Privacy

Radical Attune
Privacy Policy

Radical Attune (iPhone, iPad & Apple Watch)
Effective date: 10 September 2026 · Version 1.6
Controller: Radical Health OÜ, Estonia · registry code 17536495

Version history: 1.0 (1 Aug 2026, initial) · 1.1 (10 Aug, iCloud key-value sync of non-health data) · 1.2 (17 Aug, paced-pulse response wording, Watch rate personalization) · 1.3 (2 Sep, Own Voice, purchases & refunds) · 1.4 (5 Sep, Own Voice as a Library feature, the Watch's paused-workout heart-rate path, spatial-breath motion wording, the trial's keychain anchor) · 1.5 (9 Sep, separate Own Mantra and Own Protocol data, retention and deletion disclosures) · 1.6 (10 Sep, camera pulse excluded from the submitted release).

1Scope

This policy explains how the Radical Attune app for iPhone, iPad and Apple Watch handles personal data. It covers the App Store configuration of Radical Attune described below.

This page is hosted on radicalhealth.app. Handling associated with visiting the Radical Health website is described in the separate Radical Health website privacy policy. This policy focuses on the Radical Attune app.

2Information stored on your device

The app stores the following information locally in its app container:

• settings and feature preferences;
• saved sound tunings, breathing plans and programs;
• session dates, durations, selected sounds and breathing patterns;
• session ratings and mood check-ins;
• session-derived heart, breathing, oxygen, calm, legacy coherence and paced-pulse response values;
• imported audio;
• podcast feed metadata and downloaded episodes;
• Own Mantra names, recordings, duration, loop preference, and created and last-played dates; and
• Own Protocol behaviour plans, written scripts, recordings, and daily behaviour log.

This information remains on your device until you remove the relevant item where the app offers a deletion control, or delete the app. Radical Health cannot access this local information.

3Apple Health

With permission granted separately through Apple Health, Radical Attune reads:

• heart rate;
• resting heart rate;
• heart-rate variability;
• respiratory rate;
• oxygen saturation;
• sleep analysis;
• workouts; and
• State of Mind.

The app uses these values on device to show session effects, calculate non-clinical calm and paced-pulse response estimates, support optional Watch rate personalization, and offer wellness suggestions.

With permission, the app writes completed eligible sessions to Apple Health as Mindful Sessions. On iOS 18 or later, it also writes a momentary State of Mind entry when you actively choose a mood check-in. The app also requests permission to write workouts; on iPhone this is used only to launch the Watch app into a live heart-rate session.

On Apple Watch, live heart rate is read through a HealthKit workout session that the Watch app pauses the moment it starts, keeps paused, and discards when the session ends; a session that will not stay paused is ended rather than left running. It is never saved as a workout, and it is designed not to credit the Exercise ring or active calories — in our device testing sessions recorded zero exercise minutes. Completed sessions are written as Mindful Sessions only.

4Own Voice (microphone)

Own Voice, in the Library, lets you record a short mantra or a spoken behaviour plan in your own voice. The microphone is used only while you record, and only after you choose to. Playback happens on your device only.

Own Mantra stores the name you enter, microphone audio, duration, loop preference, and created and last-played dates. A mantra has no written script and no daily log. It is stored only in the app container on your device, excluded from iCloud and device backups, and never uploaded or shared. It is kept until you delete that mantra, use Delete all mantras or Delete all Own Voice data, or remove the app.

Own Protocol stores the behaviour plan, written scripts, microphone recordings, and daily behaviour log. These are stored only in the app container on your device, excluded from iCloud and device backups, and never uploaded or shared. Only the two newest recordings per plan are kept. You can delete an individual plan or recording, or delete all Own Voice data, at any time.

5Duet

When you start Duet, Radical Attune exchanges the following information with the person or people you connect to:

• the selected breathing pattern and rate;
• timing and synchronization information;
• a transient device display name; and
• a live paced-pulse response value.

Nearby Duet uses encrypted Apple Multipeer Connectivity. FaceTime Duet uses Apple SharePlay. Radical Health does not receive or retain the exchange. A connected display name may appear in your local session history.

Duet begins only after you choose to start or join it. You can end the exchange by leaving Duet or ending the session.

6Podcasts and external requests

When you add a direct RSS feed or a podcast show link, Radical Attune may contact:

• the publisher or feed host identified by the link;
• Apple's public podcast lookup and search services; and
• Spotify's oEmbed service, only when resolving a Spotify show link.

These requests are used to locate an open publisher-provided RSS feed. The app does not extract platform-exclusive audio. Episode audio is downloaded from the enclosure URL published in the RSS feed and stored in the app container on your device.

Those external operators receive the information ordinarily needed to serve a network request, which may include your IP address and request details, under their own privacy terms. Radical Health does not receive the request or downloaded audio.

Only download and use media that you are authorized to access.

7HomeKit, motion, local network, and background activity

If you enable Room breathes, HomeKit access is used to animate selected lights during a session and restore them afterward.

If you enable Spatial sound (or its breath pad) with compatible AirPods, motion permission is used to read AirPods head motion so the sound stays anchored in the room as you turn your head. Motion is used for placement only, is processed on device, and is never saved or sent anywhere.

Local-network permission is used for nearby Duet.

Background audio lets a listening session you started continue while the app is in the background. On Apple Watch, the paused workout session described under Apple Health keeps a user-started session and its live heart-rate reading active. A Power Nap can optionally set a system alarm (AlarmKit) so its wake rings through silent mode and Focus; the alarm is created only when you turn on "Wake me through silent mode", and it is removed when the nap ends.

