Privacy Policy
Last updated October 2026 · StateShift, Inc. · hello@statecontrol.co
STATE is a breathing and focus app made by StateShift, Inc. ("we"). This page explains what we collect, why, and the choices you have. We keep it short because we collect very little.
What we collect
- Account details: your email address and a password. Passwords are handled by our account provider (Supabase) and stored only in hashed form. We can never see them.
- How you use STATE: which sessions you play, when, how long, the before-and-after ratings you choose to give, and your answers to "What changed?". This powers your streak, your recommendations and your progress.
- Payments: handled entirely by Stripe. We receive your subscription status and plan, never your full card number.
- Product analytics: anonymous usage events (for example "session started", "free trial started"), your device type, and the link or campaign that brought you here. We use PostHog for this. We use it to make STATE better, not to sell advertising.
- On your device: STATE stores settings (sound, vibration), your free-session count and your sign-in so the app opens quickly. You can clear this in your browser settings.
What we don't do
We don't sell your data. We don't show ads. We don't use your data to train AI models. Your before-and-after ratings are not shared with anyone outside the services listed below, and anything we publish (for example "users report less stress after one session") is aggregated so no individual can be identified.
Who processes data for us
Supabase (accounts and database), Stripe (payments), PostHog (analytics) and Netlify (hosting). Each processes data only to provide its service to us.
How long we keep it
For as long as you have an account. If you delete your account, we delete your profile and usage history within 30 days, except records we must keep for tax or legal reasons (such as payment receipts, kept by Stripe).
Your choices and rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account by emailing hello@statecontrol.co. Depending on where you live (for example the EU, UK or California) you may have additional rights, and you can complain to your local data protection authority.
Children
STATE is not intended for children under 13 (under 16 in the EU and UK), and we don't knowingly collect their data.
Changes
If we change this policy in a meaningful way we'll update the date above and, for significant changes, let members know by email.
Template prepared for STATE's launch. Have a lawyer review it for your jurisdiction before scaling.