Respira — Privacy Policy
Last updated: 6 October 2026
1. Information we collect
Account data: When you sign up we collect your name, email address and password (encrypted). If you sign in with Google or Apple, we receive your name and email from those providers.
Location data: We ask for your location (city, region, country) to show you pollen levels and air quality for your area. You can pick your location manually without granting GPS access. You may also save additional locations (for example "Home" or "Work"), which are stored with their coordinates and synced between your devices.
Trip data: If you plan a trip in the app, we store the destination (city and coordinates) and the trip dates so we can show you the pollen forecast for that place and send you related alerts. You can delete your trips at any time.
Health data (diary): The symptoms, severity, medication and notes you record in your personal diary. With each entry we also store that day's pollen and air-quality levels for your location, and which source provided them. This data is private and only you can access it.
Preferences: Settings such as font size, selected allergens and notification preferences.
Notifications: If you enable notifications, we store a technical identifier for your device (a push notification token) so we can send you alerts about pollen levels and your trips. Delivery goes through the Expo service and your operating system's notification service. You can turn them off at any time in the app or in your device settings.
Purchase data: If you subscribe to Respira Pro, your transaction is processed by the Apple App Store or Google Play Store. We do not store payment details (card, bank account). Your subscription status is managed through RevenueCat (see section 4).
Usage data (analytics): To understand how the app is used and improve it, we collect interaction events (screens viewed, actions taken) and app lifecycle events (launch, foreground). These events are linked to an internal user identifier so they are not double-counted across devices, which makes them pseudonymous rather than anonymous. They contain no clinical data whatsoever: not the contents of your diary, not your symptoms, not their severity, not which medications you take, not which allergies you have — not even a count of them. You can turn this collection off entirely under Profile → About Respira → "Share usage data". See section 4 for the provider.
Error reports: When the app fails, we send a technical crash report: the type of error, the stack trace of the code where it happened, and device data (model, operating system version, app version). It is used only to find and fix bugs. It does not include the contents of your diary. It is turned off by the same switch as analytics.
Survey answers: Occasionally we may show you a short survey inside the app — for example when you close the subscription screen. Answering is voluntary and you can dismiss it. If you answer, we store the option you pick and, if you write free text, that text. Please do not include personal or health information in those answers.
2. Advertising
Respira shows ads through Unity LevelPlay (formerly ironSource) to users on the free version. Respira Pro users see no ads at all.
Non-personalized by design. Before the advertising SDK is initialised, Respira instructs it not to use your data for personalised advertising and not to sell or share it. The ads you see are contextual, not based on a profile of you. If those instructions cannot be applied for any reason, the app does not initialise the advertising SDK at all — it shows no ads rather than personalised ones.
Ad formats: Respira uses adaptive banners on the home screen and interstitials shown occasionally when moving between sections of the app (with a frequency cap and an initial grace period after opening the app). These ads are supplied by Unity LevelPlay and its partner networks.
App Tracking Transparency: On iOS you may be asked for permission to track. Respira does not build advertising profiles and does not share your diary. Respira Pro users are not asked at all.
3. Cookies and analytics on the website (respiraapp.fit)
This section covers the website only, not the app. We use PostHog Cloud EU to see, in aggregate, how many visits each page gets and where they come from (for example, a search engine or a link). We collect the page visited, the referring page, and basic technical browser data. We do not use this for advertising and we do not link it to your app account.
We ask for your consent before turning it on. On your first visit you'll see a notice with the option to accept or decline. If you decline, or make no choice, no analytics script loads. You can change your choice by clearing this site's data in your browser, which brings the notice back.
Android waitlist. Respira is not on Android yet. If you visit from an Android phone, you can leave your email so we can tell you when it is. We store only that email, the page's language, the page you signed up from, the date, and the version of the consent text you agreed to. We use it for one thing only: to email you once, on the day Respira comes to Android. We do not use it for advertising or any other message, we do not share it, and we do not link it to any app account. The legal basis is your consent, which you can withdraw at any time by writing to respiraapp.info@gmail.com; we will delete your email. It is stored on Supabase (EU), in a table separate from app accounts, with no public access.
4. Third-party services
- Supabase (storage and authentication): Your account and diary data are stored on AWS servers in the European Union. Supabase privacy policy.
- RevenueCat (subscription management): Processes your user identifier and transaction data to manage the Respira Pro subscription. Stores no payment details. RevenueCat privacy policy.
