2. Session confidentiality: Our core guarantee 🔒

Everything you or your pet share during a telepathic pet-communication session, a land-communication session, a Bach Flower consultation, or any other reading conducted by Soha Kulkarni is treated as strictly confidential.

•                Session content is 100% private.

•                The results of every session are shared only with the client who booked the session, and only through a private PDF report delivered to that client's Sopetified account.

•                We do not publish, republish, quote, tag, transcribe, index, sell, or share session content — in whole or in part, anonymised or otherwise — with any third party, on social media, in marketing, in blog content, or in AI training data.

•                We do not use session content to profile you, to personalise other services, or to inform any commercial decision beyond the delivery of that specific report.

•                PDF reports are stored securely and made available only to (a) the client who owns the booking and (b) Soha Kulkarni herself. No other person on our team has access.

•                On account deletion, all PDF reports linked to your account are removed from our systems within 30 days, subject to the retention window in §6.

This confidentiality clause is a core commitment of the Sopetified ecosystem and overrides any other clause in this Policy that would otherwise permit disclosure, except where disclosure is compelled by a court of competent jurisdiction in Mumbai, India, in which case we will notify you first, to the extent legally permitted.

3. Why we use your data

•                to create and secure your account across the ecosystem;

•                to deliver the specific service you requested (session, community feed, product purchase, birthday gift);

•                to deliver your private session report to you;

•                to send transactional emails (password reset, booking confirmation, Shopify shipping updates);

•                to moderate the community feed and prevent abuse;

•                to comply with tax, consumer-protection, and other legal obligations;

•                to improve the Services using aggregated, non-identifying analytics.

Lawful bases (EU/UK): performance of contract, legitimate interest, legal obligation.

4. Third parties we work with

•                Shopify Inc. — hosts our store; processes checkout, orders, invoices and shipping.

•                Cloud infrastructure (MongoDB Atlas + hosting provider) — encrypted at rest.

•                Emergent — app build and deployment platform.

•                Transactional email / SMS provider — password resets and booking confirmations only.

•                Courier partners (India Post / Delhivery / Shiprocket) — for delivery only.

•                Government / law-enforcement — only when legally required, only to the minimum extent required.

We do not share data with advertisers, data brokers, or analytics resellers.

5. International storage

Some vendors process data outside India. Where required we use appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

•                Account, pets, posts, comments, likes — while your account is active.

•                Session bookings and PDF reports — 3 years after last activity.

•                Shopify orders — retained by Shopify under statutory tax rules (typically 8 years in India).

•                Anonymised diagnostic / crash data — up to 24 months.

•                Encrypted backups — up to 30 days after deletion.

1. What we collect

We collect only what is necessary to run the Services.

We do not knowingly collect government IDs, biometrics, precise location, contacts lists, or advertising identifiers. We do not sell, rent or trade your data. We do not use your data to train AI models. We do not use advertising SDKs.

7. Security

•                HTTPS/TLS everywhere; passwords hashed with bcrypt.

•                Session tokens stored in the OS-native secure keystore.

•                Production database access restricted to a named list of engineers.

•                Session PDFs are access-scoped to the owning account + Soha only.

•                If a breach materially affects you we notify you within 72 hours per DPDP Act 2023 and GDPR.

8. Your rights

You can access, correct, delete, object to, restrict, and receive a portable copy of your data, and withdraw consent where we relied on it. Write to ask@sopetified.in — we respond within 30 days. You may also complain to the Data Protection Board of India or your local supervisory authority.

9. Children

Not for anyone under 13. Minors must have a parent's or guardian's consent.

10. Cookies

•                Mobile app — no cookies.

•                sopetified.in — strictly-necessary cookies only.

•                sopetified.myshopify.com — cookies as per Shopify's cookie notice.

•                No marketing or advertising cookies on any platform.

11. Third-party links

Once you leave the Sopetified app or website for Shopify (or any other linked site), that platform's own privacy notice applies.

12. Changes

Material changes are announced in the app, on sopetified.in, and by email where we have your address.

13. Contact

SoPetified · c/o Soha Kulkarni · Mumbai, India · ask@sopetified.in