1. Introduction
   Equilybrium ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wellness monitoring platform.
2. Information We Collect
   2.1 Health Data
   Stress and fatigue levels from device sensors
   Activity patterns and work break frequency
   Sleep quality and duration (if connected)
   Digital wellness scores and burnout risk indicators
   Browser usage patterns and digital behavior
   Productivity metrics and focus patterns

2.2 Personal Information
Full name and email address
Job title and department
Company/organization affiliation
Contact preferences and settings
Account credentials (encrypted)
Profile preferences and customizations

1. How We Use Your Information
   We use the collected information to:

Provide personalized wellness analytics and insights
Detect early signs of burnout and stress patterns
Generate reports and recommendations for you and your organization
Improve our AI algorithms and predictive models
Communicate important updates and wellness alerts
Ensure platform security and prevent fraud
Comply with legal obligations and regulatory requirements

1. Data Security
   We implement industry-standard security measures including:

End-to-end encryption for sensitive health data
TLS/SSL encryption for all data in transit
AES-256 encryption for data at rest
Role-based access controls and authentication
Regular security audits and penetration testing
SOC 2 Type II compliance processes
Multi-factor authentication for admin access

1. Data Retention
   We retain your data according to the following schedule:

Account Data:
Retained while account is active
Health & Wellness Metrics:
Retained for 3 years after collection
Browser Extension Data:
Retained for 90 days after collection
Aggregated Analytics:
Retained indefinitely in anonymized form
Backup Data:
Retained for 30 days after deletion request
Legal Compliance Data:
Retained as required by law

1. Your Rights
   Under GDPR, LGPD, and other privacy regulations, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your personal data
Portability: Receive your data in a structured format
Restriction: Limit how we process your data
Objection: Object to certain types of processing
Withdraw consent: Revoke consent at any time

1. Data Sharing
   We do not sell, trade, or rent your personal information.

We may share data only:

With your organization (aggregated and anonymized data only)
With service providers under strict data processing agreements
With law enforcement when legally required
With your explicit consent for specific purposes
During business transfers with equivalent privacy protections
To protect our rights and prevent fraud or abuse

1. International Data Transfers
   If we transfer data internationally, we ensure appropriate safeguards including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions for transfers to approved countries
Privacy Shield framework compliance for US transfers
LGPD, GDPR, CCPA, and PIPEDA-compliant data processing agreements
Regular assessments of international transfer safeguards
Encryption during all international data transfers

1. Children's Privacy
   Our service is not intended for children under 16. We do not knowingly collect data from children without parental consent.
2. Contact Information
   For privacy-related questions or to exercise your rights, contact:

Privacy Inquiries

privacy@equilybrium.health
Data Protection Officer

dpo@equilybrium.health
Supervisory Authorities

• Brazil: National Data Protection Authority (ANPD)
• European Union: Your local Data Protection Authority
• California, USA: California Privacy Protection Agency (CPPA)
• Canada: Office of the Privacy Commissioner of Canada
• United Kingdom: Information Commissioner's Office (ICO)

1. Changes to This Policy
   We may update this policy periodically. We will notify you of any material changes via email or in-app notification.