privacy policy

This policy applies to nhale Pty Ltd(ABN 00 000 000 000), based in Brisbane, Queensland, Australia. In this policy “nhale”, “we”, “us”, and “our” mean nhale Pty Ltd. For any privacy question, you can reach our privacy officer at hello@nhale.com.au.

We only collect information we genuinely need to provide our services. That may include:

• Identity & contact details — your name and email address.
• Payment information — processed by Stripe. We do not collect or store your full card number; Stripe handles card data securely on our behalf.
• Usage & progress data — how you use the course and which lessons you have completed.
• Breath session logs — records of sessions you complete with the breath timer.
• Optional health notes — any health information you choose to share with us so we can run a 1:1 session safely. You decide whether to provide this; we treat it as sensitive information and only use it for your session.
• Communications — messages you send us, and your email and marketing preferences.

We collect personal information:

• directly from you when you sign up, purchase the course, book a session, or fill in a form;
• as you use the product — for example progress and breath session logs;
• through cookies and analytics when you visit our website (see “Cookies” below); and
• from our service providers, such as Stripe confirming a payment.

Wherever it is reasonable and practicable, we collect personal information directly from you.

We use your personal information to:

• deliver the service — give you access to the course, the breath timer, and your sessions;
• process payments and manage your purchases through Stripe;
• send you email you have consented to receive, and respond to your enquiries;
• run booked sessions safely, including considering any health notes you provide;
• improve and secure the product; and
• meet our legal and tax obligations.

We do not sell your personal information, and we do not use it for purposes unrelated to those above without your consent.

We share personal information only with the service providers that help us run nhale, and only so they can perform their function for us. These providers act as our data processors under contract:

• Stripe — payment processing.
• Supabase — database and application hosting.
• Resend — sending transactional and consented marketing email.
• Vercel — website and application hosting.
• n8n — internal workflow automation.

We may also disclose information where required or authorised by law. We do not otherwise disclose your personal information to third parties without your consent.

We send marketing email — such as our breath letter — only with your consent, consistent with the Spam Act 2003 (Cth). Every marketing email we send includes a clear, working unsubscribe link, and we will action unsubscribe requests promptly. You can also update your preferences any time by emailing hello@nhale.com.au. We may still send you essential service messages (for example a receipt or a booking confirmation), as these are not marketing.

Your data is stored with Supabase in its Sydney, Australia region. We protect it with row-level security (RLS) so that records are only accessible to the people and systems entitled to see them, and we encrypt data in transit. We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification, or disclosure. No online service can promise perfect security, but we work hard to keep your information safe.

We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires (for example, financial records we must keep for tax purposes). When we no longer need information, we take reasonable steps to delete or de-identify it.

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate, out of date, or incomplete;
• Complain if you believe we have mishandled your information.

To exercise any of these, contact our privacy officer at hello@nhale.com.au. We will respond within a reasonable time. If you are not satisfied with how we handle your concern, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the site is used so we can improve it. You can control cookies through your browser settings; blocking some cookies may affect how parts of the site work.

nhale is intended for adults and is not designed for, or directed at, people under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

We aim to store your personal information in Australia. Some of our service providers, however, may process or store data on servers located outside Australia, or may be based overseas. Where that happens, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles and is appropriately protected.

We may update this policy from time to time. When we do, we will revise the “last updated” date above, and for significant changes we will take reasonable steps to let you know. We recommend you keep your own copy of this policy for your reference.

Privacy Officer · nhale Pty Ltd · ABN 00 000 000 000 · Brisbane, Queensland, Australia
hello@nhale.com.au

You may also wish to review our Terms of Service and Health & Safety Disclaimer.