Your Privacy Is Our Priority: Serene Space AI is committed to protecting your personal information and coaching session data. While we are a coaching service (not medical treatment), we maintain healthcare-grade privacy practices and medical-grade encryption standards (AES-256 + TLS 1.3) and comply with state health data privacy laws. We never sell your data to third parties.
AI Training Policy: Your conversations are NOT used to train AI models. OpenAI (our AI provider) automatically deletes all audio data after 30 days and does not use customer data for model training without explicit permission.
1. Introduction
Welcome to Serene Space AI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered personal coaching service ("Service").
By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Data Security & Medical-Grade Encryption
Serene Space AI is a personal coaching service (not medical treatment or therapy). We maintain medical-grade encryption standards used by healthcare systems to ensure maximum privacy and security for your sensitive personal information.
We comply with applicable state health data privacy laws, including:
- Washington My Health My Data Act (RCW 19.373)
- California Confidentiality of Medical Information Act (CMIA)
- California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
- Nevada health data privacy requirements (NRS 629.300)
- Connecticut, Virginia, and Colorado comprehensive data privacy laws
- FTC Health Breach Notification Rule
2.1 Protected Personal Information
We treat all information you share during coaching sessions with the highest level of confidentiality, including:
- Personal challenges and concerns
- Coaching session transcripts and notes
- Personal development goals and progress
- Any personal information you voluntarily share
3. Information We Collect
3.1 Information You Provide Directly
- Account Information: Nickname, email address, password
- Coaching Session Data: Coaching session transcripts, mood tracking data, journal entries, and other personal information you choose to share.
- Payment Information: Processed securely through Square (we do not store full credit card numbers)
3.2 Automatically Collected Information
- Usage Data: Session duration, features used, interaction patterns
- Device Information: IP address, browser type, operating system, device identifiers
3.3 Information We Do NOT Collect
- Social Security numbers
- Financial account information (beyond payment processing)
- Precise geolocation tracking
- Information from third-party social media profiles (unless you explicitly connect them)
4. How We Use Your Information
4.1 To Provide Personal Coaching Support
- Deliver personalized AI coaching sessions
- Remember your conversation history and progress
- Adapt coaching approaches based on your needs
- Provide culturally-informed coaching
4.2 To Improve Our Service
- Analyze aggregate usage patterns (de-identified data only)
- Train and improve AI models (with PHI removed)
- Identify and fix technical issues
- Develop new features and improvements
4.3 For Business Operations
- Process payments and prevent fraud
- Send service updates and important notifications
- Respond to customer support inquiries
- Comply with legal obligations
4.4 What We Do NOT Do With Your Data
- ❌ We do NOT sell your data to advertisers or third parties
- ❌ We do NOT share coaching session content with anyone without your explicit consent
- ❌ We do NOT use your personal information for marketing purposes
- ❌ We do NOT train AI on identifiable data (all training uses de-identified data)
5. How We Share Your Information
5.1 Service Providers (HIPAA Business Associates)
We may share your information with trusted third-party service providers who assist us in operating our Service. All service providers:
- Are contractually required to protect your personal information
- May only use your data as instructed by us
Current Service Providers:
- Cloud Hosting: AWS (enterprise-grade secure infrastructure with SOC 2 Type II certification)
- Payment Processing: Square (PCI DSS compliant)
- Email Services: SendGrid (transactional emails only)
- Analytics: Google Analytics (with IP anonymization and no PHI)
5.2 Legal Requirements
We may disclose your information if required by law or in response to:
- Valid court orders or subpoenas
- Law enforcement requests (with proper legal documentation)
- Legal processes or government investigations
5.3 Emergency Situations
We may disclose PHI without your authorization in emergency situations where:
- There is an imminent threat to your safety or others' safety
- We reasonably believe disclosure is necessary to prevent serious harm
- We are required by law to report (e.g., child abuse, elder abuse)
5.4 Business Transfers
If Serene Space AI is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your personal information becomes subject to a different Privacy Policy.
6. Data Security
6.1 Security Measures
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Strict role-based access with multi-factor authentication
- Secure Infrastructure: Enterprise-grade AWS cloud hosting with AES-256 encryption and SOC 2 compliance
- Regular Audits: Third-party security assessments and penetration testing
- Data Backups: Encrypted backups with secure disaster recovery
- Employee Training: All staff complete data privacy and security training
6.2 Limitations
While we implement strong security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.
7. Your Privacy Rights
7.1 Your Privacy Rights
Under applicable state privacy laws and our commitment to transparency, you have the right to:
- Access: Request a copy of your personal information we hold
- Correction: Request corrections to inaccurate personal information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Data Portability: Receive your personal information in a portable format
- Opt-Out: Opt out of data processing for certain purposes (e.g., marketing)
- Withdrawal of Consent: Withdraw previously given consent for data processing
- Breach Notification: Be notified if your personal information is breached
7.2 State Privacy Rights
California Residents (CCPA/CPRA):
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of sale of personal information (we don't sell data)
- Right to non-discrimination for exercising privacy rights
7.3 How to Exercise Your Rights
To exercise any of your privacy rights, contact us at:
- Email: info@serenespace.ai
- Phone: 737-758-2356
- Mail: Serene Space AI
901 S. Mopac Expy.
Building 1, Suite 300
Austin, TX 78746
- Response Time: We will respond within 30 days of receiving your request
8. Data Retention
We retain your information for different periods depending on the type:
- Active Account Data: Retained while your account is active
- Coaching Session Data: 7 years after your last interaction (best practice for coaching records)
- Payment Records: 7 years (legal requirement)
Account Deletion: You may request full account deletion at any time. We will delete or de-identify your data within 30 days, except where retention is required by law.
9. Children's Privacy
Our Service is intended for individuals 18 years of age or older. We do not knowingly collect information from minors without parental consent.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@serenespace.ai, and we will delete it.
10. International Users
Serene Space AI operates in the United States. If you access our Service from outside the U.S., your information will be transferred to, stored, and processed in the United States.
By using our Service, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy and U.S. law.
11. Third-Party Links
Our Service may contain links to third-party websites (e.g., crisis resources, mental health organizations). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending an email notification to your registered email address
- Displaying a prominent notice in the Service
Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
13. Contact Us
14. Consent
By using Serene Space AI, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.