Ombient Privacy Policy

Last updated: 10 June 2026

1. Introduction

This Privacy Policy explains how ASCETIX INC. collects, uses, discloses, transfers, stores and protects personal data in connection with Ombient.

Ombient is a mobile application focused on mindfulness, meditation, sleep, relaxation, breathing, general wellbeing and related digital content. Ombient is intended for general wellness only. It does not provide medical diagnosis, treatment, psychotherapy, mental-health counselling, clinical care, crisis support or emergency services.

2. Controller / Business Identity

For Ombient, the controller/business responsible for personal data is ASCETIX INC., 8 The Green, Suite R, Dover, DE 19901, USA.

Company registration / file number:10275025.

Privacy contact: support@ombient.app.

Support contact: support@ombient.app.

Website: ombient.app.

3. Scope of This Policy

This Privacy Policy applies to personal data processed in connection with the Ombient mobile application, Ombient accounts, Ombient subscriptions and purchases, Ombient websites and checkout pages, refund and cancellation processes, customer support, user communications, app-store listings and purchase validation, technical operations, analytics, security and related services.

This Privacy Policy does not apply to third-party websites, platforms, app stores, payment processors, merchants of record, billing providers or services that have their own privacy notices, except to the extent they process personal data for ASCETIX in connection with Ombient.

4. Relationship to Other Services

Ombient is separate from other applications or services for which ASCETIX INC. may provide merchant-of-record, payment collection, billing, tax, payment processing or related services.

This Privacy Policy applies only to Ombient. It does not apply to any other application, website, product or service, and no other application’s privacy policy governs Ombient unless ASCETIX expressly states that it applies to Ombient.

For Ombient, ASCETIX INC. is the owner, operator and administrator of the App and the controller/business responsible for Ombient user data, unless stated otherwise in this Privacy Policy or required by applicable law.

5. Privacy Principles and No Sale Statement

We process personal data in accordance with the following principles: purpose limitation, data minimisation, transparency, accuracy, security, accountability and user participation.

ASCETIX does not sell Ombient users’ personal data for money. ASCETIX does not share personal data for cross-context behavioural advertising or targeted advertising in connection with Ombient unless this is expressly disclosed in an updated Privacy Policy and supported by any required consent or opt-out mechanism.

If ASCETIX is involved in a merger, acquisition, financing, reorganisation, sale of assets or similar corporate transaction involving Ombient, personal data may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate safeguards.

6. Categories of Personal Data We Collect

Depending on the features you use, your device settings, your purchase channel and the permissions you grant, Ombient may collect the categories below.

Account data: account ID, email address, username or display name, password hash or authentication tokens, account status, registration date, login method and account preferences.

Contact data: email address, support contact details and communication preferences.

Profile and preference data: language, country or region, time zone, content preferences, meditation goals, sleep goals, reminder preferences and app settings.

Wellness app data: meditation history, sleep goals, sleep routines, breathing exercises, mood check-ins, stress or relaxation check-ins, journaling entries, reflections, favourites, progress indicators, streaks, completed sessions, content interactions and similar wellbeing-related app data, if those features are used.

Anthropometric or body-related data: age, height, weight or similar information only if Ombient expressly asks for and collects this data for a specific feature.

Device and technical data: device model, operating system, app version, browser type, language settings, IP address, device identifiers, advertising identifiers if enabled and consented where required, crash logs, diagnostic logs, performance data and security logs.

Usage data: app sessions, screens viewed, content played, features used, timestamps, duration of use, purchase status, entitlement status, referral source and campaign attribution data, if attribution tools are used.

Subscription and transaction data: product purchased, plan type, price, currency, billing period, purchase date, renewal status, cancellation status, refund status, chargeback status, app-store receipt data, transaction identifiers and billing country.

Payment data: full card numbers and CVV codes are processed by Adyen or another disclosed payment provider and are not stored by ASCETIX unless expressly confirmed in an updated policy. If you use Apple Pay or Google Pay for a Direct Web Purchase, Apple or Google and Adyen may process tokenised wallet payment credentials, payment authentication data and related transaction details. ASCETIX may receive limited payment information, such as payment method type, last four digits where available, card brand or wallet type, expiration month/year where available, billing country, transaction identifiers, authorisation status, refund status, chargeback status and payment status.

