Privacy Policy

Effective date: August 13, 2026

1. Introduction

Thank you for choosing Tantra 112 (the "App"). Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your information.

Our website uses Google services for analytics and advertising. Learn how Google handles data from businesses that use its services.

2. Information We Collect

Usage Data – We collect information about how you use the App, such as the screens you visit, time on screen, and the content you interact with. This data is tied to a unique identifier assigned to your device or account and helps us improve the App and measure engagement.
Device Information – We automatically receive certain technical information from your device, including device model, operating system version, language, and approximate location (country or region). We do not collect precise GPS data.
Audio Playback Analytics – When you play audio within the App, we collect playback events (e.g., play, pause, completion) linked to a unique identifier so we can refine content and features.
Account Information (optional) – You can use the App without an account; however, we strongly encourage creating one to sync purchases and progress. If you create an account, we collect your email and name to authenticate you via our provider (Supabase) and to provide account-related features.
Subscription and Purchase Information – We receive subscription status and entitlement information (e.g., active plan, trial state, product identifiers, purchase provider, renewal state, and expiration date) from RevenueCat to determine your access to content. Purchases may be processed by the Apple App Store, Google Play, or Paddle for purchases made through our website. For direct website purchases, we may also receive transaction and subscription identifiers, status, totals, currency and tax information, and limited payment-method details. We do not receive or store your full payment card number.
Error and Diagnostics – We collect error events and diagnostic information (e.g., exception messages and stack traces) to troubleshoot and improve reliability.

Identifiers we use: We associate events and device information with identifiers such as a PostHog distinct_id, your Supabase user ID (if you create an account), a RevenueCat app user ID for subscriptions, device metadata, and IP address. If you sign in, analytics events may be linked to your account.

3. Information We Do Not Collect

We do not require you to create an account to use the App. If you choose to create an account (recommended), we collect your email and name for authentication and support.
We do not store full payment card numbers on our servers. Payment details are processed by the Apple App Store, Google Play, or Paddle, depending on where you purchase. RevenueCat tracks purchases and entitlements but is not the payment processor for those purchases.

4. How We Use Your Information

To operate, maintain, and improve the App and its features.
To understand usage patterns, troubleshoot issues, and enhance user experience.
To develop new features aligned with user interests.
To detect, prevent, or address technical issues or security breaches.

5. Sharing of Information

We do not sell or rent your information. We work with service providers that process data to operate, measure, advertise, and improve the App and website:

Analytics – We use PostHog to collect usage and event data. Events are associated with a unique identifier and may be linked to your account if you create one.
- Note: We disable automatic event autocapture and only send explicitly defined events from the App.
Website analytics and advertising – With permission where required, we use Google Analytics and Google Ads to understand website use, measure advertising and conversions (including enhanced conversions), build advertising audiences, and enable ads personalization. Google may receive device, browser, page, interaction, advertising-click, and purchase-related information. Learn how Google uses this data.
Subscription entitlements – We use RevenueCat to track purchases and manage access across platforms. RevenueCat receives information such as product identifiers, entitlement and renewal state, trial status, expiration date, and purchase provider (Apple, Google Play, or Paddle).
Direct website billing – Paddle processes direct website purchases as merchant of record. Paddle processes payment, customer, billing-address, tax, transaction, subscription, invoice, refund, and dispute information under its own privacy terms. We receive the information needed to provide access, support the purchase, and reconcile billing, but not your full payment card number.
Authentication – If you create an account, Supabase provides authentication and session management using your email and name.
Error monitoring – We use Sentry to receive website error events, stack traces, and limited technical context needed to diagnose failures. The website integration is configured not to send account identity, cookies, request or response bodies, HTTP headers, URL query parameters, local variables, or raw payment-provider responses in error events. We do not use Sentry Session Replay.

These providers process information under their applicable terms and privacy policies and, where they act as our processors, under contractual data-protection obligations.

6. Data Retention

We retain account, subscription, and analytics data (which may be pseudonymous or linked to your account) for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. As guidance:

Account data: retained while your account is active and for up to 30 days after deletion (for backup and fraud prevention), unless longer retention is legally required.
Subscription/entitlement records: typically up to 24 months, except where billing, tax, fraud-prevention, dispute, or other legal obligations require longer retention. Payment providers may also retain records under their own legal obligations and policies.
Analytics events: typically up to 24 months.
Error logs: typically up to 30–90 days.

7. Security

We implement technical and organizational measures designed to safeguard your information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The App is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete such information.

9. Your Choices and Controls

Accounts – Creating an account is optional but strongly encouraged. You can request account deletion at any time by contacting us. Deleting your Tantra 112 account does not cancel a subscription or free trial.
Subscriptions – Manage or cancel through the provider that processed the purchase: Apple for App Store purchases, Google Play for Google Play purchases, or Paddle for direct website purchases. RevenueCat tracks the resulting entitlement and updates access in the App. Cancel with the purchase provider before deleting your account if you do not want future charges.
Data requests – You can request access to or deletion of your account and analytics data by contacting us.
Self‑serve: You can also visit /delete-account and /delete-data on our website to learn more about account deletion and data requests.
App deletion – You can delete the App from your device at any time. This will remove locally stored data from your device, but it does not cancel a subscription or free trial.

10. Changes to This Privacy Policy

We may update this Policy from time to time. If we make material changes, we will notify you via the App or by other means. Continued use of the App after such changes constitutes acceptance of the revised Policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

One Twelve Group
Email: om@tantra112.app

12. International Data Transfers

Your information may be processed in countries other than your own (including the United States), where our service providers operate. Where required, we implement appropriate safeguards for cross‑border transfers (such as contractual protections) and limit access to what is necessary.

13. Legal Bases for Processing (EEA/UK)

Where applicable, we process personal data under the following legal bases:

Performance of a contract: to provide and maintain the App, manage subscriptions, and deliver purchased content.
Legitimate interests: to measure and improve the App, prevent fraud/abuse, and ensure security.
Consent: where required for certain analytics or communications.
Legal obligations: to comply with applicable laws.

14. Your Privacy Rights (EEA/UK/California and other regions)

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. California residents may also have rights to opt out of certain disclosures that qualify as a “sale” or “sharing” of personal information under California law. We do not sell or share personal information for cross‑context behavioral advertising. To exercise rights, contact us at the email above.

15. Cookies and Online Tracking (Website)

Our website uses essential storage and, with permission where required, optional analytics and advertising cookies. Visitors in the EEA, UK, and Switzerland can choose Allow or Essential only. The choice is sent to Google through Consent Mode and is stored so the notice does not remain on screen. With Essential only, optional storage and PostHog website analytics remain disabled; Google tags use their consent-aware behavior. You can change your choice using the control on this page. Mobile app analytics are implemented through in-app events (see above), not browser cookies.