1. Introduction
Sabah ("we", "our", or "the app") is a premium wellness application built around a 10-minute daily morning ritual. We take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it.
By using Sabah, you agree to the practices described in this policy. If you do not agree, please do not use the app.
2. Information We Collect
2.1 Account Information
When you sign in with Apple, we receive:
- Your Apple ID (a unique, anonymised identifier)
- Your name (if you choose to share it with Apple Sign In)
- Your email address or Apple's private relay email address (if you choose to share it)
2.2 Usage Data
We collect information about how you use the app, including:
- Sessions completed (dates and sequences)
- Breathwork protocols used
- Streak and consistency data
- Subscription status and tier (free, monthly premium, or annual premium)
2.3 Device Information
We may collect basic device information such as device type, operating system version, and app version for the purpose of diagnosing technical issues.
2.4 Information We Do Not Collect
We do not collect your location, contacts, camera access, microphone data, health data, or any information beyond what is described above.
3. How We Use Your Information
We use the information we collect to:
- Create and maintain your Sabah account
- Personalise your in-app experience (streaks, progress, preferences)
- Process and manage your subscription
- Send you optional push notifications (daily reminders, milestone acknowledgements)
- Improve the app and diagnose technical issues
- Comply with applicable legal obligations
4. Third-Party Services
4.1 Firebase (Google)
We use Firebase Authentication and Firestore (by Google) to store your account credentials, session history, and streak data. Firebase processes data in accordance with Google's Privacy Policy. For more information, visit: firebase.google.com/support/privacy
4.2 RevenueCat
We use RevenueCat to manage in-app subscriptions and payment processing. RevenueCat receives your device identifier and subscription status. Payment card information is processed directly by Apple and is never shared with us or RevenueCat. For more information, visit: revenuecat.com/privacy
4.3 Apple
Subscriptions are processed through Apple's in-app purchase system. Apple's privacy practices govern any payment information you provide. For more information, visit: apple.com/legal/privacy
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data from our systems within 30 days, except where we are required to retain it for legal or compliance purposes.
6. Your Rights
Depending on your location, you may have the following rights in relation to your personal data:
- Right to access: request a copy of the data we hold about you
- Right to rectification: request that we correct inaccurate data
- Right to erasure: request that we delete your data ("right to be forgotten")
- Right to data portability: request your data in a machine-readable format
- Right to object: object to our processing of your data in certain circumstances
To exercise any of these rights, contact us at: hello@sabahapp.com
7. GDPR (European Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). Our lawful basis for processing your data is:
- Performance of a contract: to provide you with the Sabah service
- Legitimate interests: to improve the app and ensure its security
- Your consent: for optional notifications and communications
You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection law.
8. CCPA (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell your personal information.
9. Children's Privacy
Sabah is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly.
10. Push Notifications
With your permission, we may send push notifications including daily morning reminders, streak milestones, and re-engagement messages. You can opt out of notifications at any time through your device's notification settings or within the Sabah app settings.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All data is transmitted over encrypted connections (HTTPS/TLS). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our third-party service providers (Firebase, RevenueCat) operate. These transfers are subject to appropriate safeguards in accordance with applicable data protection law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notification or by updating the effective date at the top of this document. Continued use of Sabah after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy, please contact us: