Privacy Policy

At Serene, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

We may collect information about you in a variety of ways. The information we may collect via the Application includes:

**Personal Data** - Name and email address when you create an account - Profile information such as age, gender, height, and weight (for wellness calculations) - Health and fitness data you choose to log (meals, water intake, exercise, sleep) - Photos you upload for meal logging or body scanning

**Device Data** - Device type, operating system, and unique device identifiers - IP address and general location (country/city level) - App usage data and interaction patterns

**Health App Integrations** - Data from connected services like Apple Health, Google Fit, Fitbit, etc. (only with your explicit permission)

**Payment Information** - Payment details are processed securely by our payment providers (Stripe, Apple Pay, Google Pay) and we do not store your full credit card information

We use the information we collect to:

- Provide, maintain, and improve our services - Personalize your experience and deliver tailored content and recommendations - Process transactions and send related information - Send you technical notices, updates, security alerts, and support messages - Respond to your comments, questions, and customer service requests - Monitor and analyze trends, usage, and activities - Detect, investigate, and prevent fraudulent transactions and other illegal activities - Develop new products, services, features, and functionality

**AI and Machine Learning** We use anonymized and aggregated data to train our AI models to provide better recommendations. Your personal data is never used to train AI models without your explicit consent.

We do not sell your personal information. We may share your information in the following situations:

**With Service Providers** We may share your information with third-party vendors, service providers, and contractors who perform services for us (e.g., cloud hosting, analytics, customer support).

**For Legal Purposes** We may disclose your information where required to comply with applicable law, governmental requests, or legal process.

**Business Transfers** We may share or transfer your information in connection with a merger, acquisition, or sale of all or a portion of our assets.

**With Your Consent** We may share your information for any other purpose with your consent.

**Aggregated Data** We may share aggregated, anonymized data that cannot be used to identify you for research and analytics purposes.

We implement appropriate technical and organizational security measures to protect your personal information, including:

- End-to-end encryption for sensitive health data - Secure HTTPS connections for all data transmission - Regular security audits and penetration testing - Access controls and authentication requirements - Data encryption at rest using AES-256

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We retain your personal information for as long as your account is active or as needed to provide you services. You can request deletion of your data at any time through the app settings or by contacting us.

After account deletion: - Personal data is deleted within 30 days - Anonymized, aggregated data may be retained for analytics - Backup copies are purged within 90 days - Legal hold data may be retained as required by law

Depending on your location, you may have the following rights:

**Access & Portability** Request a copy of the personal data we hold about you in a portable format.

**Correction** Request correction of inaccurate personal data.

**Deletion** Request deletion of your personal data ("right to be forgotten").

**Restriction** Request restriction of processing of your personal data.

**Objection** Object to processing of your personal data for certain purposes.

**Withdraw Consent** Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at [email protected] or use the privacy controls in the app settings.

Serene is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We ensure appropriate safeguards are in place for international transfers, including: - Standard Contractual Clauses approved by the European Commission - Compliance with the EU-US Data Privacy Framework - Adequacy decisions where applicable

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

**Serene Health, Inc.** Email: [email protected] Address: 548 Market Street, Suite 95000, San Francisco, CA 94104 Data Protection Officer: [email protected]

For EU residents, you also have the right to lodge a complaint with your local data protection authority.