Serenize

Privacy Policy

Effective date: 5 October 2026 · Last updated: 5 October 2026

This Privacy Policy explains how Serenize collects, uses, stores, shares and protects personal data when you use serenize.app, the Serenize member application, public program pages, early-access or beta features, and any future paid Serenize services. It also explains the choices and rights available to you.

1. Who we are

Serenize is currently operated as a pre-incorporation project in India through serenize.app. For privacy, account and legal communications, contact serenize.ai@gmail.com. Before an unrestricted public or paid launch, this section will be updated with the legal name and business or registered address of the operator. If Serenize later operates through a registered legal entity, that entity will become the responsible operator and this Policy will be updated accordingly.

2. Who may use Serenize

Serenize is intended for adults aged 18 years and above. We do not knowingly offer accounts to children. If we learn that a person under 18 has created an account, we may suspend or delete the account and associated personal data, subject to applicable law.

3. Personal data we collect

Depending on how you use Serenize, we may collect the following categories of personal data:

• Account and identity data: name, email address, account identifier, password hash, account role, account status, and email verification status.
• Google Sign-In data: identity information provided by Google for authentication, such as your email address, Google account identifier and, where provided, basic profile information.
• Preferences and settings: theme, audio, haptics, reminder and notification preferences, and similar account settings.
• Program and activity data: programs joined, active program, days or missions started and completed, progress, resume points, utility-tool usage, saved field rules, completion history and related activity.
• Responses you choose to provide: reflections, scenario answers, real-world deployment entries, feedback, support messages and other information you intentionally submit.
• Technical and security data: IP address, browser or device information, timestamps, sign-in and security events, application logs, error information and similar diagnostic data.
• Administrator activity, where applicable: administrative actions, publishing activity and other audit information associated with an administrator account.
• Payment and transaction data, if paid services are introduced: purchase status, product purchased, amount, currency, transaction reference and related billing metadata. Full card, UPI or other payment credentials will normally be processed by the payment provider rather than stored by Serenize.

Serenize is designed as a self-development and wellbeing service, not as a medical-record system. Please avoid entering unnecessary highly sensitive information, such as medical records, government identification numbers, financial account credentials or other information that is not needed to use a Serenize feature.

4. Google Sign-In

If you choose Google Sign-In, Serenize receives the Google identity information required to authenticate you and create or link your Serenize account, such as your verified email address, Google account identifier and any basic profile information that Google provides to the sign-in flow. We use that information only for authentication, account creation or linking, account security and related service communications. Serenize does not request access to your Gmail messages, Google Drive files, Google Contacts, Google Calendar or other Google account content unless a future feature clearly asks for separate permission. We do not store your Google password. We store only the identity information needed for the Serenize account and do not sell Google user data or share it for advertising. Any disclosure to service providers is limited to operating and securing Serenize as described in this Policy. A new Google user must complete Serenize's signup and consent step before a Serenize account is created. If our use of Google user data changes, this Policy will be updated before that use begins.

5. How we use personal data

We use personal data to:

• create, authenticate, secure and manage your account;
• provide programs, missions, tools, progress tracking, saved responses and other Serenize features;
• remember your preferences and allow you to resume your experience;
• send essential service communications, including email verification, password reset and security-related notices;
• respond to support requests and feedback;
• use aggregated or non-content usage information, voluntarily submitted feedback and technical information for quality assurance and service improvement;
• detect, investigate and prevent abuse, fraud, unauthorized access and technical failures;
• monitor reliability, diagnose errors and maintain backups and recovery capability;
• administer paid services if and when they are introduced; and
• comply with applicable law, lawful requests and enforceable legal obligations.

We do not sell your personal data. Private reflections, scenario answers and similar personal-response text are used only to provide the Serenize features you choose to use, keep those responses available to you, secure the service and perform necessary backup or recovery operations. We do not use the text of private reflections or scenario answers for advertising, AI-model training, routine product analytics or routine human review. Voluntarily submitted product feedback may be used to improve Serenize. If Serenize introduces advertising, AI training using user content, or any materially different data use in the future, this Policy will be updated and any consent required by law will be obtained before that use begins.

