• No tracking pixels or advertising SDKs
• No user accounts or login
• No server-side data processing
• No cookies

6. In-App Purchases

CARLON offers optional in-app purchases via Apple's StoreKit. All payment information is processed exclusively by Apple. The developer has no access to payment data.

7. Watch-iPhone Sync

Session data and settings sync between your Apple Watch and iPhone via Apple's WatchConnectivity framework. This communication happens directly between your devices — no servers involved.

8. Your Rights (GDPR)

Since CARLON does not collect personal data, data subject rights (access, rectification, erasure, portability) under Art. 15–20 GDPR are not applicable in practice. All your data is stored on your device and under your full control. You can delete all app data at any time by uninstalling the app.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. The competent authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
www.baden-wuerttemberg.datenschutz.de

9. Children

CARLON is not directed at children under 13 and does not knowingly collect data from children.

10. Website Hosting

This website is hosted on GitHub Pages (GitHub, Inc., San Francisco, CA, USA). GitHub may collect technical access data (IP addresses, access times) in server logs. For details, see GitHub's Privacy Statement. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in providing and securing our website). GitHub is certified under the EU-US Data Privacy Framework.

11. Changes

Material changes to this privacy policy will be published on this page with an updated effective date.

12. Contact

For privacy inquiries: jan@vitalkultur.com