- Unity LevelPlay (advertising): Serves non-personalized ads in the free version. LevelPlay mediates several advertising networks and processes what is needed to serve the ads. Unity privacy policy.
- Expo (push notifications): When you enable notifications, the Expo service processes your device token and the contents of the alerts (pollen levels, trip reminders) to deliver them. Expo privacy policy.
- PostHog Cloud EU (usage analytics, error reports and surveys): In the app, processes pseudonymised interaction events, technical crash reports and any answers you submit to in-app surveys. On the website, processes page views and their referrer (see section 3), only if you gave consent. Data is stored on servers in the European Union under the GDPR. It is not used for advertising and is not shared with third parties for marketing. PostHog privacy policy.
- Open-Meteo (environmental data): Receives geographic coordinates to provide pollen and air quality data. Receives no personal data.
- Google Pollen API (pollen data in the United States, Australia, New Zealand, Argentina and Chile): Receives only approximate geographic coordinates in order to return pollen levels for that area. Coordinates are rounded to a cell of roughly 39 × 20 km before being sent, and the request is made by our server, not by your device: Google does not receive your identifier, your IP address or any account data. It is used only for locations in the United States, Australia, New Zealand, Argentina and Chile, where the European model has no coverage. Google privacy policy.
5. How we use your information
To show you pollen levels and air quality for your locations, to send the alerts you have configured, to keep your diary in sync across your devices, to produce the report you can export for your allergist, to manage your subscription, and to understand how the app is used so we can improve it.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
6. Storage and security
Your data is stored securely on Supabase (Amazon Web Services infrastructure in the EU). Access is protected by authentication and row-level security policies, so one account cannot read another's data. Your diary never leaves your account.
7. External data sources
Pollen and air quality data come from:
- Open-Meteo Air Quality API (open data, CC BY 4.0), based on the Copernicus CAMS model, for Europe
- Google Pollen API for locations in the United States, Australia, New Zealand, Argentina and Chile, where the European model has no coverage
- Spanish Aerobiology Network (REA) for monitoring stations in Spain
- POLLnet (ISPRA/SNPA) for monitoring stations in Italy
- Deutscher Wetterdienst (DWD) for regional pollen data in Germany
We do not send your personal data to these services. We send geographic coordinates only.
8. Your rights
Wherever you live, you can access, correct, export and delete your data from within the app, and you can delete your account entirely at respiraapp.fit/en/delete-account.
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the rights of access, rectification, erasure, portability, restriction and objection, and the right to lodge a complaint with your national data protection authority. In Spain that is the Agencia Española de Protección de Datos.
9. Your California privacy rights
This section applies if you are a California resident, under the California Consumer Privacy Act as amended by the CPRA.
Categories of personal information we collect: identifiers (name, email, an internal user identifier, a push notification token); commercial information (your subscription status); internet activity (which screens you open in the app); approximate geolocation (the city or coordinates you choose — we do not collect precise background location); and health information you choose to enter in your diary.
Why we collect it: to provide the features described in section 5. We do not use it for any purpose that is incompatible with those.
We do not sell or share your personal information. We do not sell personal information as "sale" is defined by the CCPA, and we do not share it for cross-context behavioural advertising. Because of that, no "Do Not Sell or Share My Personal Information" link is required — there is nothing to opt out of. The advertising SDK is instructed not to sell or share your data before it is initialised, on every launch, for every user.
Sensitive personal information: your diary may contain health information, which California treats as sensitive. We use it only to provide the diary and the report you export yourself. We do not use or disclose it to infer characteristics about you, and it is never sent to our analytics provider.
Your rights: to know what we collect and why, to delete it, to correct it, to obtain a portable copy, and not to be discriminated against for exercising any of these. To exercise them, email respiraapp.info@gmail.com or use the deletion page linked above. We will verify your request through the email address on your account.
10. Data retention
We keep your data for as long as your account exists. When you delete your account, your account data and diary are deleted from our servers. Pseudonymised analytics events are retained by our analytics provider under its own retention schedule and are not linked to your identity once the account is gone.
Android waitlist emails are deleted after the launch notice is sent, or 12 months after you signed up if Respira has not come to Android by then, whichever comes first.
11. Children
Respira is not directed to children. We do not knowingly collect data from children under 13 in the United States, or under 16 in the European Economic Area. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes through the app.
13. Contact
If you have questions about this privacy policy, contact us at:
Email: respiraapp.info@gmail.com