Privacy Policy

1. Scope and provider

This Privacy Policy applies to the Maraze mobile application, the website at maraze.qonvolucional.com, and the Android preregistration list. Maraze is provided under the Maraze and Qonvolucional brands by the application provider identified on Maraze’s App Store product page (the “Provider,” “we,” “us,” or “our”).

For privacy questions or requests, email hello@qonvolucional.com.

2. The short version

Private camera use does not mean zero technical data. Maraze uses limited data for purchase access, marketing attribution, app improvement, diagnostics, security, support, and the Android launch list. This policy describes those uses directly.

3. Information stored on your device

Maraze saves the information needed to personalize and continue your experience in local app storage. This can include your optional first name, selected wellness goal, focus area and guide area, onboarding choices, chosen comfort concerns, first-routine rating, massage frequency and reminder schedule, favorites, language and accessibility preferences, audio choice, Calm Garden progress, streak progress, and limited-offer state.

Session history stores a routine identifier, completion date and time, elapsed duration, and whether the routine was completed. It does not contain camera images, video, audio, pressure readings, posture analysis, or a medical assessment. Maraze keeps only a limited recent history in the app.

The detailed local record is not uploaded to a Maraze account because Maraze currently has no customer account or cloud-sync service. A selected goal and focus area, routine recommendation identifiers, and certain app interactions may also be included in AppsFlyer events as explained in section 5. Your entered name, reminder times, detailed session history, and camera content are not included in those events.

4. Camera, notifications, and device permissions

Optional camera

If you choose live-mirror mode, Maraze displays the device’s live camera preview beneath fixed instructional overlays rendered on the device. Maraze does not call camera capture or recording functions for its routines. It does not identify you, recognize a face, scan a body, detect anatomy or posture, sense pressure, create a biometric profile, infer a health condition, or adapt guidance to your body. Maraze does not request microphone access for recording.

Camera frames are not captured, saved, or uploaded. You can decline or revoke camera permission in device settings and continue in guide-only mode with the same timers, instructional media, optional voice cues, haptics, and session controls.

Local notifications

If you choose reminders, Maraze asks for notification permission and schedules massage or trial-ending reminders on your device. Maraze does not use a customer account or register a push-notification token for marketing reminders. You can change massage-reminder choices in Maraze and notification permission in device settings.

5. Information processed off device

Depending on the features you use, the following limited information may be sent to service providers:

AppsFlyer receives identifiers only to the extent they are available under platform rules and your device settings. Maraze does not send camera content, your entered name, reminder schedule, or local session history to AppsFlyer, RevenueCat, or Sentry as an intentional event field.

6. How we use information

We use information only as reasonably necessary to:

• provide and personalize Maraze on your device;
• show products, confirm purchase access, and restore eligible subscriptions;
• operate deep links and measure how people find and move through Maraze;
• diagnose crashes, protect reliability and security, and improve the app;
• send the Android launch note you expressly request;
• respond to support, feedback, privacy, and legal requests; and
• comply with law, platform rules, and enforceable legal process.

Depending on where you live, processing may rely on your consent, performance of a contract or requested service, our legitimate interests in operating and improving Maraze, or compliance with a legal obligation. Where consent is required, you may withdraw it as described below.

7. Service providers

Maraze currently relies on the following providers for the limited purposes described in this policy:

• Apple and StoreKit for app distribution, payment, receipts, subscriptions, refunds, and platform permissions. See Apple’s Privacy Policy.
• RevenueCat for product catalog, app-user identifiers, receipt validation, trial eligibility, and subscription entitlements. See RevenueCat’s Privacy Policy.
• AppsFlyer for install attribution, deep links, campaign measurement, and selected app events. See the AppsFlyer Services Privacy Policy.
• Sentry for crash reporting, performance monitoring, and masked session replay. See Sentry’s Privacy Policy.
• Cloudflare for website and Worker delivery and storage of the Android preregistration list in D1. See Cloudflare’s Privacy Policy.

These providers process information under their own published policies and our applicable service terms. We require providers that process information for Maraze to use it for the contracted service and protect it in a manner consistent with this policy and applicable law.