6. Consent and lawful processing

Where applicable law requires consent, we seek consent through a clear affirmative action after presenting a concise Privacy Notice describing the categories of personal data involved, the purposes for which they are used and how to exercise your choices. We process personal data only for the stated purpose or another purpose permitted by applicable law. You may withdraw consent for account-related processing through the Privacy & Legal area in Settings by closing your account, or by contacting serenize.ai@gmail.com. Withdrawal does not affect processing that was lawful before withdrawal. If you withdraw consent for personal data that is necessary to operate your Serenize account, Serenize will no longer be able to provide that account service.

7. When we share personal data

We share personal data only as reasonably necessary to operate Serenize, protect users, comply with law or complete a business transition. Service providers may include:

• Cloudflare for domain, website delivery and related infrastructure;
• DigitalOcean for application hosting, database hosting, monitoring and infrastructure backups;
• Bunny for media delivery and private backup storage;
• Resend for service emails;
• Google for Google Sign-In;
• Sentry for application error reporting and diagnostics;
• a payment provider if paid features are introduced; and
• professional advisers, authorities or other parties where disclosure is required or permitted by law.

These providers process information under their own service terms and privacy commitments. We do not authorize service providers to use Serenize personal data for unrelated purposes.

8. International processing and storage

Serenize and its service providers may process or store information in India and in other countries where the relevant infrastructure or service provider operates. Where cross-border processing occurs, we take reasonable steps to use providers and safeguards appropriate to the nature of the information and applicable law.

9. Data security

We use reasonable technical and organizational safeguards appropriate to the service, including HTTPS, access controls, hashed passwords, environment separation, protected media links, restricted administrative access, monitoring and backup procedures. No online service can guarantee absolute security, and users should protect their passwords and devices.

10. Data retention

We retain personal data for as long as reasonably necessary to provide Serenize, maintain security, meet legal obligations and resolve disputes. When you close your account, personal data associated with the active account is deleted or removed from active systems through the service's deletion process, subject to limited retention in backups, security records or records that must be kept by law. Routine database backups may retain deleted account data for up to approximately 30 days before normal rotation removes those copies. Operational logs are retained for limited periods and may contain technical or security information rather than full account content.

If paid services are introduced, transaction and tax records may need to be retained for longer periods where required by law.

11. Your choices and rights

Depending on applicable law and the status of relevant legal provisions, you may have rights to access information about your personal data, correct or update it, request deletion, withdraw consent, raise a grievance, nominate another person where applicable, or exercise other statutory rights. Serenize provides account-level controls for certain profile information and account deletion, and the Privacy & Legal area in Settings provides ongoing access to the Privacy Policy, Terms and privacy contact information.

To make a privacy request, withdraw consent, raise a grievance or ask a question about your personal data, use the Privacy & Legal area in Settings where available or email serenize.ai@gmail.com. We may need to verify your identity before acting on a request. Where applicable, you may also have the right to approach the Data Protection Board of India or another competent authority.

12. Cookies, local storage and similar technologies

Serenize may use browser local storage, authentication tokens and similar essential technologies to keep you signed in, remember settings, maintain security and provide the service. We do not currently use third-party advertising cookies. If non-essential analytics, advertising or similar tracking is introduced, appropriate disclosures and choices will be added.

13. Beta, early access and future paid services

During beta or early access, some Serenize features may be free, experimental or subject to change. The same privacy principles apply to beta users and later users. If Serenize introduces paid programs, subscriptions, mobile applications, new categories of personal data, marketing communications, non-essential analytics or materially different processing, this Policy and the relevant Privacy Notice will be updated before those changes apply. Where a new purpose requires consent, consent will be requested separately rather than assumed from an earlier account signup.

14. Changes to this Privacy Policy

We may update this Privacy Policy as Serenize evolves or legal requirements change. The updated version will show a new Last updated date. If a change materially affects how we use personal data, we will provide an appropriate notice and obtain consent where required by law.

15. Contact and grievance

For privacy questions, requests, grievances or concerns, contact: serenize.ai@gmail.com

Website: https://serenize.app