Superidea respects your privacy. This policy explains what we collect on superidea.no and in our apps, why, who helps us process it, and how you can see, export or delete it. We have written it in plain language, because you deserve to understand what happens with your data.
Sections marked with an app's name, like (Hymalayas), apply only to that app. Everything else applies across Superidea.
Who we are
Superidea is the trading name of Superidea Reyaz, a sole proprietorship (enkeltpersonforetak) registered in Norway, organisation number 927199785, Vangberg 2a, Tromsø, Norway. We are the data controller for the personal data described here. You can reach us at hello@superidea.no.
At a glance
| App | Account | What leaves your device | Full policy |
|---|---|---|---|
| Hymalayas | Sign in with Apple or Google | Your account, synced practice and journal, usage and crash data | This page |
| Rally | Grown-ups: Apple or Google. Children: no account | Your family's plan, chores and profiles, and push tokens | Rally privacy policy |
| Boombai Daily | Optional: Apple, email, or continue as a guest | Your sign-in account, and crash, performance and usage data not linked to you | Made in Boombai privacy policy |
| Lafz | Account with an email address | Your email and account ID, and diagnostic data not linked to you | Made in Boombai privacy policy |
| Vada Pav Vroom | None | Nothing | This page |
The Occupied and Ring Road Rush are not released yet. This policy will be updated to cover them before they are.
This website
- superidea.no has no advertising.
- We count visits with Cloudflare Web Analytics, which sets no cookies and does not identify you. It measures page views, where visitors came from, countries, device types and page speed.
- If you choose Allow in the cookie banner, we also use Google Analytics to see how people use the site. It sets first-party cookies (named _ga) and sends Google the pages you view, how you arrived, your device and browser, and an approximate location. Google Analytics does not store IP addresses, and we keep this data for 14 months. Nothing is sent to Google until you allow it, and you can change your choice at any time with Cookie settings at the bottom of the page.
- If you switch between light and dark mode, that choice is saved in your browser's local storage, on your device only.
- Fonts are served from superidea.no itself. The site loads its animation scripts from cdnjs, run by Cloudflare, and the homepage loads its 3D engine from jsDelivr. Your browser requests these files directly, so those providers receive your IP address and browser details.
- The site is hosted on Cloudflare Pages, which processes standard request data, such as your IP address, browser and the page you asked for, to deliver and protect the site.
- Nothing you write to us is stored on this site: getting in touch opens an email in your own mail app. We keep the emails you send us so we can reply and follow up, and delete them when they are no longer needed.
What we collect in our apps
We collect only what we need to make our apps work for you.
Account information (Hymalayas, Rally, Boombai Daily, Lafz)
- Your name or chosen display name
- Your email address
- A unique account identifier from your sign-in provider: Apple or Google, or for Boombai Daily, an email and password
Practice data (Hymalayas)
Synced to your private account so you can continue on any device:
- Your ritual days: mood, intensity, intention, micro-commitment, journal entry and points
- Your daily Prana and earned wisdom cards
Journal entries and their digests are also kept on your device. A profile photo you choose stays on your device and is not uploaded.
Family data (Rally)
Synced so everyone in your family sees the same plan: your family's name; each member's first name, look and role; plans, chores and ticks; activities; breaks, including a reason such as being ill, and the last 12 ended breaks; Grove progress and creatures found; cheers; invite codes; and push notification tokens. Rally's own policy lists this in full.
Health data (Hymalayas, only if you allow Apple Health)
- Reads sleep, heart rate, heart rate variability, resting heart rate, blood oxygen and respiratory rate, to personalise practice suggestions and for your monthly wellbeing report
- Writes Mindful Minutes back to Apple Health when you complete a session
Health data is used on your device. Hymalayas does not upload it to Superidea.
Local weather (Hymalayas, only if you switch on “Sky follows local weather”)
Your approximate, city-level location is used on your device to ask Apple Weather for local conditions, so the Home sky can match the weather outside. The location is not stored and is never sent to Superidea. If you deny location access or turn the switch off, the app shows a calm sky and asks for nothing.
Voice input (Hymalayas, only if you speak a reflection)
Speech is turned into text by Apple's speech recognition, which may process the audio on Apple's servers. Superidea does not receive the audio.
Usage and crash data
- (Hymalayas) Firebase Analytics and Crashlytics, linked to your account ID. This covers screens and features used, the mood and intention labels you pick, meditation titles and lengths, journal word counts (never the text) and purchases. Crash reports include your device model and iOS version.
- (Boombai Daily) Crash, performance and usage data, not linked to you.
- (Lafz) Diagnostic data, not linked to you.
- (Rally, Vada Pav Vroom) None. These apps have no analytics or crash-reporting tools.
What we never collect
We do not collect your precise location, your contacts, or data from other apps on your device. None of our apps track you across other companies' apps or websites, and none show ads.