Maraze also opens external services when you choose actions such as managing an Apple subscription, visiting the Sleekplan feature-request page, or sending an email. Information you submit after leaving Maraze is also governed by the destination service and your email provider, as applicable.

8. Website and Android preregistration

Maraze’s own website code does not set analytics or advertising cookies. Cloudflare may process ordinary request metadata—such as IP address, requested URL, timestamp, browser or device information, and security signals—to deliver and protect the website and Worker service under its privacy policy.

If you join the Android preregistration list, we store the email address you submit, the source “website,” and the submission time in Cloudflare D1. We use that email only for the Android preregistration or launch communications you requested and related operational notices. We do not use it for health profiling, combine it with your local Maraze routine history, or sell it.

The Android list is optional. You can use the website and the iOS app without joining it. To leave the list before or after a message is sent, email hello@qonvolucional.com from the address you want removed.

9. When information is shared

We share information with the service providers above only for the described functions. We may also disclose information when reasonably necessary to comply with law or enforceable legal process, protect a person’s safety or the security and integrity of Maraze, prevent fraud or abuse, or complete a business transaction such as a merger or asset transfer subject to appropriate safeguards.

Maraze does not sell the Android-list email or camera content. Maraze has no third-party advertising inside the app, and it does not provide your local profile or session history to data brokers. AppsFlyer does process attribution and marketing-measurement data, which some laws may call “sharing” or “tracking” even when no money changes hands. The Android-list email and camera view are not provided to AppsFlyer for that purpose.

10. Retention and deletion

• On-device information remains until Maraze overwrites it through normal use, you clear app data, the operating system removes it, or you delete the app. Removing the app does not cancel an Apple subscription.
• Android-list email is kept while reasonably needed for preregistration and launch communications, or until you request removal, unless a longer period is required for legal, security, or recordkeeping reasons.
• Analytics, purchase, and diagnostic information is kept only as long as reasonably necessary for the purposes in this policy, subject to our provider settings, contracts, legal obligations, dispute resolution, and fraud prevention.
• Support messages may be retained while the request is active and afterward when reasonably needed to document the response, prevent repeated issues, or meet legal obligations.

Email us to request deletion of information we control. We will verify and act on a valid request as required by applicable law and will instruct a service provider when its help is necessary. Apple may retain App Store purchase and transaction records under Apple’s own obligations and policies. Some vendor telemetry uses an app- or device-level identifier rather than an account; if we cannot reasonably connect it to you, we may not be able to locate a specific record in response to a request.

11. Your choices and privacy rights

• Use guide-only mode and decline or revoke camera access in device settings.
• Decline notifications, turn them off in device settings, or remove reminder times in Maraze.
• Use operating-system privacy controls to limit permissions and identifiers made available to apps.
• Clear local app data or delete Maraze to remove information stored only on that device.
• Ask us to remove your Android preregistration email or stop launch communications.

The current app does not include a separate AppsFlyer or Sentry switch. Device privacy settings may limit identifiers and permissions but may not stop basic attribution or diagnostic processing. You can contact us about information we control.

Depending on your location, you may also have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent for personal information we control, and to complain to a data-protection authority. To make a request, email hello@qonvolucional.com. We may ask for limited information to verify the request and locate the relevant record. Some rights are subject to legal exceptions.

12. Children

Maraze is not designed for or directed to children under 13, and it does not use an age-verification system. A parent or legal guardian should review Maraze’s wellness guidance, permissions, and purchase choices before allowing a minor to use it. We do not intend to collect personal information from children under 13. If you believe a child under 13 submitted personal information to us, contact us so we can review and delete it where required.

13. Security and international processing

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. No device, transmission, database, or storage system can be guaranteed completely secure. Please contact us if you believe information connected to Maraze has been compromised.

Our service providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws. Where required, we use contractual or other lawful safeguards for international transfers.

14. Changes and contact

We may update this policy as Maraze, its providers, platform rules, or applicable law changes. The revised policy will show a new effective date. We will provide additional notice or request consent when required for a material change.

Questions, concerns, and privacy requests may be sent to hello@qonvolucional.com.