BreatheAct · NOMOI

Privacy Policy

Effective date: 30 July 2026 · Controller: NOMOI LLC, Sharjah Media City (Shams), Sharjah, UAE

BreatheAct is a general-wellness app, not a medical device or a diagnostic tool. It offers guided breathing exercises and a breath-pacing trainer. It does not diagnose, treat, cure, or prevent any disease or condition, and nothing in the app should be treated as medical advice.

What this app is

BreatheAct is developed by NOMOI. In its default (consumer) mode it offers guided breathing patterns, a coherence/breath-pacing trainer, a daily wellbeing check-in, and streak tracking. An organizational mode, unlocked only by a workshop or hospital session code, adds workplace-wellbeing tools for staff who opt in through their organization — this policy covers both modes; the sections below note anything that applies only to organizational mode.

Data we collect

By default, BreatheAct works without an account and without any data leaving your device until you interact with the consent screen. What is collected, and where it goes, depends on what you use:

DataWhat it isWhere it's stored
Breathing & coherence session history Which pattern you used, session length, completion, and your coherence-trainer results On your device (local storage). If you grant consent, an anonymous copy is also written to Google Firestore (region me-central1, Dubai) keyed to your device identifier, so your trend chart can sync.
Device identifier A random identifier generated on your device — not your name, email, or any account On your device; used as the key for the anonymous records above. It cannot be linked back to your identity by NOMOI.
Daily pulse / check-in Confidence, clarity, and how you're feeling, if you complete the check-in On your device, and anonymously to Firestore under the same device identifier if you've consented
Analytics (consent-gated) Google Analytics (GA4) app-usage signals: screens visited, buttons tapped, session length Google Analytics. Only sent after you accept the in-app consent screen; nothing is sent before that.
Optional email (weekly summary) If you opt in to a weekly readiness/summary email, your email address Stored separately in a dedicated mailing list, used only to send that digest. It is never merged with your session data and never used for any other purpose. You can unsubscribe at any time from Settings.
Fitbit data (optional, wearable connection) Heart rate, sleep, and basic profile data, read via the Fitbit Web API See "Wearable (Fitbit) data" below

We do not sell your data. We do not collect your name, government ID, precise location, or contacts.

Wearable (Fitbit) data

BreatheAct can optionally connect to a Fitbit account, primarily as an organizational-mode feature. If — and only if — you actively choose to connect your Fitbit account, BreatheAct requests the following Fitbit Web API scopes:

Fitbit data is never collected unless you deliberately start the connection from within the app. You can disconnect Fitbit at any time from Settings, which stops any further data from being read. Fitbit-derived readings are treated the same as your other session data: anonymized to your device identifier, never linked to your name, and used only to inform the in-app wellbeing indicators you see.

Organizational / workshop mode

Some deployments of BreatheAct are used by hospitals or organizations running a wellbeing workshop or program. Staff enter a session or facilitator code to unlock organizational-mode tools. In this mode, the same anonymization approach applies: individual entries are keyed to an on-device identifier, not a name or staff ID, and are used in aggregate by the organization's wellbeing program to understand overall trends — never to identify or evaluate a named individual. If your organization has additional terms for its program (for example, a hospital pilot), those terms supplement, and do not replace, this policy.

How your data is used

Retention

Data stored only on your device (local storage) stays there until you clear it or uninstall the app. Anonymous records synced to Firestore are retained for as long as your device identifier remains active in the app, so your trend history keeps working; you can request deletion at any time (see "Your rights" below). Email-optin addresses are kept only until you unsubscribe or request removal.

Your rights

Who we share data with

We do not sell personal data. Anonymous, device-keyed data may be processed by these service providers acting on our behalf:

Children

BreatheAct is intended for a general adult audience and is not directed at children. We do not knowingly collect data from children.

Changes to this policy

We will update this page if what we collect or how we use it changes. The effective date at the top of this page reflects the latest revision.

Contact

Questions or requests about your data: [email protected]