PRIVACY POLICY

Introduction

At SereneAI, we take your privacy seriously. This Privacy Policy explains how SereneAI collects, uses, and discloses information about you when you use our mobile application and related services (collectively "Services").

We are committed to being transparent about our data practices and giving you control over your personal data. Our policy complies with all applicable privacy laws and regulations, including the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using the SereneAI Services, you agree to the collection, use, and disclosure of your information as outlined in this policy. We encourage you to review this policy periodically to stay informed about our data practices and your rights. If you have any questions or concerns, please contact us at contact@getserene.ai

Information We Collect

‍Information You Provide: We collect personal information when you register for an account, including your name, email address, password, and any other information you choose to provide. We also collect the information you submit when using the Services, such as your moods, meditation preferences, and responses to prompts.

Usage Information : We automatically collect certain usage data about how you interact with the Services. This includes the meditation sessions you listen to, session length, frequency of use, your interactions with the AI assistant, and other app analytics data. We collect this data to analyze engagement, train our AI models, personalize content, and improve the Services.

‍Device Information: We may collect certain device-related information when you use our Services, such as your IP address, browser type, operating system, mobile carrier, device identifiers, and regional and language settings. This data allows us to optimize the Services for your device.

Other Sources: We may obtain some information from third party sources, such as analytics providers, advertising networks, and publicly available databases. We use this data to supplement our understanding of usage patterns and enhance the Services.

How We Use Information

We use the information we collect for the following purposes:

- Provide, maintain, and improve the Services, including developing new features, analyzing usage, diagnosing problems, and enhancing overall performance.

- Create and deliver personalized meditation experiences based on your input, preferences, and usage patterns. We may use your information to train our AI models to improve personalization over time.

- Communicate with you, such as by responding to your inquiries, sending you service announcements and updates, marketing emails, surveys, or other promotional communications consistent with your choices.

- Advertising and marketing, such as by optimizing and tailoring ads on our Services and on third party sites. 

- Conduct analytics to better understand how users access and use the Services, and to evaluate and improve our offerings.

- Comply with legal obligations, including as part of regulatory requirements, contractual obligations, tax filings, litigation, and enforcement actions.

- Enforce our Terms of Service, prevent fraud, and uphold the security and integrity of the Services.

We only process personal data for the purposes outlined in this policy. If we intend to use your information for other purposes, we will seek your consent in advance as required by law.

Information We Share

We may disclose information about you to third parties in the following circumstances:

Service Providers: We may share your data with third party companies and individuals we engage to process data on our behalf, such as cloud storage providers, payment processors, analytics services, and customer support vendors. These service providers are only permitted to use your data as instructed by us and consistent with this policy.

Corporate Customers: If you register for our Services through a corporate account, we may share certain usage analytics with your employer or sponsoring organization. We will not share your personal information without consent.

Legal Requirements: We may disclose your data if required to comply with legal obligations or lawful requests, such as subpoenas, court orders, or government requests. This includes sharing data with law enforcement officials or others, if compelled by subpoena, court order or other legal process.

Change of Ownership: If we sell, divest or transfer the business, we will not transfer your personal information without first obtaining your consent, unless the new owner intends to maintain and provide the Services as-is, and is legally bound to honor the promises and obligations in this policy. We will notify you of any changes in ownership of the business.

Research: We may share aggregated, anonymized analytics data with third parties like academic institutions and researchers, to help advance the field of mindfulness and meditation.

Security

We take appropriate physical, technical and organizational measures to protect your personal data from unauthorized access, disclosure, loss or destruction. For example:

• Data is stored on secure servers located in controlled facilities. Access is restricted to authorized personnel only.
• Sensitive data like passwords are stored in encrypted form. Transmission of sensitive data is protected using TLS/SSL encryption.
• Authentication mechanisms are used to protect access to account data. Employees have access only to the systems and data required for their role.
• Data privacy impact assessments are conducted when implementing new technologies or processes.
• Staff are trained on data protection policies and procedures. Confidentiality clauses are included in agreements.
• Appropriate backup, disaster recovery and business continuity arrangements are in place.

While we strive to protect your personal data, no system is completely secure. We cannot guarantee the security of your data transmitted through the internet. Any transmission is at your own risk.

EU GDPR Compliance

We comply with the requirements of the EU General Data Protection Regulation (GDPR) when processing personal data from the European Economic Area (EEA). Legal Basis for Processing: We only process your personal data when we have a valid legal basis to do so under the GDPR, including:

• To fulfill a contract with you or take steps to enter into a contract
• When we have a legitimate interest and the processing is fair, balanced, and does not unduly impact your rights
• To comply with a legal obligation
• When we have your consent to process the data

Data Subject Rights: If you reside in the EEA, you have certain rights under the GDPR with respect to your personal data. These include:

• Right of access: You may request a copy of your personal data.
• Right of rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request we delete your data, subject to certain exceptions.
• Right to restrict processing: You may request we limit processing of your data.
• Right to data portability: You may request a copy of your data for transfer to another provider.
• Right to object: You may object to processing of your data for direct marketing or other purposes.
• Right to withdraw consent: You may withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at contact@getserene.ai . We will consider and respond to the request consistent with the requirements of the GDPR.

Marketing Communications

We may use your contact information to send periodic marketing and promotional communications related to our products and services. Specifically:

• Email Newsletters: We may send occasional email newsletters informing you of new features, content or offerings. You may opt-out of promotional emails by following the unsubscribe link included in each email.
• Push Notifications: With your consent, we may send promotional push notifications to your mobile device. You can opt-out in your device settings.
• Social Media: We may contact you via social media platforms if you engage with our brand profiles.
• Targeted Advertising: We may show you ads for our products when you visit other websites and apps. You can opt out of targeted advertising by adjusting your ad settings.

We strive to provide choice regarding promotional contacts and only send communications that we believe may be of interest to you. You can opt-out of any marketing communications by contacting us at [email address] or by using the opt-out mechanisms provided.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, unless longer retention is required by law. Examples of retention periods:

• Account information: We retain your account data as long as your account is active. After you cancel your account, we retain certain information for fraud prevention and record-keeping.
• Marketing data: If you opt-out of receiving marketing communications, we will retain minimal data to ensure we respect your wishes.
• Usage data: We retain analytics data and usage metrics to analyze site performance, improve the service, and for product development.
• Transaction data: Order information is stored for tax, accounting, and audit purposes. We retain records of payments and invoices in accordance with standard bookkeeping practices.
• Correspondence: When you contact us with inquiries, we retain correspondence until the inquiry is resolved and for a period afterwards as documentation.

We may retain aggregated or anonymized data without a retention period, including for research and development purposes. We may also retain backups for operational continuity but do not use them to archive personal data indefinitely.

CALIFORNIA PRIVACY RIGHTS

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

CONTACT US

If you have questions or comments about this Privacy Policy, please contact us at: contact@getserene.ai

‍