Zen : Your Way

Zen : Your Way — Privacy Policy

Last updated: 3 September 2026

This Privacy Policy explains how Francis Dierick (“I”, “me”, “the controller”) processes personal data when you use:

  • the Zen : Your Way app on iPhone, iPad, Mac, Apple TV, and Apple Vision Pro (the “App”), and
  • the website zenyourway.app and related pages (the “Website”).

Zen : Your Way is a meditation timer first. You can sit without an account. Optional sign-in and a small amount of server-side data apply only when you use Your Way (the daily guided path), restore a purchase, or receive a scholarship.

1. Controller

Francis Dierick
Naamsesteenweg 400
3001 Heverlee
Belgium

Email: francis@dierick.co

2. What This Policy Covers

  • App (on device) — Timer settings and preferences stay on your device.
  • App (optional Apple services) — If you have opted in to share diagnostics with app developers, Apple may provide crash reports.
  • App (optional Your Way account) — If you subscribe, restore a purchase, or receive a scholarship, I store a small account record and your path progress on my server so the daily companion can continue where you left off.
  • Website — Static pages and podcast content hosted on Netlify. No advertising. No analytics cookies. A single GoatCounter count pixel records aggregate page views (see §3.6).
  • Scholarship and support email — If you apply for a scholarship or email me, I process what you send so I can respond.

I do not sell personal data, run ads, or use cross-app tracking. I do not embed third-party analytics SDKs in the App. The Website does not load an analytics JavaScript SDK; it loads a 1×1 GoatCounter count pixel only.

3. Data I Process

3.1 Data Stored On Your Device

App settings (for example timer preferences and optional features) are stored locally on your device. This data stays on the device unless you sign in to Your Way.

The App may also create an anonymous Zen ID (a random code) in your device Keychain so purchases and path progress can be linked to your account when you choose to use Your Way.

3.2 Optional: Crash Reports (Apple)

If you have opted in to share analytics/diagnostics with app developers through Apple’s system settings, Apple may provide crash or diagnostic information related to the App. I use that only to fix bugs and improve stability. If you have not opted in, I do not receive those reports through Apple’s developer channels.

3.3 Optional: Your Way Account (Server)

If you subscribe, restore a purchase, apply for a scholarship, or otherwise unlock Your Way, I store a small account record on Cloudflare (Workers, D1 database, and R2 object storage). This is the minimum needed to run the daily path — not a social profile and not a content library you browse.

Data Why
Zen ID Anonymous account identifier (for example a456ghkl). Links your device, entitlement, and path.
Email Optional sign-in and scholarship matching; expiry reminders if you gave an address.
Entitlement Whether Your Way is active (App Store subscription, lifetime purchase, or scholarship) and when it expires.
Path progress Your current place on the daily path and a history of guided days you have received (session references and dates — not recordings of you).
Timezone and generate time So today’s sit is ready at your chosen local hour.
Fork choices If the path offers an optional branch, which option you picked (if any).
Apple transaction reference Original transaction id for restore — not your payment card.
Stripe customer reference If you pay the reduced scholarship rate on the web — payment details stay with Stripe.

I do not store silent timer sessions, how long you sat without guidance, or a general “meditation history” beyond the Your Way path above.

When entitlement ends, I stop updating your path and delete your per-user index files on the server. Account rows may be kept briefly for restore, billing disputes, or scholarship records.

3.4 Scholarship Applications

If you apply for a hardship scholarship on the Website, I process name, email, your choice (50% or 100%), and any optional note you include. I use this only to grant or decline access and to contact you about renewal. I do not use scholarship applications for marketing.

3.5 Support Email

If you contact me (for example at francis@dierick.co), I process your email address, the content of your message, and any follow-up needed to help you. I do not use support email for marketing.

3.6 Website Hosting

The Website is a static site hosted by Netlify. Like most hosts, Netlify may process technical data such as IP address, browser type, requested URLs, and timestamps in server logs to deliver and secure the site. The Website does not set advertising cookies.

Website audience counts (GoatCounter). I use GoatCounter to see which pages are requested: path, optional campaign query (utm_*), referrer when the browser sends one, and coarse country derived from IP. GoatCounter stores aggregates (counts per path / hour), not a profile of you. It does not set cookies, localStorage, or a tracker ID in your browser, and it does not store IP addresses or the raw User-Agent in its database. Individual pageview rows stay off. GoatCounter is operated by Martin Tournoij; data is hosted at Hetzner in Finland and Germany. See GoatCounter’s privacy documentation. I do not use these counts to identify you or to advertise.

Podcast RSS and audio files are served as part of the Website; requesting them may appear in ordinary hosting logs.

Your Way indexes and shared guided audio are served from Cloudflare (api.zenyourway.app, u.zenyourway.app, media.zenyourway.app). Requesting entitled content may appear in ordinary CDN and security logs.