Each permission can be revoked in iOS or watchOS Settings.

8iCloud and Radical Health servers

Radical Attune syncs your non-health data across your own devices using Apple's iCloud key-value storage in your private iCloud account: your saved sound tunings, breathing plans, program progress, favourite sounds, and session facts — dates, durations, selected sounds and breathing patterns, session ratings, and Duet metadata. Device settings (screen, guidance, the breath-ring style and similar preferences) are not synced.

Your health-derived values — heart rate, resting heart rate, heart-rate variability, respiratory rate, oxygen saturation, sleep, and the calm, coherence and paced-pulse response estimates computed from them — your mood check-ins, and your Own Voice names, recordings, scripts, metadata, and logs are never uploaded to iCloud by Radical Attune. They stay on the device that recorded them. (Mindful Session and State of Mind samples you let the app write to Apple Health are governed by your Health settings from then on, including Apple's own Health sync — Radical Attune does not control or receive them.)

This uses your own private iCloud, provided by Apple. Radical Health does not operate an account system or cloud database for Radical Attune, and never receives this data. You can turn syncing off in iOS Settings under your name → iCloud, or by signing out of iCloud; that stops syncing on that device but does not delete what is already in your iCloud. Deleting an item in the app removes it from every synced device; the app's iCloud data as a whole can be deleted in iOS Settings under your name → iCloud → Manage Account Storage.

9Purchases, the free trial, and refunds

Radical Attune is free to use. Attune+ is an optional in-app purchase (a monthly or annual subscription, or a one-time lifetime purchase) handled entirely by the App Store. Radical Health never sees your payment details. Purchases are verified on device against Apple's signed transaction; no account is created.

The app's 14-day full-access trial is granted locally on your device and begins at your first session. Its start date is stored in your device keychain. Where iCloud Keychain is turned on, Apple syncs that keychain item to your other devices so the trial is the same on all of them; the date is the only value stored, and Radical Health does not receive it.

If you request a refund from the Attune+ settings, Apple's own refund screen opens. To help Apple decide the request, limited purchase and app-usage information may be shared with Apple. Apple decides every refund; Radical Health cannot issue one.

10Retention and deletion

Downloaded podcast episodes, feeds, imported audio, saved tunings, plans and programs, and Own Protocol recordings, plans and logs can be removed where their controls are available in the app. An Own Mantra and its recording are kept until you delete it, delete all mantras or all Own Voice data, or delete the app. Other app-container data remains until the app is deleted. Deleting Radical Attune removes its local app container. One item lives outside it: the trial start date in your keychain (section 9). Apple's keychain keeps that item after the app is deleted, so reinstalling does not restart the trial, and there is no in-app control to remove it. It holds only a date, it identifies no one, and Radical Health never receives it.

Apple Health samples are retained and controlled separately by Apple Health. Removing the app does not necessarily remove Mindful Session or State of Mind samples already written to Apple Health; manage those records in the Health app.

Radical Health retains information you choose to send by email to support or privacy staff only as long as reasonably necessary to answer the request, maintain an appropriate support record, resolve a dispute, or meet a legal obligation.

11Legal basis and your rights

Most app processing happens locally on your device under your control to provide the features you choose to use. Radical Health does not receive the app's local health or session data.

When you contact Radical Health, the information in your message is processed to answer your request, provide support, protect the service, and meet legal obligations. Depending on the request and applicable law, this is based on performing or preparing to perform a contract, legitimate interests in providing and securing support, consent where requested, or compliance with law.

You can revoke Health, microphone, local-network, HomeKit, motion and alarm permissions in iOS Settings. Under the GDPR and other applicable privacy laws, you may have rights to access, correct, erase, restrict, or object to processing of personal information held by Radical Health, and to withdraw consent where processing relies on consent. You may also have the right to lodge a complaint with a data-protection authority. In Estonia, the supervisory authority is the Andmekaitse Inspektsioon.

Because Radical Health does not receive the app's local health and session records, those records are accessed and controlled on your device rather than through a Radical Health account.

12Security

Radical Attune minimizes transmission by keeping health data, mood check-ins and Own Voice data on device; only the non-health data listed under iCloud (saved tunings, plans, program progress, favourite sounds and session facts — never device settings) syncs, through your private iCloud. iOS app sandboxing protects the local container, Own Voice data is excluded from backups, and nearby Duet uses encrypted Multipeer Connectivity. No method of storage or transmission is perfectly secure, but the app is designed to avoid sending personal health data to Radical Health in the first place.

13Children and wellness limitation

Radical Attune is a general wellness and relaxation tool and is not directed to children. It is not medical care. Pulse, calm, coherence, paced-pulse response, sleep, recovery, and session-effect outputs are estimates or associations, not diagnoses or treatment advice.

Seek advice from a qualified professional for medical concerns, and stop a breathing practice if you feel dizzy, light-headed, short of breath, or otherwise unwell.

14Third-party platforms

Apple Health, the App Store, Apple SharePlay, Multipeer Connectivity, HomeKit, AlarmKit, Apple podcast services, Spotify, and publisher websites operate under their own terms and privacy practices. References to Apple or Spotify describe interoperability and do not imply sponsorship or endorsement.

15Changes to this policy

If Radical Attune's data flows change, this policy will be updated before the changed version is released. The effective date and version will be updated, and material changes will be surfaced as required.

16Contact

Radical Health OÜ
Estonia · registry code 17536495
Privacy: privacy@radicalhealth.app
Support: help@radicalhealth.app