← Wyphi

Privacy Policy

Effective date: October 8, 2026

This Privacy Policy explains how Green House LLC d/b/a Wyphi ("Wyphi," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use Wyphi.

Some information used to personalize a meditation may qualify as consumer health data or other sensitive information under applicable law. Please also read our separate Consumer Health Data Privacy Policy.

Information We Collect

Account and identity information

We may process your email address, account identifier, authentication provider, verification status, account timestamps, and identity information provided when you choose a supported sign-in service such as Google or Apple.

Wyphi does not receive your Google or Apple account password.

Session and personalization information

Wyphi may process:

  • the feeling or session goal you select;
  • an optional free-text intention or note;
  • duration and guidance choices;
  • narrator and soundscape selections;
  • breathing and audio configuration;
  • session recipe and personalization information derived to create your session;
  • saved session history and progress; and
  • fixed-choice post-session feedback.

Your raw free-text intention is temporary.

While you are actively composing it, the text may exist in application memory and temporary tab/session storage so the page can function and recover during that browser session.

When you submit a free-text note, it is processed to create the requested meditation. After successful session creation, the raw text is cleared from the temporary browser draft.

Wyphi does not retain the raw intention prose in the saved meditation-session database record, general analytics, or Wyphi reliability records.

Derived personalization information needed to create, save, display, or replay the resulting session may be retained with your session.

Post-session feedback

Wyphi currently uses fixed-choice post-session feedback rather than an open-ended reflection text field.

The selected response may be retained with your session. It is not sent to Wyphi's general product-analytics system.

Subscription and transaction information

We may receive information such as:

  • subscription plan;
  • trial and billing dates;
  • subscription status;
  • Stripe customer/subscription identifiers;
  • transaction or invoice identifiers;
  • cancellation status; and
  • limited payment-related metadata.

Full payment-card information is handled in Stripe's hosted payment environment.

Usage and analytics information

Wyphi operates a minimized first-party analytics system.

It may record operational/product information such as:

  • landing and campaign attribution;
  • device/platform category;
  • session identifier;
  • duration;
  • guidance amount;
  • listening mode;
  • narrator;
  • soundscape;
  • audio/tone settings;
  • whether free text was used, without the text itself;
  • a coarse text-length category;
  • playback/progress events;
  • mixer interactions;
  • plan/billing events; and
  • authentication method and coarse result/error codes.

General analytics does not retain the user's raw intention, derived wellness category, primary or secondary intention, desired wellness state, post-session feedback score, email address, password, or authentication token.

Reliability and security information

Wyphi records limited reliability and security information needed to diagnose failures and protect the Service.

Browser-reported failures are persisted using bounded error codes rather than free-form browser error messages. Server-side reliability information is sanitized to remove or redact sensitive values such as authentication secrets, passwords, email addresses, cookies, and signed-link credentials.

Support and privacy communications

If you contact Wyphi, we process the information you choose to include in your message.

Do not include sensitive information that is unnecessary to resolve your request.

How Free-Text Personalization Works

If you provide an optional free-text intention, Wyphi sends the information needed to interpret that request through the Lovable AI Gateway.

The application currently requests a Google Gemini-family model through that gateway.

The personalization request may include:

  • your selected feeling;
  • session duration;
  • guidance level; and
  • the free-text note you entered.

The application does not intentionally include your account email, Wyphi account ID, session ID, visitor ID, password, or authentication token in that personalization prompt.

Lovable's gateway determines and manages the underlying model connection. Wyphi therefore does not represent that it independently verifies the downstream routing of every individual request.

Wyphi does not retain the raw model response. Structured personalization information derived from the response may be retained as part of the session you requested.

How We Use Information

We use information to:

  • provide and personalize meditation sessions;
  • authenticate users and maintain accounts;
  • save and replay sessions;
  • administer trials and subscriptions;
  • provide transactional communications and support;
  • diagnose failures and maintain reliability;
  • prevent fraud, abuse, and unauthorized access;
  • understand non-sensitive product usage;
  • respond to privacy requests;
  • comply with law and enforce our agreements; and
  • establish or defend legal claims where necessary.

Consumer Health Data

Wyphi does not sell consumer health data.

Wyphi does not use raw free-text intentions, derived wellness categories, or post-session wellness feedback for targeted advertising.

More information appears in our Consumer Health Data Privacy Policy.

Service Providers and Other Recipients

Depending on the feature you use, Wyphi relies on services including:

Lovable / Lovable Cloud

Application hosting/runtime, managed database and private storage, authentication, operational infrastructure, and related application services.

Lovable AI Gateway and AI model provider

Used when an optional free-text intention requires interpretation to create a session. The gateway is currently configured to request a Google Gemini-family model.

