Privacy Policy

1. Scope and who we are

This Privacy Policy explains how Hapa Willow LLC (“Hapa Willow,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use the Senshin mobile application, its downloadable Resets, related application programming interfaces, and associated services (collectively, the “Service”).

Senshin is built, provided, and distributed by Hapa Willow LLC, a California limited liability company.

2. Information we collect

2.1 Account information

When you sign in with Apple, we may receive and store:

• a unique identifier associated with your Apple sign-in;
• your email address, which may be an Apple private relay address;
• your first and last name, if Apple provides them and you choose to share them;
• an internal Senshin user identifier; and
• authentication-session records and securely hashed refresh tokens.

Apple controls what information it provides through Sign in with Apple. We do not receive your Apple ID password.

2.2 Device and app information

We collect limited device and app information, such as:

• a randomly generated app installation identifier;
• device platform;
• app version;
• the date and time the installation was last seen by the Service; and
• preferred app language stored on your device.

The installation identifier helps us distinguish app installations, synchronize activity, manage downloaded Resets, and protect accounts. It is not an advertising identifier.

Senshin does not request or collect your precise location, contacts, photos, camera data, or microphone recordings. We do not collect an advertising identifier or request permission to track you across other companies’ apps or websites.

2.3 Reset activity and responses

We collect information about how you use Resets so that we can provide your history and progress features and understand how Senshin performs. Depending on the Reset, this can include:

• the Reset, Reset version, and experience engine used;
• when a session started and ended;
• the session’s completion status and active duration;
• local calendar day and time zone;
• technical values used to reproduce or operate an experience, such as a seed;
• Reset result data and responses, including whether you reported a benefit, whether you noticed a pattern, or how many repetitions you completed, where applicable; and
• installed Reset, version, installation state, and integrity information.

This information powers features such as completed-session counts, active minutes, streaks, recent activity, Reset-use frequency, and your record of what you reported worked for you. We also plan to use this information to recommend Resets based on your past use and responses. It helps us improve Resets, diagnose failures, understand product usage, and decide what to build.

Activity and responses may relate to your wellness interests, but Senshin is not a healthcare provider and does not create medical records. Please do not enter or send medical details or other sensitive information unless a Service feature specifically asks for it.

2.4 Subscription and entitlement information

Senshin+ is offered as a monthly subscription, not as a one-time in-app purchase. If you subscribe through the Apple App Store, Apple processes the payment. RevenueCat helps us manage subscription status. We may receive and store limited information needed to provide access, such as:

• your Senshin user identifier and RevenueCat customer identifier;
• subscription product identifier and entitlement status;
• transaction or original transaction identifiers; and
• subscription start, renewal, expiration, cancellation, or revocation events.

We do not receive or store your full payment-card number. Apple’s handling of your purchase and payment information is governed by Apple’s privacy policy.

2.5 Notification information

If you enable notifications, Senshin stores your notification preferences on your device, such as whether daily reminders or announcements are enabled and, for a daily reminder, the selected time and Reset category. Local reminders and setup prompts are scheduled and delivered by your device.

If you enable push announcements while signed in, we may receive and store an Expo push token together with your Senshin user identifier, installation identifier, device platform, app version, enabled status, and registration timestamps. We use this information to send occasional Service or Reset announcements, maintain push delivery, and stop using invalid or disabled tokens. Notification content may include a destination within the app.

2.6 Technical and support information

When the app communicates with our systems, we and our infrastructure providers may automatically process technical information such as request identifiers, request route, time, response status, latency, app version, network address, and error details. We use this information to deliver and secure the Service, troubleshoot problems, and monitor reliability.

If you contact us, we collect the information you choose to include in your message, such as your contact details, the content of your request, and related correspondence.

3. Local storage and synchronization

Senshin stores account settings, Reset files, installation records, and session history in local storage on your device. When you are signed in, completed and other finalized session records may be synchronized with our systems so that your history can be associated with your account and made available across supported installations.

Removing Senshin from your device may remove its local database and downloaded Reset files, subject to Apple’s device, backup, and restoration behavior. Authentication credentials stored in the iOS Keychain may persist after app removal. Sign out before removing the app if you want Senshin to clear its locally stored sign-in credentials. Removing the app does not by itself delete information previously synchronized to our systems.