Support communications: messages, complaints, attachments, support history, issue descriptions and responses.

Notification data: push notification tokens, notification preferences, reminder settings and notification interactions.

Marketing and communications data: newsletter preferences, email engagement, consent records and opt-out status, if marketing communications are used.

Cookies and similar technologies: cookie identifiers, website usage data, browser data, checkout interactions and consent choices, if Ombient uses websites or web checkout pages.

Apple Health / HealthKit data and Google Health Connect data: only if those integrations are implemented and you grant permission.

Some wellness, mood, sleep, stress, journaling, body-related or similar data may be considered sensitive personal data, health-related data or personal and sensitive user data under applicable law, depending on your jurisdiction and the context.

7. Sources of Personal Data

We collect personal data from you when you create an account, use Ombient, contact support, set goals, enter preferences, use wellbeing features, request a refund or cancellation, subscribe to communications or otherwise interact with us.

We collect personal data from your device when Ombient collects technical, diagnostic, usage, notification, security or permission data.

We may receive personal data from Apple, Google, Adyen, Merchants of Record, Payment Processors, Billing Platforms, subscription management providers, Apple Pay, Google Pay, fraud prevention providers, tax/accounting providers, authentication providers, customer support providers, analytics providers, attribution providers, crash reporting providers and other service providers that support Ombient.

We may receive personal data from Apple Health / HealthKit or Google Health Connect only if those integrations are implemented and you grant permission.

8. Purposes of Processing

ASCETIX processes personal data to provide, operate, maintain, personalise, secure, support and improve Ombient.

Purposes include creating and managing accounts; delivering meditation, sleep, relaxation, breathing and wellbeing content; personalising content, recommendations, reminders and app settings; recording progress, history, favourites and streaks; processing subscriptions, purchases, renewals, cancellations, refunds, chargebacks and entitlement status, including card, Apple Pay and Google Pay checkout through Adyen where offered; providing customer support; sending service communications; sending push notifications and reminders if enabled; analyzing performance; fixing bugs; detecting crashes; improving app stability; understanding feature usage; preventing fraud, abuse, security incidents and unauthorised access; complying with tax, accounting, legal, regulatory and app-store obligations; enforcing the Terms; managing consent and privacy choices; and sending marketing communications only where permitted by law and your preferences.

9. Legal Bases Where GDPR / UK GDPR Applies

Where the GDPR, UK GDPR or similar laws apply, ASCETIX relies on different legal bases depending on the processing activity.

Performance of a contract: providing Ombient, accounts, subscriptions, user-requested features, paid access, cancellation and support.

Legal obligations: tax, accounting, consumer-law, regulatory, sanctions, app-store and other compliance obligations.

Legitimate interests: fraud prevention, security, abuse prevention, service improvement, analytics where permitted, support quality, business administration and legal claims.

Consent: certain cookies, marketing communications, push notifications, Apple Health / HealthKit access, Google Health Connect access, certain sensitive data processing where required, and tracking or advertising where required.

Explicit consent: where required by law for certain sensitive personal data or health-related data.

10. Consent and Opt-Out Mechanics

Where ASCETIX relies on consent, we will request consent in the manner required by applicable law. You may withdraw consent at any time through the relevant app setting, device setting, unsubscribe mechanism, consent management tool or by contacting support@ombient.app. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Some Ombient features may become unavailable or may not work as intended after withdrawal.

You can deactivate local notifications and push notifications through your device settings and, where available, Ombient settings.

Where we send marketing emails, you may opt out at any time by using the unsubscribe link included in the email or by contacting support@ombient.app.

Where cookies or similar technologies require consent, you may manage choices through [cookie / consent settings URL], if available.

If Ombient uses Apple Health / HealthKit or Google Health Connect, you can manage those permissions through device or platform settings.

No separate sale/share/targeted advertising opt-out link is provided at this time because Ombient does not currently sell personal data, share personal data for cross-context behavioural advertising, or process personal data for targeted advertising. If this changes, ASCETIX will implement any required opt-out mechanism.

