Privacy Policy

1. Information We Collect

• Personal Identification Data: Name, email address, phone number, and billing address provided during account registration or checkout.

• Payment Information: Credit/debit card numbers, expiration dates, and CVV codes. This data is processed exclusively by Stripe, Inc. and is never stored on our servers. We only retain a tokenized reference provided by Stripe.

• Device & Technical Data: IP address, browser type, operating system, device identifiers (including Apple device identifiers such as IDFA when applicable), and usage logs.

• Wellness & Session Data: Information you voluntarily provide during Neuroakashic Connect™ sessions, including responses to assessments and session preferences.

• Communication Data: Messages sent through our contact forms, WhatsApp, or email support channels.

• Analytics Data: Aggregated, anonymized usage patterns collected through analytics tools to improve our services.

2. How We Use Your Information

• To process payments and manage subscriptions securely via Stripe.

• To create and manage your user account and provide access to the Neuroakashic Connect™ platform.

• To deliver personalized wellness sessions and AI-powered Superbrain Map analyses.

• To communicate with you regarding your account, transactions, updates, and support requests.

• To comply with legal obligations, including anti-fraud measures required by Stripe and financial regulations.

• To improve our platform through anonymized analytics and performance monitoring.

• To send marketing communications only when you have provided explicit consent, with a clear opt-out mechanism in every message.

3. Disclosure of Information

• Stripe, Inc.: Payment card data and billing information are transmitted directly to Stripe for secure processing. Stripe is PCI-DSS Level 1 certified. We share only the minimum data necessary for transaction completion. Stripe's privacy policy is available at stripe.com/privacy.

• Apple Inc.: When our application is distributed via the Apple App Store, Apple may collect certain device and usage data in accordance with Apple's Privacy Policy (apple.com/privacy). We comply with Apple's App Store Review Guidelines and Human Interface Guidelines regarding data collection disclosures.

• Supabase (Database Provider): User account data and session records are stored in Supabase's secure cloud infrastructure, subject to their data processing agreement.

• OpenAI: Session interaction data may be processed by OpenAI's API to generate AI responses. Data is transmitted over encrypted connections and is subject to OpenAI's usage policies.

• Legal Authorities: We may disclose information when required by law, court order, or governmental authority, or when necessary to protect our rights, users' safety, or the integrity of our platform.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity, subject to the same privacy protections described herein.

4. Method of Disclosure

• All data transmissions between your device and our servers are encrypted using TLS 1.2 or higher (HTTPS).

• Payment data is transmitted directly to Stripe via their secure JavaScript SDK (Stripe.js), ensuring card details never touch our servers.

• Data shared with third-party processors is transmitted via authenticated, encrypted API calls over HTTPS.

• We do not sell, rent, or trade your personal information to third parties for marketing purposes.

• Any disclosure beyond what is described in this policy will only occur with your explicit prior consent.

5. Security Practices

• Encryption at Rest & in Transit: All stored data is encrypted at rest using AES-256. All data in transit is protected by TLS 1.2+.

• PCI-DSS Compliance: Payment processing is fully delegated to Stripe (PCI-DSS Level 1 Service Provider), ensuring we never handle raw card data.

• Access Controls: Access to user data is restricted to authorized personnel on a need-to-know basis, enforced through role-based access controls.

• Authentication: We implement secure authentication mechanisms including hashed passwords (bcrypt) and support for multi-factor authentication.

• Regular Security Audits: Our infrastructure undergoes periodic security reviews and vulnerability assessments.

• Incident Response: In the event of a data breach, we will notify affected users and relevant authorities within the timeframes required by applicable law (72 hours under GDPR).

• Data Minimization: We collect only the data strictly necessary for the purposes described in this policy.

6. Data Retention

• Account data is retained for as long as your account is active or as needed to provide services.

• Payment records are retained as required by financial regulations (typically 7 years).

• You may request deletion of your personal data at any time by contacting us at support@neuroakashicconnect.app, subject to legal retention obligations.

7. Your Rights

• Right to Access: You may request a copy of the personal data we hold about you.

• Right to Rectification: You may request correction of inaccurate or incomplete data.

• Right to Erasure: You may request deletion of your personal data ("right to be forgotten").

• Right to Portability: You may request your data in a structured, machine-readable format.

• Right to Object: You may object to processing of your data for marketing purposes at any time.

• California Residents (CCPA): You have the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

• To exercise any of these rights, contact us at support@neuroakashicconnect.app.

8. Cookies & Tracking Technologies

• We use essential cookies necessary for platform functionality (session management, authentication).

• We use analytics cookies (anonymized) to understand usage patterns and improve our services.

• We do not use third-party advertising cookies or cross-site tracking.

• You may manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately at support@neuroakashicconnect.app.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page with an updated date and, where required, by sending you a direct notification. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

• Neuroakashic Technologies™

• Email: support@neuroakashicconnect.app

• Website: neuroakashicconnect.com

• For privacy-specific inquiries or to exercise your data rights, please include "Privacy Request" in the subject line of your email.