Last updated: April 17, 2026
Undulate ("we", "our", "the app") is a breathing exercise app built with your privacy as a core principle. We do not collect, store, or transmit any personal data to external servers.
We collect no personal data. Specifically:
The app stores the following data locally on your device only:
This data never leaves your device and is not accessible to us or any third party.
Premium features are purchased through Apple's App Store. All payment processing is handled entirely by Apple. We do not receive or store any payment information.
Undulate does not integrate any third-party analytics, advertising, or tracking services. The only external service used is Apple's StoreKit for in-app purchase verification.
Undulate does not knowingly collect information from children under 13. The app is suitable for all ages and requires no personal information to use.
For the limited on-device processing described above, the data controller is:
Abhishek Gawde
Osloer Straße [Hausnummer]
13359 Berlin, Germany
abhishekgawde@proton.me
Lawful basis: processing of on-device preferences and session history occurs solely on your device and is not transmitted to us. To the extent any data is processed, the lawful basis is Art. 6(1)(b) GDPR (performance of the contract to provide the requested breathing-exercise service).
Your rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), withdrawal of consent (Art. 7(3)), and lodging a complaint with your supervisory authority (Art. 77). Because your Undulate data never leaves your device, access, portability, and erasure can be fulfilled instantly by deleting the app or clearing session data from within Settings.
This section applies to residents of California and summarizes rights granted under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
Categories of personal information collected in the last 12 months: None. Undulate does not collect personal information as defined by CCPA § 1798.140.
Sale or sharing of personal information: We do not sell or share personal information. We have not sold or shared personal information in the preceding 12 months and have no plans to do so.
Sensitive personal information: We do not collect or process sensitive personal information.
Your rights: the right to know, the right to delete, the right to correct, the right to opt out of sale/sharing, the right to limit use of sensitive personal information, and the right to non-discrimination. To exercise any of these rights, contact abhishekgawde@proton.me. Because all your Undulate data lives only on your device, you can also delete everything yourself by uninstalling the app.
We do not process personal information of known minors under 16 for purposes that require opt-in consent.
We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date.
If you have questions about this privacy policy, contact us at abhishekgawde@proton.me.