Dieser Text liegt nur auf Englisch vor. Im Zweifel gilt die englische Fassung.

Privacy Policy

October 15, 2026

This policy covers the Hey Asana mobile app (iOS and Android) and the heyasana.com website. It is written to be read, so we start with the short version.

In short

• The app has no account, no ads and no tracking. Your favorites, settings and purchase status stay on your phone.
• The app sends crash reports (including a screenshot of the app screen at the moment of the crash) so we can fix bugs.
• The app does not currently use product analytics. If that changes, we will update this page first (see section 4).
• The website measures visits. Before you choose, counting is anonymous and uses no cookies. If you accept, we use cookies to understand how the site is used. You can change your choice at any time with “Cookie settings” in the footer.
• You can contact us at any time at hello@heyasana.com.

1. Who is responsible for your data

The data controller is Wisper Studio, 10, Place de la cathédrale, 67000 Strasbourg, France (VAT number FR91851854091), contact: hello@heyasana.com.

2. The Hey Asana app

2.1 What stays on your device

The app stores the following only on your phone, in its own private storage:

• your favorite asanas;
• your settings (language, display of diacritics);
• whether you have seen each tutorial;
• whether the Premium unlock has been purchased, and when;
• simple counters (for example how many exercises you completed and when the app last asked for a rating).

We do not receive this data. You can erase your favorites with the reset option in Settings, or erase everything by uninstalling the app.

2.2 What the app sends to us: crash and error reports

In released versions of the app, we use Sentry to receive crash and error reports. A report can contain:

• technical details of the error (stack trace, app version);
• device and system details (model, operating system version, language, available memory);
• a screenshot of the app screen at the time of the error.

The app has no account or form, so its screens do not display personal information about you. We do not use these reports to identify you or to build a profile.

• Purpose: keep the app stable and fix bugs.
• Legal basis: our legitimate interest in a working app (GDPR art. 6(1)(f)).
• Processor: Sentry (Functional Software, Inc.). Data is stored in the European Union.

2.3 Purchases

The Premium unlock is a one-time in-app purchase handled entirely by Apple (App Store) or Google (Google Play). They process your payment and are responsible for your payment data under their own privacy policies. We never see your card or bank details; the app only receives confirmation that the purchase exists, so it can unlock the content and restore it on request.

2.4 What the app does not do

• no account, login or user profile;
• no advertising and no advertising identifier (IDFA / GAID);
• no tracking across other apps or websites;
• no sale of data;
• no location, contacts, camera or microphone access.

2.5 When you contact us

If you email us (from the app’s feedback buttons or directly), we receive your email address and your message. We use them only to answer you, and keep them as long as needed to handle your request and for a reasonable time afterwards (at most 3 years). Legal basis: legitimate interest in answering you.

3. The website heyasana.com

3.1 Hosting

The site is hosted by Netlify. Like any web server, it processes technical data when you load a page (IP address, date and time, requested page, browser type) in server logs, to deliver the site and protect it against abuse. Legal basis: legitimate interest.

3.2 Audience measurement with PostHog

We use PostHog, hosted in the European Union (Frankfurt), to understand which pages are visited and which buttons are used (for example clicks on the App Store and Google Play buttons). Analytics requests go through our own domain (heyasana.com/ingest).

• Before you make a choice, or if you reject: counting is anonymous and cookieless. Nothing is written to your browser (except a record of your choice, once you make one). A visit is counted using a short-lived technical identifier computed on the server from your IP address and browser details, which is not stored and cannot be reversed. We cannot recognize you from one day to the next. Legal basis: our legitimate interest in measuring audience in aggregate.
• If you accept: PostHog sets a cookie / local storage entry that recognizes your browser between visits, and records pages viewed, clicks, approximate location (country, city) derived from IP address, device and browser type, the page you came from, and session replays (a recording of how you navigate the site; text you type into fields is masked). Legal basis: your consent (GDPR art. 6(1)(a) and ePrivacy).
• We also respect the Global Privacy Control signal and the browser “Do Not Track” setting: they count as a refusal.

You can change your choice at any time with Cookie settings in the footer. Your consent is asked again after 6 months.

3.3 Cookies and similar technologies

No advertising cookies and no third-party trackers are used. Fonts and images are served from our own domain.

3.4 Third-party links

The site links to the App Store, Google Play and Instagram. When you follow those links, those services apply their own privacy policies.

4. Analytics in the app: our commitment

The app has no product analytics today. We plan to measure how features are used in order to improve the app. If we do, we will:

• update this policy before the version that introduces it;
• use a provider hosted in the European Union;
• ask for your consent inside the app where the law requires it, with an option to refuse or withdraw in Settings;
• never use advertising identifiers or share data for advertising.

5. Who receives data

We share data only with the service providers that help us run the app and site, acting on our instructions: Netlify (hosting), PostHog (website analytics, EU), Sentry (crash reports) and Apple / Google (purchases, under their own responsibility). We do not sell your data.

Some providers are US companies. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s standard contractual clauses.

6. How long we keep data

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict and object to the processing of your data, to data portability, and to withdraw consent at any time (without affecting what was done before). To exercise a right, write to hello@heyasana.com. We answer within one month. We may ask you to prove your identity.

Because the app and the website do not identify you by name, we may need extra information (such as the approximate date of a crash report) to find your data.

You also have the right to lodge a complaint with your data protection authority. In France, this is the CNIL (cnil.fr).

8. Children

Hey Asana is a learning app for general audiences. We do not knowingly collect personal data from children. Parents who think a child has contacted us can ask us to delete the data.

9. Security

Data on your phone is protected by your phone’s own security. Our providers use encrypted connections (HTTPS) to transmit data. No system is perfectly secure, but we limit the data we collect to what is needed.

10. Changes to this policy

When we change this policy in a meaningful way, we update the date at the top. Previous versions are available on request.