Effective Date: October 28th, 2025
Company: HYNS Technologies Pte. Ltd.
Address: 101 Cecil Street #14-12, Tong Eng Building, Singapore 069533
Email: support@healyournervoussystem.com
Data Protection Officer (PDPA) & EU/UK Representative: Alessio Santo, alessio.santo@healyournervoussystem.com

At HYNS, your privacy and trust matter. This Policy explains what we collect, why, how we use and share it, and your choices. It applies to the HYNS Daily iOS App and our related websites.

1) Information We Collect

  • Account details — name, email, login credentials (including Sign in with Apple).
  • Check-in data — the responses/reflections you enter into daily check-ins; these may include emotional or physical states linked to your account to personalize your experience.
  • Device & usage data — app events, feature engagement, and general device information (via analytics).
  • Communications — feedback via in-app forms/surveys/support.
  • Marketing preferences — if you opt in to email updates; promotional push only if you opt in.

We do not use your check-ins or chat content for advertising or profiling.

2) How We Use Information

  • Provide, personalize, and support the App (including troubleshooting and security).
  • Communicate about service updates and new content.
  • Improve the App via analytics and user feedback.
  • Comply with legal obligations and resolve disputes.

3) Legal Bases (EU/UK)

  • Contract — to deliver the App and your subscription.
  • Legitimate interests — to understand and improve how the App is used, prevent abuse, and secure our services.
  • Consent — for optional communications, promotional push, cookies/analytics on the website, and (where applicable) tracking.
  • Special-category data (explicit consent). Some check-ins may reveal health-related information. Where required (e.g., EU/UK), we process such data only with your explicit consent, which you can withdraw at any time in the App (Settings → Privacy). Withdrawing consent does not affect processing already performed lawfully.

4) Sharing & Disclosure

We share personal data with service providers under contracts that protect your information and limit use to our instructions:

  • Amazon Web Services (AWS, U.S.) — encrypted hosting and storage.
  • Analytics (e.g., Mixpanel) — app usage analytics using pseudonymous identifiers; not for advertising.
  • Email provider (e.g., ActiveCampaign) — only if you opt-in to marketing emails.

If we add advertising or additional analytics partners in the future, we will update this Policy and obtain any required consent first. We may share aggregated insights that do not identify you.

5) International Transfers

We host in the United States (AWS). When transferring personal data internationally, we apply appropriate safeguards:

  • EEA → non-EEA: Standard Contractual Clauses (SCCs) and, where applicable for U.S. recipients, reliance on the EU-U.S. Data Privacy Framework (DPF) certification of our vendors.
  • UK → overseas: the UK Addendum/IDTA and, where applicable, the UK-U.S. Data Bridge.
  • Singapore PDPA: we comply with the Transfer Limitation Obligation (e.g., using PDPC/ASEAN model clauses) to ensure comparable protection overseas.

Copies or a description of safeguards can be requested via alessio.santo@healyournervoussystem.com.

6) Security

We use technical and organizational measures (encryption in transit/at rest, access controls, logging, least-privilege practices) designed to protect personal data. No system is perfectly secure; we monitor and improve controls continuously.

7) Breach Notification

We maintain an incident response plan. Where required, we will notify regulators and/or users without undue delay (for example, within 72 hours under GDPR for certain breaches and as soon as practicable and no later than 3 calendar days after determining a notifiable breach under Singapore PDPA).

8) Retention

We delete all personal data immediately upon account deletion. We also delete personal data when it’s no longer needed to provide the service.

9) Your Rights

Depending on your location, you may have the right to access, correct, delete, port, object, or restrict processing; and to withdraw consent.

  • How to exercise: email support@healyournervoussystem.com or use in-app controls.
  • Verification & timelines: we may verify your identity; we typically respond within 1 month (GDPR/UK) or 45 days (California).
  • Appeals: if we decline your request, we’ll explain why and how to appeal.

California (CPRA): We do not sell or share personal information as defined by CPRA, nor do we use or disclose Sensitive Personal Information for purposes requiring a “Limit Use of SPI” link. If this changes, we will provide required opt-outs and honor Global Privacy Control (GPC) signals by default.

10) Children

The App is designed for general audiences and suitable for users 16+. We do not knowingly collect personal information from children under 16 (or a higher local age where applicable). If you believe a child has provided data, contact us to delete it. (For U.S. users, the App is not directed to children under 13.)

11) Cookies & Website Analytics

The App does not use tracking cookies. Our website may use non-essential cookies/analytics. In the EU/UK, we obtain prior consent for non-essential cookies and provide a preference center; you may also control cookies via your browser.

12) Push Notifications & Tracking (iOS)

We send promotional push notifications only if you opt in, and you can opt out in-app or in iOS Settings. If we engage in cross-app/site tracking for ads, we will request permission via Apple’s App Tracking Transparency prompt and only proceed if you consent.

13) Account Deletion & Data

You can delete your account in-app (Settings → Account → Delete Account). We will delete all personal data when you delete your account.

14) Contacts for Privacy Matters

  • Data Protection Officer (PDPA) & EU/UK Representative: Alessio Santo — alessio.santo@healyournervoussystem.com
  • General contact: support@healyournervoussystem.com

15) Changes to this Policy

We may update this Policy for new features or legal requirements. We’ll post updates here and adjust the Effective Date; for significant changes we’ll notify you by email or in-app. Continued use after the effective date constitutes acceptance.