ensō

Privacy Policy

Last updated: September 6, 2026

Ensō is a meditation app built to be private by default. This policy explains, in plain language, what data the app handles and what happens to it.

The short version

• Your meditation data never leaves your device. There are no accounts, no cloud sync, and no backend server.
• The only thing that leaves your device is anonymous usage analytics (which screens are opened, sessions started/completed) — along with your IP address and the approximate location our analytics provider derives from it, such as your city and country. You can turn all of it off in the menu at any time.
• We don't sell data, show ads, or track you across other apps or websites.

Data stored on your device only

The app stores the following locally on your device, and nowhere else:

• Meditation sessions — start time, duration, whether the session completed or was cancelled, and the tree it planted (SQLite database on your device).
• Preferences — sound, haptics, wind-ambience, and analytics settings; whether you've seen the onboarding screen (on-device key-value storage).
• Optional display name — if you choose to add a name on the menu page, it is stored only on your device, shown only to you there, and never transmitted anywhere. Leave it blank and nothing is stored.

This data is never uploaded, synced, or shared. If you delete the app, it is gone. You can also erase it at any time without deleting the app via Menu → Your Data → Delete My Data, which permanently wipes every session and preference on the device.

Anonymous usage analytics

To understand which parts of the app are used and improve it, Ensō sends a small set of first-party product events (for example: "a session was started", "the forest view was opened") to PostHog, an analytics service acting on our behalf.

• Events are associated with a randomly generated anonymous identifier, not your name, email, phone number, or any account — the app never collects any of those.
• IP address and approximate location. Like any internet request, the events reach PostHog carrying your device's IP address. PostHog records it and uses it to estimate an approximate location — typically city, region and country. This is not GPS and the app never asks for location permission; it is an estimate from your network address, and it can be wrong. It is used only to understand roughly where Ensō is being used, and it is never combined with anything that identifies you. Turning analytics off in Menu → Your Data → Anonymous Analytics stops this along with everything else, because nothing is sent at all.
• Analytics are on by default and can be turned off anytime in Menu → Your Data → Anonymous Analytics. When off, nothing is sent.
• Analytics data is used only to improve Ensō. It is never sold, never used for advertising, and never used to track you across other companies' apps or websites.
• If you're offline, events queue on your device and send when connectivity returns (or never, if you've opted out).

Purchases

Ensō is a paid app. Subscriptions and the one-time purchase are handled entirely by Apple's App Store, with RevenueCat acting on our behalf to check whether a purchase is active.

• We never see or store your payment details. Card numbers, billing addresses and Apple ID credentials go to Apple and never reach us or RevenueCat.
• To recognise your purchase across reinstalls, RevenueCat receives a randomly generated anonymous identifier and the receipt Apple issues. That identifier is not your name, email, or Apple ID, and it is not linked to your meditation data.
• Your session history, streaks and forest are never sent to RevenueCat or to Apple. Purchase state and meditation data are kept entirely separate.
• To manage or cancel a subscription, use Settings → your Apple Account → Subscriptions on your device. We cannot see or change your subscription from our side.

Notifications

If you allow notifications, the app schedules one local notification per meditation session, so the completion chime can reach you if your phone is locked when the session ends. It fires from your device — nothing is sent to any server. There are no marketing, reminder, or push notifications of any kind. If you decline notification permission, sessions still work; the chime is simply foreground-only, and the app will never re-ask or nag.

What we don't collect

No email, phone number, contacts, photos, microphone audio, health data, advertising identifier, or any other personal information. No GPS or device location — the app never requests location permission, and the only location data that exists is the rough estimate our analytics provider derives from your IP address, described above. The optional display name stays on your device and is never collected by us. We never receive your payment details. The app requests no permissions except the optional notification permission described above.

Children

Ensō does not knowingly collect personal information from anyone, including children. All meditation data stays on the device.

Changes to this policy

If this policy changes (for example, if a future version adds accounts or sync), the updated policy will be available at this same location and inside the app under Menu → Privacy Policy, with the "last updated" date revised.

Contact

Questions about privacy: support@windchimesapp.com