This privacy policy applies to the app Phew in both its iOS version (App Store) and its Android version (Google Play). Last updated: 29 October 2026.
1. The short version
Phew is built to need as little of your data as possible. There is no user account and no sign-up. We only receive your email address if you enter it voluntarily to get a free gift from Carolin (section 7). Phew is a one-time purchase in the App Store or on Google Play. Apple or Google handle the payment, and we never see your payment details. There are no further purchases and no subscriptions in the app. Everything you enter in the app stays on your device. Apart from the email address for the gift, the only thing that leaves your device is the IP address that any device has to reveal in order to load additional sounds from the internet (section 6). On iOS you can have calm minutes saved to Apple Health. That stays on your device (section 8). We run no analytics, no advertising networks and no tracking in the app.
2. Who is responsible
The controller responsible for data processing in this app is:
VIBE & VIRAL, UNIPESSOAL LDA
Rua Hermano Neves 18, piso 2, escritório 4
1600-477 Lisbon
Portugal
Email: info@shamanism.one
Please use info@shamanism.one for anything to do with the app.
3. No account, and your data stays on your device
The app does not ask for a registration or a password. There is nothing to log in to. You only need an email address if you voluntarily request the gift (section 7). You pay the price in the App Store or on Google Play. Apple or Google are responsible for that, and their own privacy policies apply. We only receive anonymous sales figures from them, never your name or payment details. No payment or subscription service runs inside the app.
The following data is stored on your device only, in the app’s local storage:
- your diary entries and notes
- your values on the calm scale
- your exercise and game history
- your garden, your sand garden and your coloured pictures
- your saved sound mixes
- your settings and your chosen language
So that nothing is lost if the system clears the app’s web storage, the app also keeps a second copy of this data in the app’s own native storage on your device (the app preferences on iOS and Android). This copy also stays on your device.
This data is never sent to us and we cannot read it. “Delete all data” in the app’s settings removes both stores at once, at any time. If you uninstall the app, it goes with it.
On Android, the system backup feature may include the app’s local data in your own device backup with Google, depending on your device settings. That backup belongs to your Google account, not to us, and we have no access to it. You can switch it off in your Android system settings.
4. Exporting your diary
You can export your diary as a text file. This only happens when you start it yourself, through your device’s share menu. You decide where you send or save the file. We learn nothing about it.
5. Microphone in the breath games
The microphone is used only in the breath games, and only when you choose “Play with your breath”. Your device asks for your permission first. The app then measures, live, only the loudness of your out-breath in order to steer the game. Nothing is recorded, stored or transmitted.
If you do not give permission, you play with your finger. You can withdraw the permission at any time in your device settings.
6. Sounds loaded from the internet
Five basic sounds are included in the app. Additional sounds are loaded from Google Cloud Storage, a service of Google Ireland Ltd. / Google LLC, the first time you play them, and are then cached on your device.
These requests go over an encrypted https connection. No cookies and no login credentials are transmitted. Your IP address is transmitted to the server for technical reasons, because otherwise the server could not send anything back to your device.
The legal basis is our legitimate interest in delivering the sounds you asked for (Art. 6 (1) (f) GDPR). Google may process this data on servers outside the EU, including in the USA. Transfers to third countries take place on the basis of the EU standard contractual clauses.
The fonts used in the app are built into the app itself. No font is loaded from an external server.
7. Optional gift by email (Spirit Animal Journey)
In the app you can voluntarily enter your email address and tick a checkbox to receive a free guided Spirit Animal Journey and occasional emails from Carolin. The card for this appears on the home screen after you have used the app on three different days. You can close it with “Not now”. You can always find it in the settings. Nothing is sent unless you enter your address yourself and tick the checkbox.
Which data. The app sends your email address, the language (de or en) and the source marker “phew-app” over an encrypted https connection to an endpoint on www.carolinmallmann.de. For technical reasons the server also sees your IP address. Nothing else is sent from the app, so neither your diary nor your values or any other entries.
Where and how it is stored. The data is stored in the newsletter system FluentCRM, which runs on our own WordPress server. The server is located in Germany, with the hosting provider Febas. German-language users are handled under the brand Carolin Mallmann, English-language users under One Shamanism, both in the same system. We also store tags: the language, the brand, the gift (“Freebie”) and the source “app:phew”.
Double opt-in. After you sign up you receive a confirmation email. Only when you click the link in it are you added to the list and receive the gift.
Legal basis. Your consent, Art. 6 (1) (a) GDPR.
Storage period and withdrawal. We keep the data until you unsubscribe. You can withdraw your consent at any time, using the unsubscribe link in every email or by writing to info@shamanism.one. This does not affect the lawfulness of the processing carried out before.
8. Apple Health (iOS only, optional)
On iOS there is a switch in the settings called “Add to Apple Health”. It is off by default. If you switch it on and grant permission, Phew writes every calm session of at least one minute to Apple Health as “Mindful Minutes”. Only the start and end time of the session are saved.
Phew reads nothing from Apple Health. The exchange happens only on your device between Phew and Apple Health. We do not receive this information and cannot see it. It is not used for advertising or marketing and is not shared with third parties.
You can switch it off at any time in the app, or withdraw the permission in the Health app (Sharing, Apps, Phew).
9. Advertising ID, analytics and tracking
The app does not request or use the Android advertising ID or Apple’s advertising identifier. There is no advertising network in the app, no analytics service, no crash reporting and no other tracking. No profile of your behaviour is built.
10. Notifications
The daily reminder is optional. You decide whether to switch it on, and you can turn it off again at any point in the app’s settings or in your device settings. The reminder is scheduled locally on your device. Nothing is sent through a push server, and we do not learn whether you have switched it on.
11. Widget and rating dialog (iOS)
The “I need calm” widget for the home and lock screen (iOS 17 and later) opens the calm mode with one tap. It shows no personal data. After the fifth calm session the app shows Apple’s standard rating dialog, at most once per version. Whether it appears is decided by iOS. No data is sent to us.
12. Permissions the app asks for
The Android version asks for these permissions: internet access, the microphone (for the breath games only), access to the audio settings, vibration and permission to show notifications.
The iOS version asks for the microphone (for the breath games only) and, only if you switch on the setting, for permission to write Mindful Minutes to Apple Health. It uses background audio so that the soundscapes keep playing while the screen is locked.
The app requests no access to your location, your camera, your contacts or your photos.
13. Children
The app collects no personal data from anyone beyond what is described here, and that includes children.
14. Deleting your data
Everything you enter in the app lives on your device. You remove it with “Delete all data” in the app’s settings (this clears the app’s storage and the second copy) or by deleting the app. Entries in Apple Health you delete in the Health app.
If you entered your email address for the gift, you unsubscribe with the link in every email, or you write to info@shamanism.one. We then delete your data in FluentCRM.
15. Your rights
You have the right to ask us, free of charge, what personal data we hold about you, where it came from and who receives it. You also have the right to have that data corrected, restricted or deleted, the right to object to its processing, and the right to receive it in a portable form. Write to info@shamanism.one and we will answer.
You also have the right to complain to a data protection supervisory authority, in Portugal the Comissão Nacional de Proteção de Dados (CNPD), or to the authority in the country where you live.
16. Changes to this policy
If the app changes in a way that affects your data, we will update this page and change the date at the top. The English version on this page is the one linked from the app stores and is the authoritative version.