Privacy.

Last updated: 5 November 2026

This page explains what lowflow does with your data, in words you can actually follow. If anything is still unclear, write to us at support@atemflow.de. A real person will answer.

Who is responsible

AtemFlow GbR
Borngasse 10, 09599 Freiberg, Germany
Email: support@atemflow.de

This policy applies to the lowflow app and to this website, lowflow.app. For AtemFlow Studio, atemflow.de and the shop, our general privacy policy applies (in German).

When you visit lowflow.app

This website sets no cookies, uses no analytics or advertising services and loads nothing from other providers, not even fonts. That’s why we don’t ask you for consent.

What is still recorded: Like every website, the server writes a log entry for each visit: your IP address, date and time, the address requested, the page you came from, and your browser and operating system. We need this to keep the site running securely and to detect attacks.
Your language: So that you see the page in your language right away, the server reads your browser’s language setting. It is not stored.
With whom: Web hosting by ALL-INKL.COM, Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, under a contract pursuant to Art. 28 GDPR. The servers are located in Germany.
Legal basis: our legitimate interest in a secure, readable website (Art. 6(1)(f) GDPR).
How long: The logs are deleted after seven days at the latest, unless we need individual entries to investigate an attack.

If you use lowflow without an account

You can use lowflow without any account. The app then stores everything only on your device:

• Your Control Pauses and how you felt that day
• Your exercises, your path, your form and your goals
• Information about your health, if you enter it (so the plan becomes gentler)
• Your settings and the start of your trial

Some of this is health data. It only leaves your device if you back it up in your account (see below), and even then only encrypted. Without a backup it is gone when you delete the app. Only the start of your trial stays in your device's protected storage (Keychain on Apple, Keystore on Android), so the trial can only be used once.

If you create an account

You only need an account if you want to use your subscription on several devices, have an AtemFlow Studio membership or want to join a rope team. It is the same account as for AtemFlow Studio.

What: your email address, a user ID, how you sign in (email, Apple or Google) and, if you enter it, your name. We never see your password; only a secured check value is stored.
Why: so you can sign in and your subscription or Studio membership is recognised. For this, lowflow reads your membership status from your AtemFlow account after you sign in. lowflow does not write anything there.
With what: Firebase Authentication and the Firebase database from Google Ireland Limited, servers in Frankfurt.
Legal basis: contract (Art. 6(1)(b) GDPR).
How long: as long as you have the account. If you delete it, your sign-in is gone immediately; backup copies expire after 30 days at the latest.

Signing in with Apple or Google

If you sign in with Apple or Google, we only receive what the account needs: an ID and, depending on your choice, your email address. Apple and Google are themselves responsible for their part and have their own privacy notices.

Backing up in your account

With an account you can back up your data so it is there again on a new phone. This is optional. The app asks you once, and you decide.

What: everything lowflow stores on your device (see above), including your health information. Not included are the start of your trial and your access.
How: your data is encrypted on your phone with its own key (AES-256) before it leaves it. Only this encrypted package is stored.

• “Standard”: we keep the key separate from your data, itself encrypted again with a key in Google Cloud KMS. Only our server can unlock it, and only for you while you are signed in. That way your data is back on a new phone after you sign in.
• “With your own code”: only your code protects the key. We do not know it and cannot open your data. Without the code and without your old phone, nobody can restore it, not even us.

With what: the Firebase database, Cloud Functions and Cloud KMS from Google Ireland Limited, servers in Frankfurt.
Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). You can withdraw it at any time: in the app under Profile, “Your account”, “Your data”, “Delete backup”. We then delete the backup and its key. Everything on your phone stays as it is.
How long: until you delete the backup or your account.
What we can still see: when a backup was made and how large the package is. We cannot see its content.

Rope team

In a rope team you climb a mountain together with up to three others: every day on which someone measures takes you one pitch higher. This is optional. You only get in if you start a team yourself or accept an invitation, and you explicitly say yes beforehand.

What the others in your rope team see: the first name you give for it, whether you measured today, your greetings, your backpack colour and figure, and how many days you have measured since roping up (the app only counts the shared total of these). If you turn on “Show bivouac”, they also see a tent at your figure on days when you are ill or taking it easy, without a reason.
What is never shared: your Control Pauses and all other measurements, the time of your measurement, your notes and keywords, your exercises and your plan.
How: everything you share is encrypted on your phones (AES-256) before it leaves them. We keep the rope team's shared key encrypted with a key in Google Cloud KMS. Our server only hands it out to signed-in members of the rope team. Our server briefly opens the data in only two cases: when someone views an invitation, it reads the name of the rope team and the first name of the person inviting. And when someone leaves, it reads that person's number of measuring days and credits it to the rope team, without a name.
What we can still see: who is in which rope team and since when, when someone gave consent, the invitation code and who created it, and when someone saved their status or a greeting. Because the app saves your status after you measure, this tells us roughly when you measured. We cannot see the value.
With what: the Firebase database, Cloud Functions and Cloud KMS from Google Ireland Limited, servers in Frankfurt.
Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), because even “measured in a breathing app today” is information about your health. You can withdraw it at any time: in the rope team under “Backpack”, “Leave the rope team”. This takes effect for the future.
How long: as long as you are in the rope team. If you leave or delete your account, we immediately delete your status, your greetings and your membership including your consent. What the others saw until then, they have seen. All that remains is your number of measuring days within the shared total, with no link to you. We delete greetings after 3 days; invitation codes are valid for 7 days. When the last person has left, we delete the whole rope team and its key. Database backup copies expire after 30 days at the latest.
Protection: there is no directory and no search for people, only invitations by code. During the first 48 hours, the others can remove a newcomer again with “I don't know them”. So that this person cannot simply rejoin, we then remember their user ID for this rope team until the rope team or the person's account is deleted. The rope team does not send push notifications. Rope team events never go to analytics or advertising.

