Privacy Policy

Who is responsible for your data

ARF Wellness Retreat Private Limited, trading as Conscious Namaz, decides how and why your personal data is processed. Under India Digital Personal Data Protection Act that makes us the data fiduciary, and you the data principal.

Grievance officer

Ahmed Mohammed Khan

Designation

Director & Grievance Officer

Email

consciousnamaz@gmail.com

What we collect

Only what the service actually needs. Grouped by why it exists rather than by where it is stored.

• Who you are — your name, email address, phone number, city and country, the language you prefer, your timezone, and whether you use WhatsApp with us.
• What you have bought — your orders, memberships, what they entitle you to and when that access ends. Card details never reach us.
• Your practice — which prayers you logged on which day, how present you felt, which sessions and recordings you opened and how far through you got, and how you rated your state before and after a practice.
• What you write — your check-in notes, assessment answers, reflections, messages to the team, and your questions to Noor.
• Retreat applications and enrolments — your answers to the application questions, an emergency contact, and anything you tell us about access needs or food, so the days can be run safely.
• Technical — the pages you visited, the device and browser you used, and a first-party identifier stored in your browser. We do not keep your IP address in our database; where we need one for rate limiting we store a one-way hash of it.

The parts that need extra care

Two kinds of what you give us are treated as sensitive, and we want to be plain about it rather than bury it.

The first is religious observance. A prayer log is a day-by-day record of how you worship, and a retreat application asks where your salah sits at the moment. That is among the most personal data a person can hand over, and it is why this brand runs on its own isolated database that is never shared with any other Conscious brand.

The second is health and wellbeing. Assessment answers, mood ratings, reflections, and the access or food notes on a retreat form all describe how you are doing. Access notes are seen by the founder and by the people running the days, and by nobody else.

None of this ever goes to an advertising platform. That is not only a promise: the code that talks to ad networks has no field these could travel in, so a mistake cannot send them.

Why we use it

Each purpose below is the reason a particular piece of data exists at all.

• To give you what you paid for — opening access, seating you in a cohort, and showing you the right sessions.
• To run the practice with you — your progress, your prescriptions, your check-ins and the reminders you asked for.
• To answer you — through the app inbox, by email, and through Noor.
• To take payment and keep the records the tax law requires us to keep.
• To keep the platform safe and working — rate limiting, error diagnosis and abuse prevention.
• To measure and advertise, but only if you agreed to it separately. See the Cookie Policy.

What you agreed to, and what you did not

Analytics and marketing are two separate choices, and both start switched off. Nothing measures you and nothing is sent to an advertising platform until you choose it. We record that choice, the version of this notice you were shown, and when — so we can show what you agreed to.

You can change your mind at any time, and withdrawing is as easy as agreeing was.

Who else sees it

We do not sell your data, and we never share it with another Conscious brand. We do use service providers to run the platform, and each one sees only what its job needs.

Supabase

Database, sign-in and file storage. Hosted in Mumbai, India.

Razorpay

Payments in Indian rupees. Sees your payment details and our order reference.

Stripe

Payments in US dollars. Sees your payment details and our order reference.

Resend

Sends our email, including your sign-in links.

Google

Runs the live sessions on Meet, and the calendar invitations for them.

Groq, Google and Anthropic

Provide the language models behind Noor. They receive your question and the recent conversation.

Google Analytics

Counts events only, and only with your analytics consent.

Meta

Measures advertising, and only with your marketing consent.

Vercel and Railway

Host the website and the app, and see ordinary web traffic.

Where it is stored

Your data lives in a dedicated database in the Mumbai region of India. Some of the providers above operate outside India, so answering you or taking your payment can involve a transfer abroad. Where that happens we rely on the provider own contractual protections.

How long we keep it

Your account data stays while your account is open. Payment and tax records are kept for as long as the law requires, which is longer than your account may last. Retreat records are kept while the retreat is being planned and run, and for as long as we may need them afterwards.

If something no longer has a reason to exist, ask us and we will remove it.

Your rights

Under India Digital Personal Data Protection Act, and under the GDPR if you are in the UK or the EU, you can ask us to:

• show you what we hold about you,
• correct anything that is wrong or out of date,
• erase what we no longer need to keep,
• stop using your data for measurement or advertising,
• nominate someone to exercise these rights if you cannot, and
• complain — first to our grievance officer, and then to the Data Protection Board of India.

Deleting your account

Write to consciousnamaz@gmail.com and we will delete your account. Deleting it removes your profile and everything attached to it: your prayer logs, your assessments, your prescriptions, your messages and your conversations with Noor. We complete this within 30 days.

Two things deliberately survive, and you should know about both. Records of payments we have taken are kept because tax law requires it. And if you applied for or attended a retreat, that record is kept separately from your account, because it is also a record of an event that happened and of people we were responsible for on the day. Ask us and we will remove what we are not required to keep.

Children

This platform is for adults. You must be at least 18 to have an account, we do not knowingly collect anything about anyone younger, and we do not direct advertising at children. If you believe a child has given us data, tell us and we will remove it.

Cookies

What we store in your browser, and how to change it, is set out in the Cookie Policy.

Changes to this notice

When this notice changes we update the version and the date at the top of the page. If a change affects what you previously agreed to, we will ask you again rather than assume.