We Meditate App - Privacy Policy

We Meditate App

Last updated: 22 May 2026 · Effective: 22 May 2026

We Meditate is a free meditation app and website grounded in Sahaja Yoga. We believe your personal information deserves the same care and respect we bring to meditation itself — so we keep things simple, collect only what we need, and are upfront about how it all works.

This Privacy Policy explains what information we collect, why, and what choices you have. It covers the We Meditate websites (wemeditate.com and wemeditate.co), the We Meditate mobile app for iOS and Android, and any related services where this policy is displayed.

If anything here is unclear, just ask — you can reach us at [email protected] any time.

1. Who we are

We Meditate is operated by Life Eternal Trust (UK), a registered charity in England and Wales (number 292011), based at 14 Essex Road, Enfield, EN2 6TZ, United Kingdom.

For the purposes of data protection law, including the UK GDPR and, where applicable, the EU GDPR, Life Eternal Trust (UK) is the controller of your personal data.

You can contact us about anything in this policy — including to exercise your data-protection rights — by writing to the address above or emailing [email protected].

2. What this policy covers

This policy applies to the personal data we process about visitors, guests, account holders, class-finder users, newsletter recipients, support contacts and other users of We Meditate.

It does not cover third-party websites, apps, classes, events or services linked from We Meditate — those have their own privacy practices.

3. What We Meditate is — and is not

We Meditate offers guided meditation, educational content and spiritual-practice resources based on Sahaja Yoga. It is designed for general wellbeing, personal development and education.

We Meditate is not a medical service, mental-health service, psychotherapy service, counselling service, crisis service or emergency service. Nothing in the app or website is intended to diagnose, treat, cure or prevent any medical or psychological condition, or to replace advice from a qualified healthcare professional.

4. Who can use We Meditate

We Meditate is intended for adults. You must be 18 or older to create an account or use the app or website.

We do not knowingly collect personal data from people under 18. If we learn that we have collected personal data from someone under 18, we will delete it as soon as reasonably possible. If you are a parent or guardian and believe we hold information about a child, please contact us at [email protected].

App-store age ratings are content-suitability labels set by Apple and Google. They are separate from our minimum age. Even where the store age rating is lower than 18, only people aged 18 or older may use We Meditate under our Terms.

5. What information we collect

Information you give us

Your name and account details — first name, email address, sign-in method (Apple, Google, or email/password), and your account identifier.
Preferences and progress — whether you have tried Sahaja Yoga before, favourites, lesson progress, reminder settings, time zone, and theme preference.
Meditation and engagement data — whether you completed your first meditation, which meditations or lessons you started or completed, and your meditation history.
Wellbeing and practice data — post-meditation responses such as hand-sensation ("vibes") selections, mood selections, and other optional reflective or spiritual-practice inputs you choose to provide.
Support and feedback — messages, feedback, contact forms, and any other submissions you send us.
Class-finder inputs — city or location details you enter when looking for nearby classes, and reminder preferences for live sessions.

Information we collect automatically

Device and app data — device type, operating system, app version, language, time zone, and crash or performance information.
Anonymous usage data — what screens you view, which features you use, and aggregate patterns showing how the app is used (see Section 9).
Notification data — push token, installation identifier, and reminder settings.
Approximate class-finder location — only when you grant permission for the "find a class near you" feature. You can always search manually instead.
Website data — IP address, browser type, referring pages, pages viewed, and cookie identifiers when you use our websites.
Local device data — app settings, content caches, and similar data stored on your device for performance and continuity.

Information from third parties

Authentication providers — Apple or Google, when you use those sign-in methods.
Advertising and attribution providers — Meta, Google, and Apple — only where you have given us advertising permission (see Section 8).
Platform operators — Apple and Google, for app distribution and support.

Information we do not collect

We do not collect your phone number, date of birth, payment information, or full name. The app is free — there is nothing to buy. We do not collect your precise device location (such as GPS), and we do not transmit your device location to advertising or analytics providers.

