your privacy
Data Not Collected.
Your breath practice lives on your phone. We run no server that can read it, and we do not track you or sell your data.
Tonari is built to keep your breath practice private. This policy describes what the app stores, where it goes, and what we, the developer, can see.
Summary. Your practice history lives on your device. We run no server that can read your content, and we do not sell your data or track you. Optional Sign in with Apple syncs an encrypted copy only to your private iCloud, with a key only you hold. If you use it, Apple may pass us an anonymized token and a private relay email, used only to recognize your sign-in.
Who we are
Tonari ("we", "the app") is a native iOS application published by the developer listed on the App Store. Contact: support@tonari.app.
What Tonari stores on your device
On your iPhone or iPad, Tonari may store:
- Breath session history (duration, completion, optional notes and mood reflections)
- Your preferences (language, theme, reminders, practice feel settings)
- On-device learning used to gently attune suggestions (never leaves the device unless you sync)
- An optional 4-digit app lock and Face ID or Touch ID preference (stored in the device Keychain)
This data is encrypted at rest under a device-specific key in the iOS Keychain. It is not readable by us.
What we do not collect
- No analytics, advertising, or crash-reporting SDKs
- No account database on our servers
- No tracking across apps or websites
- No sale or sharing of personal information
Apple's App Store privacy label for Tonari is Data Not Collected by the developer.
Optional Sign in with Apple and iCloud sync
Signing in is optional. The app works fully without an account. If you sign in with Apple and enable backup:
- Your encrypted history is stored in your private CloudKit database (your iCloud account), not in a developer-controlled server.
- Content is end-to-end encrypted with a recovery key shown once and held only by you. We cannot decrypt your synced data.
- Apple may provide us with your anonymized Apple ID token and optional email relay, used only to associate the sign-in on your device.
- You can delete your account in Care, Account, Delete account, which removes the iCloud sync record and local account material.
Apple Health (optional)
If you turn it on, Tonari can:
- Write finished breath sessions to Apple Health as Mindful Minutes (on this device only).
- Read recent sleep times (only if you choose "Use my sleep schedule") to suggest reminder times. Sleep data is not stored in Tonari's synced settings.
Health data is processed on your device and governed by Apple's HealthKit policies. We do not receive your Health data on any server.
Notifications
If you enable daily breath reminders, Tonari schedules local notifications on your device. No push notification service sends your content to us.
When data leaves your device (your choice)
- Export. You may export plain or encrypted backup files via the system share sheet to a destination you choose.
- Share a moment. A content-free image card (no notes, moods, or history) may be shared to Instagram Stories or other apps you select.
- Clipboard. Recovery-key copies use a short-lived, device-local clipboard (not Universal Clipboard).
Once you export or share, that copy is under your control.
Children
Tonari is not directed at children under 13. We do not knowingly collect personal information from children.
Security
Tonari uses AES-256-GCM encryption, iOS Data Protection, and Keychain storage for keys. No system is perfectly secure, so please use a device passcode and keep your recovery key safe.
Changes
We may update this policy. The effective date at the top will change. Continued use after an update means you accept the revised policy. If anything that matters ever changes here, we will say it plainly at the top of this page.
Contact
Questions about privacy: support@tonari.app or Support.