Privacy Policy
This privacy policy (“policy”) explains how Vasana, Inc. (“Vasana”,”us”, “we”, “our”) collects, uses, and protects the data you provide when you visit and use www.website.vasana.ai (“website”, “service”) and our mobile application. We reserve the right to change this policy at any time, and we will notify you of any changes. Please check this page regularly to ensure you are up to date with the latest information.
Effective: 10 Feb 2026
Who we are
Vasana, Inc. (“Vasana”, “we”, “us”, “our”) provides the Vasana mobile application and the www.vasana.ai website (together, the “Services”). Our company values include putting members first. We are committed to protecting and respecting your privacy in connection with your use of our content and products. You can contact us at hello@vasana.ai.
Scope and applicability
This policy explains how we collect, use, share, and protect information when you use our Services. It applies to information collected via the mobile app, website, in‑app web views, customer support, research opt‑ins, and integrations you choose to connect (e.g., Apple Health, Google Fit). The Services are intended primarily for a U.S. audience.
Important health disclaimer
Vasana is a wellbeing companion. It is not a medical device or platform and does not provide medical advice, diagnosis, or treatment. If you are experiencing an emergency, call your local emergency number. If you need medical or clinical advice, contact your doctor.
Information we collect
We collect the categories below when you use our services. Some of this information may be considered health or sensitive under applicable laws.
Contact Information and Identifiers
When you use our Platform, we may ask you to provide certain contact information, including your first and last name and email address. Through your account in our Product, you may have the opportunity to provide additional information about yourself, such as your age, preferred pronouns, gender or gender identity, sex at birth, and more.
Account Information
If you decide to set up an account with us, we may ask you to provide certain additional contact information including, for example, your first and last name, e-mail address (personal and/or work), telephone number, mailing address, employer or company name, job title, student identification number, emergency contact information, as well as password and other authentication-related information. For individuals who participate in special subscriptions and features, including group plans, we may collect additional personal information, for example, home address and names and emails of household members.
Health information
We will collect the information you provide about your health and wellness as you use our Products or engage with the Services. You may provide this information through the Products, such as through survey responses about your current mental or physical health status, setting your health or wellness goals, or in other inputs that relate to your health or wellbeing.
Check‑ins, Journals, and User Content
We will collect free-text or tagged entries you choose to provide about your mood or feelings, including associated intensity ratings, timestamps, and optional tags (such as emotion or theme).
Payment information
If you sign up for a paid product or service from us, you may be required to provide your payment card or bank account information. Please note that Vasana does not directly process payment card information, and instead relies upon third-party payment processors to do so on our behalf. Please note that third-party terms may apply to these payment services. Personal information collected for these purposes includes card number, type, expiration date, and billing address, and certain anonymized, limited and/or truncated versions of this information may be provided to Vasana.
Usage Information
Responses and results for behavioral, mental, or physical wellbeing assessments you complete in the app. We also collect other responses like the sessions you use, videos you view, content you listen to, screens or features you access, and other similar types of usage information.
Device, Usage & Diagnostic Data
We collect technical and usage information about your device and how you interact with the Services, including device model, operating system version, app version, IP address, timezone, locale, product interaction events (such as app launches, taps, and feature usage), crash logs, and performance metrics, to operate, secure, and improve the Services.
Cookies and Similar Technologies (website & web views)
When you access our website or in-app web views, we use strictly necessary cookies and similar technologies for authentication, security, and core functionality, and—where permitted by law—optional analytics cookies to understand usage patterns and improve the user experience.
Note: Data collected in in‑app web views is declared here unless you are navigating the open web (not the case in normal use).
Information from partners
You may follow links contained in our Platform or provided to you by other users to third-party websites or products not operated by us. This Privacy Policy does not apply to third-party websites or products. We strongly suggest you review their privacy policies to understand how your personal information is used and stored by those third parties.
If you connect third‑party services (e.g., health platforms), we receive data per your authorization. Service providers (e.g., authentication, analytics, crash reporting) may process limited data to provide their services on our behalf
How we use information
We use information for the following purposes. Where required by law (e.g., for health integrations), we rely on your consent.
App Functionality
We use information to operate and maintain the Services, including creating and authenticating accounts, syncing entries across devices, displaying assessment status and results, enabling in-app messaging and customer support, preventing fraud, maintaining security, and ensuring service reliability.
Product Personalization
We use information to personalize your experience by tailoring check-ins, prompts, insights, and practice recommendations (such as breathing, journaling, and grounding) based on your entries, assessment results, and—if you choose to connect integrations—relevant health or fitness data.
Analytics and Service Improvement
We use information to understand how features are used in aggregate, measure performance, stability, and quality, and to provide, maintain, and improve the Services, including debugging and identifying and repairing errors.
Notifications and Reminders
We use information to send you notifications and reminders related to check-ins, practices, assessments, and gentle insights, which you can control or disable at any time through your settings.
Aggregated and De-identified Data
We may create and use aggregated or de-identified data that can no longer reasonably be used to identify you, based on our legitimate interest in improving our Services, generating insights and reports, and enhancing and promoting our business.
Legal and Compliance
We use information to comply with applicable laws and regulations, resolve disputes, enforce our terms and policies, and protect the rights, safety, and security of Vasana, our users, and others.
