Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how Sensa ("Sensa", "we", "us" or "our") collects, uses, shares and protects your information when you use the Sensa mobile application and the website at projectsensa.com (together, the "Service"). We are committed to protecting your privacy and handling your personal data in an open and transparent manner in accordance with applicable data protection laws, including the EU/UK General Data Protection Regulation ("GDPR") and United States privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA").

1. Who is responsible for your data

Sensa is the controller responsible for your personal data. If you have any questions about this policy or wish to exercise your rights, contact us at [email protected].

2. Information we collect

We collect the following categories of information:

• Account information. When you sign up or sign in (including via Google Sign-In), we collect your name, email address and a unique account identifier.
• Profile & preferences. Information you choose to provide, such as your preferred language and meditation settings.
• Usage data. Information about how you interact with the Service, such as sessions played, features used, app version, device type, operating system and general diagnostics.
• Support communications. Messages you send us through contact or account-deletion forms, including your name, email and message.
• Technical identifiers. IP address, device identifiers and similar technical information collected automatically for security and analytics.

We do not knowingly collect special category (sensitive) data, and we do not use the Service to make automated decisions that produce legal or similarly significant effects about you.

3. How we use your information

We use your information to:

• Provide, operate and maintain the Service, including your account;
• Deliver meditation content and remember your preferences;
• Respond to your requests, questions and support enquiries;
• Improve, personalise and develop new features;
• Monitor usage, ensure security and prevent fraud or abuse;
• Comply with legal obligations and enforce our terms.

4. Legal bases for processing (EU/UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

• Contract — to provide the Service you request and manage your account;
• Legitimate interests — to secure, analyse and improve the Service, provided these are not overridden by your rights;
• Consent — where required, for example for optional analytics or marketing; you may withdraw consent at any time;
• Legal obligation — where processing is necessary to comply with the law.

5. How we share your information

We do not sell your personal information. We share data only in limited circumstances:

• Service providers. Trusted third parties who process data on our behalf under contract, such as cloud hosting, authentication (e.g. Google), and analytics providers.
• Legal & safety. Where required by law, regulation, legal process, or to protect the rights, property or safety of Sensa, our users or the public.
• Business transfers. In connection with a merger, acquisition or sale of assets, subject to this policy.

6. International data transfers

Your information may be processed in countries other than your own, including the United States. Where we transfer personal data out of the EEA/UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected.

7. Data retention

We keep personal data only for as long as necessary to provide the Service and for legitimate business or legal purposes. When you delete your account, we permanently delete or anonymise your personal data within 30 days, except where we are required to retain it to comply with legal obligations.

8. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability — receive your data in a portable format;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with a supervisory authority.

EU/UK residents (GDPR). You may exercise the rights above and complain to your local data protection authority.

California residents (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. You will not be discriminated against for exercising your rights.

Other US states. Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah and others) have similar rights to access, correct, delete and opt out.

To exercise any of these rights, contact us at [email protected] or use our account deletion form. We will verify and respond to your request within the timeframe required by law.

9. Children's privacy

The Service is not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Cookies & similar technologies

Our website may use cookies and similar technologies for essential functionality and, where permitted, analytics. You can control cookies through your browser settings. The mobile app uses local storage on your device to remember your preferences.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated through the Service where appropriate.

13. Contact us

If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us at [email protected].

This document is provided for general informational purposes and does not constitute legal advice. Please consult a qualified professional to ensure compliance with all laws applicable to your business.