Consumer Health Data Privacy Policy

Becoming One · Feeling Mindful Labs LLC
Last updated: October 15, 2026

This policy describes how Becoming One handles consumer health data under Washington's My Health My Data Act. Our Becoming One Privacy Policy covers everything else the app collects. Using Becoming One, or reading this policy, is not consent. Where we need your consent, for example to write to Apple Health or Health Connect, we ask for it separately.

Health data we collect and why

Reflections you write after a meditation, and the moods you choose with them. They can describe your emotions and mental health. We store them so you can read them again in the app.
Your course progress: which meditations you have saved a reflection for. We use it to show your progress, unlock courses and suggest what to play next.
In app versions that use Supabase (none released yet), a record of each meditation you finish: which one, how long, and when. It can reveal that you use a mental-wellbeing service. The app keeps it only on your phone, as a record of your practice, and does not send it to us.
Mindful minutes. If you allow it, when you finish a session the app writes one mindful session, its start and end time, to Apple Health on iPhone or Health Connect on Android. The app only writes these records. It does not read anything from Apple Health or Health Connect, and Apple Health and Health Connect do not send these records to us.
Your account identifiers, and your name, email address and profile picture if you sign in with Apple or Google. These link your reflections and progress to your account, and can reveal that you use a mental-wellbeing service.

We do not sell consumer health data or share it for targeted advertising.

Where the data comes from

From you and your device, and from Apple or Google when you choose their sign-in.

Recipients, categories and purposes

These service providers process data for us to run the features you use:

Google Firebase: in app versions that use Firebase, sign-in accounts, meditation audio, and your saved reflections with the meditation, moods and time of each. This data stays in Firebase even if a later version of the app uses Supabase instead; contact us at privacy@feelingmindful.com for a copy or to have it removed.
Supabase: in app versions that use Supabase (none released yet), your anonymous account, which records the IP address and device and app information it was used from; the meditation catalog and audio the app plays; and logs of the requests the app makes. It does not receive your reflections or meditation history, which stay on your phone.
Sentry: each time the app opens, a short app-start record with a random installation ID and device and app information; crash reports and error details when something goes wrong; and performance traces from a sample of app sessions. The app is set up to keep reflection text, moods and other things you write out of the reports it sends. Sentry does not record your screen.
Expo (EAS Update): app update checks, which include a random installation ID and your IP address.

Third parties you choose to involve

Apple and Google, when you choose to sign in with them. They learn that your Apple or Google account signs in to Becoming One. The app asks Apple for your name and email address, and Google for your name, email address and profile picture. GoodParts and Becoming One use the same Google sign-in setup, so if you sign in with Google in both apps, Google can tell that the same Google account uses both.

Some providers' own terms let them use limited information about our use of their service for their own purposes: Sentry may use non-identifying service data to improve its products, and Expo may keep and use de-identified or aggregated data.

We do not share consumer health data with corporate affiliates. You may request the list of third parties that received your data, with an email address or online contact mechanism for each.

Collection and optional sharing

We collect only what is needed to provide the features you use, including what keeps the app working and up to date: crash and error diagnostics (Sentry) and app update checks (Expo). A reflection is saved when you choose to save one. Mindful minutes are written only after you allow it in your phone's health permission prompt, and you can turn that off at any time in Apple Health or Health Connect. We share consumer health data only with the service providers and sign-in providers listed above, to run the app, and, if you allow it, with Apple Health or Health Connect. Their own use of limited service data is described under Recipients. If we want to share it with anyone else or for any other purpose, we will update this policy and ask for your separate consent first.

Access, correction, withdrawal, deletion and appeals

Email privacy@feelingmindful.com to confirm whether we collect or share your health data, access it and its recipient list, correct it, withdraw consent to future collection or sharing, or request deletion. Becoming One does not have in-app controls for these yet. State which right you want to exercise and the account involved, for example the email address you signed in with. Do not email the text of your reflections, passwords or authentication codes. We will use reasonable measures to authenticate your request and will not require you to create an account. If you never signed in with Apple or Google, your account has no email address and we may not be able to match a request to it.

You can also request deletion on our data deletion page. Mindful minutes already written to Apple Health or Health Connect are stored there, on your device or in your Apple or Google account, not by us. Delete them in Apple Health or Health Connect.

In app versions that use Firebase, if you do not sign in, the app creates an anonymous Firebase account. Your reflections are kept in Firebase until you ask us to remove them; there is no automatic time limit yet. Deleting a Feeling Mindful account, for example from GoodParts’ Settings, does not remove data held in Firebase. In app versions that use Supabase, Becoming One has no sign-in. It uses an anonymous account that is never shared with our other apps, and keeps your reflections and meditation history only on your phone. Delete my data in the app’s Settings deletes that account and removes your practice data from your phone. We delete an anonymous account and everything saved to it after 12 months without use, the same way as deleting it yourself with Delete my data, including asking our service providers to delete their copies, where they hold any. We keep it longer only while a privacy request or appeal of yours is still open, or while we have set it aside on purpose. Opening the app keeps it.

We respond without undue delay and within 45 days of receiving your request; authentication does not extend that deadline. If reasonably necessary, we may extend by another 45 days and explain why within the first 45. Deletion removes the data from our app databases: Supabase, and Firebase for app versions that use it. We also tell the service providers listed above that received your data, including Sentry and Expo, about your request and ask them to delete it. Crash and error reports sent to Sentry do not include your account ID, and the app is set up to keep the text you write out of them; Sentry also deletes them automatically after up to 90 days (performance data after up to 30 days). Copies in Supabase’s and Firebase’s backups are removed as those backups expire, within six months. Withdrawing consent stops future collection or sharing and may make the affected features unavailable; it does not delete existing records.

If we refuse a request, we explain why and how to appeal. To appeal, email the same address with "Privacy appeal" in the subject. We provide a written decision within 45 days. If we deny your appeal, you may submit a complaint to the Washington Attorney General. We do not unlawfully discriminate against you for exercising these rights.