1. Introduction

Centro de Ayurveda values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Vashist platform. This policy complies with the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect the following categories of information:

• Personal data: name, email, password (encrypted)
• Health data: Prakriti questionnaire results, dietary preferences, wellness goals
• Usage data: interactions with the AI tutor, routine progress, activity history
• Technical data: IP address, device type, browser, session information

3. How We Use Your Data

We use your data to:

• Provide and maintain our services
• Personalize Ayurvedic recommendations and content
• Communicate with you about your account and updates
• Improve and develop new features on the platform

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including: SSL/TLS encryption for all communications, secure password storage with bcrypt hashing, restricted access to personal data, and regular security monitoring.

5. Cookies and Similar Technologies

We use essential cookies for authentication and platform functionality, session cookies to keep your session active, and local storage for user preferences. You can manage cookie preferences through your browser settings.

6. Third-Party Sharing

We do not sell or share your personal data with third parties for marketing purposes. We may share data with: service providers who help us operate the platform (payment processors, email services), when required by law or to protect our legal rights.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data

8. Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Account data is kept while the account is active; after deletion, it is erased within 30 days.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the registered email or by notice on the platform. We recommend that you review this policy regularly.

10. Contact and DPO

To exercise your rights or for privacy questions, please contact us:

Email: vashist@centrodeayurveda.com
Address: Rua Ernestino Elisiário Antunes, 108 Bicesse. 2645-361 Alcabideche. Portugal