11. Wellness, Mood, Sleep and Similar Sensitive Data

Ombient may allow you to enter or generate information about meditation habits, sleep goals, mood, stress, relaxation, breathing exercises, journal entries, reflections, progress and related wellbeing activities.

Depending on your jurisdiction and the context, this information may be considered sensitive personal data, health-related data or personal and sensitive user data. ASCETIX processes this information only to provide, personalise, maintain, secure, support and improve Ombient, and as otherwise described in this Privacy Policy.

Ombient does not provide medical diagnosis, treatment, psychotherapy, mental-health counselling, clinical care or emergency support. You should not enter medical records, clinical information, emergency information or information about other people into Ombient unless the App expressly supports that use and you have a lawful basis to do so.

12. Apple Health / HealthKit and Google Health Connect

Ombient may request access to Apple Health / HealthKit if you choose to enable features that use Apple Health data. Access is optional and requires your permission through Apple’s permission controls.

If enabled, Ombient may read from and/or write to Apple Health only the specific data types needed to provide the relevant Ombient feature. These data types may include Mindful Minutes, Sleep Analysis, Heart Rate, Heart Rate Variability and Respiratory Rate, depending on the feature you choose to use and the permissions you grant.

You can manage or revoke Apple Health permissions at any time through your device settings or the Apple Health app.

ASCETIX uses Apple Health / HealthKit data only to provide and support the relevant Ombient feature. ASCETIX does not use Apple Health / HealthKit data for advertising, marketing, use-based data mining, sale to data brokers, or cross-context behavioural advertising.

ASCETIX does not disclose Apple Health / HealthKit data to third parties except where necessary to provide the user-requested feature, with your permission, and as permitted by Apple’s rules and applicable law.

Ombient is a general wellness application and does not provide medical diagnosis, treatment, clinical care or emergency services.

13. Payments, Subscriptions, Refunds and Chargebacks

ASCETIX owns, operates and administers Ombient. Payments, subscriptions, renewals, cancellations, refunds and chargebacks may be supported by Apple, Google, Adyen, Payment Processors, Billing Platforms, Merchants of Record, wallet providers, fraud prevention providers, tax providers, accounting providers and customer support providers, depending on the purchase channel.

For App Store Purchases, Apple processes payment and subscription data under Apple’s own terms and privacy notices.

For Google Play Purchases, Google processes payment and subscription data under Google’s own terms and privacy notices.

For Direct Web Purchases, Adyen is the payment provider / Payment Processor unless another provider is expressly disclosed at checkout. Adyen may process card payments and supported wallet or alternative payment methods, including Apple Pay and Google Pay where available and configured. Apple Pay and Google Pay are payment methods, not app-store billing channels, unless the purchase is made through the applicable app-store billing flow.

ASCETIX does not store full card numbers or CVV codes unless expressly confirmed in an updated policy. Payment credentials are normally encrypted, tokenised or otherwise transmitted directly to Adyen or another disclosed payment provider. Where Apple Pay or Google Pay is selected, the relevant wallet provider may process tokenised wallet credentials and authentication information under its own terms and privacy notices, while Adyen processes the payment transaction for the Ombient checkout. ASCETIX may receive limited transaction information to match payments to accounts, provide paid access, manage subscriptions, process refunds and chargebacks, respond to support requests, prevent fraud and comply with tax, accounting and legal obligations.

ASCETIX does not act as a payment collection agent for another application operator in connection with Ombient.

14. Cookies, SDKs, Analytics, Attribution and Provider Schedule

Ombient may use cookies, SDKs, APIs and similar technologies to operate the App, provide purchases, authenticate users, remember preferences, measure usage, detect crashes, improve performance, prevent fraud and support communications.

The actual provider list must be confirmed before publication and must match Apple App Privacy Details, Google Play Data Safety disclosures, in-app permission prompts, checkout disclosures and vendor contracts.

If Ombient later uses advertising identifiers, targeted advertising, cross-context behavioural advertising, retargeting, data brokers, Apple tracking or similar technologies, ASCETIX will update this Privacy Policy, app-store disclosures and consent/opt-out mechanisms before or when required by law and app-store rules.