3.7 What I Do Not Collect

Unless you sign in to Your Way, email me, or apply for a scholarship, I do not collect accounts, path progress, precise location, contacts, or payment card data for Zen : Your Way.

I do not collect advertising identifiers, cross-app tracking profiles, or recordings of your voice or environment.

  • Provide the App on your device — Local settings. Legal basis: legitimate interests / contract (Art. 6(1)(b)/(f)) — running the timer you asked for.
  • Fix crashes and improve stability — Apple diagnostic/crash reports (if you opted in). Legal basis: legitimate interests (Art. 6(1)(f)) — product quality; opt-in via Apple.
  • Run Your Way (optional paid path) — Account, entitlement, and path progress on Cloudflare. Legal basis: contract / steps at your request (Art. 6(1)(b)) when you subscribe or sign in; legitimate interests (Art. 6(1)(f)) for restore and fraud prevention.
  • Scholarship applications — Form data and grants. Legal basis: contract / steps at your request (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) — operating the hardship program.
  • Answer support requests — Email and message content. Legal basis: legitimate interests / steps at your request (Art. 6(1)(b)/(f)).
  • Host and secure the Website and API — Technical hosting logs. Legal basis: legitimate interests (Art. 6(1)(f)) — delivering and protecting the service.
  • Understand which Website pages are useful — GoatCounter aggregate counts. Legal basis: legitimate interests (Art. 6(1)(f)) — running and improving the public site. No cookies; no visitor profiles.

You can change Apple diagnostic sharing in system settings at any time. That does not affect the lawfulness of processing before withdrawal.

5. Who Receives Data

I do not share personal data with advertisers or data brokers.

6. International Transfers

Apple, Stripe, Cloudflare, and Netlify may process data in the United States or other countries. Where GDPR applies, those transfers rely on the safeguards those providers maintain (for example Standard Contractual Clauses and related measures described in their documentation). Local on-device data does not leave your device unless you sign in to Your Way or contact support.

GoatCounter is operated in the EU (Ireland) with hosting at Hetzner in Finland and Germany. Website audience counts stay with that EU processor and are not lumped in with the US transfers above.

7. Retention

  • On-device settings — until you delete the App or clear the data on the device.
  • Crash/diagnostic reports — retained only as long as needed to investigate issues, then deleted or aggregated without identifying you where practical.
  • Your Way account and path — while your entitlement is active and as needed for restore; per-user index files removed when access lapses; account metadata retained only as long as needed for billing, restore, scholarship records, or legal claims (typically up to 24 months after lapse unless a longer period is required).
  • Scholarship applications — as long as needed to grant access, send renewal notice, and keep ordinary business records (typically up to 24 months after the grant ends).
  • Support email — kept as long as needed to resolve your request and for ordinary business record-keeping (typically up to 24 months unless a longer period is required for a legal claim).
  • Website and CDN logs — according to each provider’s log retention practices for hosting security and operations.
  • GoatCounter aggregates — retained on GoatCounter for as long as the site account exists; I can delete the site data from GoatCounter settings.

8. Your Rights (EEA / UK And Similar)

Where GDPR (or UK GDPR) applies, you may have the right to:

  • access your personal data,
  • rectify inaccurate data,
  • erase data,
  • restrict or object to certain processing,
  • data portability (where applicable), and
  • withdraw consent where processing is based on consent.

To exercise these rights for data I control (Your Way account, scholarship, or support email), contact francis@dierick.co. For data held only on your device, use your device controls — I cannot remotely delete what only your device stores.

You also have the right to lodge a complaint with a supervisory authority. In Belgium, that is the Gegevensbeschermingsautoriteit / Autorité de protection des données (APD): https://www.gegevensbeschermingsautoriteit.be.

9. Children

Zen : Your Way is available for all ages. The timer does not require an account. I do not knowingly solicit personal data from children beyond what is described in this policy (local settings; optional Apple diagnostics you or a parent enable; Your Way sign-in if a parent enables it; scholarship or support email someone sends). Parents or guardians who believe a child has sent personal information by email or scholarship form can contact me to request deletion of that correspondence or account data.

10. California And Similar US State Laws

I do not sell or share personal information for cross-context behavioral advertising. Categories of information are limited to what is described above. To make a request about personal information I hold (Your Way account, scholarship, or support email), contact francis@dierick.co.

11. Cookies And Similar Technologies

The Website does not use non-essential advertising or analytics cookies. The GoatCounter pixel does not set cookies. There is no cookie banner because nothing is stored on your device for analytics. Hosting and delivery may involve strictly necessary technical processing (for example CDN/hosting logs). The App does not use third-party advertising or analytics SDKs.

12. Changes

I may update this policy from time to time. The “Last updated” date at the top will change when I do. Continued use of the App or Website after an update means you should review the new version.

13. Contact

Privacy questions: francis@dierick.co

Product help: Support