This Privacy Policy explains how Lock Out Inc. ("we," "us," "808") handles information in the 808 app for iPhone and Apple Watch.
The short version
808 is built to be private by design:
- We don't run a server and we can't see your data. Your account, preferences, and session log sync through your own private iCloud account (Apple's CloudKit). Your health results (heart-rate trend, stillness, breathing rate, and Apple's heart-rate-variability readings when your Watch produces them) are stored only on the device that recorded them — the app never uploads them anywhere, not even to iCloud. We have no backend that receives or stores your personal or health information.
- We don't sell your data, run ads, or track you. There are no advertising identifiers and no cross-app tracking. We collect anonymous usage analytics (which features are used, not what your body measured); see "Usage analytics" below.
- Your health data never leaves your devices. It's measured on your Apple Watch and turned into your session results; we never use it for advertising and never share it.
- We don't know what you listen to. 808 measures in the background so you can play a meditation from YouTube or any other app. We receive no information about what you play, and we have no connection to those services.
- You can delete everything at any time from Settings → Delete Account.
Information the app handles
Account information. When you sign in with Sign in with Apple, the app receives and stores a unique Apple user identifier, and — only if you choose to share them — your name and email address (which may be an Apple private "Hide My Email" relay address). You may also set a display name and choose whether to receive product emails.
Health and motion data. During a session, your Apple Watch measures your heart rate (via Apple HealthKit) and movement (via the motion sensors). The Watch processes these into your session results — a heart-rate trend (averaged, not beat-to-beat), a stillness measure, a breathing rate, Apple's heart-rate-variability (SDNN) readings when your Watch happens to produce them, and a summary score. Important details:
- The app requests HealthKit permission only for heart rate, heart-rate variability (SDNN) and workouts. Heart rate is read live during a session only. HRV is read as Apple's own passive samples, including up to 30 days of them, solely to give your readings a baseline. Nothing else in your Health history is read.
- We store the computed results, not raw biometric samples. The iPhone reads no biometric data directly.
- Measurement runs only during a session you start, and stops when the session ends. It does not run in the background at other times.
- Saving a session card is the only time we touch Photos. If you tap Share on a result, 808 can save that card as an image to your photo library. It uses add-only access, which means it can add that one image and cannot see, read, or browse anything already there.
Sessions run in the background. So that you can listen to whatever you like while you practice, a session keeps measuring on your Apple Watch after you leave the 808 app on your phone. This does not change what we collect: the same heart rate and movement, only during the session, only on your own devices.
Session and app data. Session dates, durations, the type of session, your results and streak, and your preferences (theme, haptics, reminder time, default length).
Usage analytics. The app sends us anonymous usage events so we can see which features are used and where people get stuck: things like "a session was started", "a session was completed" with its rough length, which onboarding screens were completed, and whether a subscription screen was viewed. These events are processed for us by PostHog, Inc. on servers in the United States, under an anonymous identifier created for your install. They are never linked to your name, email, or Apple ID.
Your measurements are never in those events. No heart rate, breathing values, stillness, scores, or anything derived from your body's signals is ever included, at any precision. Your health results stay on your device, exactly as described above.
What we do NOT collect. We do not collect your location, contacts, photos, camera or microphone data, or browsing activity. We do not access, monitor, or receive any information about other apps you use or the audio, video, or media you play while a session runs. We use no advertising identifiers and no cross-app or cross-website tracking.
Where your information lives and who can access it
Your information lives in two places, by design:
- Health results stay on your device. Your session measurements — the heart-rate trend, stillness, breathing-rate and heart-rate-variability results — are stored only in the app's local storage on the device that recorded them. The app never syncs them to iCloud or anywhere else.
- Account and session log sync privately. Your account info, preferences, and the log of your sessions (dates, durations, types, ratings) sync to your personal private iCloud database using Apple's CloudKit, so they survive reinstalls and follow your own devices.
We do not operate servers that store your data, and we cannot access the contents of your private iCloud database. Apple processes this data under Apple's Privacy Policy.