6. How we use your information

We use your information to:

Run the service — deliver content, create and manage accounts, save preferences, sync progress across devices.
Personalise your experience — remember your name, tailor content recommendations, reflect your progress.
Send you essential service messages — account notices, security alerts, policy updates, and live-class reminders you have asked for.
Send you newsletters and updates about We Meditate, where you have the opportunity to opt out (see Section 10).
Help you find classes — use your location or manual search to show nearby Sahaja Yoga classes.
Improve the service — understand usage patterns, fix bugs, monitor performance (see Section 9).
Measure the impact of our outreach and advertising — only where you have given us advertising permission (see Section 8).
Keep things safe — detect misuse, secure accounts, and protect users and the service.
Comply with the law — meet legal obligations, respond to lawful requests, and defend legal claims.

7. Our legal bases for processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

Contract — to provide the service you have asked for (account management, content delivery, progress sync, support).
Legitimate interests — to operate, secure, and improve We Meditate; to send service messages where contract does not apply; to send charitable newsletters under the charitable-purposes soft opt-in described in Section 10; and to defend legal claims.
Consent — for advertising measurement and audience tools (Section 8); for app tracking permission on iOS; for push notifications; for class-finder location access; and for processing certain optional wellbeing or spiritual-practice inputs that may reveal beliefs or relate to your health (Section 11).
Legal obligation — where we must process data to comply with the law.

For special-category data (such as information that may reveal religious or philosophical beliefs, or that relates to your wellbeing or health), we rely on your explicit consent under Article 9(2)(a) of the UK GDPR.

8. Advertising, attribution and audience tools

The We Meditate app is funded by donations and grants. We do not show ads inside the app. We do, however, advertise We Meditate on platforms like Meta (Facebook and Instagram), Google and Apple Search Ads to reach people who may be looking for what we offer.

To do this without wasting our limited budget, we ask your permission separately — through an in-app screen called "Help spread the word" — before sharing any information with these advertising platforms. This permission is off unless you choose to turn it on. Nothing is sent to any advertising platform unless you give this permission.

If you give this permission:

On iPhone and iPad, we will then show you the standard Apple "App Tracking Transparency" prompt, which asks whether the app may use your device's advertising identifier. If you choose not to allow tracking, we respect that choice — no advertising identifier is used, and measurement falls back to Apple's privacy-preserving attribution system, which is designed to measure ad results without identifying you.
We may share with Meta, Google and Apple Search Ads a limited set of app-activity signals — for example, "app installed", "account created", or "first meditation completed" — together with technical identifiers such as an installation ID and, where you allowed tracking on iPhone or iPad, the advertising identifier. On Android, an equivalent advertising identifier may be used where your Android privacy settings allow it.
These platforms may use this information to (a) measure how effective our outreach is, (b) avoid showing our ads to people who already use We Meditate, (c) re-engage people who tapped one of our ads, and (d) help us find new people whose interests look similar to those of existing supporters.
When these platforms model "similar audiences" for us, they do so within their own systems and act as data controllers in their own right; please see that platform's privacy policy for details.

What we never share with any advertising or attribution partner:

your name, email, account password, or sign-in credentials;
your meditation history, the meditations you played, your reflections, journal entries, mood selections, or hand-sensation ("vibes") inputs;
your precise (GPS) device location; and
any information you provide in feedback or support.

A note about country and region. Whenever your device connects to any internet service — including an advertising or analytics service — the receiving server can see your device's IP address, and from that may infer your approximate country or region. We do not send your location ourselves. This is a normal part of how the internet works and is not something any app or website can switch off.

Finding "similar audiences" is a form of automated modelling carried out by the advertising platform, using the basic activity signals we send (for example, "completed first meditation") to find comparable people on the platform's own network. We do not receive identifying information about the new people they reach, and this does not produce legal or similarly significant effects on you.

