In the preceding 12 months, NeuroAmaze has collected the following categories of personal information from or about consumers:
| CCPA Category | Examples We Collect | Source |
|---|---|---|
| A. Identifiers | Email address, display name, Firebase UID | You provide directly at registration |
| B. Personal information (Cal. Civ. Code § 1798.80) | Name, email address | You provide directly |
| C. Protected classification characteristics | Age group (for COPPA compliance only) | You provide directly |
| D. Commercial information | Subscription status and payment history (if applicable) | App Store / Google Play |
| F. Internet/electronic activity | App feature usage, session duration (anonymised) | Automatic collection |
| G. Geolocation | We do not collect geolocation data | N/A |
| H. Sensory/audio data | Voice recordings only if you use voice journaling AND enable cloud voice processing; on-device by default | You provide (opt-in only) |
| I. Professional/employment | Not collected | N/A |
| J. Education | Not collected | N/A |
| L. Sensitive personal information | Mental health data, medication information, mental health assessment results (PHQ-9, GAD-7, etc.) | You provide directly in-app |
We collect personal information for the following business purposes:
We do not use personal information for:
In the preceding 12 months, we have disclosed personal information to the following categories of third parties for business purposes:
| Third Party Category | PI Categories Disclosed | Purpose |
|---|---|---|
| Cloud infrastructure providers (Firebase/Google) | Identifiers, health data (if cloud sync enabled), usage data | Data storage, authentication, crash reporting |
| AI service providers (opt-in only) | Anonymised, aggregated wellness trends only | Generating personalised AI insights |
| Payment processors (App Store/Google Play) | Transaction identifiers (not processed by NeuroAmaze directly) | Payment processing for subscriptions |
| Caregivers designated by you (opt-in only) | Medication adherence summaries, mood trends (as authorised by you) | Caregiver monitoring feature |
We have not disclosed personal information to advertising networks, data brokers, or analytics companies that use data for advertising targeting.
Because we do not sell or share personal information for advertising purposes, we do not offer a "Do Not Sell or Share My Personal Information" opt-out link — there is nothing to opt out of.
If our practices change in the future, we will update this notice and provide a prominent "Do Not Sell or Share My Personal Information" link on our homepage at least 30 days before any such change takes effect.
Under the CPRA, we collect the following categories of sensitive personal information:
How we use sensitive personal information: We use sensitive personal information only to provide the Service. We do not use it to infer characteristics about you beyond what is necessary for the Service, and we do not share it with third parties for their own use.
You have the right to limit the use and disclosure of your sensitive personal information to uses necessary to provide the Service. Because we already limit use to these purposes, no separate opt-out mechanism is required — your privacy is protected by default.
We retain personal information for as long as your account is active and as necessary to provide the Service. Upon account deletion, we delete personal information within 30 days.
| Data Category | Retention Period |
|---|---|
| Account identifiers (email, name) | Until account deletion + 30 days |
| Health and wellness data | Until account deletion or manual deletion by you |
| Transaction records | 7 years (legal/tax requirement) |
| Anonymised analytics | Up to 24 months |
| Support correspondence | 2 years after resolution |
As a California resident, you have the following rights under CCPA/CPRA:
You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties to whom we disclosed it.
You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (e.g., completing transactions, legal obligations, security purposes).
You have the right to request correction of inaccurate personal information we hold about you. You can update most information directly in the app.
You have the right to opt out of the sale or sharing of your personal information. NeuroAmaze does not sell or share personal information — this right is satisfied by default.
You have the right to limit use of sensitive personal information to what is necessary to provide the Service. NeuroAmaze already limits use to Service delivery — this right is satisfied by default.
We will not discriminate against you for exercising your CCPA rights. We will not deny you the Service, charge different prices, provide a different level of service quality, or suggest any of these will occur.
Where technically feasible, you have the right to receive your personal information in a portable format. Use Settings → Privacy → Export My Data to download your data as JSON.
You may submit a consumer rights request in one of the following ways:
We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need additional time, we will notify you within the initial 45-day period and may extend by an additional 45 days.
You may submit up to 2 requests in a 12-month period at no charge.
To protect your personal information, we must verify your identity before fulfilling a rights request. For in-app requests, verification is completed via your authenticated account session.
For email requests, we may ask you to:
For deletion requests involving sensitive personal information, we may require a higher level of verification, such as re-authentication via email link.
We will not use information provided for verification purposes for any other purpose.
California residents may designate an authorised agent to submit a request on their behalf. To use an authorised agent, you must either:
We may deny a request from an authorised agent who does not submit proof that they have been authorised by you.
NeuroAmaze does not offer financial incentives for the collection, sale, or deletion of personal information. We do not discriminate in pricing or service quality based on your exercise of CCPA rights.
📋 Subject: "CCPA Privacy Request — [Know / Delete / Correct / Opt Out]"
🏢 NeuroAmaze, Inc., 123 Wellness Drive, San Francisco, CA 94105
📞 Toll-free number: Available upon request
If you are unsatisfied with our response, you may contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov or the California Attorney General's office at oag.ca.gov/privacy.
This notice was last reviewed and updated on January 1, 2025. We review this notice annually and update it when our data practices change.