The Sunday Practice
A service from Breath & Ember
Last updated: 14 August 2026
The Sunday Practice was created by Donna Bottomley of Breath & Ember. Breath & Ember is a trading name of Melinor Ltd, a company registered in England and Wales. Company number 17021046. Our registered office is Eagle House, 25 Severn Street, Welshpool, Powys, SY21 7AD.
Melinor Ltd is registered with the Information Commissioner's Office as a data controller, registration number ZC185456.
If you have questions about this policy or how your data is handled, you can reach us at hello@breathandember.com.
This is the most important thing to know. Anything you write during a practice, in the writing screens, the noticing prompt, or the closing phrase, stays on your device. It is never sent to a server. We cannot see it, store it, or recover it.
While a practice is in progress, your writing is held temporarily in your browser so an accidental refresh does not lose it. It is cleared when your practice ends, when you begin a new practice, or when you close the tab.
You can clear your writing yourself at any time using the Privacy & Data link at the bottom of any screen.
If you are a Full Practice member, the PDF of your practice is made entirely in your browser. Your device then offers its usual save or share option so you can keep it. Once you have saved it, or chosen not to, your writing is cleared. We have no copy. If you leave a practice without saving, that writing is lost.
To run the app we need a small amount of account and technical information.
| Purpose | Data | Lawful basis | Retention |
|---|---|---|---|
| Create and manage your account | Email address | Contract | While your account is active, then deleted within 7 days of account deletion |
| Provide your subscription | Email address, subscription status | Contract | As above |
| Process payments | Handled entirely by Stripe | Contract and legal obligation | Set by Stripe as merchant of record |
| Respond to support enquiries | Email and correspondence | Contract and legitimate interests | 12 months after resolution, or longer where the enquiry relates to a complaint, dispute or potential legal claim |
| Prevent fraud and security issues | Relevant technical and account information | Legitimate interests | Only as long as needed to resolve the issue |
When you sign in, your email address is stored in Supabase, our database provider. Row-level security means that within the app your record can only be read by you. No other member can see it. As the operator of the service, we can access account records where we need to, for example to answer a support enquiry or look into a problem with a subscription. Your subscription status is stored alongside your email address so the app knows whether your membership is active.
Stripe handles all payments as merchant of record. Card details are entered on Stripe's own pages and never reach us. We receive only your subscription status, renewal date, and the identifiers needed to match a payment to your account. We hold no card or billing records. Stripe's handling of your data is governed by their privacy policy at stripe.com/gb/privacy.
We use Cloudflare Web Analytics to see how many people visit and which pages they use. It sets no cookies, stores nothing in your browser, and does not track you across other sites or over time. The figures are anonymous and aggregated. It cannot see anything you write during a practice.
When you load the app, your browser sends basic technical information to Cloudflare, including your IP address, browser type and a timestamp. This is used to serve pages securely and to protect against automated attacks. Cloudflare acts as a processor on our behalf. Their privacy commitments are at cloudflare.com/trust-hub.
The Sunday Practice sets no cookies.
Three things may be kept in your browser's own storage. Your writing, while a practice is in progress, as described above. Your chosen soundscape, which is a preference rather than personal information. And a sign-in token, so you are not asked to sign in again each week. None of these are used to track you and none are shared with anyone. Your sign-in token is removed when you sign out. Your soundscape preference stays until you clear your browser data.
Stripe sets its own cookies during checkout, on Stripe's pages rather than ours.
The app loads typefaces from Google Fonts. Google receives your IP address when this happens. No cookie is set and no other information is shared.
Your account and subscription data is held in Supabase's Frankfurt data centre, within the European Economic Area.
Payment data is held by Stripe.
Sign-in emails are sent through Resend. Emails are sent from Resend's Ireland region, within the European Economic Area. Resend's primary processing operations as a company take place in the United States. That transfer is made under the UK Addendum to the EU Standard Contractual Clauses, and Resend is certified under the UK Extension to the EU-U.S. Data Privacy Framework.
We take reasonable technical and organisational steps to protect your account information, including secure hosting, encrypted connections, and limiting who can access data. No online service can guarantee complete security, but we take this seriously and will review these measures as the app grows.
Under UK data protection law you can ask what personal data we hold about you, ask us to correct it, ask us to delete it, and ask us to stop using it. To do any of these, email hello@breathandember.com.
You can also complain to the Information Commissioner's Office at ico.org.uk if you think your data has not been handled properly.
If we make significant changes we will update the date at the top and, where appropriate, let members know by email.