Privacy Policy
Last Updated: August 6, 2026 Effective Date: August 6, 2026
This Privacy Policy (“Policy”) describes how Peak Leadership LLC (“Peak Leadership,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Unbounded meditation timer mobile application (the “App”) and any related services (collectively, the “Services”).
By downloading, accessing, or using the App, you agree to this Policy. If you do not agree, please do not use the App.
1. Information We Collect
Information you provide directly
- Account information: name, email address, password, and profile photograph.
- Practice information: records of your meditation sessions, including start time, duration, session type, and any notes you add; along with derived information such as streaks, totals, and milestones (collectively, “Practice Data”).
- Community information: the groups you join and the meditation buddies you connect with.
- Meditation buddy invitations: if you choose to invite someone to use the App, the email address you provide for that person.
- Communications you send to us, including support requests and feedback.
Information collected automatically
- Device information: device model, operating system and version, language, and time zone.
- Usage information: features used and in-app actions necessary to operate the App and to record your practice.
- Network information: IP address (used for security, abuse prevention, and standard server logging — not used to derive your location) and standard server log data.
- Push notification token: if you enable reminders or notifications, a push registration token issued by Apple or Google for your device.
Health and fitness information (optional)
If you enable the health platform integration, the App writes a record of your completed meditation sessions to Apple Health on iOS or Google Health Connect on Android. On iOS, the App also reads mindfulness session data from Apple Health, including sessions recorded by other applications, and stores that data on our servers as part of your practice history. The App does not read any other category of health or fitness data on either platform. This integration is off by default and is described in detail in Section 6.
Practice Data may constitute health or wellness information under applicable law. We treat it as sensitive personal information.
Information we do not collect
- Precise (GPS) location data, or approximate location derived from your IP address or any other source.
- Advertising identifiers (IDFA / AAID), or any identifier used for advertising or cross-app tracking.
- Contact lists, calendar entries, or photo library contents (other than a photograph you choose to upload).
- Microphone or camera input.
- We do not use third-party analytics, behavioral tracking, or crash-reporting software development kits in the App. We do not collect telemetry about your use of the App through any third-party service.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the App, including account creation and authentication.
- Record your meditation practice and generate your history, statistics, streaks, and milestones.
- Operate the community features you choose to use, including meditation buddies and groups.
- Send reminders and notifications you have enabled.
- Communicate with you about your account, product updates, and support requests.
- Improve and develop the App, including troubleshooting and feature development.
- Detect, prevent, and respond to fraud, abuse, security incidents, or technical issues.
- Comply with legal obligations and enforce our terms.
We do not use your personal information for advertising. The App does not display third-party advertising. We do not sell or share your personal information with advertisers, ad networks, or data brokers, and we do not engage in cross-context behavioral advertising or targeted advertising.
3. Legal Bases for Processing (EU/UK/Swiss Users)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases:
- Performance of a contract — to provide the App and Services you request.
- Legitimate interests — to operate, secure, and improve the App, where those interests are not overridden by your rights.
- Consent — for data that constitutes health data under Article 9 of the GDPR, and for any optional uses where consent is required (for example, enabling the health platform integration, or sharing your practice statistics with a group). You may withdraw consent at any time.
- Legal obligation — to comply with applicable law.
4. How We Share Information
Service providers. We share information with vendors that help us operate the App, including cloud hosting and database providers, email delivery providers, and the push notification services operated by Apple and Google. Service providers are contractually required to use information only for the services they provide to us and to safeguard it appropriately.
Other users. Information is shared with other users of the App only as described in Section 5 and only in accordance with the sharing settings you have chosen.
Legal, safety, and compliance. We may disclose information when we believe in good faith that it is necessary to comply with law or valid legal process (such as a subpoena or court order); to enforce our terms; to protect the rights, property, or safety of Peak Leadership, our users, or others; or to investigate fraud, security, or abuse.
Business transfers. If Peak Leadership is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and of any choices you may have.
Aggregated or de-identified data. We may use and share aggregated or de-identified information that cannot reasonably be used to identify you for any lawful purpose.