How we use information
Information is used only to:
- Sign you in and keep your account secure
- Sync your practice or your family's plan across the iPhones and iPads you sign into
- Send the reminders you ask for (Rally sends push notifications; Hymalayas and Boombai Daily use reminders on your device)
- Personalise practice recommendations based on the inputs you provide
- Diagnose crashes, fix bugs and understand which features are useful
- Tell you about important changes to the service when necessary
Our privacy promise: on-device intelligence (Hymalayas)
The reflective and emotional analysis inside Hymalayas, such as sentiment scoring, mood detection and the monthly Deep Dive insights, runs entirely on your iPhone or iPad using Apple's built-in NaturalLanguage framework. Your written reflections are never sent to OpenAI, Anthropic, Google's AI services, or any third-party machine-learning provider for processing.
Your entries themselves do sync to your private account so you can continue your practice on any device.
Who processes data for us
We do not sell, rent, or share personal data with third parties for advertising or marketing purposes, ever. These service providers process data on our behalf, only as needed to run the service:
- Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging, Storage, Analytics, Crashlytics): accounts, sync, push notifications, media files and diagnostics. Hymalayas uses Authentication, Firestore, Analytics and Crashlytics. Rally uses Authentication, Firestore, Cloud Functions and Cloud Messaging. Boombai Daily uses Authentication and Storage, plus crash and usage diagnostics.
- Apple: Sign in with Apple, App Store purchases, HealthKit, WeatherKit, speech recognition and push notification delivery.
- Google Sign-In (Hymalayas, Rally): used only to authenticate you. Google sees your sign-in, not the contents of your practice or plan.
- Cloudflare: hosts this website, serves its animation scripts through cdnjs, and delivers audio and video in our apps through Cloudflare R2. It sees your IP address when content is delivered.
- jsDelivr: serves the 3D engine for the homepage.
- Google Analytics (Google Ireland Limited): measures how this website is used, only if you allow it in the cookie banner.
Some of these providers, including Google, may process data outside the European Economic Area, for example in the United States. Where they do, transfers rely on safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
We may disclose information if required by law, by valid legal process, or to protect the rights and safety of our users.
Apple Health data: special protections (Hymalayas)
If you choose to connect Apple Health to Hymalayas, the following always applies:
- HealthKit data is used only to personalise your practice and log your mindfulness sessions.
- HealthKit data is never used for advertising, marketing, or data-mining purposes other than improving health, medical, or fitness management.
- HealthKit data is never shared with any third party.
- You can revoke Hymalayas's access to Health data at any time in iOS Settings → Privacy & Security → Health.
Storage and security
Data is stored using trusted, industry-standard services (Google Cloud, through Firebase). Connections are encrypted in transit (TLS) and data is encrypted at rest. Access is scoped so that only your signed-in account, or for Rally your family, can read your data.
Why we are allowed to process your data
- To provide the app you asked for: your account, sync and reminders.
- Your consent: Apple Health, location for weather, voice input and notifications, each of which you can turn off at any time. In Rally, a child's profile is created with the consent of the grown-up who invites them.
- Our legitimate interest in keeping our apps and this website stable and secure: crash reports, usage data, request logs and cookieless visit counts.
- Your consent, on this website: Google Analytics, which runs only after you choose Allow and stops when you change your choice.
Your rights
You may, at any time:
- Access your data: view your account, practice or family plan inside the app.
- Correct your data: edit your name and entries inside the app.
- Export your data: request a copy by emailing hello@superidea.no.
- Delete your data and your account: every Superidea app that creates an account has a delete option inside the app.
- Hymalayas: tap the greeting card on Home, then Settings → Account → Delete Account. This permanently removes your account record and all associated data (practice history, journal entries, sankalpa, wisdom cards and profile) from our systems and from your device.
- Rally: Family tab → the gear icon → Settings → Delete account.
- Boombai Daily: More → Account → Delete Account.
If you are in the European Economic Area or the UK, you also have the right to object to processing, to restrict it, and to data portability. You can complain to your data protection authority; in Norway that is Datatilsynet (datatilsynet.no). Residents of California have similar rights under the CCPA.
How long we keep data
- (Hymalayas) We keep your data while your account is active. When you delete your account, your data is removed from our active systems immediately, and backups are overwritten on a rolling basis within 90 days. Anonymous, aggregated usage data may be kept for product analytics.
- (Rally) We keep your family's data while your family uses Rally. Deleted data can remain in Google's recovery copies for up to 7 days. Chores you ticked stay in your family's history under an identifier no longer linked to you.
- (Boombai Daily, Lafz) As described in the Made in Boombai privacy policy.
- (Vada Pav Vroom) Your progress is stored only on your device. Deleting the game removes it.
Children
Hymalayas, Boombai Daily and Lafz are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.
(Rally) Rally is a family app used together with children; it is not a children's app. Children have no account, email address or phone number in Rally: a child's phone gets a random anonymous identifier. A child can join a family only through a grown-up's invite, by link, QR code or code, after confirming which family they are joining. A grown-up sets the child's first name, or the child types it. Children see no links out of the app.
Changes to this policy
We may update this policy from time to time. When we do, we change the “Last updated” date at the top. We tell you about material changes through the app or by email where appropriate.
Contact
For privacy questions or to use any of your rights: hello@superidea.no
Superidea (Superidea Reyaz, org. no. 927199785)
Vangberg 2a, Tromsø, Norway