RelexaPrivacy Policy
Last updated: November 2, 2026
This policy explains what information Relexa collects when you use the app, why we collect it, who we share it with, and the choices you have. Relexa is a Progressive Muscle Relaxation app. The information we collect exists to run the app and support you, not to build an advertising profile. We don't show ads, and we don't sell your data.
1. Information we collect
Account information
- Your name and email address. If you sign in with Google, your name, email and profile photo as provided by Google. If you sign in with Apple, your name and email as provided by Apple (Apple lets you hide your real email address).
- An avatar selection, if you choose one instead of a profile photo
- Your app language, so emails like the welcome message reach you in the right language
Content you create
- Journal entries: anything you choose to write, plus an optional mood rating. Your journal text is encrypted on your device before it ever reaches our servers, so we can't read it. The mood rating, date and any session tag of an entry are stored unencrypted, so the app can chart your mood over time. See "How journal privacy works" below.
- Tension and mood check-ins: how tense you feel and which body areas you mark before or after a session
- Custom sessions: any sessions you build yourself (muscle groups, timing, notes)
- Feedback: messages you submit through the in-app feedback form
Usage information
- Session history: which sessions you completed, when, and for how long
- Streaks, totals, and program progress
- Your onboarding answers (reason for using Relexa, experience level) and preferences such as your narrator voice
- Signals used only to power in-app features you can see, for example noticing repeated short sessions to offer a gentler option, or noticing which body areas you tend to release tension in to suggest a relevant session. This stays inside the app; it is never used for advertising.
- Crash and stability diagnostics: if the app crashes or errors unexpectedly, we automatically receive a technical report (device model, OS version, and the code path that failed) via Firebase Crashlytics. These reports never include your journal content or anything you've written in the app.
- App integrity checks (Firebase App Check), which confirm requests come from the genuine Relexa app on a real device
Purchase information
If you buy Relexa Premium, Google Play (on Android) or the Apple App Store (on iPhone) processes your payment. We never see or store your card details. We store your purchase status (active plan, purchase date, and the store's purchase reference) so the app knows what you're entitled to and can keep it in sync with renewals, cancellations and refunds.
2. How journal privacy works
Your journal is the most personal thing you write in Relexa, so we built it so that we genuinely cannot read it, not "we promise not to look," but technically unable to.
When you write a journal entry, your phone scrambles the text using a secret key before it ever leaves your device. What lands on our servers is that scrambled version, which looks like meaningless characters to anyone who doesn't have the key, including us. Only your own devices hold a copy of that key.
When you first set this up, you're shown a one-time recovery code. Think of it as a spare key: if you ever lose or reset every device you use Relexa on, that code is the only way to unlock your journal again. We never see this code, and we can't recover it, resend it, or unlock your journal for you if it's lost.
Journal encryption was introduced in July 2026. Entries written before then were stored unencrypted; the app encrypts them automatically the next time you open it, after which only the encrypted version is kept.
This only affects your journal. Your account, login, sessions, streaks, and everything else in Relexa work exactly as normal and stay fully recoverable through your regular sign-in, with or without the recovery code.
3. How we use your information, and why we're allowed to
| Purpose | Legal basis (GDPR) |
|---|---|
| Running your account, syncing your progress, journal and check-ins | Performance of our agreement with you (Art. 6(1)(b)) |
| Verifying purchases and providing Premium | Performance of our agreement with you (Art. 6(1)(b)) |
| Welcome email and replies to support messages | Our legitimate interest in communicating with you about the service (Art. 6(1)(f)) |
| Personalized suggestions based on your own use | Performance of our agreement with you (Art. 6(1)(b)) |
| Crash reports, abuse prevention and app integrity checks | Our legitimate interest in a secure, working app (Art. 6(1)(f)) |
Tension and mood check-ins can say something about your wellbeing. We use them only to show you your own progress and suggestions inside the app, with your explicit consent given by choosing to record them (Art. 9(2)(a)). You can stop recording them at any time and delete them by deleting your account.
4. Who we share information with
We do not sell your personal information. We share data only with the service providers that make the app work:
| Service | Purpose | Location |
|---|---|---|
| Google Firebase | Sign-in, database, file storage, backend functions, App Check, hosting | Database in Frankfurt, Germany (EU); some functions in the US |
| Firebase Crashlytics | Crash and stability diagnostics | US |
| Google Play / Apple App Store | Processing purchases and subscriptions | Per the store's own terms |
| Google Sign-In / Sign in with Apple | Optional sign-in | Per the provider's own terms |
| Resend | Delivering the welcome email | US |
We may also disclose information if required by law, or to protect the rights, safety, and security of Relexa or our users.
5. International data transfer
Your account data is stored in the EU. Where a provider above processes data in the United States, the transfer relies on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. Data retention and deletion
We keep your information for as long as your account is active. You can delete your account at any time directly in the app: My Profile → Danger zone → Delete account. This permanently removes your account and everything linked to it: your profile, journal entries, tension and mood check-ins, session history, custom sessions, journal encryption keys, feedback messages and purchase records. If you signed in with Apple, we also revoke Relexa's access to your Apple ID. This can't be undone.
We keep a minimal record that a deletion happened (no personal content), so a deleted account can't be accidentally recreated. Crash reports are kept by Crashlytics for up to 90 days. The stores keep their own payment records under their own policies.
7. Your rights
Access and correction: view and update your name and profile details any time in My Profile.
Export: email us and we'll send you a copy of the data we hold about you. Journal entries can only be exported in their encrypted form, since we can't read them either, but you can always view and copy them yourself in the app.
Deletion: delete your account in the app, or email us and we'll do it for you within 48 hours.
Objection, restriction and consent: you can object to or ask us to restrict processing based on legitimate interest, and withdraw consent at any time.
Complaints: you can lodge a complaint with your data protection authority. In Croatia that is the Agencija za zaštitu osobnih podataka (AZOP), azop.hr.
If you're a California resident, you have rights under the CCPA to know what personal information we collect and to request its deletion, which this policy already covers, since we don't sell data in the first place.
8. Age
Relexa is intended for people aged 16 and over. We do not knowingly collect information from anyone under 16. If you believe a child has created an account, contact us and we'll delete it.
9. Security
Your data is encrypted in transit and at rest, and protected by access rules that ensure only you (and, where necessary for support, our admin account) can access it. Your journal is additionally encrypted on your device. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.
10. Changes to this policy
If we make material changes to this policy, we'll update the date above and notify you in the app before the change takes effect.
11. Contact us
Questions about this policy or your data? Email us at support@relexapmr.com. We're a small team and we read every message.