We do not sell your personal information. We do not share your Practice Data with third parties for research or any other purpose except as described in this Section.
5. Meditation Buddies and Groups
The App includes optional social features that let you connect with meditation buddies and participate in groups. These features are designed so that you control what other users can see about you.
- Discoverability. You can make yourself undiscoverable in buddy searches at any time using the discoverability setting in the App.
- Invitations. Another user cannot view your profile or your Practice Data unless and until you accept their invitation.
- Group statistics. Sharing your practice statistics with a group is controlled by a separate setting, which you can turn off at any time.
We do not publicly display your Practice Data outside the App, and we do not display it to other users unless you have enabled the applicable sharing setting.
Meditation buddy invitations. If you choose to invite someone to use the App, we will ask you for their email address. We use it solely to send that invitation and retain it only as long as necessary to send and manage the invitation.
6. Apple Health and Google Health Connect
The App integrates with Apple Health on iOS and Google Health Connect on Android (together, “Health Platforms”).
What we write. When you enable this integration, the App writes a record of your completed meditation sessions — the session start time, end time, and duration — to your device’s Health Platform. We do not write your name, email address, profile photograph, session notes, or any other identifying information to the Health Platform.
What we read. On iOS, the App also reads mindfulness session data from Apple Health — the start time, end time, and duration of mindful sessions, including sessions recorded by other applications — so that the App can reflect your complete mindfulness history and avoid counting the same session twice. Mindfulness is the only category of health data the App reads. We do not read exercise, workout, sleep, heart rate, or any other health or fitness data.
Android is write-only. On Android, the App requests write permission only. We do not read, receive, collect, or store any data from Google Health Connect, including data written to Health Connect by other applications.
How this data reaches our servers. All of your App data is stored on our backend so that your history, statistics, streaks, and buddy and group features work across your devices. This includes mindfulness session records read from Apple Health — start time, end time, and duration — which are transmitted to our backend servers, operated on our behalf by our cloud hosting provider in the United States, and associated with your account. This data is stored using the same safeguards that apply to your other account data, including encryption in transit and access controls, and is retained and deleted as described in Sections 7 and 8. Because mindfulness sessions recorded by other applications may be included, health data originating outside the App may be stored on our servers if you enable the integration.
Your control. The integration is off by default. You can turn it on or off at any time in the App’s settings. You can also revoke or adjust the permissions at any time — including granting read access without write access, or the reverse — in the Health Connect app on Android, or in Settings → Privacy & Security → Health on iOS. Changes take effect immediately. Revoking write permission stops future writes but does not remove records already written; revoking read permission stops the App from reading any further data from Apple Health.
Deleting Health Platform records. Records written to your device’s Health Platform are stored on your device and controlled by you. To delete them, use the Health Connect app on Android or the Apple Health app on iOS. Deleting your Unbounded account does not delete records already written to your device’s Health Platform, and we are not able to delete them on your behalf.
Access by other apps. Once written, your device’s Health Platform may make this data available to other applications you have authorized. That sharing is controlled by you through your device settings and is governed by Apple’s or Google’s terms, not by this Policy.
Restrictions on our use. We do not use or transfer Practice Data, or any data read from or written to a Health Platform:
- for advertising or marketing of any kind, including personalized or interest-based advertising;
- for data mining, or for any purpose other than supporting your health, fitness, and wellness practice;
- by selling or transferring it to data brokers, information resellers, advertising platforms, social networks, or any other third party for their own purposes or for monetary consideration;
- to determine credit-worthiness, insurance eligibility, employment suitability, or for lending purposes;
- in connection with any product or service that may qualify as a medical device;
- in any manner inconsistent with this Policy or with Apple’s HealthKit or Google’s Health Connect developer requirements.
We do not disclose data obtained from Apple Health to any third party without your express permission, other than to service providers acting on our behalf to operate the App.
We limit our use of this data to providing and improving the meditation features of the App that are visible to you in the App’s user interface.
7. Data Retention
We retain your personal information for as long as your account is active and as needed to provide the Services. When you delete your account, we delete or de-identify your personal information from our active systems within 30 days, except where we are required to retain it for legal, accounting, security, or fraud-prevention purposes. Backup copies are purged on our standard backup rotation cycle.
