Privacy Policy

Effective June 10, 2026

Overview

Holistic Surfing ("the app", "we") is a personal health and habit tracking app operated by MERIDIAN ALCHEMY LLC. This policy explains what information the app collects, how it is used, and the choices you have. We do not sell your data, and we do not show ads.

Information You Provide

When you create an account we collect your email address and a password (stored as a secure hash by our authentication provider). During onboarding and use, you may choose to provide profile details (name, biological sex, date of birth), health priorities and conditions, lifestyle and sleep information, menstrual cycle entries, meal descriptions and photos, workout and recovery sessions (such as sauna, ice bath, and meditation timers), and tasks or routines you track.

Information Collected Automatically

The app records basic usage events (such as feature usage counts) and crash reports so we can fix problems. Crash reporting is provided by Sentry and is configured not to include personally identifying information. If you enable location features, your approximate location is used to provide sunrise/sunset and environment-aware guidance; you can decline or revoke location permission at any time in iOS Settings.

Where Your Data Is Stored

Your account data is stored with Supabase, our hosted database and authentication provider, protected by row-level security so that only your authenticated account can read your records. A copy of your recent data is cached on your device so the app works offline.

Data Shared With Others

Sharing is always opt-in. If you join a Sync Circle or share a wave snapshot or template, the specific data you choose to share becomes visible to the people you share it with. You can revoke Sync Circle connections at any time from within the app.

Third-Party Processing

Some features send specific data to service providers to do their job: meal photos and descriptions are analyzed by OpenAI via our server; food searches are answered by the FatSecret nutrition database; voice input is transcribed by Apple's speech recognition on your device or Apple's servers; push notifications are delivered through Expo and Apple. If you connect your own AI assistant API key (Anthropic or OpenAI), your assistant messages are sent directly from your device to that provider under your own account, and your key is stored only on your device.

Your Rights and Choices

You can export your data from Profile → Export & Import Data. You can permanently delete your account and all associated data from Profile → Delete Account; deletion is immediate and irreversible. You may also contact us at any time to request access to or deletion of your data.

Data Retention

We keep your data while your account is active. When you delete your account, your records are removed from our production database immediately and from backups as they expire.

Children

Holistic Surfing is not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect data from them.

Changes to This Policy

We will update this policy as the app evolves and revise the effective date above. Material changes will be highlighted in the app.

Contact

Questions or requests about your data: mkress07@gmail.com