Privacy Policy

Last Updated: January 15, 2026

Welcome to CacaoFlow. We are committed to protecting your privacy and ensuring you have a positive experience while using our ceremonial cacao guidance application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Information You Provide

When you use CacaoFlow, we may collect the following information that you voluntarily provide:

• Onboarding Information: Experience level with ceremonial cacao, body weight (for dosage calculations), and safety acknowledgments
• Ceremony Data: Ceremony types selected, dosage preferences, intentions set, and completion status
• Journal Entries: Personal reflections, emotional states, physical sensations, and insights you choose to record
• Practice Data: Selected meditation and breathwork practices, completion tracking
• Audio Preferences: Music selections and audio guidance settings

1.2 Automatically Collected Information

We automatically collect certain information when you use the App:

• Device Information: Anonymous device identifier (UUID), device type, operating system version
• Usage Data: Features accessed, ceremony frequency, session duration, and app interactions
• Performance Data: Crash reports and error logs to improve app stability

1.3 Subscription Information

Subscription and payment information is processed through Apple's App Store and RevenueCat:

• Purchase History: Subscription status, trial activation, and renewal dates
• Payment Information: We do NOT collect or store your payment information. All transactions are processed securely by Apple

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Core App Functionality

• Provide personalized dosage recommendations based on your experience and body weight
• Track your ceremony history and practice statistics
• Save your journal entries and reflections locally on your device
• Deliver audio guidance and meditation prompts
• Enable premium features based on your subscription status

2.2 App Improvement

• Analyze usage patterns to improve features and user experience
• Identify and fix technical issues and crashes
• Develop new features based on user behavior

2.3 Communication

• Send push notifications for ceremony reminders (with your permission)
• Provide customer support and respond to your inquiries
• Send important updates about the App or policy changes

3. Data Storage and Security

3.1 Local Storage

Most of your personal data is stored locally on your device using:

• Secure Storage: Sensitive data (device ID) is encrypted using iOS Keychain
• AsyncStorage: Ceremony history, journal entries, and preferences are stored locally on your device
• Data Persistence: Your data remains on your device and is not transmitted to our servers unless you explicitly opt in to future cloud backup features

3.2 Third-Party Services

We use the following third-party services that may collect limited data:

• RevenueCat: Manages subscription status and entitlements. Collects anonymous device ID and subscription information. See RevenueCat Privacy Policy
• Apple App Store: Processes payments and manages subscriptions. See Apple Privacy Policy

3.3 Security Measures

We implement appropriate technical and organizational security measures to protect your data:

• Encryption of sensitive data using industry-standard protocols
• Secure authentication for premium features
• Regular security audits and updates
• Minimal data collection principle - we only collect what's necessary

4. Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information to third parties. We may share limited information only in the following circumstances:

• Service Providers: With RevenueCat for subscription management (anonymous device ID only)
• Legal Requirements: If required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
• With Your Consent: For any other purpose with your explicit consent

5. Your Privacy Rights

5.1 Access and Control

You have the following rights regarding your data:

• Access: View all data stored in the app through Settings
• Deletion: Delete specific journal entries, ceremonies, or all app data
• Export: Export your journal entries (Premium feature)
• Modification: Edit or update your preferences and settings at any time

5.2 Account Deletion

To delete all your data:

1. Open the CacaoFlow app
2. Go to Profile → Settings
3. Tap "Delete All Data"
4. Confirm deletion

Note: This action is irreversible and will permanently delete all locally stored data. Subscription information managed by Apple will remain in your Apple ID account.

5.3 Opt-Out Rights

• Push Notifications: Disable in iOS Settings → CacaoFlow → Notifications
• Analytics: Currently not collected; future analytics will be opt-in

6. Children's Privacy

CacaoFlow is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

7. International Data Transfers

Your data is primarily stored locally on your device. Subscription data processed by RevenueCat may be transferred to and stored in the United States. By using the App, you consent to such transfers in accordance with this Privacy Policy.

8. Data Retention

We retain your information for as long as necessary to provide the App's services:

• Local Data: Stored on your device until you delete the app or manually clear data
• Subscription Data: Retained by RevenueCat as long as your subscription is active, plus legally required retention periods
• Deleted Data: Permanently removed and cannot be recovered

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this policy
• Displaying an in-app notification upon first launch after the update
• Sending a push notification for significant changes (if you have notifications enabled)

Your continued use of the App after such modifications constitutes your acceptance of the updated Privacy Policy.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information (subject to certain exceptions)
• Right to opt-out of the sale of personal information (we do NOT sell your data)
• Right to non-discrimination for exercising your privacy rights

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with your local supervisory authority

13. Consent

By using CacaoFlow, you consent to this Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use the App.