We never sell your personal data, in any sense of "sell" used in UK, EU, California or other US state privacy laws.

You can turn this permission off at any time in Profile → Privacy & Advertising. When you do, we stop sharing activity signals with the advertising and attribution platforms. Information those platforms have already received remains subject to their own retention rules, but we will not refresh or add to it, and we will remove your details from any audience we have created where the platform allows this.

The detail of exactly what is and is not shared is set out in Section 8.1.

<a href="https://">8.1 What we share — in detail</a>

When advertising permission is turned on, we share with Meta, Google, and Apple (Apple Search Ads) only:

an installation identifier (a random ID generated by your device);
on iPhone or iPad, where you also allowed tracking, your device's advertising identifier — otherwise none;
on Android, the advertising identifier where your Android privacy settings permit it;
app-activity signals strictly limited to events such as: app installed, app first opened, account created, first meditation completed, and returning to the app — that is, simple milestones that show whether our outreach is working;
standard technical information that any such connection includes automatically (IP address, device and app type, language, time zone, app version);
Apple's privacy-preserving attribution values, which Apple aggregates and delays specifically so that no individual user can be identified from them.

We never share with Meta, Google, Apple, our analytics providers, or any other third party:

your meditation history or which meditations you played;
your post-meditation reflections, mood selections, or hand-sensation ("vibes") inputs;
any journal-style entries, goals, or other spiritual-practice or wellbeing content;
your name, email, account password, sign-in credentials, or contact details;
your precise (GPS) device location;
your support, feedback or class-finder submissions.

We never sell any personal data.

When advertising permission is turned off — which is the starting position for everyone — none of the above is shared with any advertising or attribution platform. The relevant advertising tools are not switched on at all, and on iPhone or iPad the app-tracking prompt is not shown.

9. Anonymous product analytics

We use product analytics to understand which screens people use, how the introduction to the app works, where people get stuck, and which features are useful. This helps us improve the app for everyone. These analytics are turned on by default, and you can turn them off at any time in Profile → Privacy & Advertising.

Our main analytics provider is TelemetryDeck, which is designed not to collect personal data: identifiers are scrambled on your device and again on TelemetryDeck's servers, and IP addresses are never stored. Because of this, TelemetryDeck does not hold information that identifies you.

We also use Google's Firebase service for two things:

Crash and performance reporting, which we need in order to keep the app working and fix problems. We rely on this as part of providing the service to you.
Anonymous in-app analytics about how the app is used. We have set this up for privacy: your IP address is anonymised, and the advertising-related features of the analytics are switched off unless you have separately turned on advertising permission (Section 8). We keep this analytics information for 14 months.

We rely on legitimate interests for these analytics, because the information is used only to improve and secure the service and is not used to build advertising audiences unless you separately turn on advertising permission. We also give you a clear, in-app way to turn product analytics off whenever you wish.

10. Marketing and communications

Service messages. We send you the messages that are necessary to run the service — account notices, security alerts, content you have asked for (such as live-class reminders), and policy updates. We rely on contract or legitimate interests for these.

Charitable newsletters and updates. As a registered charity, we may send you email updates about our charitable work — meditation programmes, free retreats, volunteer opportunities, fundraising appeals, and similar campaigns that further our charitable purposes. We do this under the charitable-purposes "soft opt-in" introduced by the Data (Use and Access) Act 2025, which amended the Privacy and Electronic Communications Regulations 2003 with effect from 5 February 2026.

We rely on this only where, and to the extent that:

the purpose of the message is to further our own charitable purposes;
we obtained your contact details directly from you, when you were expressing interest in, or offering or providing support for, those purposes (for example, when you created an account, donated, signed up for our newsletter, requested information, or volunteered);
we gave you a clear, prominent opportunity to refuse marketing at the moment we collected your details; and
every message we send you of this kind contains a simple, free way to unsubscribe, with no need to log in or create an account to do so.

