Privacy Policy

Last updated: September 2026

What stays on your device

Most of what you do in Araam never leaves your phone. Your journal and conflict-tool entries (encrypted on the device), your meditation history and streaks, your playlists, your resume position, your reminder time and any downloaded audio are stored only on the device you use. They are not uploaded to our servers and are not synced between devices. You can erase them at any time by signing out, deleting your account, or uninstalling the app.

What we store on our servers

Account. When you sign in we create an account holding the identifier your sign-in provider gives us (an Apple user ID or a Google user ID), the email address the provider shares, if any, and the name you choose to share, if any. Apple's private relay address is stored as given. We keep the Google user ID for the lifetime of your account so we can recognise you on later sign-ins, as Google's API terms require us to disclose.

Sign-in sessions. Each device you sign in on gets its own session record: a one-way hash of its session token, the platform and OS version, and when it was created, last used and ended. Signing out on a device ends only that device's session.

Sign in with Apple token. If you sign in with Apple, we store the refresh token Apple issues so that we can revoke your Apple sign-in when you delete your account, as Apple requires. It is used for nothing else.

Subscription. Purchases are made through Apple and processed by RevenueCat. We pass your internal account identifier to RevenueCat as its subscriber identifier and store your subscription status (whether Araam Premium is active and until when). We keep a record of the subscription events RevenueCat sends us (event type, product, time and the subscriber identifier) to keep your access correct and for accounting.

Product events. To see whether the paywall and onboarding work, the app sends a small, fixed set of events (for example that the paywall was shown, a purchase started or failed, onboarding was completed) with the platform, a random install identifier that is not tied to your account, and a few allow-listed fields such as the plan chosen. Your onboarding answers, wellbeing information and entries are never included.

Operational data. Our servers keep short-lived security records (sign-in attempt counts per network address, one-time sign-in codes, admin sessions) and request logs with a request identifier. They are used to keep the service running and to stop abuse.

How we use it

To sign you in and keep you signed in on your devices, to know whether you have Araam Premium, to diagnose problems with sign-in, purchases and onboarding, and to reply when you contact us. We do not sell personal data, do not use it for advertising, and do not share it with third parties other than the providers named here.

Providers we rely on

Deleting your account

You can delete your account from the app (Account, then Delete account). When you do, in one step we delete your account record and every device session, delete the product events tied to your account, and remove your identifier from the subscription event history we keep for accounting (those records are kept without any link to you). We then ask RevenueCat to delete your subscriber record and ask Apple to revoke your Sign in with Apple authorisation; if either provider is unavailable at that moment we retry with increasing delays for up to 30 days (at most twelve attempts). If a request still cannot be completed we stop, discard the token or identifier it carried, and keep only an anonymous record of the attempt for 90 days. You can also withdraw Araam's Sign in with Apple authorisation yourself at any time in your Apple ID settings. The app erases everything it stored on the device you deleted from. If you signed in with Apple before we began storing the revocation token, the app asks you to confirm with Apple once so the revocation can be made.

Deleting your account does not cancel an active subscription. Subscriptions are managed by Apple: cancel in your Apple ID settings before you delete your account if you do not want to be charged again.

Children

Araam is not directed to children under 13 and we do not knowingly collect personal information from them.

Changes

If this policy changes we will post the new version here and note the date at the top.

Contact

Questions about privacy or your data: support@araammeditations.com.