Last updated: 23 October 2026
AHΞHA is a breathing and visualization app that runs in your browser and can be installed on your phone. This page explains which personal data we process when you use www.aheha.com, why we do it and what rights you have. We collect as little as possible.
Controller within the meaning of the General Data Protection Regulation (GDPR):
[Name / company]
[Street and number]
[Postcode, city], Germany
Email: michael@buoyond.com
Full details are in our imprint.
The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on servers in the EU. We have a data processing agreement with IONOS. When you open a page, the server automatically records: IP address, date and time, page requested, referring page, browser and operating system. This is necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Log files are deleted by the hoster after a short period.
Fonts and videos are loaded from our own server. We do not use Google Fonts or other external content delivery networks.
You can use the daily routines without an account. To show your progress, remember your settings and count how often routines are started, the app stores a random guest ID in your browser (local storage) and sends it with each started and completed routine to our server, together with a shortened, one-way hashed version of your IP address. We cannot identify you from this. Legal basis: providing the service you request (§ 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR) and our legitimate interest in improving the routines (Art. 6(1)(f) GDPR).
If you sign up, we store your email address, the name you enter, your password (only as a secure hash), your personal invite code, who invited you (if anyone), the routines you started and completed, your shares and your personal settings. We use this to provide your account, your dashboard and your invite statistics (Art. 6(1)(b) GDPR). If you forget your password, we send you a reset email. You can delete your account at any time by writing to us; your data is then deleted, unless the law requires us to keep it.
Shared links contain the invite code of the person who shared them. When you open such a link, we store the code for 30 days (cookie “ah_ref” and local storage) and record one click per day with a hashed IP address, so the person who invited you is credited if you sign up. Legal basis: Art. 6(1)(f) GDPR; our interest is a fair invite programme.
If you install AHΞHA and turn on reminders, your browser asks for permission. We then store the push address of your device (provided by your browser maker, for example Google, Apple or Mozilla), your reminder times and your time zone. Reminder messages contain no personal content. You can turn reminders off in the app or in your phone settings at any time; the push address is then deleted (Art. 6(1)(a) GDPR).
We only use cookies that are not strictly necessary if you agree in the cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time with “Privacy settings” at the bottom of every page or the button above.
| Name | Purpose | Category | Duration |
|---|---|---|---|
| AHSESS | Keeps you signed in | Necessary | Up to 90 days |
| ah_consent | Stores your cookie choice | Necessary | 12 months |
| ah_guest, ah_done, ah_rem, ah_sound … (local storage) | Guest ID, progress, reminder and sound settings | Necessary | Until you clear your browser data |
| ah_ref | Credits the person who invited you | Necessary for the invite programme | 30 days |
| _ga, _ga_* | Google Analytics: distinguishing visits | Statistics (only with consent) | Up to 2 years |
| _gcl_* | Google Ads: measuring ad clicks | Marketing (only with consent) | 90 days |
With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand how AHΞHA is used, for example which routines are started. Google processes pseudonymous usage data such as pages viewed, device and browser type, approximate location (country/city) and the time of the visit; IP addresses are not stored by Google Analytics 4. Data can be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (Art. 45 GDPR). Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Data is kept for a maximum of 14 months. More: Google privacy policy.
Without consent, Google's tag is not loaded at all and no data is sent to Google. We use Google Consent Mode to pass your choice on to Google.
We advertise AHΞHA with Google Ads. With your consent, Google sets a cookie when you arrive through one of our ads, so we can see whether the ad led to a visit or a started routine. We do not receive any information that identifies you. Provider, data transfer and legal basis as in section 8.
If you write to us, we use your email address and message only to answer you (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed.
We delete personal data as soon as it is no longer needed for the purpose it was collected for. Account data is kept as long as your account exists. Statistics on started routines are kept in pseudonymous form.
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, write to michael@buoyond.com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).
AHΞHA is intended for people aged 16 and over. Younger users need the consent of a parent or guardian to create an account.
AHΞHA is a breathing and mental-preparation tool. We do not collect health data, and the app does not diagnose or treat any condition.
We update this policy when our services or the law change. The current version is always available on this page.