Privacy Policy

1. App data and optional protection

Check-ins, meditation logs, personal settings, goals, local rules, protection status, selection counts, blocking statistics, and other content you create in the app are stored locally on your device by default. We do not upload this content to our servers or use it for advertising or profiling. Only if you turn on optional Cloud Sync (see section 4) is it saved, in encrypted form, to your own iCloud or Google Drive account.

Website Protection and app blocking are optional self-management features. They work only after you enable them and grant the relevant system permission. They are not designed for monitoring other people, parental remote management, enterprise device management, or remote control.

• Android Website Protection uses local VPN/DNS filtering. It processes domain names needed for matching local rules, not full URL paths, webpage content, screen content, or text you enter. DNS queries, browsing records, and blocking details are not uploaded.
• Android app blocking checks locally whether the foreground app matches a list you selected. The app picker may read launchable app names, package identifiers, and icons locally to show your choices. We do not read other apps’ content, chats, account information, screen content, or exact usage records.
• iOS limits use Apple Screen Time frameworks, including Family Controls, Managed Settings, and Device Activity. Restrictions are enforced on-device; we do not receive your detailed device activity, browsing history, or the full names of selected items.
• Blocking counts and category summaries are stored locally for display. They do not include individual domain names. You can clear local rules and statistics or turn protection off at any time.

2. Permissions

We explain each permission before you enable the related optional feature. You may decline a permission; this affects only that feature, not the app’s other basic functions.

• Android VPN permission: creates a local VPN connection for DNS filtering; it does not route traffic to our servers or monitor your network activity.
• Android Usage Access and overlay permission: used only to compare the foreground app against your selected blocking list and show a local blocking screen. They are not used to read content or simulate clicks.
• Android foreground-service, notification, exact-reminder, and battery-setting guidance: used to keep voluntarily enabled local protection and reminders reliable. We do not use reminders for advertising or tracking.
• iOS Family Controls, Managed Settings, and Device Activity: used only for the limits you voluntarily select through Apple’s system capabilities.
• We do not use Android AccessibilityService to read screen content or control other apps.

3. Payments, backup, and feedback

Subscriptions are processed through official store payment systems, such as Google Play Billing or the Apple App Store, and RevenueCat for membership verification. These providers may process receipts, subscription status, product identifiers, anonymous identifiers, device information, app version, and other data necessary to complete purchases, restore purchases, prevent fraud, and verify benefits.

Import and export are local features. Encrypted backup files are generated on your device and are shared only when you choose a destination. We do not automatically upload backups or access files you have not selected.

If you email us, we receive the address and message you send, together with any operating-system type or app-version information included in the message, to answer feedback or troubleshoot.

4. Cloud Sync (optional)

Cloud Sync is an optional Premium feature that keeps your data in sync across your devices on the same platform. It is off by default and works only after you turn it on. If you choose to restore from the cloud during onboarding, the app also reads the data already in your cloud account.

• Data synced: check-ins, journal entries, meditation, breathing and Kegel records, triggers, daily tasks, knowledge progress, profile and goal settings, and deletion records that keep deleted items from coming back. Website Protection and app blocking rules and statistics, and subscription information, are not synced.
• Where it is stored: on iOS, in the private iCloud database (CloudKit) of your own Apple Account; on Android, in the hidden app-specific folder of your own Google Drive. On Android the app requests access only to that folder (drive.appdata) and cannot see other files in your Google Drive. Synced data does not pass through and is not stored on our servers, and we cannot access your iCloud or Google Drive account. Data is not shared between iOS and Android.
• Encryption: data is compressed on your device and encrypted with AES using a key built into the app before upload. This prevents the cloud file from being read directly, but it is not end-to-end encryption with a key only you hold.
• Account protection: once enabled, the app remembers the iCloud or Google account used for the first sync. If the account changes, the app stops syncing and notifies you, so your local data is not synced to someone else’s account.
• Google user data: Transform’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. It is used only to provide Cloud Sync to you, and not for advertising, profiling, or sale.
• Turning off and deleting: you can turn off Cloud Sync at any time in Settings; nothing new is uploaded after that. To delete cloud data on iOS, go to Settings → your Apple Account → iCloud → Manage Account Storage and delete the app’s data. On Android, open Google Drive → Settings → Manage apps and delete the app’s hidden data.

5. Website analytics

This website uses Firebase Analytics (Google Analytics) to understand aggregate website use. Analytics is enabled by default on this site. It uses analytics storage such as cookies or similar browser storage to measure visits and interactions.

We send only these fixed events: page views, App Store or Google Play link clicks, a guide reaching 50% reading depth, and clicks on a guide reference link. Event parameters are limited to language, page category, fixed guide slug, source, store, and reading depth.

We do not intentionally send names, email addresses, account IDs, user IDs, free-form text, complete external URLs, query parameters, app records, browsing records, or information that describes an adult-content concern. Analytics data is retained for 14 months. Advertising storage, ad user data, and ad personalization are disabled; Google Signals, remarketing audiences, BigQuery export, and unplanned enhanced measurement are disabled in our analytics settings.

You can limit analytics storage through your browser settings or privacy controls. Blocking analytics may reduce our ability to understand aggregate site use but does not affect the website’s core content, language links, or download links.

6. Sharing and disclosure

We do not sell or trade your personal information. Apart from the service providers and user-initiated sharing described above, we do not provide app information to third parties. When Cloud Sync is on, synced data is stored only in your own iCloud or Google Drive account, where Apple or Google provides storage under their own terms and privacy policies; we do not obtain this data or provide it to anyone else.

We may disclose information when you give explicit consent or when disclosure is required by applicable law or a binding request from a competent authority.

7. Retention and deletion

Local app data remains on your device until you uninstall the app, clear app data or cache, or delete the relevant local rules, statistics, or files in the app. Backup files you choose to share must be deleted in the destination you selected. If you turned on Cloud Sync, synced data stays in your own iCloud or Google Drive account and is not deleted automatically when you uninstall the app; you can delete it as described in section 4.

Subscription and transaction information is retained by the relevant payment providers only as needed for subscription services and legal or financial obligations. Website analytics data is retained for 14 months. You may contact us about subscription, transaction, feedback-email, or privacy questions.

8. Security and minors

We use reasonable safeguards for the information we handle. Because core app data is stored on your device, you should also protect your device with appropriate device security, such as a screen lock.

Transform is not intended for people under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information without appropriate consent, contact us and we will address the request promptly.

9. Changes and contact

We may update this policy when the app, website, or applicable requirements change. The updated version takes effect when published. For material changes, we may provide an in-app notice or another appropriate notice.

For privacy questions, suggestions, or requests concerning subscription, transaction, feedback-email, or website analytics information, contact us at the address below.