Privacy Policy

The data controller responsible for your personal data is: Kevin Quebec, Canada Email: contact@attraya.app As the data controller, we determine the purposes and means of processing your personal data in accordance with applicable privacy laws.

Welcome to Attraya ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our spiritual wellness and manifestation ritual app. By using Attraya, you consent to the data practices described in this policy.

We collect the following categories of information: • Account Information: Email address and name when you create an account via Apple Sign-In. • User Content: Your intentions, daily rituals, and manifestation data you create within the app. • Preferences: App settings, language preferences, notification preferences, and theme choices. • Device Information: Device type, operating system, unique device identifiers, and app version. • Usage Data: How you interact with the app, features used, session duration, and crash reports. • Payment Information: Subscription status and transaction history (payment details are processed securely through Apple's in-app purchase system, not stored by us).

We use your data for the following purposes: • Service Delivery: To provide and personalize your Attraya experience, including ritual tracking, intention amplification, and progress monitoring. • Communications: To send ritual reminders, notifications, and important service updates. • Sync & Backup: To sync your data across devices and maintain your account. • Improvement: To analyze usage patterns, fix bugs, and develop new features. • Legal Compliance: To comply with applicable laws and protect our legal rights.

We do NOT sell your personal data. We may share data with: • Service Providers: Third-party providers for cloud hosting, analytics, authentication, push notifications, and payment processing. These providers are contractually bound to protect your data. • Legal Requirements: When required by law, court order, or to protect our rights and safety. • With Your Consent: Third parties you explicitly authorize. Your intentions and rituals remain private and are never shared publicly or used for advertising purposes.

We use third-party service providers for cloud hosting, analytics, push notifications, and subscription management. All payments are processed through Apple's in-app purchase system. These providers are contractually bound to protect your data and only process it as necessary to provide their services.

If you choose to submit a testimonial or success story through the app, you grant us a perpetual, worldwide, royalty-free, non-exclusive license to use, reproduce, modify, publish, and display your testimonial for: • Marketing and promotional purposes on our website, app, and social media • Social proof within the app to inspire other users • Future community features within the app • Advertising and publicity materials • Case studies and press releases Testimonials may be displayed with your chosen display name (anonymous, first name only, or display name) as selected at submission. We may edit testimonials for length, clarity, or formatting while preserving their meaning. You may request removal of your testimonial at any time by: using the testimonial management feature in the app settings, or contacting us at contact@attraya.app. Upon receiving your request, we will remove your testimonial from our active displays within 30 days. Note that previously distributed materials or cached versions may take longer to update. By submitting a testimonial, you represent that it reflects your genuine experience and does not contain false, misleading, or defamatory content.

We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or security purposes. Anonymized usage data may be retained for analytics purposes.

We implement industry-standard security measures including: encryption of data in transit (TLS/SSL) and at rest; secure authentication via OAuth providers; regular security assessments; and access controls limiting who can access your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

As a mobile application, Attraya does NOT use browser cookies. However, we use the following technologies to improve our service: • ANALYTICS: We use PostHog, a privacy-focused analytics platform, to understand how users interact with the app. This includes tracking app usage patterns, feature engagement, and user flows to improve the user experience. • SESSION REPLAY: PostHog may record anonymized session replays to help us identify usability issues and bugs. These recordings capture app interactions but do not record sensitive data like passwords or payment information. • ERROR TRACKING: We automatically collect crash reports and error logs to identify and fix technical issues. This data includes device information, app state, and error details. • DEVICE IDENTIFIERS: We collect device identifiers for analytics, push notification delivery, and fraud prevention. • PUSH NOTIFICATION TOKENS: We store Firebase Cloud Messaging (FCM) tokens to deliver push notifications you have opted into. You can limit analytics collection by adjusting your device settings or contacting us to opt out. Note that some data collection is necessary for the app to function properly.

Attraya is a mobile application and does not respond to web browser "Do Not Track" (DNT) signals, as these signals are designed for web browsers and are not applicable to mobile apps. For mobile devices, you can limit tracking by: • Adjusting your device's privacy settings • Disabling personalized advertising in your device settings • Contacting us to request opt-out from analytics Note that opting out of analytics does not affect the core functionality of the app.

Depending on your location, you may have the following rights: • Access: Request a copy of your personal data. • Correction: Request correction of inaccurate data. • Deletion: Request deletion of your account and data. • Portability: Request your data in a portable format. • Opt-Out: Opt out of marketing communications. • Withdraw Consent: Withdraw consent for data processing. To exercise these rights, contact us at contact@attraya.app, use the Send Feedback feature in the app, or delete your account through Settings.

If you are in the European Economic Area or United Kingdom, you have additional rights under GDPR including: the right to lodge a complaint with a supervisory authority; the right to object to processing based on legitimate interests; and the right to restrict processing in certain circumstances. Our legal basis for processing is: consent (for optional features), contract performance (to provide the service), and legitimate interests (for analytics and improvement).

If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt-out of the sale of personal information (note: we do not sell personal information); and not be discriminated against for exercising your rights. To make a request, contact us through the app. We will respond within 45 days.

If you are a Canadian resident, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, Quebec's Law 25 (Act respecting the protection of personal information in the private sector). You have the right to: • Access your personal information held by us • Request correction of inaccurate information • Withdraw consent for the collection, use, or disclosure of your information • File a complaint with the Office of the Privacy Commissioner of Canada or, for Quebec residents, the Commission d'accès à l'information du Québec We process your data based on your consent and our legitimate business interests. You may withdraw consent at any time by contacting us or deleting your account. To exercise your rights, contact us at contact@attraya.app.

Attraya is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately and we will delete the information.

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

We may update this privacy policy periodically. We will notify you of material changes through the app or by updating the "Last updated" date. Your continued use after changes constitutes acceptance. We recommend reviewing this policy regularly.

If you have questions about this privacy policy or wish to exercise your rights, please contact us at contact@attraya.app or through the Send Feedback feature in the app.