Privacy policy
Last update: Oct 16, 2026
This Privacy Policy explains how Jivika Mindfulness Inc. (“Jivika,” “we,” “us,” or “our”) accesses, collects, uses, stores, shares, and deletes information when you use any mobile application or related service operated by Jivika Mindfulness Inc. (collectively, the “Services”), contact us, or otherwise interact with us.
This policy covers personal information and sensitive health and wellness information. The information processed depends on the application, the features you use, the information you provide, and the permissions you grant. Not every application offers every feature or collects every category of information described below.
Additional information about regional privacy rights appears in the relevant sections of this policy.
If changes to this Privacy Policy are made, we will update the date at the top of the policy and, in some cases, we may provide you with additional notice (e.g., via a statement to our website or sending you a notification). Please revisit this page or contact us via our website or mobile application to stay informed about our information practices and the choices available to you.
Collection of information
Personal information:
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services. The personal information we collect may include the following:
Names
Email addresses
Usernames
Account password used to authenticate your account.
Phone number, if that was provided
Health and wellness information:
Depending on the application and features you use, we collect or process the following health and wellness information:
Self-reported stress information: Stress ratings and the underlying causes of stress that you enter and submit through a stress-reporting feature.
Heart rate variability information: In applications that integrate with Google Health Connect, and with your permission, we access HeartRateVariabilityRmssd records. These records contain heart rate variability (“HRV”) measurements expressed as RMSSD in milliseconds, together with their recording times. Applications providing daily HRV features read available measurements daily.
Historical HRV information: With the relevant permissions, applications offering historical HRV trends access earlier measurements, including records created before you connected the application to Health Connect.
Derived wellness information: Applications offering HRV-based wellness features process HRV measurements to generate stress-related wellness estimates.
Self-reported information comes directly from you. HRV information comes from records made available through Health Connect by compatible source applications or devices.
We treat these records and estimates as sensitive health information. HRV information accessed for the features described here is transmitted to our AWS-hosted infrastructure for processing and storage.
Application Data:
If you use our application, we may request to send you push notifications regarding your account or certain features of the application, e.g., congratulating you with the latest achievements and/or reminding you to practice micro-habit at your selected time(s). If you wish to opt out from receiving these types of communications, you may turn them off at setup or anytime later on via your account settings. In order to push timely user-opted notifications, we will access the local time setup on your phone.
Use of information
We use account, contact, and general application-usage information to provide, improve, and administer our Services, communicate with you, protect the Services, and comply with applicable law. Our uses of health and wellness information are described separately below and are subject to the access and disclosure restrictions in Section 4.
User account creation and authentication based on your email address and name, matched against what was provided by your organization’s buyer(s) of our Services and to keep your account in working order.
Provide, maintain and improve our Services, e.g., to identify and repair errors, and develop new products and services.
Monitor and analyze trends, usage, and activities in related to our Services.
Personalize your experience using our Services through the usage data collected, e.g., common times of notifications, popular micro-habits, popular categories, etc.
Detect, investigate and prevent fraudulent users and other illegal activities and protect the rights and property of Jivika and others, including to enforce our agreements and policies. If you feel your usage was declined in error, please contact us for assistance at ayman@mindfuljivika.com.
usage analytics - e.g., popular micro-habits and categories, reported issues, etc., that would help us improve your experience.Support our accounting, legal and other compliance activities.
Respond to user inquiries/offer support to users.
Send administrative information to you, e.g., upgrades or details of our products and services, changes to our terms and policies, and so on.
To request your feedback about your use of our Services.
How we use health and wellness information
Depending on the features available in the application you use, we process health and wellness information for the following purposes:
Private stress reporting: We use your self-reported stress ratings and underlying causes to provide the stress-reporting feature and make your reports available for you to view.
Stress-related wellness estimates: We use daily HRV measurements as an input to estimate possible changes in stress-related wellness and support related microhabit recommendations.
HRV trend visualization: We use current and historical HRV measurements to display changes over time. Applications offering this feature may provide daily, monthly, and annual views, depending on the measurements available.
Access to earlier trends: Historical HRV access allows supported graphs to include measurements recorded before you began using the application, including records outside Health Connect’s default historical access period when you grant the necessary permission.
HRV-based estimates provide general wellness information. They are not medical diagnoses or definitive measurements of psychological stress.
For the stress-reporting feature described in this policy, we do not use your self-reported stress ratings or their underlying causes with artificial intelligence, including for AI model training or AI-generated responses.
Legal basis of processing
When we process your personal information we will only do so in the following situations:
Necessary to perform our contractual responsibilities with you, e.g., setting you up as a user and providing the products or services you have requested.
To communicate with you about changes to our Services, to help secure and improve our Services and to analyze use of our Services.
To comply with our legal obligations; and
When we have your consent to do so.
Health information and permissions
Applications that integrate with Health Connect access HRV information only after you grant the relevant permissions to that application. Access to records outside Health Connect’s default historical access period requires the additional historical-access permission.
