Privacy Policy

Overview

This Privacy Policy explains how Nanotech Computers (Pty) Ltd (“Nanotech Computers”, “we”, “us”) handles information when you use the Simply Calm app for iPhone (the “App”) and this website at www.simply-calm.com (the “Website”, together the “Services”). We are the developer of the App and the responsible party (data controller). We process information in line with South Africa’s Protection of Personal Information Act (POPIA) and, where it applies, the EU/UK General Data Protection Regulation (GDPR).

Simply Calm is built to keep what you write to yourself. The App works without an account, and everything you enter stays on your device. We do not run a server that receives it.

Our privacy principles

• Private by design: the App works fully without an account and without sending what you write to us.
• Data minimization: we only ever handle what the App genuinely needs to function, which in practice is almost nothing.
• No surveillance: no advertising identifiers, no cross-app or cross-site tracking, and no data brokers.
• You decide: Apple Health and notifications, where offered, are optional and under your control.

Information the App handles

Everything below is stored on your device. We do not receive or have access to it:

• Check-ins you enter: how angry you felt and how you slept, logged day to day in Today.
• Coach conversations: the messages you exchange with the coach, and the sessions it keeps so you can revisit them.
• Breathing activity: which guided patterns you use and for how long, so Insights can show your breathing minutes.
• Anything else you enter: for example, during onboarding or when you save an affirmation.

This information can reveal sensitive details about your emotional state and relationships. We treat it as sensitive personal information precisely because it never leaves your device unless you choose to move or share it yourself.

Where your data is stored

Your check-ins, coach conversations and breathing activity are saved in a private database on your device. That data is not stored on our servers, and we cannot read it. If you back up your iPhone to iCloud or a computer, that backup will include the App’s data as it does for any app; this is controlled by your own device and iCloud settings, not by the App.

On-device AI

The coach is designed to think where your data already lives: on your iPhone. It runs on Apple Intelligence, on the device, which is why it requires an iPhone that has Apple Intelligence and is not offered on iPhones without it. What you type into the coach is processed on your device and is not transmitted to us or to a third party for this purpose.

What we do not do

• We do not require an account, and do not ask for your email, phone number or real name.
• We do not sell, rent or share your personal data with anyone for their own purposes.
• We do not show advertising and use no advertising identifiers.
• We do not use third-party analytics SDKs and do not build a profile of you.
• We do not track you across other apps or websites: the App declares no tracking in its privacy manifest.

Apple Health

Where the App offers to read sleep data from Apple Health, connecting it is entirely optional. If you choose to, iOS asks you, outside our control, exactly what to share. The App reads only what you allow, and uses it on your device to help show the link between sleep and anger. Health data accessed this way is never transmitted to us and is never used for advertising. You can review or revoke this permission at any time in Settings → Health → Data Access & Devices.

Purchases and subscriptions

Simply Calm Premium is bought through the App Store. Apple takes the payment against your Apple ID and handles billing, renewals and refunds; Nanotech Computers never receives or stores your card details, billing address or Apple ID.

Where subscription management is enabled, we use RevenueCat, Inc. to validate the purchase receipt Apple issues and to tell the App whether your subscription is currently active. For that check RevenueCat processes an anonymous app-generated identifier together with the purchase and device information Apple includes in the receipt, such as the product bought and the country of the store. It is a processor acting on our instructions, it does not use that information for its own purposes, and it is never given your check-ins, coach conversations, notes or Apple Health data. If you never make a purchase, no such check takes place.

This is the one part of the App that talks to anything outside your device, and it exists solely to know whether you have paid. Everything else described in this policy stays on your iPhone.

Legal basis for processing

Where the GDPR or POPIA applies, our legal bases are your explicit consent for processing the sensitive information described above, which you give by using the App and can withdraw at any time by deleting your entries or the App, and the performance of a contract to provide the Services. Because almost all processing happens locally on your device, it does not involve us as a recipient of your data at all.

International data transfers

We are based in South Africa. Because what you write stays on your device, it is not transferred to us or to any other country. If that ever changes, we will update this policy first.

Data retention

Your entries are kept for as long as you keep them. Because the data lives on your device, you control retention directly: it stays until you delete individual entries or delete the App. We hold no separate copy to retain.

Security

Your data benefits from your device’s built-in encryption. No system is perfectly secure, but keeping your data on your own device, and out of a central server we would otherwise have to protect, materially reduces the risk of a large-scale breach.

Your rights

Subject to applicable law, you have the right to access, correct, delete and restrict the use of your personal information, to object to certain processing, and to withdraw consent. Because your data is on your own device, most of these are self-service and immediate: view and edit any entry in the App, and delete entries or the App itself to erase it. We generally cannot access or delete your on-device data for you, precisely because it is private to you. If you have a question, contact us at [email protected].

Under POPIA, you may also lodge a complaint with the Information Regulator of South Africa. Under the GDPR, you may complain to your local data protection authority.

Children and young people

Simply Calm is built so that no personal data about any user, whatever their age, is collected by us or sent off the device: there is no account, no advertising and no tracking. Where the law sets a minimum age for consenting to data processing, we ask that users below that age use Simply Calm with the involvement and consent of a parent or guardian. We do not knowingly collect personal information from children in a way that would require verifiable parental consent, because the App’s design means we do not collect such information from anyone.

The same design shapes how we approach the United States Children’s Online Privacy Protection Act (COPPA): because Nanotech Computers collects no personal information from a child through the App, there is nothing for us to gather, use or share that would trigger COPPA’s verifiable parental-consent requirements. If you are a parent or guardian with any concern, please contact us.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and change the “Last updated” date above. Where a change is significant, we will ask you to review it again in the App. See also our Terms of Use.

Contact us

Nanotech Computers (Pty) Ltd (registration 2017/122030/07), South Africa. For any privacy questions or to exercise your rights, contact us at [email protected].

Language

This document is written in English. Translations are provided for convenience only. If there is any dispute about its meaning, or any inaccuracy or ambiguity in a translation, the English version prevails.