Privacy Policy version 1.0
Modul8 Privacy Policy
Effective date: 31 July 2026
Last updated: 31 July 2026
Modul8 (“we”, “our”, or “the app”) respects your privacy. This Privacy Policy explains what personal information Modul8 collects, why we collect it, how it is used, the services we use to operate the app, and your rights in relation to your personal information.
Information We Collect
Account Information
When you create a Modul8 account, we collect your email address.
We use this information to create and manage your account and allow you to access data associated with your Modul8 account.
Our lawful basis for processing this information is performance of a contract, as this processing is necessary to provide your Modul8 account and associated services.
Session Data
Modul8 stores information about breathing sessions associated with your account, including your session history.
This information is used to provide app functionality, such as allowing you to access sessions you have previously generated or completed.
The information stored may change as Modul8 evolves. For example, session history may be replaced or supplemented by functionality allowing users to save favourite sessions.
Our lawful basis for processing this information is performance of a contract, as it is necessary to provide the relevant Modul8 functionality.
Information Used to Generate Sessions
When you ask Modul8 to generate a breathing session, information required to generate that session is sent securely to our backend and may be processed using OpenAI’s services.
This information is used to generate the breathing session you have requested.
Our lawful basis for this processing is performance of a contract, as the processing is necessary to provide the session-generation functionality you have requested.
You should not enter sensitive personal information into Modul8 when it is not necessary to generate your session.
Analytics
Modul8 uses Google Analytics for Firebase to understand how the app is used and to help us improve its functionality and user experience.
Analytics information may include:
- interactions with app features;
- app usage and events;
- device and app information; and
- technical information associated with use of the app.
Our lawful basis for this processing is our legitimate interests in understanding how Modul8 is used and improving the app, its functionality and user experience.
We do not use analytics information to sell your personal information or for our own advertising purposes.
Crash and Diagnostic Information
Modul8 uses Sentry to help identify crashes, errors, performance problems and other technical issues.
Diagnostic information may include information about the app, device, operating system, errors and the circumstances surrounding a crash or technical problem.
Our lawful basis for this processing is our legitimate interests in maintaining and improving the reliability, security and performance of Modul8.
How We Use Information
We use information collected through Modul8 to:
- provide and operate the app;
- authenticate and manage user accounts;
- generate breathing sessions requested by users;
- store and retrieve sessions associated with your account;
- understand how Modul8 is used;
- diagnose crashes and technical problems;
- improve the app, its features and user experience; and
- maintain the security and reliability of the service.
We do not sell your personal information.
Third-Party Services
Modul8 relies on third-party service providers to provide parts of the service.
Google Firebase
Modul8 uses Google Firebase services, including Firebase Functions, to provide backend functionality and Google Analytics for Firebase to understand app usage.
OpenAI
Modul8 uses OpenAI services to generate breathing sessions. Information required to generate a session may be processed by OpenAI when you request a generated session.
Information is sent to OpenAI only where required to provide the session-generation functionality.
Sentry
Modul8 uses Sentry for crash reporting, diagnostics and application monitoring.
These providers process information in accordance with their respective privacy policies and applicable data-processing arrangements.
International Data Processing
Some of the service providers used by Modul8 operate internationally, including in the United States. Personal information may therefore be processed outside the United Kingdom.
Where personal information is transferred outside the United Kingdom, we take reasonable steps to ensure that appropriate safeguards are in place as required by applicable data-protection law. These may include recognised international data-transfer mechanisms and contractual safeguards.
Data Retention
We retain personal information only for as long as it is reasonably necessary for the purposes for which it was collected.
Account and session data is retained while your Modul8 account remains active. When you delete your account, personal data associated with that account will be deleted, except where limited retention is required or permitted for legal, security or regulatory purposes.
Analytics information is retained according to the retention settings configured for the analytics services used by Modul8.
Crash and diagnostic information is retained according to the retention settings configured for our diagnostic and monitoring services.
We periodically review our retention practices and aim to retain personal information for no longer than necessary for the purpose for which it is processed.
Account and Data Deletion
You may request deletion of your Modul8 account and the personal data associated with it.
Account deletion can be initiated through Modul8 or through the account deletion facility provided on the Modul8 website.
If you are unable to use these facilities, you can use the account deletion request page or contact us at [email protected].
Deleting your account will result in deletion of personal data associated with your Modul8 account, subject to any limited information that we are legally required or otherwise permitted to retain.
Data Security
We use appropriate technical and organisational measures designed to protect personal information processed by Modul8.
Information transmitted between Modul8 and its backend services is protected using secure network connections.
Access to personal information is restricted where appropriate to the systems and services necessary to operate Modul8.
However, no electronic storage or transmission method can be guaranteed to be completely secure.
Health Information
Modul8 provides breathing and relaxation exercises, but the current version of the app does not collect heart rate, breathing rate, Health Connect data or other physiological health measurements.
If Modul8 introduces features that collect health or physiological information in the future, this Privacy Policy will be reviewed and updated as necessary before those features are made available.
Children’s Privacy
Modul8 is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13.
If you believe that a child has provided personal information to Modul8, please contact us at [email protected] so that we can take appropriate action.
Your Data Protection Rights
If UK data-protection law applies to you, you may have rights concerning your personal information.
Depending on the circumstances, these may include the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information;
- request restriction of the processing of your personal information;
- object to certain processing, including processing based on legitimate interests; and
- request a copy of certain personal information in a portable format.
Where processing is based on our legitimate interests, you have the right to object to that processing. We will consider your objection in accordance with applicable data-protection law.
To exercise any of these rights, contact us at [email protected].
You also have the right to make a complaint to the UK Information Commissioner’s Office (ICO) if you are concerned about how we have handled your personal information.
We encourage you to contact us first so that we have an opportunity to address your concerns.
Changes to This Privacy Policy
We may update this Privacy Policy as Modul8 develops, including when new features, data-processing activities or service providers are introduced.
When we make changes, we will update the version number and “Last updated” date at the top of this policy.
Where appropriate, we may also notify users of significant changes within the app.
Contact Us
If you have questions about this Privacy Policy, how Modul8 handles your personal information, or would like to exercise your data-protection rights, contact:
Modul8
Email: [email protected]