We limit access to the health information needed for the features described in this policy. Where applicable law requires explicit consent or another specific legal condition for processing health information, we obtain that consent or meet that condition before processing.
General references to other legal grounds in this policy do not override Health Connect permission requirements.
4. Sharing of information
Service providers
We use service providers to perform functions on our behalf. The information provided to each provider depends on the function it performs.
Amazon Web Services (“AWS”) provides hosting and storage infrastructure for the health-information features described in this policy. Information stored and processed through this infrastructure includes self-reported stress information, imported HRV measurements, and associated wellness estimates.
Other providers performing functions such as payment processing or fraud prevention receive information relevant to those functions. Their involvement does not mean that they receive your health information.
Access to health information
Your individual health reports are available for you to view through your account in the relevant application. We do not make your individual stress reports, HRV records, or associated wellness estimates available to other users, employers, or sponsoring organizations.
Authorized administrators can access a version of health information with identifying information removed. Administrative access is restricted to authorized personnel.
Information that remains linked or reasonably linkable to your account continues to be treated as sensitive personal information, even when identifying information is removed from an administrator’s view.
Other disclosures
We may disclose information where required by applicable law or valid legal process, where lawfully necessary to protect rights or safety, or at your specific direction.
Information may also be transferred in connection with a merger, acquisition, reorganization, or sale of our business, subject to applicable law and required notice. Any transfer of health information remains subject to the restrictions applicable to that information.
We do not sell health information. Health Connect information is not used or disclosed for advertising, credit decisions, insurance eligibility, or employment decisions.
Data retention
Retention while you use the Services
We retain personal information only for as long as needed to provide the Services and fulfill the purposes described in this policy.
For applications offering health-information features, we retain your stress reports, imported HRV measurements, and associated wellness estimates while the relevant account remains active unless you request their deletion sooner.
Deletion from active systems
You may request deletion of your health information without deleting your account. Submit your request through the application’s User Center, where available, or email ayman@mindfuljivika.com.
We delete the information covered by your request from our active systems within 24 hours of receiving your deletion request.
When you request account deletion, we delete the relevant account and its associated personal information, including any stress reports, imported HRV measurements, and associated wellness estimates, from our active systems within 24 hours of receiving your request, subject to the limited legal-retention exception below.
We may need to verify that a request comes from the account holder or an authorized representative. If verification information is needed, we will contact you promptly.
Requests covering multiple applications
Please identify the application, account, or information you want deleted. You may also request deletion of all personal information we hold about you across our applications and Services. We may request information reasonably necessary to locate the relevant accounts and verify your authority.
Deletion from backups
Residual copies may remain in restricted backups used for disaster recovery. These copies are deleted within 30 days of receiving the applicable deletion request.
During this period, backup copies are not used for routine operations, analytics, or other business purposes.
If a backup is restored before its scheduled deletion, we reapply previously received deletion requests before making the restored information available for normal use.
Limited legal retention
If applicable law requires us to retain particular information longer, we retain only the information required, restrict its use to that legal purpose, and delete it when the obligation ends. Where legally permitted, we explain any exception affecting your deletion request.
Records held by Health Connect and source applications
Deleting information held by Jivika does not delete the original records held by Health Connect or the applications that supplied those records. You can manage those records through Health Connect or the relevant source application.
Data safety
We maintain technical and organizational safeguards designed to protect personal information processed through our Services, including self-reported stress information, HRV measurements, and derived wellness estimates.
These safeguards include encryption during transmission and storage, restricted access to our systems, and controls limiting administrator access to health information with identifying information removed.
Where we use AWS infrastructure for hosting and storage, we remain responsible for configuring and managing the protections applicable to our Services.
No transmission or storage system can guarantee absolute security. If you believe your account or information has been accessed without authorization, contact ayman@mindfuljivika.com and identify the affected application or service.
No data collection from minors
We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at mukerjitapan@gmail.com.
Your privacy rights
In some regions (like Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (vi) if applicable, to data portability; and (vii) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us at ayman@mindfuljivika.com.
We will consider and act upon any request in accordance with applicable data protection laws.
Withdrawing your consent:
If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us at ayman@mindfuljivika.com.
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Health Connect permissions and deletion choices
For applications that integrate with Health Connect, you may revoke the relevant application’s permission to access HRV or historical health information through Health Connect’s app-permission settings. Revoking permission stops further access under that permission.
Permissions are managed for each application. If you have connected more than one Jivika application, review the permissions for each application you wish to disconnect.
Revoking permission does not automatically delete information previously imported into our Services. To delete that information, submit a request through the relevant application’s User Center, where available, or contact ayman@mindfuljivika.com. The deletion periods in Section 5 apply.
To stop future Health Connect imports as well as delete information already held by Jivika, revoke the relevant permissions and submit a deletion request.
Declining or revoking a permission limits features that depend on the information covered by that permission.
Account information
You may request access to or correction of your account information by contacting ayman@mindfuljivika.com. Please identify the application or service associated with your request.
