Privacy Policy

1. Introduction

Bhagavan ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") describes how we collect, receive, process, use, disclose, and share your personal data and device information ("Information") when you use our mobile application ("App"), websites ("Websites"), and related services (together with the App and Websites, the "Services").

We handle your Information in compliance with applicable data protection laws, including the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA"), and other applicable privacy laws. We may update this Policy from time to time. Material changes will be announced at least 14 days before they take effect through a notice on our Websites or within the App.

2. What Data We Collect

When you use Bhagavan, we collect the following Information:

Account Information:

• Your name and email address when you create an account
• Your date of birth (or birth year) and, optionally, your time and place of birth, which you may provide to personalize spiritual content
• Your country and time zone, derived from your device settings
• Your notification and content preferences (including whether reminders are enabled)
• Authentication information used to sign you in, handled securely by our authentication provider (we never store passwords in plain text). If you sign in with Apple or Google, we receive basic account details from those providers

Usage Data and Analytics:

• How you interact with the App (features used, time spent, pages viewed)
• Device information (device type, operating system, unique device identifiers)
• App version and performance metrics
• Session data and navigation patterns
• Progress data (courses completed, achievements unlocked, streaks maintained)

Subscription and Payment Information:

• Subscription status and tier
• Payment information (processed securely through Apple App Store or Google Play Store - we do not store payment card details)
• Transaction history and billing information

Device and Technical Information:

• Approximate location at the country level, derived from your device settings or, in the case of our analytics provider, from your IP address (we do not collect precise or GPS location)
• Browser type and version (for website visitors)
• Language and time zone preferences
• Limited cookie or local-storage data from our Websites (as described in Section 6)

3. How We Use Your Data

We use your Information for the following purposes:

Service Provision:

• To provide, maintain, and improve the Services
• To process your registration and manage your account
• To authenticate your identity and prevent unauthorized access
• To deliver personalized content and features based on your preferences
• To manage your subscriptions and process payments
• To send essential service and transactional messages, such as sign-in verification codes and confirmations of changes to your account (for example, email or password updates)

Analytics and Improvement:

• To analyze usage patterns and improve the user experience
• To conduct research and develop new features
• To troubleshoot technical issues and ensure security
• To measure the effectiveness of our Services and marketing efforts

Notifications and Communication:

• To send optional push notifications, such as daily practice reminders and streak reminders, which you can turn off at any time in the App settings or your device settings
• To respond to your inquiries and provide customer support
• If we choose to offer promotional messages in the future, we will only send them where you have opted in, and you will be able to opt out at any time

Legal Compliance:

• To comply with applicable laws, regulations, and legal processes
• To enforce our Terms of Service and protect our rights
• To detect, prevent, or address fraud, security, or technical issues

4. Legal Basis for Processing

We process your Information based on the following legal bases:

• Contractual necessity: To provide the Services you requested and fulfill our obligations under our Terms of Service
• Consent: When you have provided explicit consent for specific processing activities (e.g., optional push notifications or any future promotional messages)
• Legitimate interests: To improve our Services, conduct analytics, ensure security, and communicate with you about the Services
• Legal compliance: To comply with applicable laws and regulations

5. Data Sharing and Third-Party Services

We do not sell or rent your personal data. We share your Information only in the following circumstances:

Service Providers: We share data with trusted third-party service providers who help us operate and improve our Services:

• Supabase: Secure cloud database, authentication, and storage for account information and user data
• PostHog: Product analytics to understand how the App is used and to improve the Services
• RevenueCat: Management of subscriptions and entitlements (it does not store your payment card details)
• Apple App Store / Google Play Store: Payment processing and subscription billing
• Apple and Google Sign-In: Optional single sign-on, when you choose to use it
• OneSignal: Delivery of push notifications, such as practice and streak reminders
• Resend: Delivery of transactional emails, such as sign-in verification codes

Legal Requirements: We may disclose your Information if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our users.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your Information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

6. Cookies and Tracking Technologies

Our mobile App does not use cookies. Our Websites use only strictly necessary and functional cookies, or similar local-storage technologies, that are required for core functionality, for example to:

• Remember your basic preferences and settings
• Handle app-download and referral links
• Ensure security and prevent fraud

We do not use advertising cookies, web beacons, or cross-site tracking technologies, and we do not serve personalized advertisements.

You can control cookies through your browser settings. However, disabling strictly necessary cookies may limit your ability to use certain features of our Websites. For more information about how we use cookies, please contact us at hello@bhagavan.io.

7. Data Storage and Security

Your account data is securely stored in Supabase, which uses industry-standard encryption and security measures. We implement appropriate technical and organizational measures to protect your Information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Data Retention

We retain your Information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements:

• Account data: Retained while your account is active and for a reasonable period after account deletion (typically 30-90 days) unless we have a legal obligation to retain it longer
• Subscription data: Retained for the duration of your subscription and as required for financial record-keeping (typically 7 years)
• Usage and analytics data: Aggregated and anonymized data may be retained indefinitely for research and improvement purposes
• Marketing data: Retained until you withdraw consent or opt out

When Information is no longer needed, we will delete or anonymize it in accordance with our data retention policies and applicable laws.

9. International Data Transfers

Your Information may be processed and stored in different countries, including countries outside your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer your Information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Adequacy decisions where available (e.g., for transfers to the United Kingdom or other countries with recognized adequate protection)
• Other appropriate safeguards as required by applicable law

By using the Services, you consent to the transfer of your Information to these countries.

10. Your Rights and Choices

Depending on your location, you may have certain rights regarding your Information:

• Access: Request access to your personal data and information about how we process it
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing in certain circumstances
• Data portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw your consent for processing where consent is the legal basis
• Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us at hello@bhagavan.io. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.

11. Children's Privacy

The Services are not directed to children under 13, and you must be at least 13 years old to create an account. We take children's privacy seriously:

• We do not knowingly collect personal information from children under 13
• If you are under 18 (or the age of majority in your jurisdiction), you should use the App only with the involvement of a parent or legal guardian
• We collect only the minimum amount of information necessary to provide the Services
• Parents or guardians can request to review, delete, or refuse further collection of their child's information

If we become aware that we have collected Information from a child under 13, we will take steps to delete that Information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA"):

• Right to know what personal information we collect, use, and share
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell your personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at hello@bhagavan.io.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, legal requirements, or for other operational, legal, or regulatory reasons. Material changes will be announced at least 14 days before they take effect through a notice on our Websites or within the App. The "Effective Date" at the top of this Policy indicates when it was last updated.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: hello@bhagavan.io

For data protection inquiries specifically, you may also contact our Data Protection Officer (if applicable) or submit a request to exercise your rights under applicable data protection laws.