Privacy Policy

At Ventro Core, your mental well-being and privacy are our highest priorities. This Privacy Policy describes how we collect, use, process, and distribute your information when you use our mobile application and related services (the "Service").

By using the Service, you consent to the data practices described in this policy.

1. Privacy at a Glance

We believe you should understand our data practices without digging through legalese.

• Service providers: We use subprocessors such as PostHog (analytics, when enabled) and Google Firebase (push notifications) as described in Section 2. We do not sell your journal content.
• Journals & Drawings — Personal reflection and storage; protected in transit and handled under this policy.
• Email Address — Account recovery, security, and updates.

2. Information We Collect

To provide a seamless wellness experience, we collect the following categories of information:

2.1 Account Information

When you register, we collect your email address and password to secure your account and allow for data synchronization across devices.

2.2 Wellness & Activity Data

We process information you generate or log when you use features such as journaling (including optional drawings), mood tracking, breath and Trataka (gazing) exercises, meditations, soundscapes, self-discovery quizzes, journey and routine content, growth statistics, and Zen Pet sanctuary progress. This helps us sync your content across devices and personalize your experience.

2.3 Creative Content (User-Generated)

This includes your written journal entries and digital drawings. Note: This content is sensitive. We treat this as "Private Content" (see Section 4).

2.4 Usage Data

We automatically collect limited technical and usage information, such as app interactions, feature usage, and diagnostic information needed to operate and improve the Service.

2.5 Analytics and product telemetry (PostHog)

When the app is configured with a PostHog project key (in the native app build), we use PostHog (PostHog Inc.) to collect product analytics and event data—such as onboarding selections and app lifecycle events—to understand how the Service is used and to improve it. Events may include properties you provide in the App (for example, responses during onboarding). PostHog uses a project host (commonly https://us.i.posthog.com or EU, as set at build time). PostHog's privacy practices are described at https://posthog.com/privacy. If no analytics key is configured, PostHog is not initialized and no PostHog analytics are collected.

2.6 Push notifications (Firebase Cloud Messaging)

We use Google Firebase Cloud Messaging (FCM) to register your device for push notifications you enable in the App. Google processes certain device identifiers and message delivery data as described in Google's and Firebase's documentation (see https://firebase.google.com/support/privacy).

3. How We Use Your Information

We process your information to:

• Ensure Functionality: Sync your journals and drawings securely so they are available whenever you log in.
• Improve the Service: Analyze anonymous usage trends to identify which "First Aid" tools are most effective and where the App can be improved.
• Communicate: Send essential system notifications, security alerts, and customer support responses.

4. Data Security and Encryption

Because Ventro Core handles sensitive emotional data, we implement rigorous security measures:

• Transport security: Data transmitted between the App and our servers is protected using TLS (HTTPS).
• Stored data: We apply administrative, technical, and organizational safeguards designed to protect personal data processed and stored on our systems.
• Data Minimization: We only collect the minimum amount of data required to provide the Service.
• Non-Disclosure: We do not sell, rent, or trade your personal wellness data, journals, or drawings to third-party advertisers or data brokers. Your private reflections remain private.

5. Data Storage and Retention

Cloud Infrastructure

We utilize industry-leading cloud service providers (such as AWS or Google Cloud) that maintain the highest physical and digital security certifications.

Retention

We retain your data as long as your account is active. If you choose to delete your account, your personal data will be purged from our active databases within 30 days.

6. Your Rights and Controls

Depending on your location, you may have the following rights regarding your data:

• Access & Portability: You may request a copy of the data we hold about you at any time.
• Correction: You can update your account information directly within the App settings.
• The "Right to be Forgotten": You may request the permanent deletion of your account and all associated data from Profile → Account & Security → Delete Account, or by contacting support.

7. Children's Privacy

Ventro Core is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If we become aware that a child has provided us with personal information without parental consent, we will take steps to delete such information and terminate the account.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by posting the new policy within the App and updating the "Effective Date" at the top.

9. Contact Information

If you have questions or concerns regarding your privacy, please contact our Data Protection Officer at:

contact@ventro-core.com