← Exalt

Exalt Privacy Policy

Last updated: May 30, 2026

Used entirely on your device

Your meditation sessions, timer settings, Enlightenment Points, tier, streaks, and stats are stored locally on your device. If you never use the social features, this information stays on your device.

Collected only if you sign in to social

The social features are optional and gated behind a sign-in and a one-time purchase. If you choose to use them, we collect:

• Account information. An email address (if you sign in with email), or an identifier from Apple or Google. Passwords, if you use email sign-in, are handled by our authentication provider and are never visible to us in readable form.
• Profile information you provide. A username and an optional display name.
• Progress information. Your tier, Enlightenment Points, session count, total minutes, streaks, and last session date, so friends can see your practice.
• Optional phone number. If you add your phone number so friends can find you, we verify it by text message and store a one-way hash of the number for matching.
• Push notification token. If you enable notifications, a device token used only to deliver notifications about your friends' activity.

Contacts (optional, privacy-preserving)

If you tap "find friends in your contacts", the app reads your address book and converts each email and phone number into an irreversible hash on your device. Only those hashes are sent to our server, where they are compared against people who have chosen to be discoverable. Your contacts are never uploaded in readable form, and we do not store other people's contact details. You can decline the contacts permission and still use every other part of the app.

How we use this information

To provide the social features (sign-in, friend discovery, friend lists, progress sharing, and encouragement), to verify a phone number you choose to add, to send notifications you have enabled, and to process the one-time social unlock purchase. We do not use your information for advertising, and we do not sell it.

Service providers

We use a small number of providers that process data on our behalf: Supabase (database, authentication, hosting), Twilio (sending the phone verification code), Apple and Google (if you use their sign-in), Apple and RevenueCat (processing the in-app purchase), and Expo (push notifications). We share information with these providers only to operate the app, never for advertising or cross-app tracking.

Your choices

• Social is optional. If you never sign in, nothing is sent to our servers.
• You can turn off "discoverable" at any time so others cannot find you by email or phone hash.
• Contacts and notifications are permission-based and can be declined or revoked in your device settings.
• To delete your account and associated social data, email us and we will remove it.

Data retention

Local meditation data remains on your device until you delete the app. Social account data is retained while your account exists and is deleted on request.

Children's privacy

Exalt is not directed to children under 13, and we do not knowingly collect personal information from them.

Security

We use reputable providers and standard protections, including encryption in transit and hashing of contact identifiers. No method of transmission or storage is completely secure, but we work to protect your information.

Changes to this policy

If we update this policy, we will post the revised version on this page with an updated date.

Contact

Questions or requests: [email protected]