4. How we use information

We use information to:

• authenticate you and maintain your account;
• provide, synchronize, and restore your Reset history and progress;
• deliver, verify, update, and manage Resets;
• verify Senshin+ subscriptions and provide premium Reset access;
• show you useful summaries, including what you completed, how often you use Resets, time spent, streaks, and what you reported worked for you;
• recommend Resets based on your past Reset activity and responses;
• schedule optional local reminders and send optional push announcements when enabled;
• understand use of the app and individual Resets, evaluate outcomes reported in the app, improve the product, and develop new features;
• operate, maintain, debug, secure, and prevent misuse of the Service;
• respond to support requests and communicate about the Service;
• enforce our Terms and protect our users, rights, and property; and
• comply with applicable law.

Where required, we rely on your consent to process information. We may also process information as needed to provide the Service you request, for our legitimate interests in operating and improving Senshin, and to comply with legal obligations.

5. No sale, advertising, or third-party tracking

We do not sell your personal information. We also do not “share” personal information as that term is defined by California law for cross-context behavioral advertising.

Senshin does not display third-party advertising. We do not use third-party advertising trackers, advertising identifiers, data brokers, or tracking technologies designed to follow you across apps or websites for advertising.

We may analyze Service activity ourselves to understand use and improve Senshin. This first-party product analysis is not used to target advertising.

6. When information is disclosed

We do not disclose personal information to third parties for their own advertising or marketing. We may disclose limited information in the following circumstances:

• Service providers. Vendors may process information on our behalf only as needed to provide infrastructure, authentication, app distribution, purchase processing, notification delivery, content delivery, security, or support.
• Legal and safety reasons. We may disclose information if we reasonably believe it is required by law or necessary to protect a person, prevent fraud or abuse, investigate security issues, or protect our rights and property.
• Business transfers. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable law.
• At your direction. We may disclose information when you direct us to or give us consent.

We may use and disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to you. We will not attempt to re-identify it except to test our de-identification methods or as permitted by law.

7. Service providers

Providers used to operate Senshin include:

• Apple, for Sign in with Apple, App Store distribution, in-app subscriptions, refund processing, and platform services;
• RevenueCat, for subscription status, entitlement verification, and purchase restoration;
• Expo, for push-token registration and push-notification delivery; and
• Cloudflare, for application programming interfaces, databases, object storage, networking, security, logging, and content delivery.

These providers process information under their own terms and privacy policies as well as, where applicable, agreements requiring them to provide services to us. Their systems may process information in the United States and other countries.

8. Features Senshin does not provide

Senshin does not provide person-to-person communication, comments, public profiles, user posts, or a feature for publishing user-generated content. Accordingly, we do not collect contact lists, private messages, comments, or public posts for those purposes.

9. Data retention

We retain account information, synchronized Reset activity, entitlement records, and enabled push registrations while your account is active and as reasonably needed to provide the Service. Push registrations may be disabled or invalidated when you turn off announcements or when a token is no longer valid. We may retain some records longer when needed for security, fraud prevention, dispute resolution, transaction records, enforcement of agreements, backup integrity, or legal compliance.

Retention periods vary based on the type of information and why we process it. When information is no longer needed, we delete or de-identify it in accordance with our operational processes, except where continued retention is permitted or required by law.

10. Your choices and privacy rights

Depending on where you live, you may have the right to:

• request access to or a copy of personal information about you;
• request correction or deletion;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request data portability; or
• appeal our decision regarding a privacy request.

You may request account-data deletion or exercise another privacy right by emailing support@senshin.app. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, subject to verification of their authority.

We will not discriminate against you for exercising an applicable privacy right. We do not sell personal information or share it for cross-context behavioral advertising, so there is no need to opt out of those practices.

You can manage information shared through Sign in with Apple in your Apple account settings. Purchase and refund choices are managed through Apple.

You can manage daily reminders and push announcements in Senshin’s settings and manage notification permission in your device settings. Turning off announcements stops future announcement delivery to that installation, subject to requests already in transit.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These include access controls, protected authentication credentials, secure platform storage, and encrypted network transport where appropriate. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

12. Children’s privacy

Senshin is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us so that we can investigate and delete it as appropriate.

Users who are under the age of majority where they live should use Senshin only with permission from a parent or legal guardian.

13. International data processing

Hapa Willow is based in the United States. We and our providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. Where required, we use appropriate safeguards for international transfers.

14. Changes to this Policy

We may update this Privacy Policy to reflect changes to Senshin, our practices, or the law. We will post the updated Policy and revise the effective date. If changes are material, we will provide additional notice where reasonably required.

15. Contact us

For privacy questions or requests, email support@senshin.app.