Equanima Privacy and Cookie Policy

Effective Date: 28/07/2025

Introduction

At Equanima, we value your privacy and are committed to being transparent about the data we collect and how we use it. This Privacy and Cookie Policy outlines our practices regarding the collection, use, and protection of your personal information, including cookies and similar technologies. This policy applies to all our platforms, including our ecommerce website, Moodful, EQ Dictionary, and the Equanima App (available in beta for Android and iOS).

What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They allow the website to recognize your device, improve user experience, and provide analytics to optimize performance. Cookies can be “first-party” (set by our website) or “third-party” (set by external services).

Types of Cookies We Use

We use the following types of cookies on our website:

1. Essential Cookies:

   • Required for the website’s functionality, such as enabling ecommerce transactions or login processes.

   • Examples: Cookies that save items in your cart or manage session authentication for Moodful and EQ Dictionary accounts.

2. Performance Cookies:

   • Help us analyze how visitors use our site to improve functionality and user experience.

   • Examples: Google Analytics cookies to track page visits and user interactions.

3. Functionality Cookies:

   • Remember your preferences, such as language or region, to provide a customized experience.

   • Examples: Cookies that retain display settings or save login preferences for future visits.

4. Targeting/Advertising Cookies:

   • Used to deliver relevant advertisements and track campaign performance.

   • Examples: Third-party cookies from platforms like Google Ads or Facebook Pixel.

How We Use Cookies

• Ecommerce Platform:

  • Store information about your cart and order progress.

  • Process payments securely.

• Moodful and EQ Dictionary Accounts:

  • Enable login via email or Google account.

  • Save preferences for future visits.

• Analytics:

  • Track website performance and improve user experience.

• Advertising:

  • Display targeted ads based on your browsing behavior.

Third-Party Cookies

We partner with third-party services to enhance our offerings. These providers may set cookies on your device:

• Google Analytics: Tracks site performance and user behavior.

• Facebook Pixel: Monitors ad campaign effectiveness.

• Stripe and PayPal: Facilitate secure payment processing for ecommerce transactions.

• TikTok Pixel: Tracks ad engagement and campaign effectiveness for TikTok advertising.

• Twitter Conversion Tracking: Measures the performance of Twitter ads and user interactions.

• Microsoft Clarity: Provides insights into user behavior and session recordings for website optimization.

• Pinterest Tag: Tracks conversions and user interactions from Pinterest campaigns.

How We Collect and Use Personal Data

1. Data Collection Through Ecommerce

When you purchase products from our website, we collect the following information to process your order:

• Name

• Contact information (email, phone number, address)

• Payment details (processed securely through third-party providers like Stripe and PayPal)

• Order history and preferences

2. Account Creation for Moodful, EQ Dictionary, and Equanima App

When creating an account on Moodful, the EQ Dictionary, or the Equanima App, we may collect:

• Name

• Email address

• Login credentials or authentication via Google account

• App usage data to enhance user experience and provide personalized insights

3. Analytics and Advertising Data

We use cookies and similar technologies to:

• Track user behavior and website performance through tools like Google Analytics, Microsoft Clarity, and TikTok Pixel.

• Deliver targeted advertisements via platforms like Facebook, Pinterest, and Twitter.

4. Embedded Content and Third-Party Links

Our platforms may include embedded content (e.g., videos, articles) or links to third-party websites. These external sites may collect data, use cookies, and track your interactions according to their privacy policies.

1. Data Collection Through Ecommerce

When you purchase products from our website, we collect the following information to process your order:

• Name

• Contact information (email, phone number, address)

• Payment details (processed securely through third-party providers like Stripe and PayPal)

• Order history and preferences

2. Account Creation for Moodful and EQ Dictionary

When creating an account on Moodful or the EQ Dictionary, we may collect:

• Name

• Email address

• Login credentials or authentication via Google account

3. Analytics and Advertising Data

We use cookies and similar technologies to:

• Track user behavior and website performance through tools like Google Analytics, Microsoft Clarity, and TikTok Pixel.

• Deliver targeted advertisements via platforms like Facebook, Pinterest, and Twitter.

4. Embedded Content and Third-Party Links

Our platforms may include embedded content (e.g., videos, articles) or links to third-party websites. These external sites may collect data, use cookies, and track your interactions according to their privacy policies.

Managing Your Cookies and Data

You have the right to control cookies. Here’s how you can manage them:

• Browser Settings: Adjust your browser to block or delete cookies. Note that disabling cookies may impact site functionality.

• Cookie Consent Banner: Customize your cookie preferences via our website’s cookie consent tool.

• Opt-Out Options: Use tools like Google Analytics Opt-Out or manage ad preferences via Your Online Choices.

