SYMPLARA PRIVACY POLICY
Effective Date: 18th October 2025
Version: 2.0.0
Symplara (“we,” “our,” “us”) is committed to protecting your privacy. This policy explains how we handle your information when you use the Symplara mobile app.

1. Information We Collect
   We collect only the minimum data required to deliver a safe and effective wellness experience:
   Account & Payment Information:
   • Email address (required for account creation and communication).
   • Payment information processed through Apple's In-App Purchase system when you purchase our Pro packages (we do not store or access your payment details).
   Local Data Only:
   • All wellness activity data, practice sessions, preferences, and app settings are stored locally on your device.
   • We do not collect, transmit, or store any usage statistics, analytics, or behavioural data on our servers.
   • We have no visibility into how you use the app.
   No Sensitive Data:
   • Symplara does not collect or process medical, health, or clinical information.
   • We do not track your device information, location, or any other personal data beyond your email address.

2. How We Use Your Data
   Email Address:
   • To create and manage your account.
   • To communicate essential service updates, security notices, or support responses.
   • To process and confirm Pro package purchases.
   Local Data:
   • Your wellness practices, sessions, and preferences remain entirely on your device.
   • You maintain complete control over this data through our in-app settings.
   We never sell, share, or monetise your data.

3. Your Control Over Your Data
   Data Management:
   • You can delete all locally stored data at any time through the app settings.
   • You can download a copy of your local data through the app settings.
   • You can delete your account at any time through the app settings.
   No Analytics or Tracking:
   • We do not use analytics tools, tracking pixels, or any data collection mechanisms.
   • Your app usage remains completely private.

4. Your Privacy Rights
   Depending on your location, you may have specific rights under data protection laws:
   EU & UK Users (GDPR/UK GDPR):
   • Right to access your personal data (email address).
   • Right to correct inaccurate information.
   • Right to delete your account and associated data.
   • Right to data portability.
   • Right to withdraw consent.
   • Right to lodge a complaint with your supervisory authority.
   US Users (CCPA/CPRA & State Privacy Laws):
   • Right to know what personal information we hold (email address only).
   • Right to access your personal information.
   • Right to delete your personal information.
   • Right to opt-out of data sales (we do not sell data).
   • Right to non-discrimination for exercising privacy rights.
   Australia (Privacy Act), Canada (PIPEDA), and Other Jurisdictions:
   • You have the right to access and correct your personal information.
   • You may request deletion of your data.
   • You may file complaints with relevant privacy commissioners.
   To exercise your rights, contact: hello@symplara.com

5. Legal Basis for Processing (Where applicable)
   For users in jurisdictions requiring a legal basis:
   • Consent: When you create an account and provide your email address.
   • Contractual Necessity: To provide the services you requested, including Pro features.
   • Legitimate Interest: To maintain service security and respond to support inquiries.

6. Children’s Privacy
   • Symplara is not directed at children under 13 (US - COPPA compliance).
   • We do not knowingly collect data from children under 16 without parental consent (EU/UK – GDPR compliance).
   • If we discover we have inadvertently collected such data, we will delete it immediately.

7. Data Security
   We implement appropriate security measures to protect your email address:
   • Encrypted data transmission (TLS/SSL).
   • Secure authentication systems.
   • Limited access controls.
   • Regular security monitoring.
   • Since your wellness data is stored locally on your device, its security is protected by your device's native security features and your device passcode/biometric authentication.

8. Data Retention
   • We retain your email address only while your account is active.
   • Upon account deletion, your email address is permanently erased within 30 days.
   • Local data on your device persists until you delete it through app settings or uninstall the app.

9. International Data Transfers
   • Your email address may be stored on secure servers that could be located in different countries.
   • We ensure appropriate safeguards are in place for any international transfers, including Standard Contractual Clauses where required.
   • Since all usage data is local to your device, it never leaves your device unless you explicitly choose to download and share it.

10. Third-Party Services
    Apple In-App Purchases:
    • Payment processing is handled entirely by Apple.
    • We receive only confirmation of purchase, not your payment details.
    • Apple's privacy policy governs how they handle your payment information.
    No Other Third Parties:
    • We do not use analytics services, advertising networks, or data processors.
    • We do not share your information with any other third parties.

11. Changes to This Policy
    We may update this Privacy Policy from time to time. Material changes will be communicated through:
    • In-app notification
    • Email to your registered address
    Continued use of Symplara after changes constitutes acceptance of the updated policy.

12. Contact Us
    For questions, concerns, or requests regarding your privacy:
    Email: hello@symplara.com
    For EU/UK Users:
    You have the right to lodge a complaint with your local data protection supervisory authority.
    For Australian Users:
    You may contact the Office of the Australian Information Commissioner (OAIC).
    For Canadian Users:
    You may contact the Office of the Privacy Commissioner of Canada.