Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how Girlified ("we," "us," or "our") collects, uses, processes, stores, and discloses personal data obtained through your use of the Girlified Platform, including websites, mobile applications, APIs, and associated services (collectively, the "Platform"). It applies to all users of the Platform, including those who access it as a registered account holder or "guest." If you do not agree with the terms of this Privacy Policy, you should not use or access the Platform.

2. Information We Collect

3. How We Use Your Information

• To Provide and Improve Services: We use User Data and Usage Data to deliver, maintain, and enhance the Platform, tailor content and recommendations, develop new features, and fix bugs.
• Health Insights and Recommendations: We process health-related inputs to generate personalized assessments, insights, alerts, and recommendations, including menstrual health tracking, wellness tips, and AI-driven predictive analytics.
• Security and Fraud Prevention: We analyze usage patterns and technical data to detect and prevent fraudulent or malicious activity, secure the Platform, and ensure the integrity of your account.
• Communication: We use contact information to send service-related notices (e.g., updates to features, security alerts), respond to support inquiries, and provide customer service. With your consent, we may send marketing communications, newsletters, or promotional offers. You may opt-out at any time.
• Analytics and Research: We may use de-identified or aggregated data for internal analytics, research, and product development, including training and refining AI models. Such data does not identify you personally.
• Legal Compliance: We process information as necessary to comply with legal obligations, respond to lawful requests, protect against legal liability, and enforce our agreements.

4. Lawful Bases for Processing (Applicable to GDPR)

If you are located in the European Economic Area (EEA), our lawful bases for processing your personal data include:

• Performance of a Contract: Processing necessary to provide the Platform, including account management, service provisioning, and payment processing.
• Legal Compliance: Processing necessary to comply with a legal obligation to which we are subject.
• Legitimate Interests: Processing to improve the Platform, prevent misuse, and maintain security, provided that such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent (e.g., marketing communications), you have the right to withdraw consent at any time without affecting prior processing.

5. Disclosure of Your Information

• Service Providers: We share personal data with third-party vendors, consultants, and service providers who perform services on our behalf (e.g., cloud hosting, payment processing, analytics, customer support). These parties are contractually obligated to only use data as necessary to perform services for us and to maintain confidentiality and security.
• Affiliates and Subsidiaries: We may share your information with our corporate affiliates and subsidiaries for the purposes described in this Privacy Policy. We require these entities to maintain the confidentiality of your personal data.
• Legal Compliance and Protection: We may disclose personal data to law enforcement, government authorities, or other third parties if we believe in good faith that such disclosure is necessary to comply with applicable law, respond to valid legal process, or protect the rights, property, or safety of Girlified, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or financing, user data may be transferred to a successor entity, subject to confidentiality obligations and this Privacy Policy.

6. Cookies and Tracking Technologies

First-Party Cookies: We use cookies and similar technologies to remember your settings, authenticate users, and enable core functionality. These cookies may remain on your device for a limited time (session cookies) or until you delete them (persistent cookies).

Third-Party Cookies: We allow third-party service providers (e.g., Google Analytics, social media plugins, advertising partners) to place cookies on your device to analyze and measure usage, serve targeted advertisements, and understand user behavior. These third parties may collect information over time about your online activities across different websites and services.

Your Choices: You can manage cookies through your browser settings (e.g., reject or delete cookies) and opt-out of certain third-party tracking by visiting opt-out pages such as www.aboutads.info/choices and www.youronlinechoices.eu (if applicable).

7. Data Security

We implement industry-standard technical, administrative, and physical safeguards to protect personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encrypted data transmission (TLS/SSL), encryption at rest, access controls, firewalls, intrusion detection systems, regular security assessments, and staff training. However, no method of transmission over the internet or method of electronic storage is 100 percent secure; we cannot guarantee absolute security.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:

• The length of time we have an ongoing relationship with you and provide Girlified Services.
• Whether there is a legal obligation to which we are subject (e.g., tax, accounting, health record laws).
• Whether retention is advisable considering our legal position (e.g., statute of limitations, litigation, regulatory investigations).

9. Children's Privacy

Girlified Services are not intended for individuals under the age of 18. We do not knowingly collect or solicit personal data from minors under 18. If we become aware that we have inadvertently collected data from a child under 18, we will promptly delete such data from our records. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us to request deletion.

10. Your Rights and Choices

11. International Data Transfers

Your personal data may be transferred to, processed, and stored in countries outside your country of residence, including countries that do not have data protection laws equivalent to those in your jurisdiction. We will take appropriate safeguards (e.g., standard contractual clauses, binding corporate rules) to ensure that your data receives an adequate level of protection in accordance with applicable law.

12. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, or services not operated by Girlified. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third parties. We encourage you to read the privacy statements of each third-party site you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will post the updated Privacy Policy on the Platform with a new "Effective Date." Your continued use of the Platform after such changes constitutes your acceptance of the revised policy.

14. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, or to exercise your data subject rights, please contact us at: