Privacy Policy

Last updated: 3 October 2026

1. Who we are

Kailash ("we", "us") is an online retreat service for burnout. The controller of your personal data is Nikita, Warsaw, Poland. Contact: contact.wizard.io@gmail.com.

2. What we collect

• Account data: your email address and password. Passwords are stored encrypted by our authentication provider; we never see them.
• Usage data: how many sessions you have completed and your plan, so your progress follows you across devices.
• Consents: the date you accepted the Terms and whether you agreed to receive marketing emails.
• Payment data: handled entirely by our payment provider. We receive confirmation of purchase, never your card details.

Your written reflections and the feelings you choose in "Ask Shiva" stay in your browser on your device. They are not sent to us.

3. Why we use it (legal basis)

• To provide your account, free sessions and purchased retreats — performance of a contract (Art. 6(1)(b) GDPR).
• To send marketing emails, only if you opted in — your consent (Art. 6(1)(a) GDPR). You can withdraw it anytime.
• To keep records required by tax and accounting law — legal obligation (Art. 6(1)(c) GDPR).

4. Who processes your data

• Supabase — account and database hosting.
• GitHub Pages — website hosting.
• Google Fonts — delivers the site's fonts; your browser connects to Google's servers.
• Lemon Squeezy — payments and invoices.

Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

We keep your account data while your account exists. If you delete your account, we erase it within 30 days, except records we must keep by law (such as invoices).

6. Your rights

You can request access, correction, deletion, restriction or a copy of your data, object to processing, and withdraw consent at any time. Write to contact.wizard.io@gmail.com. You may also lodge a complaint with your local data protection authority.

7. Cookies and local storage

We do not use advertising or tracking cookies. We use your browser's local storage to remember your progress, your sound preference and your sign-in session. This is strictly necessary for the service to work.

8. Changes

If we change this policy, we will update the date above and, for important changes, tell you by email.