Privacy Policy

Who we are

• This website and learning platform is run by Breath Code Therapy, founded by Dr. Daniel Rizk. In this policy, "we", "us" and "our" mean Breath Code Therapy.
• We are responsible for the personal information you share with us through the website, your account, our courses, sessions, webinars and community.
• This policy explains what we collect, why, who helps us process it, how long we keep it and the choices you have. If anything here is unclear, write to us at the address at the end of this page.

Information you give us

• Account details: your name, email address and password when you sign up, plus a phone number if you choose to add one. If you sign in with Google or Apple, we receive your name and email address from that provider. We never receive your Google or Apple password.
• Purchases and bookings: the courses, programs, live sessions, private sessions, webinars and memberships you buy or register for, the dates you book and any coupon you use.
• Booking requests: if you request a session without an account, we ask for your name, email address and phone number so we can confirm your appointment.
• Assessment answers: if you take our assessment, we keep your answers, your score and the program it recommended, together with your name and email address if you provide them.
• Weekly check ins: if you use the progress tracker, we keep the 1 to 10 ratings you give for how you have felt, how calm you have been and how regularly you practised, along with any note you add.
• Community activity: the posts, comments and reactions you share, the groups you join, and any report you make about content that breaks the community rules.
• Messages and sign ups: what you send through our contact form (name, email address, optional phone number, subject and message), and the details you enter on our sign up pages, newsletter form and webinar registration forms.

Information collected when you use the platform

• Learning activity: the lessons you complete, the videos you watch and how far you get, and the certificates you earn. Certificates carry a public verification number so others can confirm they are genuine.
• Session and webinar attendance: when you join, how often you reconnect and whether you attended, so we can keep accurate attendance records and send replays.
• Sign in records: when your account was created and when you last signed in.
• Preferences: your chosen language and display theme.
• Page visits on our sign up pages: if you accept analytics cookies, we record a random visitor ID, your IP address, your browser type and the page that referred you. Without that consent, the visit is counted without any of these details.
• Technical requests: like every website, our servers see your IP address when your browser connects. We use it briefly to protect our forms from spam and abuse, and we do not store it for that purpose.

Your wellbeing information

• Assessment answers and weekly check ins describe how you feel, so we treat them with extra care. Filling them in is always optional, and by doing so you agree to us using them for the purposes described here.
• Your weekly check ins are shown only to you, on your dashboard. They are not shared with therapists, instructors or other members.
• Assessment results are seen by our team so that we can recommend a suitable program and follow up with you if you asked us to.
• The assessment and the progress tracker are tools for self reflection. They are not a medical diagnosis and do not replace advice from your doctor.

How we use your information

• To run your account and give you what you signed up for: access to courses, bookings, live and private sessions, webinars, membership benefits and certificates. (Our legal basis: performing our agreement with you.)
• To take payments, issue receipts and keep financial records. (Performing our agreement, and our legal obligations.)
• To send service emails such as welcome messages, booking and payment confirmations, session and webinar reminders, replay links and course reminders. (Performing our agreement.)
• To send newsletters and offers about our programs, only if you have subscribed or are already a customer, and with an unsubscribe link in every message. (Your consent, or our legitimate interest in telling customers about similar programs.)
• To understand which pages and programs work well, using the analytics you have allowed. (Your consent.)
• To keep the community safe, review reports, prevent fraud and protect the platform. (Our legitimate interests.)
• To answer your questions and requests. (Our legitimate interests, or taking steps you asked for.)
• We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you. The assessment only suggests a program; the choice is always yours.

Live sessions, private sessions and video

• Online sessions and webinars take place in video rooms provided by Daily. Your camera, microphone and name are shared with the other people in the room only while you are connected.
• For private one to one sessions, the therapist or instructor running your session can see your name, email address, phone number and booking details so they can prepare and contact you.
• Some group sessions and webinars may be recorded so that registered participants can watch a replay. We will always tell you before a session is recorded. Private one to one sessions are not recorded unless you agree beforehand.
• Calendar invitations we send contain only the session title, time and joining link.
• Course videos may be played through YouTube or Vimeo. When you play one, those services may collect information under their own privacy policies.

Cookies and similar technologies

• Essential: keeping you signed in, remembering your language and display theme, and remembering your cookie choice. These cannot be switched off because the site does not work without them.
• Analytics (only if you accept): the visitor ID described above, used to measure visits to our sign up pages. You can change your choice at any time with the cookie settings button on this page.
• We do not use advertising cookies, and we do not allow advertising networks to track you on our site.

Who we share it with

• We share personal information only with the companies that help us run the platform, and only as much as they need: Supabase (database, file storage and sign in), Vercel (website hosting), Stripe (payments, including Apple Pay and Google Pay), Resend (email delivery and newsletter subscriptions), and Daily (video sessions). If you sign in with Google or Apple, that provider also confirms your identity to us.
• Card details are entered directly with Stripe. We never see or store your full card number.
• Members of our team, including therapists and community moderators, see only what they need for their role.
• Your community posts, comments, display name and profile photo are visible to other members of the groups you take part in.
• We may disclose information if the law requires it, to protect someone's safety, or as part of a sale or reorganisation of our business, in which case this policy will continue to apply to your information.

International transfers

• Our service providers may store or process information outside your country, including in the United States and the European Union. Where this happens, we rely on the safeguards they provide, such as the European Commission's standard contractual clauses, so your information stays protected to the standard described in this policy.

How long we keep it

• Account, learning, booking, check in and community information is kept for as long as your account is open.
• When you delete your account, we delete your profile together with your bookings, registrations, assessment results, check ins, progress, certificates, community activity and sign up page entries.
• Payment records are kept by Stripe, and by us where needed, for as long as tax and accounting laws require.
• If you subscribed to our newsletter, your subscription stays active until you unsubscribe. Deleting your account does not unsubscribe you automatically, so please use the unsubscribe link or contact us.
• Messages you send through the contact form are kept in our inbox for as long as needed to deal with your request.

How we protect it

• All traffic to the site is encrypted with HTTPS, and our providers encrypt stored data.
• Passwords are handled by our sign in provider and stored only in a secure, hashed form. We never see them.
• Access to personal information inside our team is limited by role, so each person sees only what their work requires.
• No system is completely secure. If a breach affects your personal information, we will tell you and the relevant authorities where the law requires us to.

Your rights

• You can download a copy of your data or permanently delete your account at any time from your account page. Deleting your account also cancels any active membership.
• You can update your name and phone number from your account page, or ask us to correct anything else.
• Depending on where you live, you may also have the right to ask us to correct, restrict or stop using your information, to object to how we use it, or to receive it in a format you can take elsewhere.
• Where we rely on your consent, such as analytics cookies, newsletters or optional wellbeing information, you can withdraw it at any time. This does not affect anything we did before you withdrew it.
• To make a request, email us from the address linked to your account. We will reply within one month. You also have the right to complain to your local data protection authority.

Children

• Our programs are designed for adults. You must be at least 18 to create an account or book a session. If you believe a child has given us personal information, please contact us and we will delete it.

Changes to this policy

• We will update this policy when the platform changes, for example when we add new features or work with a new provider. The date at the top of the page shows the latest version. If a change significantly affects how we use your information, we will let you know by email or on the site before it takes effect.

Contact

Questions about your data? Email info@authenticknowledgeacademy.com.