This Consumer Health Data Privacy Policy has been prepared in English and translated into the following languages. The English version is the official version, and the other versions are provided for reference. In the event of any inconsistency or conflict between the two versions, the English version shall prevail.
English | German
Consumer Health Data Privacy Policy — Meditation App
Effective Date (Last updated): August 31, 2026
Provider: Flame Apps, Postfach 53 04, 97003 Würzburg, Germany
Contact: info@flameappsdevelopment.com
Accessibility. If you are visually impaired, have another disability, or require assistance accessing this Consumer Health Data document (for example, in another format or language), you may contact us at info@flameappsdevelopment.com. Where required by law, we will provide these Terms in an alternative, reasonably accessible format.
Controller / regulated entity: Flame Apps (“we”, “us”), Postfach 53 04, 97003 Würzburg, Germany. Email: info@flameappsdevelopment.com.
This policy explains how we handle “consumer health data” as defined by certain U.S. state health-data laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law. It applies in addition to our general [Privacy Policy](https://www.flameappsdevelopment.com/privacy-policy-meditation-app). Where this policy and the general Privacy Policy overlap, this policy governs for consumer health data of Washington and Nevada consumers.
The App is a general wellbeing and meditation app, not a medical device and not a healthcare provider. Even so, some information you can choose to enter may indicate your mental wellbeing, and we treat all of it as consumer health data under these laws.
We collect consumer health data only when you actively use the features below, and only what you choose to enter:
Mood selections and short free-text check-in notes you write when you use the personalized (“Made for You”) meditation feature. Free text may reveal how you feel.
Voice check-ins: if you use the optional voice check-in, your spoken audio is transcribed so it can be used like a typed check-in.
Wellbeing and journaling entries (notes, moods, tags, subjective ratings, goals): stored on your device only.
Meditations generated for you from a check-in, and, if you mark one as a favorite, a record of that meditation’s text together with your structured mood selection.
We do not collect your precise location, biometric data, or reproductive or sexual health information, and we do not infer health data from unrelated data.
2) Why we collect it (purposes)
To generate a meditation written for your current state, which is the purpose of the check-in; to convert your voice check-in to text; to store the wellbeing entries you keep for yourself; to remember your favorites; and to apply fair-use quotas. We do not use consumer health data for advertising of any kind, and we never sell it.
3) Sources
You. All consumer health data comes directly from what you enter or speak in the App. We do not obtain it from third parties.
4) How it is processed and where it goes
Your check-in (mood and free text, or the transcript of your voice check-in) is sent from the App to our own backend service hosted in the European Union (Google Cloud, region europe-west1) and from there to our AI provider, OpenAI (United States), which writes the meditation script. Your free-text note is used only to generate that meditation: it is not stored on our servers afterwards and is not written to logs or analytics. Voice audio is transcribed by OpenAI on our behalf and is not stored by us; the transcript is returned to your device.
If you mark a generated meditation as a favorite, we store the generated text, your structured mood selection, and a pseudonymous identifier in our database (Google Cloud, EU). Wellbeing and journaling entries never leave your device. Generated meditations are stored on your device; non-favorites are deleted automatically after 30 days.
A safety check runs on your device before generation; if your check-in suggests a crisis, the App shows crisis resources instead of sending anything for generation.
5) Sharing, and the third parties involved
We do not sell consumer health data, and we do not share it with advertising partners, ad networks (including TikTok), analytics providers, or data brokers. Nothing you enter in a check-in, journal, or voice recording is ever included in advertising or conversion measurement.
The only recipients are processors acting on our documented instructions:
OpenAI, L.L.C. (United States) – generates the meditation script from your check-in and transcribes voice check-ins; bound by a data processing agreement and EU Standard Contractual Clauses; does not use your data to train its models under our agreement.
Google Cloud EMEA / Google LLC – hosts our backend and database in the EU and provides the anonymous sign-in that produces the pseudonymous identifier.
We have no affiliates with whom consumer health data is shared.
6) Consent
We ask for your explicit consent in the App before you first use the personalized check-in features, and we describe there what will be processed and where. You can decline and still use the rest of the App. You can withdraw your consent at any time in the App’s settings or by contacting us; withdrawal stops future collection and does not affect prior lawful processing.
7) Your rights
You have the right to ask us: whether we collect, share, or sell consumer health data about you; for access to it, including the third parties to whom it has been disclosed; to withdraw consent; and to have it deleted, including from our processors and backups within the timeframes the law allows.
To exercise these rights, email info@flameappsdevelopment.com. We will verify your request using the information your request itself provides (we hold no accounts or email addresses tied to your health data, so verification is usually limited to what your device can show) and respond within the time limits required by law. Much of your data you can delete directly: wellbeing and journal entries and stored meditations are deleted by deleting them in the App or clearing the App’s data / uninstalling; deleting a favorite in the App also removes our stored copy on request.
If we refuse a request, you may appeal by replying to our decision email; we will review and respond within the legally required period. Washington consumers whose appeal is unsuccessful may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint. Nevada consumers may contact the Nevada Attorney General.
We will not discriminate against you for exercising any of these rights.
8) Geofencing
We do not use geofencing of any kind, and in particular no geofencing around facilities that provide health care services.
9) Changes and contact
We may update this policy as the features or the law change; the current version is always at this address, and material changes will be announced in the App. Questions and requests: Flame Apps, Postfach 53 04, 97003 Würzburg, Germany, info@flameappsdevelopment.com.