AI Features
We use artificial intelligence (AI), including machine-based systems that operate with varying levels of autonomy to infer from inputs and generate outputs, to support the operation of the Services. Much of this use occurs behind the scenes, such as for security monitoring of our infrastructure, quality assurance, and content or practice recommendations. Our AI features are designed to support wellbeing and service functionality and are not intended to provide medical advice or diagnosis.
On‑device processing vs. collection
When feasible, we process data on the device. Data that never leaves your device is not “collected” for platform disclosures. When we transmit data to our servers for synchronization or processing beyond the immediate request, it is considered collected.
Sharing of information
We may disclose information about you as described below and elsewhere in this Privacy Policy, or at the time of collection. We share information only as necessary to operate, secure, and improve the Services.
Service Providers and Professional Advisors
We may share information with trusted companies and contractors that perform services on our behalf, such as:
- Cloud hosting and infrastructure providers
- Authentication and identity services
- Analytics and crash-reporting providers
- Customer support and in-app messaging tools
- Payment processors and fraud-prevention vendors
We may also disclose information to our accountants, auditors, lawyers, and other professional advisors, subject to appropriate contractual obligations of confidentiality.
Legal, Safety, and Rights Protection
We may disclose information if we believe such disclosure is required or appropriate to:
- Comply with applicable law, regulation, legal process, or lawful request by public authorities
- Enforce our terms, policies, or agreements
- Protect the rights, property, safety, and security of Vasana, our users, or others
- Prevent, investigate, detect, or prosecute fraud, abuse, or other criminal activity
- Establish, exercise, or defend legal claims
Business Transfers
We may disclose or transfer information in connection with, or during negotiations of, any merger, acquisition, reorganization, financing, sale of assets, or similar business transaction involving all or part of Vasana.
Affiliates
We may share information between and among Vasana and our current or future parents, affiliates, subsidiaries, and entities under common ownership or control, consistent with this Privacy Policy.
Subscriptions Provided by Others
If your Vasana access is provided by another party (such as an employer, organization, or family member), we may inform them that you have activated or are using the subscription they made available to you. We do not share your private journal entries, check-ins, or assessment content with them.
With Your Consent or Direction
We may share information when you explicitly consent or direct us to do so, such as when you connect third-party integrations or choose to share content through supported features.
Aggregated or De-identified Data
We may disclose aggregated or de-identified information that cannot reasonably be used to identify you. This information is not subject to personal data protection obligations.
Advertising and Analytics
Vasana does not sell personal information, does not engage in targeted advertising, and does not share personal data with third-party advertising networks or data brokers.
We may use first-party or service-provider analytics tools to understand how the Services are used, improve performance, and enhance reliability. These providers may collect information such as device identifiers, IP address, app usage events, and diagnostic data solely to provide services to Vasana, under contractual restrictions.
We do not permit analytics providers to use your data for their own advertising purposes.
International Data Transfers
Vasana is based in the United States and may process information in the U.S. and other countries where we or our service providers operate. These jurisdictions may not provide the same level of data protection as your home country.
Retention of Data
The security of your personal information is important to us. We follow generally accepted standards, practices, and procedures to protect the personal information submitted to us, both during transmission and once it is received. We maintain appropriate technical, administrative and physical safeguards to help protect the security of your personal information against unauthorized access, destruction, loss, alteration, disclosure or misuse.
We will keep your personal information for as long as needed to perform our obligations to you, or for as long as legally permitted. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations). For example, we keep your account information, like your name, email address, and password, for as long as your account exists so that you may access it.
You can request deletion at any time (see Your rights & choices).
Your rights & choices
We believe that you should have control of your personal information. To that end we provide the following rights to make requests regarding your personal information. You may make these requests by contacting hello@vasana.ai or in some cases using features within the Platform:
Controls in the app
- Update profile and preferences
- Manage notifications
- Export or delete your data (where available)
Requests by email
Contact huma@vasana.ai to access, correct, delete, or export your data. We may need to verify your identity. If we cannot fulfill a request, we will explain why.
Region‑specific rights
EU/UK: Access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests). You may lodge a complaint with your local data protection authority.
US (e.g., CA/VA/CO/CT/UT): Right to know/access, delete, correct, and opt out of sale/share/targeted advertising (we don’t sell or share). Authorized agents may submit requests; we will verify identity/authority. Appeals process available where required.
International transfers
We may process data outside your country (e.g., United States). Where applicable, we use lawful transfer mechanisms (such as Standard Contractual Clauses) and implement appropriate safeguards.
Security
We use administrative, technical, and organizational measures appropriate to the risk, including encryption in transit, access controls, least‑privilege, secure development practices, vendor due diligence, and incident response. No system is 100% secure; if a breach occurs, we will notify users and/or regulators as required by law.
Children’s privacy
The Services are intended for individuals 18 years and older and not directed to individuals under 18. We do not knowingly collect personal information from individuals under 18 years old. If you become aware that a child has provided personal information, contact us so we can take appropriate action.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated in‑app or on our website with a new “Last updated” date. We encourage you to periodically check this Privacy Policy to stay informed about how we handle your personal information.
Contact us
Vasana, Inc.
Email: hello@vasana.ai