We do not apply this approach retrospectively. If you gave us your details before 5 February 2026 and did not agree to marketing at the time, we will not send you charitable email under this soft opt-in unless you re-engage with us (for example, by signing up again with the opportunity to opt out, or by giving fresh consent).

Our lawful basis for sending these messages is legitimate interests. We have carried out a legitimate-interests assessment, and we will not use this approach to contact anyone we have reason to believe may be in a vulnerable situation. You have an absolute right to object to direct marketing at any time, which we will always honour.

You can opt out at any time — from any message we send (in one tap), in Profile → Privacy & Advertising, or by emailing [email protected]. We will action your request promptly.

We do not currently use the app for telephone, text-message or push-based fundraising. Push notifications are limited to service reminders you have asked for, both in the app and in your device settings.

11. Sensitive information

Because We Meditate is grounded in Sahaja Yoga and some optional features invite you to share mood or wellbeing reflections, some information you provide may be treated as special-category data under data-protection law — for example, information that may reveal religious or philosophical beliefs, or that relates to your wellbeing or health.

We treat such information with additional care:

you can use the core service (browse, complete meditations, save favourites) without sharing any of it;
we rely on your explicit consent, given when you accept these terms and when you choose to use these optional reflective features;
we never use this information for any kind of advertising, audience building, attribution, or similar-audience modelling; and
we never share it with Meta, Google, Apple, our analytics providers, or any other third party for analytics or advertising purposes.

12. How we record your consent, and how to withdraw it

Where we rely on your consent — for advertising measurement, product analytics, sensitive information, app tracking on iOS, location, push notifications, or charitable email — we keep an in-app record of what you agreed to, when, and the version of the wording you saw. You can see the status of your current choices, including the date you turned each one on or off, in Profile → Privacy & Advertising.

This is how we meet our legal obligation to be able to show that you gave consent, and to keep a clear record of who consented, when, how, and what they were told.

You can withdraw any consent at any time. Withdrawing is as easy as giving consent — usually a single switch in the app. Withdrawing does not affect anything we did with your information before you withdrew.

13. Who we share information with

We do not sell your personal data.

We share information with:

Technology and infrastructure providers — hosting, authentication, databases, crash reporting, error monitoring, push notifications, cloud and content-management services.
Analytics providers — TelemetryDeck (anonymous product analytics) and Google Firebase (anonymous in-app analytics, not used for advertising audiences unless you turn on advertising permission).
Advertising and attribution partners — Meta, Google and Apple Search Ads — only where you have turned on advertising permission, and limited to the information described in Section 8.1.
Authentication providers — Apple and Google, when you sign in with those methods.
Email and communications providers — for newsletter delivery and support correspondence.
Professional advisers and legal recipients — lawyers, regulators, law-enforcement bodies, and courts where required.
Successor operators — if how We Meditate is operated changes through reorganisation, merger, or transfer, your data may transfer to the successor, subject to this policy.

We require all our providers to handle your data under written terms that meet our legal obligations, including keeping your data confidential and secure and not using it for any other purpose.

14. International transfers

We Meditate is operated from the United Kingdom. Some of our providers — particularly Meta, Google, and Apple — process data outside the UK and European Economic Area, including in the United States.

For these transfers we rely on:

the UK's adequacy arrangements with the European Economic Area;
for transfers to certified US providers, the UK Extension to the EU–US Data Privacy Framework, where the provider is certified under it; and
where those are not available, the UK International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), together with an assessment of the risks of the transfer.

You can ask us at any time which safeguard applies to a particular transfer.

15. Cookies, SDKs and similar technologies

On our websites

We use cookies, pixels, tags and similar technologies for functionality, security, and analytics. Where required by law, we ask for your consent before using non-essential cookies through our cookie banner.

