Privacy for NowGong

The app stores planned and completed sessions, duration and status, streaks, milestones and settings locally. These include your gong profiles, time windows, sounds and pauses. Widgets use a shared, protected area of the app's storage.

Your optional personal prompt for each gong is stored locally in settings and displayed during the session. The app does not include it in alarms, widgets, technical logs or feedback attachments.

When you save a check-in, NowGong also stores its time, mood and selected labels in its local database. This happens even without Apple Health permission. These data provide the history shown in the app; they are not automatically sent to us.

The app creates local backups before database changes. A size-limited technical log contains app launches, storage and alarm events, errors, and Pro and restore status. The app has no cloud sync of its own. Device backups and Apple services may hold additional copies, depending on your iOS settings.

With your permission, NowGong writes completed meditations as mindful minutes and optional check-ins as state of mind to Apple Health. The app does not read data from Health. You can revoke write permission in Health and delete entries stored there.

Revoking Health permission does not delete local check-ins in NowGong. You can switch check-ins off in the app. We do not use your mood or Health entries for advertising or marketing. Apple's privacy information applies to storage and any syncing performed by Apple.

• Apple privacy

Alarms and optional local notifications are managed by iOS on your device. The app requests the necessary system permissions. We do not operate a push server for these functions.

Apple processes purchases and subscriptions. StoreKit checks purchase entitlements; NowGong stores the required unlock status on your device. The app does not send us credit card details or your Apple ID. However, an optional diagnostic log can show whether Pro comes from a one-time purchase, a subscription or no confirmed purchase, and whether a restore took place.

When you send feedback, we receive your message and, if you provide it, your email address for a reply. Selected attachments are sent together with the message and can therefore be associated with your email address. Feedback is used to address your request and diagnose problems.

From version 1.4.3, both additional options start switched off. You can inspect the data before sending. In versions up to and including 1.4.2, the additional options were preselected and could be switched off; device information could also include the gong names you chose, and diagnostics could include a backup filename and storage error details.

The app does not attach your check-in history or data read from Health. Anything you write in the message yourself is sent with it. If you use the fallback through your email app, your email provider's terms also apply.

• Device information: app and iOS version, device model, language, technical rhythm settings, streak mode, alarm permission and pause status.
• Diagnostics: an excerpt of the technical log with timestamps, launches, scheduling and error events, Pro/restore status, local storage status and whether a backup exists.

Feedback is sent over encrypted HTTPS to mahamind.com. Vercel Inc. hosts the endpoint; Resend (Plus Five Five, Inc.) delivers the message to our support mailbox, hello@mahamind.com. This mailbox is provided by Purelymail (Add Rabbit LLC, USA), which processes the delivered email. The application code has no separate feedback database.

Every submission, including one without attachments, also involves technical connection data such as IP address and request time, and a client identifier containing the app version and build. Hosting logs, delivery logs and the email mailbox are separate storage locations from the app's local database.

Vercel and Resend also process data in the United States; Purelymail is a US provider. The providers’ published privacy and contractual information describes their data processing and transfer arrangements; Resend identifies EU Standard Contractual Clauses and the EU–US Data Privacy Framework. You can ask us for information about the recipients and safeguards used for your request.

• Vercel privacy
• Vercel data processing
• Resend data processing
• Purelymail privacy

Local app data remains until you delete the app. The technical log is trimmed when it reaches its size limit; local migration backups are pruned to retain the newest. Uninstalling does not automatically remove existing device backups or Health entries. You manage those separately with Apple.

Until now, feedback messages have remained in the support mailbox without a fixed deletion period. We are putting the following deletion rule into practice; automatic deletion is not yet active.

Going forward, we will delete resolved NowGong feedback messages, including diagnostic attachments, from our support mailbox three calendar months after the case is closed. Open cases remain until resolved. Where legal obligations or legal claims require further retention, we will keep only the necessary data for the necessary period. According to Purelymail, deleted emails remain in its backups for one month. You can request deletion of your message and attachments at hello@mahamind.com. Deleting the app does not delete emails already sent.

Where personal data is processed, necessary app functions and purchases rely on Article 6(1)(b) GDPR. We process optional feedback and selected additional data with your consent (Article 6(1)(a)). Technical security and error logs serve our legitimate interest in secure, reliable operation (Article 6(1)(f)). For voluntary health-related information, where Article 9 GDPR applies, the basis is your explicit consent (Article 9(2)(a)).

You can withdraw consent for the future without affecting the lawfulness of earlier processing. Subject to the legal conditions, you have rights to access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. Contact hello@mahamind.com. We cannot remotely access or delete local data on your iPhone.

You can complain to a data protection authority, particularly where you live or work or where the suspected infringement occurred. In Austria, this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.

• Austrian Data Protection Authority

This privacy page uses system fonts and loads neither Google Fonts nor Vercel Web Analytics or Speed Insights. Vercel hosting still processes technical connection data, such as IP address and access time. Other pages on mahamind.com use Vercel Web Analytics, Speed Insights and fonts loaded from Google. See the website privacy notice for details.

• Website privacy (German)