Privacy & Security

1. Data Collection & Usage

We only collect data necessary to provide and improve the HolistiQ experience. This includes email addresses for authentication, and usage data (workouts, journals, metadata) to render your dashboard. We do not use trackers or sell your personal information.

2. Data Encryption & Security

Your wellness journey is deeply personal. All your entries, including journal thoughts, mood tracking, and workout performance, are stored securely using Google's Firebase infrastructure with at-rest and in-transit encryption.

3. GDPR & CCPA Compliance

HolistiQ complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the "Right to be Forgotten" and the right to request a complete copy of your personal data.

4. Data Portability

You have the right to access and download your data at any time. Use the "Export Data" tool in Settings to instantly download a comprehensive JSON copy of your entire history.

5. Camera & Face Analysis Data

During the Trataka "Focus Challenge" meditation mode, HolistiQ uses your device's front-facing camera to detect eye blinks in real-time. This helps measure your concentration by counting involuntary blinks during candle-gazing sessions.

All face analysis is performed entirely on your device using Apple's Vision framework. No facial images, geometry, landmarks, or biometric data are ever stored, recorded, transmitted, or shared with any third party. The only data retained from face analysis is your blink count and a computed Focus Score (both simple integers). These are saved to your session history so you can track your concentration improvement over time.

You can use the Focus Challenge feature only after explicitly granting camera permission. You may revoke this permission at any time in your device settings.