Privacy Policy

Naari1 ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Information You Provide

• Assessment responses: Your answers to mental health questions
• Account information: Email, name, location (if you create account)
• Communication: Messages when you contact us

Information Automatically Collected

• Device information: Browser type, operating system
• Usage data: How you interact with our site
• Analytics: Page views, time on site, referral source
• IP address: For security and analytics only

Important: What We Don't Collect

• We do NOT collect payment information (we're free)
• We do NOT track you across websites
• We do NOT sell your data to third parties
• We do NOT share data with advertisers

2. How We Use Information

We use collected information to:

• Provide assessments: Calculating your results
• Improve services: Understanding what works
• Support research: Advancing mental health knowledge
• Legal compliance: Regulatory and security requirements

We do NOT use information to:

• Target advertising to you
• Sell to third parties
• Make employment decisions
• Discriminate against you
• Monitor you for behavioral purposes

3. Data Security

Encryption

• All data transmitted with SSL/TLS encryption
• Data stored with AES-256 encryption
• Regular security audits and penetration testing

Access Controls

• Limited employee access to personal data
• Background checks for all staff
• Strict access logging and monitoring
• Role-based access (need-to-know basis)

Incident Response

• Rapid response protocol for breaches
• Notification within 24-48 hours if required
• Regular incident drills and testing
• Cyber insurance in place

4. Your Privacy Rights

You Have the Right To:

• Access: Request copy of your data
• Delete: Request deletion of your information
• Correct: Update inaccurate information
• Opt-out: Stop analytics and marketing
• Data portability: Export your assessment results

How to Exercise Rights

Share your details through the form on our home page and our team will reach out to you. We respond within 30 days.

5. HIPAA Compliance

Naari1 maintains HIPAA compliance for protected health information:

• Business associate agreements with partners
• Minimum necessary principle
• Access controls and audit trails
• Breach notification procedures
• Data retention and destruction policies

Assessment results are treated as protected health information and safeguarded accordingly.

6. Third-Party Services

We use limited third-party services:

• Cloud hosting: AWS (HIPAA-compliant)
• Analytics: Anonymized, privacy-respecting
• Email: Encrypted email provider
• Monitoring: Security monitoring services

All third parties sign data processing agreements and agree to our privacy standards.

7. Data Retention

• Assessment data: Retained as long as account active
• Deleted accounts: Data deleted within 30 days
• Backups: Deleted within 90 days of account deletion
• Aggregate data: Retained indefinitely (anonymized)

8. Children's Privacy

Naari1 is not designed for children under 13. We do not knowingly collect data from children under 13. Parents concerned about a child's use of Naari1 should contact us immediately.

9. International Users

If you use Naari1 from outside the US:

• Your data may be transferred to US servers
• We comply with GDPR and other regulations
• You have GDPR rights (access, deletion, portability)
• EU users can request data transfer upon request

10. Changes to Privacy Policy

We may update this policy occasionally. Significant changes will be communicated to you. Your continued use indicates acceptance of updated terms.

11. Contact Us

Questions about privacy? Share your details through the form on our home page and our team will reach out to you.

We respond to privacy inquiries within 30 days.