Who We Are and How to Reach Us

Ayusha is a service provided by Taravaliya EU, the sole proprietorship (Einzelunternehmen) of Fernando Kahapola in Bonn, Germany. Taravaliya EU is the data controller, which means we decide how and why your information is handled and we are responsible for protecting it.

You can reach us at Taravaliya EU, Röckumstraße 88, 53121 Bonn, Germany, or by email at ayubowan@ayusha.care. For any privacy question, or to exercise your rights, you can contact Fernando Kahapola at contact@ayusha.care. Our Data Protection Officer is Henrike Schuhknecht, reachable at the same postal address or at dpo@ayusha.care.

What Information We Collect

We collect the answers you choose to give: your constitution questionnaire, the lens questions, and your current-state and daily check-in readings. We collect your birth details (date, time, and place), which we keep encrypted.

If you switch them on, we collect the optional cycle and life-stage layer, or the reproductive and vitality layer. If you connect device-health signals from Apple Health or Google, and only then, we use the readings you allow. We also hold your account details, such as your email, and your subscription status.

Most of what you share here is health information, which the law treats as special-category data and protects more strictly. We treat it that way throughout.

Why We Use It, and Our Legal Bases

We use your information to provide the service you signed up for: to build and personalise your reading, your guidance, and your daily experience, and to run your account and subscription. The legal basis for this is the performance of our contract with you, under Article 6(1)(b) of the GDPR.

Because your answers are health information (special-category data), we rely separately on your explicit consent to process it, under Article 9(2)(a). Both bases apply together: the contract to run the service, and your explicit consent for the health data within it. You give that consent in the app, and you can withdraw it at any time. We do not rely on legitimate interests for any of this processing.

How We Store and Protect It

Your information is encrypted at rest. Your most identifying birth details are envelope-encrypted, meaning each person's data is locked with its own key that is itself locked by a master key held only in our trusted server tier, so the readable form never leaves that protected space.

Your health information is processed and stored in the European Union. Access is tightly controlled: strict database access rules mean you can only ever reach your own records, sensitive writes are brokered through secured server functions, and a health-consent gate is enforced both in those functions and at the database layer.

Who We Share It With

We do not sell your information, and we never use your health data for advertising, ad profiling, or cross-app tracking.

We share data only with the service providers (processors) we need to run Ayusha: our cloud hosting and database provider, which is located in the European Union, and, where you take out a paid subscription, the app stores (Apple App Store and Google Play) that handle the purchase. Each processor is bound by a data-processing agreement and may use your data only on our instructions. Any provider outside the European Economic Area is covered by an approved transfer safeguard, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. The current list of our processors, and a copy of the safeguards, is available on request.

How Long We Keep It, and Erasing It

We keep your information while your account is active, so your patterns and history stay meaningful over time.

You can delete your account from inside the app at any time. Deletion erases your data: the encryption keys that protect your records are destroyed, so the encrypted data becomes permanently unreadable, even in backups. If you switch off an optional consent layer, Ayusha stops collecting and using that data from that moment, and new entries for it are refused. Data already stored for that layer is erased when you delete your account.

In some cases the law requires us to keep certain limited records for a set period, such as billing or tax records. Where that applies, we keep only what the law requires, for as long as it requires, and erase everything else when you delete your account.

Your Rights

You have the right to access your information, to correct it, to have it erased, to restrict or object to how we use it, and to receive a portable copy of it. You can export everything we hold about you as a single file from inside the app.

You can withdraw any consent at any time, and doing so is as easy as giving it: a single switch in Privacy and Consent. Withdrawing consent does not affect anything we lawfully did before you withdrew.

You also have the right to complain to a data-protection supervisory authority. Our lead supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), and you may also contact the supervisory authority where you live.

How Your Reading Is Produced

Your reading is produced by the Ayusha engine, our own proprietary algorithm, developed in-house and built on the classical Ayurvedic texts. It is deterministic and rules-based: the same answers always produce the same reading. It is a structured, educational reflection of your own answers. It is not a diagnosis, it does not generate medical advice, and it never replaces a professional.

The engine gives you educational wellbeing guidance. It does not make decisions that produce legal effects, or similarly significant effects, for you, so it is not the kind of automated decision-making addressed by Article 22 of the GDPR. You stay in control of what you do with your reading.

Website Analytics

On ayusha.care we use one small, anonymous visit counter that we built and host ourselves. It only runs if you accept it in the banner. It stores the page you viewed, the site that referred you (as a plain domain), your coarse location (country and region, never your IP address), your language choice, the time you spent on the page, a coarse device category (mobile, desktop or tablet), a random session number that disappears when you close the tab, and a random visitor number kept in your browser so repeat visits count as one visitor. Neither number contains anything about you, and you can remove them at any time by declining in Cookie settings or clearing your browser data. It never stores your IP address, your full user-agent or any device fingerprint, or any cookie, and it never follows you to other sites. The counts are processed in the European Union. You can decline, or change your choice at any time, via the Cookie settings link in the footer.

Children

Ayusha is intended for adults. The service is not directed to children, and you must be at least 18 years old to create an account. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with information, please contact us and we will delete it.

Changes to This Policy

We may update this policy as Ayusha evolves. Each version carries a version label and a last-updated date, and every consent decision you make is recorded against the version you saw, so what you agreed to is always clear.

When we make a material change, one that affects your rights or how we use your information, we present the updated document and ask for your fresh agreement before you continue. Minor clarifications may be published without a fresh request, and the current version is always available in the app.

Contact

For any privacy question, to exercise your rights, or to reach our data protection contact, Fernando Kahapola, write to contact@ayusha.care. You can also read our Terms of Service and our Medical Disclaimer.