Privacy Policy - Ananta

Ananta AI Wellness Coach Privacy Policy
Last updated: 31 May 2025

Welcome to Ananta, your AI-driven personal wellness coach. This Privacy Policy explains how we collect, use, store, share, and delete the information you provide when using Ananta. By accessing or using Ananta, you agree to the practices described herein.

1. Data Collection
Ananta gathers any information you voluntarily share during your interactions. This may include (but is not limited to):
- Personal Identifiers: Name (or pseudonym), email address, date of birth, gender (optional).
- Health & Medical Data: Medical history (diagnoses, symptoms, laboratory results), current medications or supplements, allergies, past treatments, lifestyle habits (sleep, exercise, diet), dosha-related notes, and any other clinical details you disclose.
- Chat Transcripts: All messages exchanged with Ananta, including text entries, follow-up questions, and wellness assessments.
- Usage & Device Data: IP address, browser type, device model, session timestamps, and anonymised usage statistics (e.g. which features you access most).

You may choose to remain anonymous—using a pseudonym rather than your real name if you prefer. However, even under a pseudonym, all data you provide is collected and stored.

2. Data Ownership & Who Has Access
1. Data Owner:
- Rasayana Limited is the legal entity that owns and controls all data collected by Ananta.
2. Primary Data Controller:
- Anirudh (Founder of Rasayana Limited): As the founder, Anirudh is the sole individual with direct access to view the logs and chat transcripts.
3. Platform Logs (Dify App):
- The Dify platform (our service provider) automatically records logs of every user input and AI response. These logs are encrypted and accessible only to Dify’s authorised technical staff under strict confidentiality, for performance monitoring and troubleshooting.

No other Rasayana Limited employees, contractors, or third parties have access to your detailed health data or personal information. Under no circumstances are your full chat transcripts, personal identifiers, or medical details shared, sold, or rented to anyone outside Rasayana Limited and Dify’s operational team.

3. How We Use Your Data
All information you provide is used solely to:
- Provide Personalised Health Advice: Ananta delivers tailored recommendations—Ayurvedic guidelines, lifestyle suggestions, dietary plans, breathing exercises, yoga routines, and supportive counselling prompts—based entirely on the unique data you share.
- Maintain & Troubleshoot the Service: Dify’s encrypted logs assist in monitoring system health and resolving technical issues.
- Enforce Age Restrictions: Confirm that all users are aged 18 or older before granting full access.

We Do Not Use Your Data To:
- Train or improve the core AI wellness model (Ananta runs as a static, pre-trained agent).
- Develop marketing or advertising strategies.
- Share any identifiable details (even in aggregate) with external companies or partners.

4. Data Storage & Security
- Encryption: All chat transcripts and personal data are encrypted in transit (TLS/HTTPS) and at rest (AES-256) by Dify.
- Access Controls: Only Anirudh (as founder and authorised representative of Rasayana Limited) and Dify’s authorised operations staff can access logs; no additional employees, contractors, or third parties have access.
- Secure Servers: Dify stores user data on secure cloud servers located in compliance with industry best practice, including ISO 27001.
- Accountability: Regular security audits and strict access logs ensure all access to your data is recorded and monitored.

5. Data Retention & Deletion
- Retention Period: There is no fixed retention period. Your data remains stored indefinitely until you request deletion.
- Your Rights:
  1. Right to Delete: At any time, you may ask us to permanently delete all data associated with your account (personal identifiers, chat history, health records).
  2. How to Request Deletion: Please email info@anandaclinic.co.nz or info@ayurvedastore.co.nz with the subject line “Delete My Ananta Data,” including the email address or pseudonym you used. We will process your request within 14 business days.
  3. Confirmation: Once your data is deleted, we will send a confirmation email. After deletion, your past chat history and records cannot be recovered.
- No Automatic Deletion: Your data will not be purged automatically; you must request removal. Until then, it remains stored securely.

6. Age Restriction
Ananta is strictly for users aged 18 and older. By using Ananta, you confirm you are 18 or above. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected data from someone under 18, contact us immediately to request deletion.

7. Cookies & Tracking
- Session Cookies: The web interface may use session cookies strictly for authentication and to maintain your active session.
- No Third-Party Tracking: We do not embed third-party trackers or analytics cookies.
- Disabling Cookies: You can disable cookies in your browser settings, but certain functionality—like staying logged in—may be affected.

8. User Privacy & Confidentiality
- All interactions with Ananta are non-private: Because Anirudh (Founder of Rasayana Limited) and Dify’s authorised technical staff may view chat transcripts and health data, please refrain from sharing information you consider extremely sensitive beyond what you are comfortable storing.
- No External Sharing: We never disclose your identifying or health data to advertisers, partners, or public forums.
- Pseudonymity: You may use a pseudonym to minimise personal identification. However, any data you share—regardless of name—is collected, stored, and accessible as detailed above.

9. Changes to This Privacy Policy
We may update this policy periodically. When changes are significant, we will post a revised “Last updated” date at the top. Your continued use of Ananta after modifications indicates your acceptance of the updated policy.

10. Contact Us
If you have questions, concerns, or requests related to your privacy or data—such as deleting your account—please contact:
- Email: info@anandaclinic.co.nz or info@ayurvedastore.co.nz
- Data Owner: Rasayana Limited

We are committed to protecting your privacy and supporting your journey to sustainable wellness.

By using Ananta, you acknowledge that you have read, understood, and agree to this Privacy Policy.