Data We Collect Using Cookies and the Equanima App

Specific Data Collected by the Equanima App

1. Account Information:

   • Name

   • Email address

   • Authentication credentials (e.g., Google account ID if used for login)

2. App Usage Data:

   • Mood entries (text-based or numeric ratings)

   • Journal entries (text submissions)

   • Usage patterns, including time spent on different features

   • Frequency of app access

3. Device Information:

   • Device type (e.g., smartphone, tablet)

   • Operating system (Android/iOS version)

   • App version

4. Location Data:

   • General location (city or region) based on IP address (optional and anonymized)

5. AI Interaction Data:

   • Inputs submitted for AI analysis (e.g., mood descriptions, journaling content)

   • Outputs or insights generated by the AI for personalized recommendations

6. Performance Metrics:

   • Crash reports

   • Error logs

   • Network diagnostics

7. Push Notifications:

   • Preferences for notifications (e.g., reminders for journaling or mood tracking)

8. Optional Data (with Explicit Consent):

   • Surveys or additional feedback (e.g., user satisfaction or app improvement suggestions)

   • Integration data from third-party services (e.g., syncing mood tracking with wearable devices)

How This Data Is Used

• To personalize mood insights and journaling feedback using AI.

• To enhance user experience by tailoring app features and recommendations.

• For analytics to improve app functionality and identify areas for enhancement.

• To ensure the app runs efficiently and address technical issues.

Cookies may collect:

• Device information (e.g., browser type, operating system).

• IP address and geographic location.

• User preferences (e.g., saved login credentials, display settings).

• Ecommerce data (e.g., cart items, purchase history).

• Behavioral data (e.g., pages visited, time spent on site).

Tracking & Data Collection iOS

• Advertising identifiers (e.g., IDFA on iOS)
• App install and engagement data
• Device data (e.g., OS version, model)
• Deep linking parameters
• Events (e.g., onboarding steps, user actions)

• Attribution: to understand which marketing campaigns led to app installs.
• Analytics: to improve user experience and app performance.
• Marketing optimization: to deliver relevant ads or messages.

• Singular
• Google Ads
• Meta (Facebook)
• Firebase (for crash and engagement reporting)

• Subscription plan selected
• Subscription status (active, expired, canceled)
• General analytics data (e.g., location, device type, usage frequency)

• Providing you with access to the correct subscription tier
• Monitoring usage to improve our services
• Ensuring compliance with our Terms of Use

How We Store, Retain, and Protect Your Data

AWS Security for the Equanima App

We leverage AWS (Amazon Web Services) to secure user data with the following measures:

1. Data Encryption:

   • In Transit: Data is encrypted using Transport Layer Security (TLS) protocols to ensure secure transmission between the app, servers, and end-users.

   • At Rest: Data stored in AWS services (e.g., S3, RDS) is encrypted using industry-standard AES-256 encryption.

2. Access Control:

   • Role-Based Access: AWS Identity and Access Management (IAM) allows precise control over who can access specific resources. Only authorized personnel can access app data.

   • Multi-Factor Authentication (MFA): Adds an additional layer of security for access to AWS management consoles and services.

3. Monitoring and Logging:

   • AWS CloudTrail: Tracks and logs all API calls, providing detailed records of who accessed what and when.

   • Amazon CloudWatch: Monitors application metrics and logs for unusual activity or performance issues.

   • GuardDuty: Identifies potential threats and vulnerabilities by analyzing data across AWS environments.

4. Network Security:

   • Virtual Private Cloud (VPC): Isolates app infrastructure to provide a secure, private environment for data storage and processing.

   • Firewall Configuration: AWS Security Groups and Network Access Control Lists (NACLs) act as virtual firewalls to control inbound and outbound traffic.

   • DDoS Protection: AWS Shield protects against distributed denial-of-service (DDoS) attacks.

5. Data Redundancy and Backup:

   • Automated Backups: Data is regularly backed up to ensure recoverability in case of hardware failure or accidental deletion.

   • Replication: Data can be replicated across multiple regions or availability zones to enhance durability and disaster recovery capabilities.

6. Compliance Certifications:

   • AWS complies with numerous security and privacy standards, including:

     • ISO 27001, 27017, and 27018

     • SOC 1, SOC 2, and SOC 3

     • GDPR, CCPA, and HIPAA (when applicable configurations are enabled)

7. Security Updates:

   • AWS regularly updates its infrastructure to address new security vulnerabilities and applies patches promptly to maintain the highest security standards.

8. Additional Features:

   • Encryption Keys: AWS Key Management Service (KMS) allows businesses to create and manage encryption keys for added control over data security.

   • Data Masking: Sensitive data can be masked or anonymized using AWS Glue or similar services before storage.

How This Applies to the Equanima App

• Secure user data during collection, storage, and processing.

• Protect sensitive information such as mood and journaling data.

• Monitor and mitigate risks through advanced logging and analytics tools.

Data Retention Policy

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specific retention periods include:

• Ecommerce Data:

  • Order details and payment records are retained for a period of 7 years to comply with tax and financial regulations.