Subscription and trial

The 7-day trial works without a server; the app only remembers its start on your device.

You buy a subscription through the App Store or Google Play. Apple or Google handle the payment; we never see card numbers or bank details. So that lowflow knows whether your subscription is active, we use RevenueCat (RevenueCat, Inc., USA). This processes a random app user ID (with an account: your user ID), the product purchased, the store's purchase receipt, the country and the device type.

Legal basis: contract (Art. 6(1)(b) GDPR).
How long: as long as the subscription exists, then for as long as tax and commercial law require.

Crash reports

If the app crashes, it sends a technical report to Firebase Crashlytics (Google Ireland Limited): device type, system version, app version and where the error occurred. It contains no measurements or other personal content. lowflow has no usage analytics.

Legal basis: our legitimate interest in a stable app (Art. 6(1)(f) GDPR). You can object; just write to us.
How long: about 90 days.

Videos

Some exercises show a video of Maria. It comes from our video service Gumlet. Only when you start a video does the app connect to Gumlet; it loads the player via the jsDelivr service. In both cases your IP address is technically transmitted.

Legal basis: our legitimate interest in being able to show you the exercises as video too (Art. 6(1)(f) GDPR).

Apple Health and Health Connect

Why: at night you breathe all by yourself, without thinking about it. That is why the night shows well how your breathing really is in everyday life. When you practise, you should be able to see whether your nights become calmer over time, not just your Control Pause in the morning.

Only if you switch on the connection under “Night and rest” does lowflow read two values from Apple Health (iPhone) or Health Connect (Android): your breaths per minute during sleep and your heart rate variability (HRV). lowflow shows them to you next to your Control Pause. The values are processed on your device, not stored and not sent to us. lowflow does not write anything to Apple Health or Health Connect.

We use data from Apple Health and Health Connect only for this display, never for advertising, and we do not pass it on. The use of data from Health Connect complies with the Health Connect Permissions Policy, including the Limited Use requirements.

You can disconnect in lowflow and withdraw the permission at any time in Apple Health or Health Connect.

Legal basis: your explicit consent (Art. 9(2)(a) GDPR), which you give through your device's permission and can withdraw at any time.

The watch (Apple Watch, Wear OS)

Why: many people like to practise with their eyes closed or on the go. With the watch you don't need to look at your phone; it guides you with small signals on your wrist. And you can measure your Control Pause even when your phone is somewhere else.

lowflow on the watch only exchanges data with your phone, directly over the connection between watch and phone and not through us. Your measurements, exercise results and steps go from the watch to the phone; your status and your daily plan go from the phone to the watch.

Pulse: during pause training, many people notice how they calm down. You can see that in your pulse too. Only if you allow it does the watch measure your pulse during pause training. For this it starts a mindfulness session that is not saved in Apple Health or Health Connect. Only two numbers are stored, the pulse at the start and at the end, and they are stored on your phone like your other values.

Steps: during step holds on the watch, the watch's step counter counts along. The number only goes to your phone.

Legal basis: your consent (Art. 9(2)(a) GDPR) through the watch's permissions.

What only happens on your device

• Reminders: your device schedules the daily reminder itself. Nothing runs through us.
• Motion sensor: only if you switch it on does lowflow estimate your steps during step holds. The number stays on the device.
• Speech output and vibration: use your device's own functions.
• Sharing: only if you share something yourself does it go to the app you choose for it.

• Camera: only when, on a new phone, you scan the QR code on your emergency sheet or the QR code of a rope team invitation. The image is not stored and not sent.
• Microphone: when speaking, many people take a breath more often than they need to. The reading-aloud test shows you how far you get on one breath and whether that increases with practice. For this lowflow needs the microphone, only for this test and only while you are reading aloud. lowflow immediately converts the sound into volume values on your device to detect your breathing pauses. Nothing is recorded, stored or sent. Only the result is stored, for example “16 syllables per breath”.

lowflow does not use your location or your contacts.

Who receives your data

We do not pass your data on to advertising companies or data brokers. The following service providers work for us, only on our instructions and under contracts according to Art. 28 GDPR:

Apple and Google process purchases and sign-in with Apple or Google under their own responsibility.

Data in the USA

Some service providers are US companies. For transfers to the USA we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses. We cannot completely rule out that US authorities request data from these companies. Your measurements stay on your device or, if you back them up, are stored at Google only in encrypted form. They never go into the rope team.

Your rights

• Access: you may ask which data we hold about you (Art. 15).
• Rectification: if something is wrong, we correct it (Art. 16).
• Erasure: you can delete your account at any time (Art. 17), see Delete account.
• Restriction (Art. 18) and data portability (Art. 20).
• Objection to processing based on legitimate interest, such as crash reports (Art. 21).

The easiest way is by email to support@atemflow.de.

If you feel we are not handling your data properly, you can complain to a supervisory authority. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Maternistraße 17, 01067 Dresden, Germany, post@sdtb.sachsen.de.

A few more important things

Age 16 and over

lowflow is intended for people aged 16 and over. If you are younger, you need your parents' consent.

Not a medical device

lowflow is an exercise app and does not replace an examination or treatment. If you have symptoms, please talk to your doctor.

Changes

If something changes in lowflow or with our service providers, we update this policy. You can always find the current version here.