Nordic Theory Labs · Meditly

Privacy Policy

Meditly: Meditation & Sleep is a calm, private app. What you write and how you feel stays on your phone.

Last updated: 27 October 2026

In short

Who we are

Nordic Theory Labs AB, Sweden, makes Meditly and is the data controller for the personal data described here. Contact: privacy@nordictheorylabs.com.

What stays on your device

Everything you enter in the app: mood check-ins and the moods you pick, session history and minutes, journal and gratitude entries, sleep notes, saved items, reminders, your display name and profile photo, and your settings. It is kept in the app’s own storage on your phone and, for the home-screen widgets, in a storage area shared only between the app and its widgets. We cannot see it.

Profile photos you pick or take stay on the device. Kindness cards are saved to your Photos only when you tap “save”.

What leaves your device, and why

WhatWho receives itWhy
Crash and diagnostic reports: what went wrong in the code, device model, iOS version, app version, and performance timings. Sentry (Functional Software, Inc.), our crash-reporting service. To find and fix bugs. Reports contain no name, email, screenshots, or anything you wrote or felt, and are not linked to you.
Usage statistics: app opens and session length, which kinds of exercise you finish (for example “breathing”), when the Premium screen is shown, whether you allowed notifications, plus a random app-install ID, device model, OS version, language and an approximate region derived from your IP address. Never your moods, check-ins, notes or anything you type, and no advertising ID. Google Analytics for Firebase (Google Ireland Ltd. / Google LLC). To see which parts of the app help people and fix what doesn’t. Not linked to your identity, not used for ads. Turn it off any time in Profile → Share usage statistics.
Purchase information: your subscription status and the App Store transaction, with a random app user ID. If you installed Meditly from an Apple Search Ads ad, Apple’s privacy-preserving attribution token, which tells us the ad campaign (not who you are). Apple (payment) and RevenueCat, Inc. (subscription status). To unlock Premium and restore purchases, and to see which of our ads lead to subscriptions. We never receive your card details. The ID is random and not linked to your identity. While usage statistics are on, RevenueCat also shares subscription events (trial start, renewal, cancellation) with Google Analytics using the app-install ID; turning statistics off stops this.
Cancellation reason: if you cancel Premium, the app asks once why, and you can answer with one tap (for example “It costs too much”). Only that one category is sent, never free text. RevenueCat, Inc., stored with the same random app user ID, and Google Analytics (as part of the usage statistics, if they are on). To understand why people leave and improve the app. Optional: “Not now” sends nothing.
Audio downloads: when the app downloads narration and sound packs, your device makes ordinary web requests (IP address, time, file, device type). Cloudflare, Inc., which hosts the audio files. To deliver the audio and protect the service from abuse. We do not use this to identify you.
Feedback you choose to send (Profile → Send feedback, or the optional rating question): your message or score, your email address if you add one, the app language, app version and platform. Our Sentry feedback inbox and a private team channel on Discord (Discord Inc.). To read your feedback and, if you gave an email, reply. Never sent unless you tap send.

Reminders are local notifications scheduled on your phone; nothing is sent to a server. Meditly does not connect to Apple Health.

Legal basis

Crash reports and audio delivery: our legitimate interest in a working, secure app. Purchases: performing the contract you enter when you subscribe. Feedback and the optional cancellation reason: your choice to send it (legitimate interest in replying and improving the app). Ad attribution and usage statistics: our legitimate interest in knowing which ads work and improving the app; you can object at any time with the switch in Profile.

How long we keep it

Usage statistics are kept for 14 months. Crash reports and feedback are kept only as long as needed to fix problems and answer you, and are deleted on a regular schedule. Purchase records are kept as long as accounting law requires (in Sweden, seven years). Data on your device stays until you delete it.

Deleting your data

In the app: Profile → Delete my data removes everything stored on your device and resets the usage-statistics ID, and Profile → Downloaded audio removes downloaded sounds. Deleting the app also removes its data. To delete feedback or ask what we hold, email privacy@nordictheorylabs.com. Subscriptions are managed and cancelled in your Apple ID settings.

Your rights

If you are in the EU/EEA or the UK you can ask for access to, correction or deletion of your personal data, object to processing, or ask us to restrict it. You can also complain to the Swedish Authority for Privacy Protection (IMY) or your local authority.

International transfers

Sentry, Google, RevenueCat, Cloudflare and Discord may process data outside the EU/EEA, including in the United States. Where they do, transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Children

Meditly is not directed at children under 13, and we do not knowingly collect personal data from them.

Not medical advice

Meditly offers general wellbeing exercises. It is not a medical device and does not diagnose or treat any condition. If you are in crisis, the app’s support page lists help lines in your country.

Changes

If this policy changes, we update it here and change the date above.

Questions: privacy@nordictheorylabs.com · nordictheorylabs.com