You may request account deletion through the relevant application’s User Center, where available, or by emailing ayman@mindfuljivika.com. Account deletion includes personal information associated with that account, including any stress reports, imported HRV measurements, and derived wellness estimates.
You may also request deletion of health information without deleting your account, or request deletion across multiple Jivika applications and Services.
Deletion requests are handled according to Section 5: within 24 hours for active systems and within 30 days for residual backup copies, subject to the limited legal-retention exception described there.
Account deletion is permanent deletion, rather than temporary account deactivation.
Information for California residents
California Civil Code Section 1798.83, also known as the "Shine The Light" law permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will remove the relevant content from public display. Removal from public display and deletion of an account or associated personal information are separate requests. For requests to delete personal information held by Jivika, the active-system and backup-deletion periods in Section 5 apply, subject to the legal-retention exception described there.
CCPA Privacy Notice
This section applies only to California residents. Under the California Consumer Privacy Act (CCPA), you have the rights listed below. The California Code of Regulations defines "residents" as:
(1) every individual who is in the State of California for other than a temporary or transitory purpose and
(2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.
All other individuals are defined as "non-residents."
If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding your personal information. Your rights with respect to your personal data:
Right to request deletion of the data — Request to delete
You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities.
Right to be informed — Request to know
Depending on the circumstances, you have a right to know:
whether we collect and use your personal information;
the categories of personal information that we collect;
the purposes for which the collected personal information is used;
whether we sell or share personal information to third parties;
the categories of personal information that we sold, shared, or disclosed for a business purpose;
the categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose;
the business or commercial purpose for collecting, selling, or sharing personal information; and
the specific pieces of personal information we collected about you.
Information that remains linked or reasonably linkable to an individual is handled as personal information under this policy, including for deletion requests. Where applicable law permits different treatment of information that is no longer reasonably identifiable, we apply that treatment only when the information meets the applicable legal standard. Removing identifying information from an administrator’s view alone does not exempt account-linked information from deletion.
Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights
We will not discriminate against you if you exercise your privacy rights.
Right to Limit Use and Disclosure of Sensitive Personal Information
Depending on the application and features you use, we process sensitive health information, including self-reported stress ratings and their underlying causes, HRV measurements obtained through Health Connect, and wellness estimates derived from HRV. Sections 1 through 4 describe the sources, purposes, storage, and disclosures of this information.
Where applicable law provides a right to limit the use or disclosure of sensitive personal information, you may exercise that right by contacting ayman@mindfuljivika.com.
Verification process
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.
We will only use personal information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.
Other privacy rights
You may object to the processing of your personal information.
You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information.
You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.
To exercise these rights, you can contact us by email at ayman@mindfuljivika.com. If you have a complaint about how we handle your data, we would like to hear from you.
Information for Colorado residents
This section applies only to Colorado residents. Under the Colorado Privacy Act (CPA), you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
To submit a request to exercise these rights described above, please email ayman@mindfuljivika.com.
If we decline to take action regarding your request and you wish to appeal our decision, please email us at ayman@mindfuljivika.com. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
Information for Connecticut residents
This section applies only to Connecticut residents. Under the Connecticut Data Privacy Act (CTDPA), you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
To submit a request to exercise these rights described above, please email ayman@mindfuljivika.com.
If we decline to take action regarding your request and you wish to appeal our decision, please email us at ayman@mindfuljivika.com. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
Information for Virginia residents
Under the Virginia Consumer Data Protection Act (VCDPA):
"Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.
"Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information.
"Sale of personal data" means the exchange of personal data for monetary consideration.
If this definition of "consumer" applies to you, we must adhere to certain rights and obligations regarding your personal data.
Your rights with respect to your personal data
Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
Exercise your rights provided under the Virginia VCDPA
You may contact us by email at ayman@mindfuljivika.com.
If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.
Verification process
We may request that you provide additional information reasonably necessary to verify you and your consumer's request. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request.
Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.
Right to appeal
If we decline to take action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at ayman@mindfuljivika.com. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint.
Information for Canada residents
We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:
If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
For investigations and fraud detection and prevention.
For business transactions provided certain conditions are met.
If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim.
If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province.
If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records.
If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced.
If the collection is solely for journalistic, artistic, or literary purposes.
If the information is publicly available and is specified by the regulations.
Contact us
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO), Tapan Mukerji, by email at mukerjitapan@gmail.com, by phone at +91 8582938140, or contact us by post at:
Jivika Mindfulness Inc.
Tapan Mukerji
Sector 2, BG-83, Salt Lake City
Kolkata, West Bengal 700091
India
If you have any further questions or comments, you may also contact us by post at the following corporate address:
Jivika Mindfulness Inc.
10 West 15th Street, #820
New York, NY 10011
United States
Phone: 1-917-400-7144
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please email ayman@mindfuljivika.com.
Jivika micro-habits are proprietary in nature and cannot be replicated for commercial purposes.