RelphaCare — Privacy Policy

Table of Contents

• 1. WHAT INFORMATION DO WE COLLECT?
• 2. HOW AND WHY DO WE USE INFORMATION?
• 3. WHEN AND WITH WHOM DO WE SHARE INFORMATION?
• 4. COOKIES AND ANALYTICS
• 5. CHILDREN AND PARENTAL CONSENT
• 6. INTERNATIONAL DATA TRANSFERS
• 7. HOW LONG DO WE KEEP INFORMATION?
• 8. HOW DO WE KEEP INFORMATION SAFE?
• 9. YOUR PRIVACY RIGHTS
• 10. UPDATES TO THIS POLICY
• 11. CONTACT US
• 12. REVIEW, UPDATE OR DELETE YOUR INFORMATION

01. WHAT INFORMATION DO WE COLLECT?

Depending on your use of the Services, this may include your name or chosen account name, phone number, age/date of birth, email address, login credentials (stored securely in an appropriate form), subscription and transaction details, communications with us, and feedback you submit. We may collect business contact and billing information where you contact us about institutional partnerships or invoicing.

We do not collect genetic data, racial or ethnic-origin data, health diagnoses or medical records through standard registration. Stories and podcasts may concern emotional wellbeing, and any optional feedback or free-text reflection that you send us could disclose information about your mental or physical health or other sensitive matters. Please do not include medical details or other sensitive personal information unless necessary. Where such information is received, we will handle it under applicable data protection requirements, including any required consent or other lawful basis.

Where you purchase a subscription, a third-party payment processor, currently identified as Stripe, processes payment card details. We may receive limited information such as payment status, transaction identifiers, subscription tier, billing details and receipts. We do not represent that we receive or retain full payment card numbers or security codes unless this is verified.

When you use the Services, our systems or service providers may process IP addresses, device/browser type, security and error logs, session activity, and usage events needed for delivery and improvement. Listening history, story selections, progress, completion or reading activity may be recorded if the relevant functionality is enabled.

The Services do not currently support registration through Facebook, X or other social-media accounts. We do not describe access to GPS, Bluetooth, camera, microphone, contacts, calendar or device sensors unless a feature actually requires it and the relevant notice is provided.

02. HOW AND WHY DO WE USE INFORMATION?

We process information to create and secure accounts, provide access to stories and podcasts, administer subscriptions and payments, deliver customer support, address feedback, prevent misuse, improve technical performance, and meet legal obligations. Where enabled and legally permitted, we may send marketing communications subject to applicable consent and opt-out requirements.

Depending on the applicable law and purpose, the legal basis may be performance of a contract, compliance with a legal obligation, consent, or legitimate interests where permitted and appropriately balanced. Sensitive information and children’s information may require additional protections or consent.

03. WHEN AND WITH WHOM DO WE SHARE INFORMATION?

We may disclose limited personal information to service providers that support hosting, account authentication, payment processing, email delivery, customer support, security, and analytics, but only to the extent actually used and necessary. Such providers must be subject to appropriate contractual and security safeguards.

We may disclose information when required by law, to protect rights or safety, or in connection with a corporate restructuring, subject to applicable law. We do not sell personal information.

If access is provided through a school, clinic, employer or other organisation, the organisation may manage eligibility or subscription access. Any sharing of identifiable usage or wellbeing-related information with that organisation must be specifically disclosed and justified; it should not be assumed from institutional sponsorship alone.

04. COOKIES AND ANALYTICS

The website may use strictly necessary cookies for account sessions, security and core functionality. Analytics or advertising cookies, if any, must be described accurately in a cookie notice or preference tool, including their purposes, providers, durations and available choices. Where law requires, optional cookies will not be set before valid consent.

05. CHILDREN AND PARENTAL CONSENT

The Services are intended for users aged 13 and older, subject to applicable local age thresholds. Users aged 13–17 may access the Services only where permitted by applicable law and with appropriate parent or legal guardian consent or authorisation.

We seek to minimise data collected from minors, avoid unnecessary profiling and behavioural advertising directed at children, and provide parents or guardians with means to request access, correction or deletion where applicable. Access for children under 13 through an educational institution, if offered, requires a separate documented arrangement and applicable permissions; this policy does not independently authorise direct account registration by children under 13.

06. INTERNATIONAL DATA TRANSFERS

RelphaCare is established in Dubai, United Arab Emirates. Information may be processed in the UAE and other countries where our verified service providers operate. Where applicable, we will implement legally required safeguards for international transfers.

07. HOW LONG DO WE KEEP INFORMATION?

We retain personal information only as long as reasonably necessary for the purposes described, including account operation, security, legal compliance, dispute resolution and accounting obligations. Account information is ordinarily reviewed for deletion or anonymisation following closure, subject to lawful retention needs. Payment and accounting records may need to be retained longer. Backups may persist for a limited deletion cycle.

08. HOW DO WE KEEP INFORMATION SAFE?

We use reasonable technical and organisational measures designed to protect personal information, such as access controls, appropriate authentication, secure communications and restricted service-provider access, as applicable. No internet service can guarantee absolute security. We assess and respond to suspected personal-data incidents and make notifications where legally required.

09. YOUR PRIVACY RIGHTS

In accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE Personal Data Protection Law), and subject to its applicable provisions and exceptions, you may have the right to access, correct, update, erase, restrict or object to certain processing of your personal data, request data portability, and withdraw your consent where processing is based on consent.

You may exercise your applicable rights by contacting us at info@relphacare.com. You may also unsubscribe from marketing communications at any time.

Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal. We may request reasonable information to verify your identity or, where applicable, your parental or legal guardian authority before processing a request.

Where other data protection laws are mandatorily applicable to our processing activities, any additional rights provided under those laws shall remain unaffected.

10. UPDATES TO THIS POLICY

We may update this Policy when our Services or legal requirements change. We will publish the updated date and provide additional notice where legally required, especially for material changes affecting children, sensitive information or new data uses.

11. CONTACT US

Relpha Technologies FZ-LLC

14 Mangrove Quarter B, Expo City, Dubai, United Arab Emirates

Email: info@relphacare.com

12. REVIEW, UPDATE OR DELETE YOUR INFORMATION

You may contact info@relphacare.com to request access to, correction of or deletion of your personal information, or to ask about parental consent and account closure. Where account settings support self-service updates or deletion, those options may also be used. We will respond within applicable legal timeframes.