Privacy Policy

1. What data is collected

Data you provide:

• Name, email and, when you choose to give it, phone number — in the quiz, contact forms and sign-up.
• Your answers to the 5 Elements Quiz and to site surveys.
• The content of your conversations with Ayla AI.
• Purchase data (product, date, status), received from Hotmart. Card data never passes through this site.
• Messages you send over WhatsApp.

2. Data collected automatically

While you browse, we collect IP address, device and browser type, pages visited and time spent, through cookies and Google Analytics. Analytics cookies depend on your consent, given in the banner shown on your first visit.

3. Sensitive data — read carefully

The quiz and the conversations with Ayla deal with relationships, the body, desire and sexuality. That means the data you provide may reveal information about your sex life and your health, and Brazil's LGPD classifies that as sensitive personal data (art. 5, II).

This data is processed on the basis of your specific, highlighted consent, and used solely to deliver the service, generate your diagnosis and reply to you. It is not sold, not used for advertising, and not shared with anyone beyond the processors listed below.

You may request its deletion at any time.

4. Why the data is used, and on what legal basis

Each use has a legal basis under the LGPD:

• Delivering the service, the product and support — performance of a contract (art. 7, V).
• Generating your quiz result and Ayla AI's answers — consent and performance of a contract.
• Processing sensitive data (sex life, health) — specific consent (art. 11, I).
• Sending content and news by email — consent (art. 7, I), revocable at any time.
• Measuring audience and improving the site — legitimate interest (art. 7, IX), with analytics cookies conditioned on your consent.
• Issuing invoices and keeping tax records — compliance with a legal obligation (art. 7, II).

5. Who the data is shared with

We do not sell data. We share it only with the providers needed to run the site, acting as processors:

• Google (Gemini) — receives the content of your conversations with Ayla AI in order to generate the reply. Without this, Ayla does not work.
• Google Analytics — browsing data, in aggregate form.
• Supabase — the database holding sign-up data, quiz answers and history.
• Vercel — site hosting and access logs.
• Resend — transactional emails (such as Ayla's access code).
• Hotmart — payment, subscription and refund processing.
• WhatsApp (Meta) — when you choose to talk through that channel.

6. International transfer

Some of these providers process data outside Brazil, mainly in the United States. The transfer is made under article 33 of the LGPD and the contractual clauses and safeguards offered by each provider.

7. How long data is kept

Sign-up and service data is kept for as long as the relationship lasts and for the period needed to meet legal obligations — generally 5 years for tax records.

Data from people who only took the quiz or downloaded content is kept until you ask for deletion.

8. Your rights

The LGPD (art. 18) gives you the right to demand, at any time:

• Confirmation that your data is being processed, and access to it.
• Correction of incomplete, inaccurate or outdated data.
• Anonymisation, blocking or deletion of unnecessary data or data processed unlawfully.
• Portability of your data to another provider.
• Deletion of data processed on the basis of your consent.
• Information about who your data has been shared with.
• Withdrawal of consent, at any time.

9. How to exercise your rights

Write to suporte@shaktijaya.com.br. Requests are answered within 15 days. If you are not satisfied with the answer, you may complain to the ANPD (Brazil's National Data Protection Authority).

10. Security

Data travels encrypted (HTTPS) and the database uses row-level access control, so one person cannot reach another person's data. No system is infallible: if a security incident poses relevant risk to you, you and the ANPD will be notified, as the law requires.

11. Minors

The site and the services are intended for people over 18 and do not knowingly collect data from children or adolescents.

12. Changes to this policy

This policy may be updated. The date of the last update is at the top of the page, and material changes are announced on the site.