Stripe

Processes checkout, subscriptions, payment methods, invoices, customer portal functions, and payment-related operations. Wyphi does not intentionally send meditation content or raw free-text intentions to Stripe.

Resend and Lovable-managed email infrastructure

Used for lifecycle, account, billing, support/privacy acknowledgement, and authentication-related email delivery as applicable. Normal transactional templates do not intentionally contain raw meditation intentions.

Google and Apple

Used when you choose their supported authentication services.

Google Fonts

May receive ordinary browser/network request information when font resources are loaded.

Hosting and network infrastructure

Hosting, networking, security, and content-delivery providers may process ordinary request and device/network information needed to deliver and protect the Service.

Email hosting

If you contact support@wyphi.com or privacy@wyphi.com, our email-hosting providers process the contents and metadata of the message you choose to send.

ElevenLabs is used to create prerecorded Wyphi narration and is not part of the runtime customer-session personalization path.

Stock-audio licensors such as Pixabay or Freesound do not receive customer session information merely because licensed audio is used in Wyphi.

Advertising and Third-Party Tracking

Wyphi currently does not include Meta Pixel, TikTok Pixel, Google Analytics, Google Ads remarketing, Snapchat Pixel, Hotjar, Clarity, LogRocket, or another independent advertising/session-replay analytics service in the customer application.

If advertising or tracking practices materially change, we will update our notices and obtain consent where required before applying the new practice to sensitive information.

Cookies and Browser Storage

Wyphi uses browser storage and similar technologies for functions such as:

  • authentication;
  • temporary session-building state;
  • non-sensitive preferences;
  • anonymous first-party visitor/funnel measurement;
  • campaign attribution;
  • subscription handoff;
  • security; and
  • ordinary application functionality.

Raw intention prose is not stored in persistent localStorage.

While being composed, it may temporarily exist in tab/session storage and is cleared after successful session creation, logout, or account deletion.

Third-party services such as authentication providers and Stripe may set their own cookies when you interact with their services.

See our Cookie Notice for additional information.

Data Retention

Our current application retention practices include:

  • raw free-text intention: temporary processing only; not retained in the saved Wyphi session record;
  • member meditation sessions and derived session information: retained while the account/session-history feature remains active, subject to deletion;
  • unlinked anonymous sessions: generally up to 180 days;
  • general analytics events: generally 13 months;
  • Wyphi reliability events: generally 90 days;
  • email-provider delivery events: generally 90 days;
  • certain lifecycle-email recipient/context information: minimized after 13 months;
  • short-lived rate-limit records: generally up to 2 days;
  • account/profile information: while the account remains active, subject to applicable retention obligations;
  • Stripe payment and transaction records: retained by Stripe under its applicable legal, fraud-prevention, accounting, and operational requirements; and
  • privacy requests and limited administrative audit records: retained as reasonably necessary to demonstrate compliance, resolve disputes, prevent misuse, and satisfy legal obligations.

Backups and infrastructure-provider records may follow provider-managed retention cycles. Where deletion law applies to archived or backup consumer health data, Wyphi will honor the applicable statutory deletion requirements.

Account Deletion

You may delete your Wyphi account through the account controls in the You section.

The deletion workflow first addresses any active Wyphi Stripe subscription and then removes or de-identifies applicable Wyphi account and session information.

Stripe may retain payment and transaction records it is independently required or permitted to maintain.

Wyphi may retain narrowly limited compliance, privacy-request, security, or administrative audit records where legally or operationally necessary.

Your Privacy Rights

Depending on applicable law, you may have rights to:

  • access personal information;
  • request correction;
  • request deletion;
  • obtain a copy of certain information;
  • withdraw consent to certain processing;
  • learn about certain disclosures; and
  • appeal a denied privacy request.

Wyphi accepts privacy requests from U.S. users at:

privacy@wyphi.com

We may need to authenticate your identity before fulfilling a request.

Additional rights concerning consumer health data are described in the Consumer Health Data Privacy Policy and Privacy Rights page.

Security

Wyphi uses administrative, technical, and organizational measures designed to protect personal information, including access controls, private storage, server-side authorization, data minimization, and logging safeguards.

No online system can be guaranteed completely secure.

If an incident requires notification under applicable law, Wyphi will provide the required notifications.

Children

Wyphi is intended for users age 18 and older.

If you believe a minor has provided information to Wyphi, contact
privacy@wyphi.com.

U.S.-Focused Service

Wyphi is currently intended for users in the United States.

Information may be processed in locations where Wyphi's service providers operate, subject to applicable legal and contractual requirements.

Changes to This Policy

We may update this Policy as the Service changes.

We will update the effective date and provide additional notice or request consent when required by law, particularly if a change materially expands the use of sensitive information.

Contact

Operator: Green House LLC d/b/a Wyphi

Privacy: privacy@wyphi.com
Support: support@wyphi.com