Privacy Policy

PRIVACY POLICY

Last updated: July 27, 2026

1. INTRODUCTION

Hypnothera ("we", "our", or "us"), a product of El Sueno LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Hypnothera application ("the App"), including both our web platform and mobile applications.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

2. INFORMATION WE COLLECT

2.1 Information You Provide

We collect information that you provide directly to us when you use our App:

• Personal Identifiers: Such as your name, email address, and age.
• User Content: Information you provide during the AI-driven interview process, which may include personal preferences, goals, and any other information you choose to share.

2.2 Mobile Device Data

When you use our mobile application, we may collect:

• Device information (such as your mobile device ID, model, and manufacturer)
• Operating system type and version
• Device settings
• App usage data
• Crash reports and performance data

2.3 Wellness and Personal Development Data

Important Note on Data Purpose: Hypnothera is a general wellness and self-improvement product, NOT a medical device or healthcare service.

To personalize your sessions, we ask you to choose goals and to share context about what you would like to work on. These goals and your free-text answers may relate to topics such as sleep, stress, relaxation, focus, confidence, motivation, and habits, and you may choose to share further personal detail in written answers or in chat. We use this information to generate and recommend personalized wellness content for you.

a) Any information you provide (such as goals, preferences, or life experiences) is used to generate personalized wellness and self-improvement content and recommendations b) We do not use it to diagnose, treat, cure, mitigate, or monitor any disease or medical condition c) We do not ask questions designed to diagnose or assess medical or psychiatric conditions d) If you are in the EEA or UK and the information you choose to share would be treated as health-related data, we process it on the basis of your explicit consent, given when you choose to provide it. You can withdraw that consent by deleting the information or your account.

Any sensitive personal information you choose to share will be treated with appropriate care and security, but please remember that our App is designed for general wellness only and not as a substitute for professional medical or mental health services.

2.4 Voice Recordings and Images

Some optional features involve additional types of data:

• Voice cloning: if you use voice cloning, you record or upload audio samples of a voice. The samples are stored with our hosting and storage provider, Supabase, and processed by our voice providers (ElevenLabs or Fish Audio) solely to create and maintain a voice model for your account; consistent with Section 4.1, this storage and processing takes place in the United States. We use the samples and the derived voice model only to narrate sessions for your account. We do not use them to identify you, we do not sell them, and we do not use them to train or improve our general AI models. You can delete a voice request from the app before it is approved; for a completed voice, contact us at hello@hypnothera.ai. Deleting your account deletes both the samples and the derived voice.
• Images: if you add or generate a cover image for a session, we store that image and associate it with your content.
• Device permissions: microphone and photo library access are requested only at the point you use a feature that needs them, and you can revoke them in your device settings.

3. HOW WE USE YOUR INFORMATION

We use the information we collect or receive:

• To provide and maintain our App
• To generate personalized hypnotherapy scripts tailored to your needs and preferences
• To contact you regarding your account, if necessary
• To respond to your inquiries and provide customer support
• To improve our mobile application experience
• To sync your data across devices
• To enable offline access to your content

We also use limited information to measure and improve our own advertising, as described in Sections 3.2 and 4.4. We do not sell your personal data for money.

3.1 Legal Bases for Processing for EEA/UK Users

If the EU GDPR or UK GDPR applies to your use of Hypnothera, we process personal data under the following legal bases:

• Contract: To create and manage your account, generate requested sessions, provide paid features, process payments, and sync your content across devices.
• Consent: To process optional analytics, marketing cookies, push notifications, email marketing where required, and any optional sensitive information you choose to provide where consent is the appropriate legal basis.
• Legitimate interests: To keep the service secure, prevent fraud and abuse, improve product quality, respond to support requests, and understand high-level product performance where this does not override your rights.
• Legal obligation: To keep records required for tax, accounting, dispute resolution, fraud prevention, or compliance with applicable law.

You may withdraw consent at any time where we rely on consent. Withdrawing consent does not affect processing that occurred before withdrawal.

3.2 Cookies and Similar Technologies

On our website we use essential cookies and similar technologies for login, security, checkout, preferences, and remembering your cookie choices. Optional analytics, A/B testing, support, and most advertising technologies load only if you consent to those categories in our cookie banner. You can review and change your choices at any time in our Cookie Policy.

Please note that some advertising and measurement technologies — currently our Meta (Facebook) and X (Twitter) advertising pixels, and a first-party page-analytics beacon — load on all website visits independently of your cookie choices. You can prevent them from loading using your browser's tracking protection or a content blocker.

Our mobile app does not use cookies. It includes analytics and attribution software described in Section 4, which is active when you use the app. The app does not currently offer an in-app setting to disable it; if you would like us to stop this processing for your account, contact us at hello@hypnothera.ai.

4. DISCLOSURE OF YOUR INFORMATION

We use the following categories of service providers, who process data on our behalf:

• Hosting, database, and file storage: Supabase, and our application hosting providers, which store your account, your content, and uploaded files.
• AI, voice, and media providers: Anthropic, OpenAI, and Google, which receive the prompts, goals, and answers used to generate your scripts; ElevenLabs and Fish Audio, which receive script text and voice samples to generate narration and cloned voices; Groq, which receives audio you record when a feature converts your speech to text; and fal.ai, which receives prompts used to generate images and video. See Section 4.2.
• Payments and subscriptions: Stripe (web), and RevenueCat and Superwall together with Apple and Google (mobile). See Section 4.3.
• Product analytics and attribution: Amplitude (how the app is used) and Airbridge (which campaign or link brought you to the app, and deep linking) in our mobile app; Umami and Google Analytics on our website subject to your cookie choices.
• Diagnostics: Sentry, which receives crash reports, error details, and performance samples linked to your account identifier.
• Advertising and measurement: Meta, Google, X, Reddit, and TikTok, through the website technologies described in Section 3.2.
• Email and support: our email delivery and customer support providers.

