Privacy Policy for Sati Timer

Sati Timer · Sati Bhavana Edition ("Sati Timer", "the App", "we", "our") is a meditation timer for Android phones and tablets.

• Developer: Sati Bhavana
• Support contact: the developer support email published on the Google Play store listing for Sati Timer. Please use that listing email for any privacy question, request, or complaint.
• Policy page: https://www.satibhavana.com/policy/google (also linked from Settings → About → Privacy Policy inside the App).

In short:

• No accounts, no sign-in, no personal details required.
• No android.permission.INTERNET permission — the App declares no network permission and makes no network calls; all features work in airplane mode.
• No ads, analytics, crash-reporting, or tracking SDKs (no AdMob, Firebase, Google Analytics, or equivalents). Dependencies are limited to AndroidX UI, Room, DataStore, Media3, Coroutines, and Kotlin Serialization.
• No device identifiers, location, camera, microphone, contacts, biometrics, health-record, or Health Connect access.

Sati Timer provides: a meditation countdown timer with presets (15–120 min) and custom durations (1–180 min); packaged local bell/chime sounds and haptic-only options; a Sutta Sanctuary reader with packaged vocal recitations; practice history with statistics, charts, and a monthly heatmap calendar; a Sound Vault; JSON backup/restore; a Quick Settings tile; and an optional floating timer overlay ("Dynamic Island"). All content (audio, fonts, images, texts) is bundled in the App package.

We do not collect, receive, transmit, sell, rent, or share any of the following, from any user, including children:

• Identity or contact data (name, email, phone number, address, account IDs).
• Location data (precise or approximate).
• Device or other IDs (including Google Advertising ID).
• App activity, web browsing, search history, or diagnostics/crash logs.
• Photos, videos, user audio recordings, files, calendar, or contacts.
• Health or fitness records (session logs are local practice notes only; the App does not integrate Health Connect and makes no medical claims).

Everything the App creates stays on your device under the Android app sandbox:

The App requests only these six permissions, each strictly required for its offline timer function. It requests no location, camera, microphone, contacts, biometric, or network permission.

The App uses no Accessibility Service and no accessibility overlay window type.

• Foreground service: when you start a timer or packaged-audio playback, Android requires a visible notification. Ours shows the App icon, remaining time, and Pause/Stop actions — nothing else. The service ends immediately when the session ends or you stop it. No data leaves the device.
• Floating overlay ("Dynamic Island"): off unless you turn it on in Settings. When on and a timer is running and the App is not in the foreground, a small draggable capsule shows the countdown; tapping expands timer controls. It never records the screen, never reads other apps, and never transmits anything.
• Quick Settings tile: starts your configured timer and opens the App. It processes no personal data.

• Your JSON exports are ordinary files you create, keep, move, or delete yourself through the system file picker. We never see, upload, or receive them. Treat a file containing your practice history as you would any personal document.
• Android Auto Backup: the App sets allowBackup="true" with no custom backup rules, so if you have enabled Android system backup on your device, the operating system may copy the App’s local data to your own Google account under Google’s backup terms. We operate no backup servers and cannot access that copy. You can disable system backup in Android Settings, or delete App data via §9 before/after uninstalling.

Local data is kept only until you remove it:

1. Single session: History → session entry → Delete.
2. All history: Settings → Clear History (confirmation required).
3. Everything incl. preferences: Settings → Reset All Data (confirmation required).
4. Exported files: delete the JSON file from your storage with any file manager.
5. Full removal: uninstalling the App permanently deletes its local database and preferences from the device (subject only to §8 Auto Backup copies you control).

Because we hold no server-side data about you, there is nothing to request from us beyond using the controls above; questions are welcome via the Play-listing support email (§1).

• All processing is on-device; with no network permission, exfiltration over the network is not possible from the App itself.
• Local data is protected by the Android app sandbox and your device’s lock-screen and storage encryption. No additional app-level database encryption (e.g. SQLCipher) is used, so keep device encryption and a screen lock enabled.
• The sole external link in the App (Settings → About → Privacy Policy) opens your browser to this policy page; any network activity then belongs to your browser and the website, governed by their own policies — not this one.

Target Audience: Everyone (all ages). Sati Timer is a general-wellness utility not directed to children under 13 and collects no data from anyone. A child can use it only to the same offline extent as any user, with nothing transmitted. We comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and, by collecting nothing, with the data-minimisation principles of the EU/UK GDPR. Parents or guardians with questions may contact us via §1.

Depending on your jurisdiction (e.g. EU/UK GDPR, California CCPA/CPRA), you may have rights to access, correct, delete, restrict, port, or object to processing of personal data, and to lodge a complaint with a supervisory authority. Because the App stores everything locally and gives it only to you, you exercise these rights directly on your device (§9). We will answer any rights request sent to the Play-listing support email; verification is limited because we hold no account data.

If this policy changes, we will update the version number and effective date above, publish the new text at the policy URL (§1), and keep it linked from the App’s Settings → About screen. Material changes will also be noted in the Play release notes where practical. Continued use after the effective date constitutes acceptance.

• "Local"/"On-device" means inside the App’s private storage on your phone or tablet (plus files you explicitly export and system backups you enable).
• "Collect" follows the Google Play Data Safety meaning: transmitting data off the device. On-device storage and processing alone is not collection.
• v1.1.0 (2026-09-28): first trilingual edition; added Auto Backup carve-out, backup-format limitation note, explicit no-SQLCipher statement, Quick Settings disclosure, and GDPR/CCPA rights section.
• v1.0.0 (2026-09-24): initial English policy.