This policy covers the Adyathmika Bhikshun meditation app for Android and iOS. The app is a private meditation journal: almost everything it stores is something you deliberately recorded about your own practice. This page explains what it keeps, where it goes, and how to erase it.
1. Scope
This policy applies to the Adyathmika Bhikshun mobile app only. Our websites are covered by a separate privacy policy, and the app keeps its own database, entirely separate from the websites. Questions about either go to [email protected].
2. What the app collects
Everything below is information you enter or permit. We do not buy data about you and we do not infer anything about you from outside sources.
- Account: your email address and password. Passwords are stored only as a cryptographic hash by our authentication provider and are never visible to us.
- Meditation sessions: start and end times, duration, and any check-in you choose to record — mood, stress, anxiety, energy, focus, calmness, sleepiness, satisfaction, background sound, and free-text notes.
- Voice reflections: audio you optionally record after a session.
- Location: if you allow it, the coordinates and a place name for where you meditated. The app is fully usable without this.
- Preferences: your practice plan, reminder times, saved places, language, and settings.
3. What we never collect
The app does not contain advertising, does not use advertising identifiers, and does not track you across other apps or websites. We do not sell or share your information with data brokers, and we never use your practice data for advertising.
4. Analytics and crash reporting
To find bugs and understand which parts of the app are useful, we use two services: PostHog for usage analytics and Sentry for crash and error reports.
These receive only technical and navigational information: which screens you opened, which features you used, how long a session lasted, your app version, device model, operating system version, and — when something goes wrong — the error and the steps that led to it.
They never receive the content of your practice. We do not send your notes, your mood or check-in values, your voice recordings, your saved locations, or your email address to either service. Your activity is identified only by a random identifier, not by your name or email.
You can switch analytics and crash reporting off at any time in Settings → Privacy. The app works exactly the same with them off.
5. Permissions the app asks for
- Microphone — only to record a voice reflection, and only while you are recording one.
- Location — only to tag where a session happened, and only if you allow it.
- Notifications — only to deliver the practice reminders you schedule yourself.
Every permission is optional and can be withdrawn at any time in your device settings. The app explains why it needs a permission before asking for it.
6. Where your data lives and how it is protected
Your account and practice data are stored with Supabase, in a PostgreSQL database, and are sent over encrypted HTTPS connections. Row-level security is enforced in the database so that an account can only ever read its own rows.
Voice recordings are held in a private storage bucket that is not publicly readable; the app plays them back through short-lived signed links generated for your account alone.
Supabase operates servers outside Sri Lanka, so your data may be processed in another country. No transmission over the internet can be guaranteed completely secure, but we follow accepted practice to protect it.
7. Other services the app uses
- Supabase — database, authentication and file storage for your practice data.
- PostHog — usage analytics, as described in section 4. Can be turned off.
- Sentry — crash and error reports, as described in section 4. Can be turned off.
- Komoot Photon / OpenStreetMap — when you search for a place by name, the text you type is sent to their geocoding service to return matches. Nothing about your account or your sessions is sent with it.
- Expo / EAS — builds the app and delivers updates to it.
- Adhyathmika Bhikshun CMS — the app downloads published articles from our own content server. Reading an article does not send us anything about you.
8. How long we keep your data, and how to delete it
Your data is kept until you delete it — we do not expire it on our own. You can erase your entire account and everything in it, at any time, from inside the app: Settings → Delete account. This permanently removes your sessions, notes, voice recordings, practice plan, saved places and settings. It cannot be undone.
If you cannot open the app, email [email protected] from your account's email address and we will delete it for you within 30 days. Full instructions are on our account deletion page.
9. Children
The app is not directed at children under 13, or under the minimum age of consent where you live, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
10. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, object to how it is used, withdraw consent, or receive a copy in a portable format. Deletion is available immediately in the app; for anything else, write to us. You also have the right to complain to your national data protection authority.
11. Changes to this policy
We may update this policy as the app changes. The date at the top shows the last revision, and material changes will be announced here and in the app.
12. Contact
Adhyathmika Bhikshun, Sri Lanka
Email: [email protected]