Schedule 1 - Named Contractors / Provider Schedule

This schedule is included to provide operational provider detail while preserving accuracy for Ombient. Names marked “[confirm / replace / remove]” are not final Ombient disclosures until confirmed by the product, engineering, payments, marketing and privacy teams. If a named provider is not used for Ombient, remove it before publication.

15. Push Notifications and Communications

If you enable push notifications, Ombient may send reminders, meditation prompts, sleep reminders, subscription notices, account notices, refund/cancellation updates, policy notices or other notifications. You can manage push notifications in your device settings and, where available, in Ombient settings.

We may send service communications, including account, security, purchase, subscription, renewal, cancellation, refund, policy and support messages. These communications may be necessary to provide Ombient.

If we send marketing emails, you may opt out using the unsubscribe link or by contacting support@ombient.app

16. Sharing with Service Providers and Other Recipients

ASCETIX may disclose personal data to service providers that process data for Ombient, including hosting, analytics, attribution, crash reporting, communications, payment, billing, subscription management, support, security, fraud prevention, tax, accounting, consent management and legal/compliance providers.

ASCETIX may disclose personal data to Apple and Google where necessary for app distribution, in-app purchases, subscriptions, refunds, receipt validation and app-store compliance.

ASCETIX may disclose personal data to payment processors, billing platforms, merchants of record, tax providers and financial institutions for purchases, renewals, refunds, chargebacks, accounting and compliance.

ASCETIX may disclose personal data to professional advisers, regulators, courts, law enforcement or public authorities where required by law or valid legal process, and to parties involved in a merger, acquisition, financing, reorganisation, asset sale or similar transaction, subject to appropriate safeguards.

ASCETIX may disclose personal data to other parties with your direction, permission or consent.

17. International Data Transfers

ASCETIX is located in the United States, and personal data may be processed in the United States and other countries where ASCETIX or its service providers operate.

Where EU, UK, EEA, Swiss, Brazilian or other data transfer rules apply, ASCETIX will use appropriate transfer mechanisms, which may include adequacy decisions; Standard Contractual Clauses or equivalent contractual safeguards; UK international data transfer addendum or equivalent UK safeguards; transfer impact assessments and supplementary measures where required; EU-U.S. Data Privacy Framework only where the relevant recipient is certified and the transfer is covered; and other lawful transfer mechanisms permitted by applicable law.

ASCETIX does not rely on a blanket statement that all international transfers are based on user consent.

18. Retention and Deletion

ASCETIX retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods depend on data category, account status, subscription status, legal obligations, tax and accounting rules, security needs and whether data is needed for disputes, chargebacks, fraud prevention or enforcement.

For current retention schedule contact support@ombient.app.

Typical retention considerations include account data for the life of the account and a reasonable period after deletion; subscription and transaction records for tax, accounting, refund, chargeback, audit and legal limitation periods; support communications for support quality, dispute management and legal compliance; analytics and diagnostic data for a limited period needed to improve, secure and troubleshoot Ombient; wellness app data until deleted by the user, account deletion or expiry of the applicable retention period, subject to backup and legal retention limits; and legal records for the period required to establish, exercise or defend legal claims.

Where required and feasible, if you request deletion, we will also instruc (if applicable)t relevant service providers to delete or anonymise personal data they process for us, subject to legal retention obligations and technical limitations.

For account deletion contact support@ombient.app. ].

19. Security

ASCETIX uses reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration and destruction.

When service providers process personal data for us, we require them to protect it through appropriate contractual, administrative, technical and organisational measures.

No method of transmission or storage is completely secure. ASCETIX cannot guarantee absolute security. You are responsible for keeping account credentials confidential and for using device-level security features, such as passcodes, biometric locks and operating-system updates.

ASCETIX does not intentionally process criminal offence data through Ombient and does not conduct profiling that produces legal effects concerning you or similarly significantly affects you, unless permitted by law and subject to appropriate safeguards.

20. Children’s Privacy

Ombient is not directed to children under 13, and ASCETIX does not knowingly collect personal data from children under 13.

If we learn that we have collected personal data from a child under 13 without required parental consent, we will take reasonable steps to delete it.

Parents or guardians may contact support@ombient.app to request deletion of a child’s personal data.

