Privacy Policy

Pranam is a meditation and sleep app published by Aura Himalaya ("Aura Himalaya", "we", "us"). This policy explains what personal data we collect when you use the Pranam mobile app, our website and our developer API, why we collect it, and the choices you have.

For any privacy question, or to exercise the rights described below, write to info@aurahimalaya.org. We are the data controller for the personal data described here.

We only collect what we need to run the service:

• Account data — your name, email address, profile photo, and optionally phone number, language and country. You provide this when you register or edit your profile.
• Sign-in data — when you sign in with Google or Apple we receive only the identity fields those services release to us: a provider user ID, your email address (which may be an Apple private-relay address) and, if you allow it, your display name. We never receive your Google or Apple password.
• Subscription data — your purchase and entitlement status, the product purchased, the store used, renewal and expiry dates. This comes from Apple and Google through our subscription management provider. We do not receive or store your card or payment details.
• Newsletter data — the email address you submit on our website to be notified about the app.
• Usage data — which tracks you play and favourite, play counts, and basic technical logs such as device type, app version, approximate region and IP address used for security and rate limiting.

We do not collect health records, precise location, contacts, photos or microphone data, and we do not knowingly collect data from children.

• To create and maintain your account and keep you signed in across devices.
• To deliver audio content, remember your favourites and sync your library.
• To activate, renew and verify subscriptions and any trial or promotional access.
• To send service emails you need — sign-in links, password resets, purchase and account notices.
• To send launch and marketing emails, only where you asked for them, and always with an unsubscribe link.
• To keep the service secure, prevent abuse, apply rate limits and debug faults.
• To understand aggregate usage so we can improve the catalogue and the app.

• Performance of a contract — running your account, delivering content and managing subscriptions.
• Consent — marketing and newsletter emails, and any optional analytics cookies. You can withdraw consent at any time.
• Legitimate interests — keeping the service secure, preventing fraud and abuse, and improving the product, balanced against your rights.
• Legal obligation — keeping tax, accounting and compliance records where the law requires it.

We do not sell your personal data and we do not share it for cross-context behavioural advertising. We share data only with service providers who process it on our instructions under contract:

• Our cloud hosting, database and authentication provider, which stores account data.
• Apple App Store and Google Play, which process purchases and report entitlement status.
• Our subscription management provider, which reconciles purchases and access levels.
• Our transactional and marketing email provider, which delivers messages you receive from us.
• Our media storage and content delivery provider, which serves the audio files.

We may also disclose data where we are legally required to, or to protect the rights, safety and property of Aura Himalaya, our users or the public. If our business is ever transferred, your data may transfer with it under this policy.

We keep account data for as long as your account is active. If you ask us to delete your account, we remove your profile and associated personal data within 30 days, except where we must keep limited records (for example purchase records) to meet legal or accounting obligations.

Newsletter addresses are kept until you unsubscribe using the link in any email or by writing to info@aurahimalaya.org. Technical logs are kept for a short period for security and troubleshooting.

To request deletion of your account and data, email info@aurahimalaya.org from the address registered to your account.

Data is transmitted over encrypted connections and stored with access controls that limit who inside Aura Himalaya can see it. Passwords are stored only as salted hashes by our authentication provider. No online service can promise perfect security, so please use a strong, unique password and tell us at info@aurahimalaya.org if you suspect a problem with your account.

Pranam is operated from Nepal and our providers may store or process data in other countries, including in the United States and the European Union. Where personal data of users in the EEA or UK is transferred outside those areas, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Pranam is not directed at children. You must be at least 13 years old to create an account, or 16 where your country sets that higher age for consent to data processing. If we learn that we hold data from a child below that age, we delete it. Parents or guardians can contact info@aurahimalaya.org with any concern.

If the GDPR or UK GDPR applies to you, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Have inaccurate or incomplete data corrected.
• Have your data erased (the right to be forgotten).
• Restrict how we process your data in certain circumstances.
• Receive your data in a portable, machine-readable format.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, without affecting processing already carried out.
• Lodge a complaint with your local data protection supervisory authority.

Email info@aurahimalaya.org to exercise any of these rights. We respond within one month and may ask you to confirm your identity first.

In the last 12 months we have collected the following categories of personal information: identifiers (name, email, account ID), commercial information (subscription and purchase status), internet or network activity (plays, favourites, log data) and, if you provide it, geographic country and language preference.

We have not sold personal information and have not shared it for cross-context behavioural advertising, including for any consumer under 16.

As a California resident you have the right to:

• Know what personal information we collect, use and disclose, and why.
• Request deletion of personal information we hold about you.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information — we do neither, so there is nothing to opt out of.
• Limit the use of sensitive personal information — we do not use sensitive personal information for inferring characteristics.
• Not be discriminated against for exercising any of these rights.

Submit a request by emailing info@aurahimalaya.org. An authorised agent may submit a request on your behalf with written permission that we can verify.

Our website uses only the cookies and local storage needed to keep you signed in and to remember basic preferences. We do not run advertising trackers. If we ever add optional analytics, we will ask for your consent first and update this page. The Pranam mobile app does not use advertising identifiers.

We may update this policy as the app evolves. The date at the top always shows when it was last revised, and we will notify registered users by email before any change that materially affects your rights. Continuing to use Pranam after a change means you accept the updated policy.

Questions, requests or complaints about privacy can be sent to info@aurahimalaya.org. We aim to reply within five working days.