These providers are bound by contract to use the data only to provide their service to us. This list may change as we change vendors; we will update this policy when it does.

We may also disclose your information:

• To comply with any court order, law, or legal process
• To enforce or apply our terms of use and other agreements
• If we believe disclosure is necessary to protect rights, property, or safety

4.1 International Data Transfers

Hypnothera is operated by El Sueno LLC in the United States. If you access the service from the European Economic Area, United Kingdom, Switzerland, or another region with data-transfer rules, your information may be transferred to and processed in the United States or other countries where our service providers operate. Where required, we rely on appropriate transfer safeguards, such as contractual protections with service providers, and we take reasonable steps to protect your information.

4.2 AI Processing

Generating a session involves sending data to the AI, voice, and image providers listed above. Depending on the feature, this can include the goals and answers you provide during onboarding or in chat, the text of your scripts, your voice samples, and images you upload or ask us to generate.

• We send this data under commercial API agreements, not consumer AI products, and we do not sell it or provide it for advertising purposes.
• Content you submit or generate may be screened automatically against our content policy, and may be reviewed by our staff where necessary to investigate abuse, respond to a support request, or comply with law.
• Generated scripts, audio, and images are stored in your account. You can delete individual sessions in the app, and deleting your account deletes the content associated with it.
• Generated content is for general wellness and self-improvement. It is not medical, psychological, or professional advice.

4.3 Payments

Purchases are processed by Stripe on the web and by Apple or Google on mobile, with RevenueCat and Superwall managing subscription entitlements. We receive purchase and subscription history, product and transaction identifiers, and your entitlement status. We do not receive your full card number or bank account details.

4.4 Advertising and US State Privacy Laws

We do not sell your personal information for money. However, the advertising and measurement technologies described in Section 3.2 may share identifiers and browsing activity with advertising partners in a way that some US state privacy laws define as "selling" or "sharing" personal information for targeted advertising.

If you are a resident of a state that provides these rights, you may opt out of that sharing. On our website, decline the marketing category in our cookie banner or in Cookie Preferences, and use your browser's tracking protection or a content blocker for the technologies noted in Section 3.2 that load independently of it. You may also contact us at hello@hypnothera.ai to exercise your rights to know, delete, correct, or opt out, and we will not discriminate against you for doing so.

5. DATA STORAGE AND SECURITY

Your information is stored in a Supabase database and, for mobile users, partially cached locally on your device for offline access. We retain your data for as long as you maintain an active account with us, unless a longer retention period is required for legal, tax, accounting, fraud-prevention, dispute-resolution, or security purposes. When information is no longer needed, we delete it or anonymize it where practical.

5.1 Mobile App Security

For our mobile application:

• Sign-in credentials and session tokens are held in your device's secure keystore (Keychain on iOS, Keystore on Android)
• Other cached data, such as downloaded audio and saved sessions, is stored in the app's private storage area and protected by your operating system's app sandbox and device-level encryption, rather than encrypted separately by us
• You can remove locally cached data by deleting individual downloads in the app, or by uninstalling the app
• We recommend enabling device-level security (such as a PIN or biometric authentication)

6. YOUR RIGHTS

You have the right to:

• Access the personal information we have about you
• Correct any inaccuracies in your personal information
• Delete your personal information
• Object to the processing of your personal information
• Request data portability

You can delete your account, and the data associated with it, from the settings screen in our mobile app. On our website, you can change your analytics and advertising cookie choices at any time in Cookie Preferences. To exercise any other right, including opting out of analytics in our mobile app, contact us at hello@hypnothera.ai and we will action your request.

6.1 Additional Rights for EEA/UK Users

Depending on where you live and how we process your data, you may also have the right to:

• Request restriction of processing
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority
• Ask us for more information about international data transfers

We may need to verify your identity before fulfilling a request. Some rights are subject to exceptions, such as where we must retain information to comply with law, protect the service, or resolve disputes.

7. CHILDREN'S PRIVACY

Our App is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on this App. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information.

8. MOBILE APP SPECIFIC PROVISIONS

8.1 Push Notifications

Our mobile app may request permission to send push notifications. You can manage these permissions through your device settings.

8.2 Offline Access

To enable offline access, we cache some of your data locally on your device. You can remove downloaded sessions individually in the app's Downloads settings.

8.3 Third-Party Services

Our mobile app includes software from the third parties named in Section 4, including Amplitude, Airbridge, Sentry, RevenueCat, Superwall, and Supabase. These services receive device and usage information, and in some cases your account identifier, as described in that section. Their own privacy policies are available on their websites.

8.4 App Tracking

Our mobile app does not access Apple's Advertising Identifier (IDFA) and does not track you across apps and websites owned by other companies. Because of this, it does not present Apple's App Tracking Transparency prompt.

9. CHANGES TO OUR PRIVACY POLICY

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date at the top of this privacy policy.

10. CONTACT INFORMATION

To ask questions or comment about this privacy policy and our privacy practices, contact us at: hello@hypnothera.ai