PRIVACY POLICY

1. Information We Collect

We collect information you provide directly, including your name, email address, date and place of birth, and assessment responses. We also collect usage data such as energy readings, ritual completions, and conversation history to provide personalized guidance.

2. How We Use Your Information

Your information is used to personalize your experience, generate AI-powered insights, track your wellness journey, and improve our services. We use your dosha profile, energy readings, and conversation history to provide contextual guidance through the Elara AI assistant.

3. Scrolls Memory System

Elara uses a persistent memory system called Scrolls to remember your preferences, goals, and important context across conversations. When you share meaningful information during a conversation, Elara may store it as a Scroll so that future interactions are more personalized and relevant.

Scrolls memories are stored securely and associated with your account. They are never shared with other users or third parties. You can view all of your stored Scrolls memories at any time through the Insights page, and you may delete any individual Scroll or all Scrolls memories at your discretion.

4. AI Processing Disclosure

Your conversations with Elara are processed by Google Gemini AI to generate personalized wellness insights and responses. This processing occurs in real-time when you interact with Elara.

Elara does not use your conversations or personal data to train AI models. Your data is used solely to generate responses during your session and to maintain your Scrolls memories for personalization.

Please be aware that AI-generated responses may sometimes be inaccurate, incomplete, or not applicable to your situation. Elara is a wellness companion and does not provide medical, psychological, or professional health advice. Always consult qualified professionals for health-related decisions.

5. Data Storage and Security

Your data is stored securely using Supabase with Row Level Security policies ensuring that your data is only accessible to you. All data transmission is encrypted using HTTPS. We do not sell your personal information to third parties.

6. Data Retention

We retain your data as follows:

• Conversations: Your conversation history is retained for as long as your account remains active, so that Elara can reference past interactions for continuity and personalization.
• Scrolls Memories: Persistent memories stored in the Scrolls system are retained for as long as your account is active. You may delete individual Scrolls at any time through the Insights page.
• Energy Readings: Your energy readings and wellness assessments are retained for as long as your account is active to support long-term trend tracking.
• Account Deletion: When you request account deletion, all associated data — including conversations, Scrolls memories, energy readings, dosha profiles, ritual history, and assessment results — will be permanently deleted within 30 days of the request.

7. Third-Party Services

We use the following third-party services: Supabase (database and authentication), Stripe (payment processing), Google Gemini (AI processing and voice), and Vercel (hosting and analytics). Each service has its own privacy policy governing how it handles data.

8. Children's Privacy

Elara is not directed at children. We do not knowingly collect personal information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA). For users in the European Union, you must be at least 16 years of age to use Elara in accordance with the General Data Protection Regulation (GDPR).

If we learn that we have collected personal information from a child under 13 (or under 16 for EU residents), we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal data, please contact us at sales@ironclados.com.

9. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions provided by law.
• Right to Opt-Out of Sale: We do not sell your personal information to third parties. As such, there is no need to opt out, but we affirm this commitment here.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at sales@ironclados.com. We will respond to verifiable requests within 45 days.

10. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your data or request account deletion by contacting us. Upon deletion, all associated data including Scrolls memories, conversations, energy readings, and assessment results will be permanently removed within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or through the Elara platform. Your continued use of Elara after changes are posted constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, data requests, or concerns, contact us at sales@ironclados.com