If Ombient is later offered to children or teens in a way that triggers additional age-appropriate design, parental consent, age assurance or child-safety obligations, this Privacy Policy and product flows must be updated before launch.

21. User Privacy Rights

Depending on your location and applicable law, you may have rights to access personal data we hold about you; confirm whether we process your personal data; correct inaccurate personal data; delete personal data; obtain a copy of your personal data in a portable format; object to or restrict certain processing; withdraw consent; opt out of marketing communications; opt out of sale, sharing, targeted advertising or profiling where applicable; limit use or disclosure of sensitive personal data where applicable; and appeal a privacy-rights decision where required by law.

To exercise rights, contact support@ombient.app. We will acknowledge requests within 72 hours where operationally feasible and will respond within the period required by applicable law.

We may need to verify your identity before responding. We may decline requests where permitted by law, for example where a request is fraudulent, legally exempt, impossible to verify, unreasonably repetitive, excessive, manifestly unfounded or conflicts with legal retention obligations.

22. EU / UK / EEA Rights and Supervisory Authority Complaints

If you are in the EU, UK or EEA, you may have the rights described in Section 21 under applicable data protection law.

You may also have the right to lodge a complaint with your local data protection authority or supervisory authority.

ASCETIX’s EU representative, UK representative and DPO details, if required, are listed in Section 2.

23. California / U.S. State Privacy Notice

This section applies to residents of California and other U.S. states with comprehensive privacy laws, to the extent those laws apply to ASCETIX and Ombient.

In the preceding 12 months, ASCETIX may have collected the categories described in Section 6, including identifiers, commercial information, internet or electronic network activity, approximate location inferred from IP address or billing country, device data, support communications, subscription and transaction information, and wellbeing-related app data if you use those features.

Some wellbeing data, account credentials, precise location if ever collected, payment information and certain other data may be considered sensitive personal information under applicable law, depending on context.

Sources are described in Section 7, purposes are described in Section 8, and categories of recipients are described in Sections 13, 14 and 16.

No separate opt-out URL is included at this time because, based on the current drafting assumption, Ombient does not sell personal data, share personal data for cross-context behavioural advertising, or process personal data for targeted advertising. If this changes, ASCETIX will provide the legally required opt-out method in the App, on the Website, through a privacy request channel, by honouring applicable opt-out preference signals, or through another mechanism required by law.Where applicable, you may have rights to know, access, correct, delete, port, opt out of sale/share/targeted advertising, limit sensitive personal information, and appeal a decision. Submit requests through support@ombient.app].

24. Brazil LGPD Notice

If Brazil’s Lei Geral de Proteção de Dados applies, ASCETIX processes personal data as a controller for Ombient.

You may have LGPD rights to confirm processing, access data, correct incomplete or inaccurate data, anonymise/block/delete unnecessary or excessive data, obtain portability where regulated, receive information about sharing, withdraw consent, request deletion of data processed based on consent.

LGPD requests may be sent to support@ombient.app.

25. App Store and Google Play Privacy Disclosure Alignment

This Privacy Policy must remain consistent with Apple App Privacy Details, Google Play Data Safety disclosures, in-app permission prompts, SDK disclosures, checkout disclosures and user-facing privacy choices.

ASCETIX should update this Privacy Policy and app-store disclosures if Ombient changes its SDKs, data categories, purposes of processing, tracking practices, HealthKit / Apple Health use, Google Health Connect use, subscription flows, payment providers, service providers or international transfer arrangements.

The Privacy Policy URL should be publicly accessible, active, non-placeholder and accessible from the app-store listings and inside Ombient before submission.

26. Changes to This Privacy Policy

ASCETIX may update this Privacy Policy from time to time. If changes are material, for example affecting your rights or our purposes of processing, we will provide notice by email, in-app notice, website notice or another appropriate method where required by applicable law.

The updated Privacy Policy will state the “Last updated” date. Continued use of Ombient after an update will be treated as acknowledgement of the updated notice to the extent permitted by law; it will not be used as a substitute for consent where consent is legally required.

27. Contact Details

ASCETIX INC., 8 The Green, Suite R, Dover, DE 19901, USA.

Privacy: support@ombient.app
Support: support@ombient.app
Website: ombient.app
Privacy rights request method: support@ombient.app