# Soul Tranquility Massage & Wellness™
## Privacy Policy
**Effective Date:** May 2025
**Owner:** Amber Underwood, LMT
**Contact:** free.the.zen@gmail.com
---
## Our Core Privacy Promise
**Soul Tranquility was built on a single privacy principle: your health data is sacred.**
Unlike Flo Health (which paid a $56 million settlement for sharing health data with third parties), Soul Tranquility:
- **Does not sell your health data.** Ever.
- **Does not share your data with advertisers.** We have no advertising relationships.
- **Does not use your data to train AI models.** Your information stays yours.
- **Does not monetize your personal information.** Our only revenue is your subscription.
---
## 1. Information We Collect
### Information You Provide
- **Account information:** Name, email address, password (encrypted)
- **Health information:** Cycle dates, symptoms, mood logs, flow data, emotional check-ins
- **App usage:** Tabs accessed, features used, supplements saved to stack
- **Subscription information:** Billing details (processed by Stripe — we never see your card number)
- **Notes:** Any free-text notes you choose to enter
### Information Collected Automatically
- **Device information:** Device type, operating system, app version
- **Usage data:** Features accessed, session duration, error logs
- **IP address:** For security and fraud prevention only
### Information We Do NOT Collect
- Location data
- Contacts
- Camera access (except when you choose to scan a barcode)
- Microphone access
- Any data from other apps
---
## 2. How We Use Your Information
We use your information **only** to:
- Provide and improve the Service
- Personalize your experience (e.g., cycle phase calculations)
- Process your subscription payment via Stripe
- Send service communications (not marketing, unless you opt in)
- Ensure platform security and prevent fraud
- Comply with legal obligations
We **never** use your health information for:
- Advertising targeting
- Sale to data brokers
- Profiling for third parties
- Insurance underwriting
- Employment screening
---
## 3. Data Sharing
### We share data ONLY in these limited circumstances:
**Service providers under strict data processing agreements:**
- **Stripe** — payment processing only. Stripe never receives health data.
- **Anthropic** — AI responses. Your queries are processed per Anthropic's privacy policy. We do not send identifying information with AI requests.
- **Hosting provider** — application infrastructure only.
**Legal requirements:**
- We will disclose information if required by valid court order, subpoena, or legal process. We will notify you if permitted by law.
**Business transfer:**
- If Soul Tranquility is acquired, your data will be subject to the acquiring entity's privacy policy. You will be notified and given the opportunity to delete your account.
### We NEVER share with:
- Advertisers or ad networks
- Data brokers
- Insurance companies
- Employers
- Government agencies (except as legally required)
- Any third party for commercial purposes
---
## 4. Health Data — Special Protections
Your health information (cycle data, symptoms, mood, recovery information) receives our highest level of protection:
- Stored encrypted at rest (AES-256)
- Transmitted encrypted in transit (TLS 1.3)
- Access-controlled — only you can see your health data
- Not used for AI training
- Not shared with any third party for any commercial purpose
- Retained only as long as your account is active + 90 days after deletion request
---
## 5. HIPAA Notice
The Service is not a HIPAA-covered entity at this time. However, we voluntarily adhere to HIPAA-inspired privacy principles for health data because we believe you deserve that protection regardless of legal requirement. As the platform grows toward HIPAA certification, we are designing our architecture to be fully compliant.
---
## 6. Data Retention
- **Active accounts:** Data retained for the life of the account
- **Deleted accounts:** Data purged within 90 days of deletion request
- **Billing records:** Retained for 7 years as required by tax law (no health data included)
- **Backup systems:** Cleared within 180 days of account deletion
---
## 7. Your Rights
You have the right to:
- **Access** all data we hold about you
- **Correct** inaccurate information
- **Delete** your account and all associated data
- **Export** your health data in a machine-readable format
- **Opt out** of any non-essential communications
- **Withdraw consent** for data processing (results in account closure)
To exercise any of these rights, contact us at: soultranquilitymassage.com
---
## 8. Children's Privacy
The Service is not directed at children under 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will delete it promptly.
---
## 9. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect
- Right to delete personal information
- Right to opt out of sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your rights
---
## 10. International Users
The Service is operated from the United States. If you access the Service from outside the US, you consent to the transfer of your information to the US, which may have different privacy laws than your country.
---
## 11. Security
We implement industry-standard security measures including:
- AES-256 encryption at rest
- TLS 1.3 in transit
- Role-based access controls
- Regular security audits
- Incident response procedures
No system is perfectly secure. In the event of a data breach affecting your health information, we will notify you within 72 hours as required by applicable law.
---
## 12. Changes to This Policy
We will notify you of material changes to this Privacy Policy by email and in-app notification at least 30 days before changes take effect.
---
## 13. Contact Us
**Soul Tranquility Massage & Wellness™**
Amber Underwood, LMT
Wilmington, North Carolina
(910) 431-1932
free.the.zen@gmail.com
---
*© 2025 Soul Tranquility Massage & Wellness™. All rights reserved. Your health data belongs to you.*