8. Your Choices and Rights
Account deletion. You can delete your account at any time directly within the App. Open the Settings > Profile screen and tap Delete Account. Deleting your account permanently removes your profile, activity, and associated content from our active systems within 30 days, subject to the retention exceptions in Section 7. You may also request deletion by emailing help@peakleadershipinstitute.com. Deleting your account does not remove records already written to your device’s Health Platform — see Section 6.
Access and correction. You can review and update your profile information directly in the App. For other access or correction requests, contact us at help@peakleadershipinstitute.com.
Sharing settings. You can change your discoverability and group statistics sharing settings at any time in the App.
Permissions. You can revoke any permission you have granted the App — including health platform and notification permissions — in your device settings at any time.
Communications. You can opt out of non-essential email by using the unsubscribe link in those emails. You can disable push notifications in your device settings. We will still send essential service messages (account, security, or legal notices).
EU/UK/Swiss residents. Subject to applicable law, you have the right to (i) access your personal data, (ii) correct inaccurate data, (iii) request deletion, (iv) restrict or object to processing, (v) request data portability, (vi) withdraw consent, and (vii) lodge a complaint with your local data protection authority. To exercise these rights, contact us at help@peakleadershipinstitute.com.
US state residents. See Section 13 for state-specific rights and how to exercise them.
9. International Data Transfers
Peak Leadership LLC is based in the United States, and our servers and service providers are primarily located in the United States. If you access the App from outside the United States, your information will be transferred to, processed, and stored in the United States, which may have data protection laws different from those in your country.
For transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or other valid transfer mechanisms.
10. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account password and for activity under your account. If you believe your account has been compromised, contact us immediately at help@peakleadershipinstitute.com.
11. Children’s Privacy
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete it. A parent or guardian may contact us at help@peakleadershipinstitute.com.
We do not knowingly sell or share personal information of users under 16 in California or other jurisdictions with similar protections.
12. Third-Party Links and Services
The App may contain links to third-party websites or services. This Policy does not apply to those services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.
13. US State Privacy Rights
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another US state with a comprehensive privacy law, you may have the following rights, subject to applicable law:
- Right to know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
- Right to correct inaccurate personal information.
- Right to delete personal information we have collected from you.
- Right to data portability — receive a copy of your data in a usable format.
- Right to opt out of the sale or sharing of personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects. We do not engage in any of these activities.
- Right to limit use of sensitive personal information. We use sensitive personal information — including your Practice Data — only to provide the App and for other purposes permitted without an opt-out under California law.
- Right to non-discrimination for exercising your rights.
Categories of personal information collected (CCPA/CPRA). Identifiers (name, email address, account ID, IP address); customer records information; internet or electronic network activity; audio/visual information (profile photographs); health and wellness information (your meditation session history, which constitutes sensitive personal information); and inferences drawn from the above. Sources and purposes are described in Sections 1 and 2. We have not sold or shared personal information in the preceding 12 months.
How to exercise your rights. Email help@peakleadershipinstitute.com and identify the right you wish to exercise. We will verify your identity using information already associated with your account before responding. We will respond within the timeframe required by applicable law (typically 45 days, with possible extensions).
Authorized agents. You may designate an authorized agent to submit a request on your behalf. We will require written proof of authorization and may verify your identity directly.
Appeals. In Virginia, Colorado, Connecticut, and similar states, if we deny your request you may appeal by replying to our denial. If your appeal is denied, you may contact your state attorney general.
Do Not Track and Global Privacy Control. The App does not respond to “Do Not Track” browser signals, as no industry standard exists. We honor Global Privacy Control (GPC) signals where required by law.
Financial incentives. We do not offer financial incentives in exchange for personal information.
14. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) or through an in-app notice prior to the change taking effect. The “Last Updated” date at the top of this Policy indicates when it was last revised.
15. Contact Us
If you have questions, concerns, or requests regarding this Policy or your personal information, please contact us:
Peak Leadership LLC Email: help@peakleadershipinstitute.com