In the app

The app uses standard building blocks (sometimes called SDKs) and on-device storage from:

Google's Firebase service (authentication, crash reporting, anonymous analytics) — always on, because it is needed to operate the app;
TelemetryDeck (anonymous product analytics) — on by default, with an opt-out in Profile → Privacy & Advertising;
our push-notifications provider — only after you grant the device push permission;
Meta, Google and Apple Search Ads tools — not switched on until you turn on advertising permission, and on iPhone or iPad only after you allow tracking.

Your choices

You can manage all of these in Profile → Privacy & Advertising, in your device privacy settings, or by deleting the app.

16. How long we keep your information

We keep information for as long as we reasonably need it to provide the service, comply with the law, resolve disputes, prevent fraud, and enforce our rights:

Account data — while your account is active and for up to 12 months afterwards, for backup, security and dispute purposes.
Local device data — until you delete the app or clear storage.
Anonymous or guest identifiers — until upgraded, abandoned, or no longer needed.
Feedback and support records — up to 3 years.
Crash, performance and diagnostics data — typically up to 90 days.
TelemetryDeck analytics — aggregated and anonymous; not associated with you.
Firebase analytics — 14 months.
Advertising-platform audience data — subject to the platform's own retention settings; we refresh and remove details when you withdraw permission.
Consent records — for as long as we rely on the consent, plus a reasonable period afterwards, so we can show we complied.

17. What happens when you delete your account

You can delete your account in Profile → Account Settings → Delete Account, or by emailing [email protected].

When you delete your account, we delete:

your sign-in record;
your account profile and preferences on our servers;
your local app state and sign-in tokens;
the link between you and your analytics records; and
your email from our push-notifications provider.

Some data may remain after deletion:

Activity-history entries in our database may remain as records no longer linked to you, which we purge periodically.
Feedback submissions are stored separately and are not deleted automatically; you can ask us to remove them.
Third-party analytics providers may not support deletion of historical aggregated data.
Push installation identifiers may be kept by our notifications provider but marked anonymous.
Local caches remain on your device until you uninstall the app.

If you want us to remove anything that can still be linked to you, write to [email protected] and we will action it.

18. Your rights

Depending on where you are, you have the right to:

access your personal data;
correct inaccurate data;
ask us to delete your data;
restrict or object to certain processing (including an absolute right to object to direct marketing);
withdraw consent at any time, where we rely on consent;
ask for portability of certain data; and
complain to a data-protection authority.

In the UK, you can complain to the Information Commissioner's Office (ico.org.uk). In the European Economic Area, you can complain to your local supervisory authority.

To exercise any of your rights, contact [email protected]. We may need to verify your identity before acting on a request.

19. California and US state privacy notice

This section applies only where US state privacy laws apply to you.

We do not sell personal information for money.

Our use of advertising and measurement tools (Meta, Google, Apple Search Ads), when you have turned on advertising permission, may count as "sharing" for cross-context behavioural advertising under California law, or as "targeted advertising" under similar laws in other states such as Colorado, Connecticut, Virginia and Texas. You have the right to opt out.

To opt out, turn off advertising permission in Profile → Privacy & Advertising, or email [email protected]. Where supported, we will honour recognised browser-based opt-out signals such as the Global Privacy Control.

We do not knowingly process or share the sensitive personal information of minors, and we do not use sensitive personal information (including anything that may reveal religious or philosophical beliefs, or your wellbeing) for targeted advertising. We do not discriminate against you for exercising your rights.

20. Security

We use technical, administrative and organisational safeguards to protect your information. No system is perfectly secure — please keep your device and login details safe, and tell us promptly if you think your account has been compromised.

21. Changes to this policy

We may update this policy. When we do, we will post the new version and, where the change is significant, tell you in the app, on the website, or by email. The "Last updated" date at the top shows when this policy was last revised. We keep older versions on file so we can show what you agreed to and when.

22. Contact us

Life Eternal Trust (UK) 14 Essex Road, Enfield, EN2 6TZ, United Kingdom Email: [email protected]