1. Who we are

Soham Collective Pty Ltd (ABN 580987731), trading as Soham Collective, Soham Inner Calm, Prakash Bhattarai, and Meditationforbeginners.com. Contact us at prakasbhattarai@gmail.com.

2. What is “consumer health data”

Consumer health data generally means personal information that is linked, or reasonably linkable, to you and that identifies your past, present, or future physical or mental health status, including certain inferences drawn from other data. In the App, this can include:

• journal entries you write;
• onboarding questionnaire answers relating to your wellbeing, meditation experience, and goals;
• mood and emotion labels you select in the App;
• the free-text emotional context you provide to generate an AI meditation, and your AI coach conversation content;
• course, challenge, and session activity where it reflects your wellbeing (for example, completion of a specific mental-health-related course).

Your daily mood check-in selection and meditation streaks/history are stored only on your device and are not sent to us, so they are not collected by us as described in this notice.

3. How we collect consumer health data

We collect this information directly from you, when you choose to write a journal entry, answer onboarding questions, select a mood label that is saved to your account, or describe how you feel to the AI coach or meditation generator.

4. Why we collect and use it

• To provide and personalise the Services, including generating AI-guided meditations and coach replies.
• To let you review your own journal entries, course progress, and reviews within the App.
• To respond to your support requests and feedback.

5. Who we share it with

We share consumer health data only with the service providers needed to run the Services:

• OpenAI — receives AI coach and meditation free-text; for generating AI responses and scripts.
• Our hosting / backend provider — receives journal entries, onboarding answers, and mood labels; for running the service and database.

We do not sell consumer health data, and we do not share it with anyone for advertising purposes.

6. Your rights

• Right to confirm whether we process your consumer health data, and to access it.
• Right to withdraw your consent to our collection or sharing of it, at any time.
• Right to have your consumer health data deleted.

We will respond to a verified request within 45 days, or within 45 days plus a permitted extension where allowed by law, free of charge for a reasonable number of requests per year.

7. How to submit a request

Email prakasbhattarai@gmail.com with “Consumer Health Data Request” in the subject line. We may need to verify your identity before actioning your request.

8. Right to appeal

If we decline your request, you may appeal by replying to our decision email. If your appeal is also denied, you may contact the Attorney General's office in your state of residence.

9. Geofencing

We do not use geofencing technology around any in-person healthcare facility to identify or track consumers seeking healthcare services, or to send them notifications or advertisements.

10. Data security

We describe how we secure your information, including the current limitations of our security measures, in our main Privacy Policy.

11. Changes to this notice

We may update this notice from time to time. Material changes will be reflected in the “Effective date” above.

12. Contact us

Prakash Bhattarai / Soham Collective Pty Ltd, prakasbhattarai@gmail.com, prakashbhattarai.com.

About this document

This document was prepared with AI drafting assistance based on publicly available summaries of Washington's My Health My Data Act and comparable US state consumer health data laws current as of August 2026. It is provided for convenience and does not constitute legal advice, and no attorney-client relationship is formed by its use. A qualified US-licensed lawyer should confirm which state consumer health data laws apply to your user base and review this notice before publishing. This notice must be hosted as a genuinely standalone document (a distinct link, not merged into the general Privacy Policy) on your homepage, app store listing pages, and inside the App, as required by these laws.