Privacy Policy

INTRODUCTION

CoRegulate is a mobile application (the "App") operated by SASU PARRALLELE, which is having its registered address at LOT LE VERGER DE BOUCHOU 429 AV DU LYCEE DE LA COUDOULIERE SIX-FOURS-LES-PLAGES 83140, France.

CoRegulate (hereinafter – "We", "Us" or "Our") is committed to protecting the privacy and personal data of its users (hereinafter – "You" or "User").

This Privacy Policy explains how We collect, use, store, and share personal data when You use the CoRegulate app. By installing or using the App, You agree to this Policy.

IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT USE THE APP.

This Policy applies to users in the United States. For users in other regions, data will be handled in compliance with applicable local laws.

CHANGES TO OUR PRIVACY POLICY

We may update this Policy from time to time to reflect legal, technical, or business changes. If updates are significant, We will notify You through the App or other appropriate means. Continued use of the App after changes take effect means You accept the updated Policy.

CONTACT DETAILS

If You have any questions about how Your data is handled or want to exercise Your privacy rights, please contact our Data Protection Officer (DPO): support@coreglt.com

We typically respond within 30 calendar days. Complex requests may take longer, and we'll keep you informed if that's the case.

TYPE OF INFORMATION COLLECTED

Depending on how You use the App, We may collect:

• Personal and Contact Information: Name, email address (during onboarding).
• Device Data: IP address, device type, OS, app version.
• Usage Data: App navigation events, meditation session usage (e.g., 15- or 30-minute plays), interaction timestamps.
• Feedback and Communication: Messages or survey responses, if You provide them.

We do not collect sensitive personal data (e.g. racial, religious, or health-related data).

HOW WE COLLECT YOUR DATA

• Directly from You: When You sign up, use features, or contact support.
• Automatically: Through the App's analytics and performance tracking tools (Amplitude).

WHY WE USE YOUR DATA

We use your data to:

Provide Core Services

• Enable onboarding and user profile setup
• Track meditation usage and session length
• Ensure stable playback of meditation audio

Improve the App

• Analyze feature usage (e.g., meditation length preferences)
• Fix bugs and improve design or functionality

Communicate with You

• Send support responses or app updates
• Notify You of new features or meditation content

Comply with Legal Obligations

• Prevent fraud or misuse
• Satisfy legal or regulatory requirements

With Your consent, we may also send optional wellness-related updates or recommendations.

SHARING YOUR PERSONAL DATA

We may share Your personal data with:

• Analytics providers
• Crash-reporting services
• Customer support tools
• Payment processors

We do not sell personal data. Shared data is strictly limited to what is needed for providing or improving the App.

INTERNATIONAL TRANSFERS

We may process Your data outside of your country. In such cases, we take necessary precautions including:

• Using contractual safeguards (e.g., Standard Contractual Clauses)
• Relying on Your explicit consent when required

RETAINING YOUR PERSONAL DATA

We keep your personal data for as long as You use the App.

If You delete your account, We will erase most of your data unless We are legally required to retain it (e.g., for audit or compliance purposes). In such cases, the data is retained only for the minimum period required.

YOUR RIGHTS UNDER APPLICABLE DATA PROTECTION LEGISLATION

You have the right to:

• Access and review the data We hold about You
• Correct inaccurate data
• Request deletion of Your data
• Object to data processing in certain cases
• Withdraw consent for optional data uses
• Lodge a complaint with a data protection authority

To exercise any of these rights, email support@coreglt.com. We may ask for proof of identity to protect Your account.

CHILDREN'S PRIVACY

We do not knowingly collect data from minors. If You believe We have collected data from a minor, please contact us and We will delete it promptly.

DATA SECURITY MEASURES

We understand the importance of data security measures and techniques and strive to ensure that Your data is safe with Us. We have put in place several measures to protect Your data from unauthorized access to and alteration as well disclosure and destruction of information.

CALIFORNIA SUPPLEMENTAL PRIVACY NOTICE

We do not "sell" personal information as defined under the California Consumer Privacy Act (CCPA). This means we do not sell, rent, or otherwise disclose your personal information in exchange for money or any other value. In addition to the rights outlined in our Privacy Policy, California law provides California residents with the following rights:

Notice

You have the right to be informed of the categories of personal information we collect and the purposes for which it is used at or before the point of collection.

Right to Non-Discrimination

The CCPA prohibits discrimination against California residents for exercising their rights under the CCPA. This means we cannot deny you goods or services, provide a different level of service, charge different prices, or impose penalties for exercising your CCPA rights, unless such actions are reasonably related to the value provided to the business by your data.

Submitting Requests

To exercise your rights, you may submit a request by emailing us at support@coreglt.com. Please include your first and last name and the email address associated with your account. If necessary, we may request additional details to verify your identity. We will respond to verifiable requests from California consumers in accordance with the law.

California Shine the Light Law

Under California's Shine the Light law, California residents who provide us with personal information may request and obtain information about the personal information shared with third parties for their direct marketing purposes during the preceding calendar year. We do not share your personal information for direct marketing purposes.

ACCESS CONTROL MECHANISMS AND DATA PROTECTION

To prevent unauthorized access and data breaches, we implement strict access control mechanisms and role-based distribution of responsibilities. The key roles and their respective access levels are defined as follows:

Administrators

Have full access to all systems and data. They are responsible for managing user permissions, system configurations, and overall security measures.

Technical Support

Limited access to perform specific tasks such as troubleshooting and user support. They do not have access to sensitive personal data unless required for resolving specific issues.

Customer Service Representatives

Access to user data necessary for providing support and resolving queries. They do not have administrative privileges or access to system configurations.

BREACH NOTIFICATION

We are committed to notifying the relevant supervisory authority of any data breaches within 72 hours of becoming aware of the incident. If the breach poses a significant risk to the affected individuals, we will also notify those individuals promptly.

APPLE STANDARD END USER LICENSE AGREEMENT (EULA)

If you download or use Painta via the Apple App Store, your use of the App is also subject to Apple's Standard End User License Agreement (EULA), available at: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/