Privacy Policy

We collect only what's needed to run the practice:

• Account information. When you sign in with Google or Apple, we receive a basic identifier, your email address, and your display name from that provider so we can create and secure your account. We also store your timezone so the daily practice resets on your local day. We never receive your Google or Apple password.
• Your practice content.The self-image you draft, your goal, rehearsal notes, the frictions you name, the small actions you take, and your Evidence Log (“proof”). This is the content you create inside the daily loop.
• Subscription status. Whether your trial or subscription is active, its tier and renewal date, and a transaction identifier, returned to us by the App Store or Google Play when we validate your purchase. Payment card details are handled entirely by Apple and Google — we never see or store them.
• Basic technical data. Device and app-version information and diagnostic logs needed to keep the service working and secure, and a count of your daily AI coach requests so we can apply fair-use limits.

We do not use third-party analytics or advertising SDKs, and the app requests no access to your location, camera, contacts, or photos. If that ever changes, we will update this policy first.

• To provide the daily practice — saving your self-image, proof, and Evidence Log so they're there when you return.
• To power the AI coach's suggestions at the points where you ask for them, and to apply fair-use limits on AI requests.
• To manage your subscription, trial, and access to Core, Pro, and Premium features.
• To keep your account secure, prevent fraud and purchase abuse, and diagnose and fix problems.

When you use an AI coach touchpoint — for example drafting a self-image or making a proof easier to do today — the relevant text you've written may be sent to one or more third-party AI processing providers to generate a suggestion. The coach suggests; you always decide what to keep. We may change AI processing providers from time to time as needed to operate, improve, or maintain the service. We do not permit AI processing providers to use your content for their own advertising, and we configure AI provider services, where available, so your content is not used to train their models.

We do not sell your content, and we do not use it to target advertising.

Your practice content is stored on our servers in the United States so it is available across sessions, with an encrypted on-device copy kept as an offline mirror. Data is encrypted in transit. If you use Taryun from outside the United States — including the EEA, the United Kingdom, or South Korea — your information is transferred to and processed in the United States, and we protect it as described in this policy and, where required, under appropriate transfer safeguards.

We retain your information for as long as your account is active. When your account is deleted, we delete your account information and practice content, with one exception: we keep a minimal record of store purchase transactions (a transaction identifier not linked to a live account) to prevent purchase fraud, along with anything we are legally required to retain.

We share information only with:

• Apple and Google — for sign-in and to process and validate subscriptions.
• AI processing providers — to generate AI coach suggestions from the text you submit, as described above. These providers may change from time to time.
• Our infrastructure providers — solely to host and operate the service on our behalf, under confidentiality obligations.
• Legal authorities — only when required by law.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

You can edit your practice content directly in the app at any time, and manage or cancel your subscription through your App Store or Google Play account settings. For everything else, email us at [email protected] and we will act on your request within 30 days. You can ask us to:

• Access the personal information we hold about you.
• Export a copy of your practice content.
• Correct information that is inaccurate.
• Delete your account and associated data (subject to the fraud-prevention and legal retention described above).

We will verify that a request comes from the account holder before acting on it, and we will not treat you differently for exercising any of these rights.

Where the GDPR or UK GDPR applies, Etheia is the controller of your personal data, and we process it on these legal bases:

• Performance of a contract — your account, practice content, and subscription, which are the service itself.
• Legitimate interests — keeping the service secure, preventing purchase fraud, and diagnosing problems.
• Consent — where required, which you can withdraw at any time.

You have the rights of access, rectification, erasure, restriction, portability, and objection described above, exercisable by email. Your data is processed in the United States under appropriate safeguards, such as standard contractual clauses. You also have the right to lodge a complaint with your local supervisory authority.

Under the CCPA/CPRA, the categories of personal information we collect are: identifiers (account identifier, email, display name), commercial information (subscription status and transaction identifiers), user content (your practice content), and internet or device activity (device, app-version, and diagnostic data). We collect them for the purposes described in this policy, and we do not sell personal information or share it for cross-context behavioral advertising.

You have the right to know, correct, and delete the personal information we hold about you, and the right not to be discriminated against for exercising those rights. Email us at [email protected] to make a request.

Where Korea's Personal Information Protection Act (PIPA) applies, you may request access to, correction or deletion of, or suspension of processing of your personal information by emailing [email protected]. The items we collect, our purposes, and our retention periods are as described in this policy; your information is transferred to and stored in the United States (our servers and, for AI coach requests, our AI processing providers), and we destroy personal information without undue delay once its purpose is fulfilled, subject to the fraud-prevention and legal retention described above.

Taryun is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their information.

We may update this policy as the app evolves. When we make material changes, we'll update the date above and, where appropriate, notify you in the app.

Questions about this policy or your data? Email us at [email protected].