Privacy Policy

Last updated: April 3, 2026

1. Who are we?

Sloow is a wellness app that uses guided breathing exercises and heart rate variability (HRV) tracking to support relaxation. The app is published by Kevin Duchier.

Contact: kevin.duchier@sloow.app

2. What data do we collect?

Essential data (required for the app to work)

Data	Why	Retention
Email address	Account creation, login	Until account deletion
Heart rate variability (RMSSD, SDNN, heart rate)	Track your progress	Until account deletion
RR intervals (beat-to-beat)	Compute your HRV	Until account deletion
Session parameters (duration, level, subjective rating)	Personalize your program	Until account deletion
Polar H10 / Kyto sensor data (if connected)	Precise HRV measurement	Until account deletion

Optional data (with your consent)

Data	Why	Retention
Anonymized session data	Product improvement and internal research	Until consent withdrawal

Anonymized data contains no name, email, or direct identifier. It is linked to a non-reversible pseudonym.

Data we do NOT collect

• GPS location
• Contacts
• Photos or videos (camera is used only for finger PPG measurement, no images are stored)
• Web browsing data
• Advertising identifiers

3. Legal basis

Processing	Legal basis (GDPR)
App functionality	Performance of contract (Art. 6.1.b)
Health data processing (HRV)	Explicit consent (Art. 9.2.a)
Anonymized research contribution	Explicit consent (Art. 6.1.a + Art. 9.2.a)

You can withdraw consent at any time from the app (Profile → My Data → Anonymous contribution).

4. Where is your data stored?

Your data is stored on Google Firebase servers located in the European Union (europe-west region). Google Cloud is ISO 27001 certified and GDPR compliant.

5. Who has access to your data?

• You: you can view and export all your data from the app
• Sloow team: access to anonymized data only, for product improvement
• Google (Firebase): hosting provider, data processor under GDPR (DPA signed)
• No one else: we never sell, share, or transfer your personal data to third parties

6. Your rights (GDPR Articles 15-22)

Right	How to exercise
Access (Art. 15)	Profile → My Data (in app)
Portability (Art. 20)	Profile → My Data → Export (JSON format)
Rectification (Art. 16)	Contact us by email
Erasure (Art. 17)	Profile → Account → Delete my account
Withdraw consent (Art. 7.3)	Profile → My Data → Anonymous contribution
Object (Art. 21)	Contact us by email
Restriction (Art. 18)	Contact us by email

Deleting your account removes all personal data, including anonymized data linked to your pseudonym.

7. Security

• Encryption in transit (TLS/HTTPS)
• Encryption at rest (Google Cloud)
• Email/password authentication (Firebase Auth)
• No plaintext password storage

8. Cookies and trackers

Sloow does not use cookies or advertising trackers. Our web analytics tool (Plausible) is privacy-friendly and collects no personal data. The mobile app does not integrate any third-party analytics SDK.

9. Children

Sloow is not intended for persons under 16. We do not knowingly collect data from minors.

10. Changes

We may update this policy. In case of substantial changes, you will be notified in the app. The last update date appears at the top of this document.

11. Contact and complaints

For questions or to exercise your rights:
kevin.duchier@sloow.app

You also have the right to file a complaint with your local data protection authority. In France: CNIL (www.cnil.fr, 3 Place de Fontenoy, 75007 Paris).

Last updated: April 2026