How the information is used
- To provide the app: run sessions, compute and show your evidence and history, and sync across your own devices.
- To send a daily reminder, only if you enable it (a local notification scheduled on your device).
- To send product emails, only if you opt in and provide a non-relay email. If you opt in, your email address may be shared with our email delivery provider solely to send those messages; you can opt out any time in Settings.
We never use your health or motion data for advertising, and we never sell it.
Third-party apps and media you choose
808 is designed so that you can play a meditation, music, or a video from any other app or website while it measures. Those services are not affiliated with us, not integrated with 808, and not under our control. We do not embed them, communicate with them, or receive any data from them, and your use of them is governed by their own terms and privacy policies, not ours.
Our website and waitlist
If you enter your email address on our website to join the launch waitlist, we collect only that email address and, if you check the box, whether you own an Apple Watch. If you fill out our optional questionnaire, we collect only the answers you choose to give about your meditation habits and interest in the app. We use this to tell you when 808 is available and to shape the product. We do not sell or share it, and every email includes an unsubscribe link — or you can email us and we will remove you. The website is separate from the app: using it does not create an account, and it involves no health data of any kind.
Third parties
- Apple — Sign in with Apple, HealthKit, CloudKit/iCloud sync, and App Store distribution, governed by Apple's terms.
- Email delivery provider — only your email address, and only if you opt into product emails or join the website waitlist. The provider stores the address in order to send those emails and does not receive any health data.
- Website form processing — waitlist and questionnaire responses are stored in a spreadsheet hosted by Google. No health data is collected there.
- PostHog, Inc. — anonymous usage analytics for the app, as described under "Usage analytics". PostHog receives feature-usage events under an anonymous identifier and never receives health data, your name, or your email.
- Audio in the app is bundled with the app; playing it sends no data about you.
We otherwise do not share your information with third parties, and we do not use health data with any third party for advertising.
Data retention and deletion
We keep your data until you delete it. Settings → Delete Account signs you out and marks your account for deletion; your account and all associated data are then permanently removed within 30 days. Signing back in before then restores it. You can also delete the app; to remove synced data, delete the app's data from your iCloud settings.
Your choices and rights
- Access / delete: your data is in the app; you can delete all of it via Delete Account.
- Product emails: opt in/out in Settings.
- HealthKit: you control heart-rate and workout permissions in the iOS/watchOS Health and privacy settings at any time.
- Depending on where you live (e.g., the EU/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, or delete your information, and to not be discriminated against for exercising them. Because we hold no copy of your data on our own servers, most requests are fulfilled directly through the app's deletion controls. Contact us with any questions.
Consumer health data
This section supplements the rest of this policy for laws that specifically protect consumer health data (such as the Washington My Health My Data Act) and applies to all users.
- Categories we process: heart rate measured during a session you start; motion-derived measurement of how still your body was; and the session results computed from them.
- Source: the sensors of your own Apple Watch, via Apple HealthKit and CoreMotion, only while a session you started is running.
- Purpose: solely to compute and show you your own session results. No other use.
- Consent: the app asks for your consent in-app before any measurement, and Apple's HealthKit permission prompt independently controls heart-rate access.
- Sharing and sale: we do not sell consumer health data, and we do not share it with anyone. It is processed on your devices; we never receive it.
- Your rights: view your results in the app at any time; delete them via Settings → Delete Account (which removes all app data) or by deleting the app from the device holding the results. For questions or requests, contact us at support@meditate808.com.
Children
808 is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Security
Your data is protected by your device's security and by Apple's encryption of iCloud data. No method of storage or transmission is 100% secure, but because we operate no servers holding your personal or health data, the attack surface for that data is limited to your own device and Apple's infrastructure. Anonymous usage events are held by PostHog under its own security practices.
Changes to this policy
We may update this policy; we'll revise the "Last updated" date and, for material changes, provide notice in the app. Continued use after an update means you accept the revised policy.
Contact
Questions about this policy or your data: support@meditate808.com.