Privacy Policy.

GYST ("we", "our", or "us") is operated by Shubhang Sharma. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights around it.

By using GYST, you agree to this policy.

We collect only what is necessary to run the app:

• Account information — your email address when you sign up.
• App usage data — session frequency and feature usage (breathing sessions, journal entries, AI reflections). This helps us understand how the app is being used so we can improve it.
• Journal entries — text you enter during reflection prompts. This content is private to you and is not shared with anyone.
• Device information — device type and operating system version, used only for troubleshooting.

We do not collect:

• Your name (unless you provide it)
• Location data
• Payment information (processed entirely by Apple)
• Health or medical records
• Any data from other apps on your device

We use your data to:

• Provide and maintain the GYST app
• Respond to support requests
• Improve the product based on usage patterns

We do not sell your data. We do not share your data with advertisers. We do not use your data for any purpose beyond running GYST.

GYST uses the following third-party services to operate:

• Supabase — secure database storage for your account and journal data. Supabase is SOC 2 compliant. See their privacy policy at supabase.com/privacy.
• OpenAI — powers the AI reflection feature. Your journal entry is sent to OpenAI to generate a single response. OpenAI does not use API data to train their models. See their privacy policy at openai.com/privacy.
• Apple — handles all payments and app distribution. See Apple's privacy policy at apple.com/privacy.

Your data is stored securely using Supabase infrastructure. We use encryption in transit (HTTPS) for all data. We retain your data for as long as your account is active.

You have the right to:

• Access your data — email us and we will tell you what we hold.
• Delete your data — email shubhanggyst@gmail.com with the subject "Delete My Account." We will remove all your data within 7 business days.
• Correct your data — if anything is inaccurate, email us and we will fix it.

GYST is not intended for users under the age of 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

We may update this policy from time to time. If we make significant changes, we will notify users via email or an in-app notice. The date at the top of this page will always reflect the most recent update.

For any privacy-related questions or requests:

• Shubhang Sharma
• shubhanggyst@gmail.com
• gystapp.xyz