• Moodful, EQ Dictionary, and Equanima App Accounts:

  • User account information, including preferences and app usage data, is retained for the duration of your account’s activity. Inactive accounts are deleted after 24 months of inactivity, with prior notification.

• Cookies and Analytics Data:

  • Cookies are retained for the duration specified in the browser settings or until deleted by the user. Analytics data is stored for up to 14 months to identify usage trends and improve services.

• Support Requests:

  • Data associated with customer support inquiries is retained for 2 years to address follow-ups and maintain service quality.

How We Protect Your Data

• Data collected via cookies, ecommerce, and our apps (Moodful, EQ Dictionary, and Equanima App) is stored securely on AWS (Amazon Web Services), leveraging industry-standard encryption and security protocols.

• AWS provides robust data protection, including automated backups, access control, and server-side encryption to safeguard personal information.

• Only authorized personnel with specific access rights can manage and interact with stored data, ensuring confidentiality and integrity.

• Regular security audits and vulnerability assessments are conducted to maintain the highest level of protection against potential breaches or data loss.

• App-specific data, such as user preferences and account details, is isolated to enhance privacy and streamline access control mechanisms across platforms.

GDPR, CCPA, and PIPEDA Compliance and Your Rights

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)

If you are a resident of Canada, you are entitled to the following rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

1. Right to Access: You have the right to request access to the personal information we hold about you and receive a copy of this data.

2. Right to Correction: You may request corrections to any inaccurate or incomplete personal information.

3. Right to Withdraw Consent: You can withdraw your consent for us to collect, use, or disclose your personal information at any time, subject to legal or contractual obligations.

4. Right to Know the Purpose: You have the right to know why your data is being collected and how it is being used.

5. Right to Complain: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe we have violated your privacy rights.

How to Exercise Your PIPEDA Rights

To exercise your rights under PIPEDA, you can:

• Contact us via email at support@equanima.io

• Write to us at Teodor Roviralta 35, 08022, Barcelona

We will respond to your request within 30 days in compliance with PIPEDA regulations.

Cross-Border Data Transfers

As we utilize services such as AWS for data storage, your personal information may be transferred to and processed in other jurisdictions. We ensure that these transfers comply with applicable data protection laws and implement safeguards to protect your data.

California Consumer Privacy Act (CCPA)

If you are a California resident, you are entitled to the following rights under the California Consumer Privacy Act (CCPA):

1. Right to Know: You have the right to request details about the categories and specific pieces of personal information we have collected about you, the purposes for which the data is used, and whether we have shared or sold your data.

2. Right to Delete: You can request that we delete the personal information we have collected about you, subject to certain exceptions (e.g., compliance with legal obligations).

3. Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Although Equanima does not sell personal data, we provide this right for transparency.

4. Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, such as denying services or charging different prices.

How to Exercise Your CCPA Rights

To exercise your rights under the CCPA, please contact us via:

• Email: support@equanima.io

• Address: Teodor Roviralta 35, 08022, Barcelona

You can also submit your request through the “Do Not Sell My Personal Information” link available on our website.

We will verify your identity using the information provided in your request and respond within 45 days as required by law.

As a company committed to protecting your privacy, we comply with the General Data Protection Regulation (GDPR) for our users in the European Union (EU) and European Economic Area (EEA). GDPR grants you specific rights regarding your personal data, and we are committed to upholding these rights.

Your GDPR Rights

1. Access: You have the right to request access to the personal data we collect about you and to receive a copy of this information.

2. Rectification: You can request corrections to inaccurate or incomplete personal data.

3. Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purposes it was collected, or where you have withdrawn consent.

4. Restriction of Processing: You can request that we limit how we use your personal data in certain circumstances.

5. Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transferred to another data controller.

6. Objection: You can object to the processing of your personal data for specific purposes, such as direct marketing.

7. Withdrawal of Consent: Where processing is based on your consent, you may withdraw this consent at any time.

8. Lodge a Complaint: If you believe we have violated GDPR, you have the right to lodge a complaint with your local supervisory authority.

Exercising Your Rights

To exercise your GDPR rights, please contact us at support@equanima.io. We will respond to your request within 30 days in accordance with GDPR regulations.

Your Rights

As a user, you have the following rights:

• Access: Request details about the data collected through cookies.

• Erasure: Ask us to delete data collected via cookies, where applicable.

• Consent Withdrawal: Change your cookie preferences at any time.

To exercise these rights, contact us at support@equanima.io.

Updates to This Cookie Policy

We may update this policy periodically to reflect changes in technology, legislation, or our practices. The latest version will always be available on our website with the “Effective Date” noted above.

Contact Us

If you have questions or concerns about our Cookie Policy, please reach out:

• Email: support@equanima.io

• Address: Teodor Roviralta 35, 08022, Barcelona