Privacy Policy
Last Updated: June 2026
Our Promise to You
First off, your information is safe with us. We do not sell your information to anyone. Not to advertisers. Not to corporations. Not to anyone at all. Your information stays on our encrypted platform, with our secured payment provider, and within our secured Zoom communications.
Because you may share sensitive details about your health and your circumstances, we treat everything you tell us with a high standard of confidentiality. While CYOM is not a healthcare provider and is not legally required to follow HIPAA, we voluntarily model our confidentiality practices on the principles behind it, the same level of care used to protect private medical information. We also build on the cybersecurity CIA triad: Confidentiality, Integrity, and Availability, the foundational model of information security that guides how we protect your data against unauthorized access, tampering, and loss.
Your data is stored on encrypted infrastructure, along with encrypted backups. Everything in transit is encrypted as well. Your payments run through an encrypted payment provider, your card details are never stored on our systems, and your passwords are hashed, not stored in plain text. Our system is built to keep your information safe.
We are not here to "get rich" or to sell your data. This is a genuine service born from Ryan's life purpose, and you'll be working with a small team that understands how much your privacy matters. If you use our service and you never tell a soul, no one will ever know you were here.
The rest of this policy explains, in plain terms, exactly what we collect, why, and the rights you have over your information.
1. Who We Are
This Privacy Policy applies to the CYOM (Create Your Own Meditation) application, website, and related services (the "Service"). For the purposes of data protection law, the data controller responsible for your information is CYOM, operated by Ryan Herron ("CYOM," "we," "us," or "our").
If you have any questions or want to exercise your rights, you can reach us at hello@cyom.io or through the in-app messaging system.
2. Information We Collect
We collect only what we need to run the Service and support you. This falls into a few categories:
| Type of Information | Examples |
|---|---|
| Information you give us | Email address, display name, and any messages you send through our support or coaching channels |
| Health-related and personal details you choose to share | Anything you tell us in support messages, coaching sessions, or personalization features about your wellbeing, circumstances, or goals |
| Usage data | Meditation tracks played, mixes you create, and how you interact with the app |
| Payment information | Processed by our payment provider; we receive confirmation of payment but do not store your card details |
| Technical data | Device type, app version, and basic log data needed to keep the Service working and secure |
You're always in control of how much you share. Personalization and coaching features only collect what you actively choose to provide.
3. The Legal Bases We Rely On
If you are in the EU, the UK, or another region with similar laws, we process your information on these legal bases:
| Legal Basis | When It Applies |
|---|---|
| Performance of a contract | To provide the Service you've signed up for, including your account and any subscription |
| Your consent | For optional features, marketing messages, and any processing of health-related details you choose to share |
| Legitimate interests | To keep the Service secure, prevent abuse, and improve how it works, balanced against your rights |
| Legal obligation | Where we must keep certain records to comply with the law |
Health-related information. Some details you share may reveal information about your health, which is treated as a special category of data under EU law. We only process this kind of information with your explicit consent, and you can withdraw that consent at any time.
4. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Process your requests, subscriptions, and transactions.
- Send you technical notices, security alerts, and support messages.
- Respond to your comments, questions, and coaching requests.
- Protect the Service and our users from fraud, abuse, and security threats.
- Create personalized meditation content, including custom wording, tone, voice direction, music direction, and personal references you ask us to include.
We do not use any personally identifiable information (PII) to target individual-specific advertising profiles. We never sell your PII.
5. Information Sharing
We do not sell, trade, or rent your personal information to anyone.
We share information only with the trusted service providers that help us operate the Service, and only to the extent they need it to do their job. These include categories such as:
- Our hosting and infrastructure provider.
- Our payment provider, which processes payments securely.
- Our email delivery provider, for account and support messages.
- Our secure video communications provider (Zoom), for any coaching or live sessions.
- Our secure artificial intelligence providers, to support live meditation creation.
These providers act on our instructions as data processors, are bound to keep your information confidential, and may not use it for their own purposes. We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the Service.
AI-assisted personalization. If you choose to purchase a personalized meditation, we may use trusted third-party AI tools to help create your meditation. This may include adding your name, your stated intention, preferred tone, voice preferences, and personal references you voluntarily provide, so the meditation feels personal and meaningful to you. We only share the information needed to create the meditation, and we do not sell this information or use it for advertising. When possible, we use AI tools and settings designed for business or private use, and we do not intentionally submit your information for public use or model training.
6. International Data Transfers
Some of our service providers may store or process data outside your country, including in the United States. Where we transfer personal data outside the EU, we rely on appropriate safeguards, such as Standard Contractual Clauses, to make sure your information remains protected to the standard required by EU law.
7. Data Security
Protecting your information is central to how we built CYOM. Our safeguards include:
- Encryption at rest. Your data is stored on encrypted infrastructure, with encrypted backups.
- Encryption in transit. Everything moving between your device and our systems is encrypted.
- Secure payments. Payments run through an encrypted payment provider, and your card details are never stored on our systems.
- Hashed passwords. Passwords are hashed, never stored in plain text.
- The CIA triad. We design around Confidentiality, Integrity, and Availability to guard against unauthorized access, tampering, and loss.
No system can promise perfect security, but we work hard to protect your information and to keep these safeguards current.
8. Data Retention
We keep your personal information for as long as your account is active, or as long as we need it to provide the Service. After that, we delete or anonymize it, unless we're required to keep certain records to meet a legal obligation. You can ask us to delete your account and associated data at any time (see Section 9).
9. Your Rights
You have meaningful rights over your information. Depending on where you live, these include:
| Your Right | What It Means |
|---|---|
| Access | Ask for a copy of the personal data we hold about you |
| Correction | Ask us to fix information that's inaccurate or incomplete |
| Deletion | Ask us to delete your data ("right to be forgotten") |
| Restriction | Ask us to pause certain processing of your data |
| Portability | Ask for your data in a portable format to take elsewhere |
| Objection | Object to processing based on our legitimate interests |
| Withdraw consent | Withdraw consent at any time, where we rely on it |
You can update most of your account information directly in the app settings. To exercise any of these rights, contact us at hello@cyom.io. We'll respond within the timeframe required by law.
If you're in the EU, you also have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).
10. Cookies and Local Storage
We use session cookies to keep you logged in, and local storage to save your meditation mix preferences. These are essential for the Service to function. We use Google analytics for advertising purposes.
11. Children's Privacy
The Service is intended for adults aged 18 and over, in line with our Terms of Service, and is not directed to children. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at hello@cyom.io and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we'll post the new version on this page and update the "Last Updated" date above. If the changes are significant, we'll provide additional notice where appropriate.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your information, please contact us at hello@cyom.io or through the in-app messaging system.
Your trust means everything to us. Thank you for letting us be part of your practice.