/* global React, ReactDOM, useReveal */

function PerlaHeader() {
  return (
    <header className="perla-header">
      <div className="max-w-[1080px] mx-auto px-6 md:px-10 h-[72px] flex items-center justify-between">
        <div className="perla-wordmark" aria-label="Perla">
          <span className="perla-pearl" aria-hidden="true" />
          <span className="wm-text">Perla</span>
        </div>
      </div>
    </header>
  );
}

function PerlaFooter() {
  return (
    <footer className="perla-footer">
      <div className="max-w-[1080px] mx-auto px-6 md:px-10">
        <div className="row">
          <div>© 2026 Mb Core Habits</div>
          <div className="flex items-center gap-5">
            <a href="privacy-policy.html">Privacy policy</a>
            <a href="privacy-notice.html">Privacy notice</a>
          </div>
        </div>
      </div>
    </footer>
  );
}

function PerlaPrivacyPolicyPage() {
  useReveal();
  return (
    <div>
      <PerlaHeader />
      <main className="section-lavender">
        <article className="max-w-[820px] mx-auto px-6 md:px-10 pt-[48px] md:pt-[64px] pb-20">
          <div className="legal-prose legal-plain">
            <h1>PRIVACY POLICY</h1>
            <p>Last updated July 2, 2026</p>

            <p>
              This Privacy Notice for Mb Core Habits ("we," "us," or "our") describes how and why we might access,
              collect, store, use, and/or share ("process") your personal information when you use our services
              ("Services"), including when you: Download and use our mobile application (Perla), or any other
              application of ours that links to this Privacy Notice. Engage with us in other related ways,
              including any sales, marketing, or events.
            </p>
            <p>
              Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and
              choices. We are responsible for making decisions about how your personal information is processed. If
              you do not agree with our policies and practices, please do not use our Services. If you still have
              any questions or concerns, please contact us at info@core-habits.com.
            </p>

            <h2>SUMMARY OF KEY POINTS</h2>
            <p>
              This summary provides key points from our Privacy Notice, but you can find out more details about any
              of these topics by using our table of contents below to find the section you are looking for.
            </p>
            <p>
              What personal information do we process? When you use our Services, we may process personal
              information depending on how you interact with us and the Services, the choices you make, and the
              features you use. Most of what you create in Perla — your notes, photos, and voice recordings — stays
              on your device. Learn more in the section "WHAT INFORMATION DO WE COLLECT?"
            </p>
            <p>
              Do we process any sensitive personal information? Depending on the information you choose to share
              during setup, some data may be considered sensitive in certain jurisdictions. We process such
              information only as voluntarily provided by you, with your consent, and solely to personalize your
              experience.
            </p>
            <p>
              Do we collect any information from third parties? We do not collect any information from third
              parties, except data you expressly authorize us to access when you choose to connect or use a
              third-party service within the App, such as Pinterest (see "PINTEREST API AND PINTEREST DATA").
            </p>
            <p>
              How do we process your information? We process your information to provide, improve, and administer
              our Services, communicate with you, for security and fraud prevention, and to comply with law. We may
              also process your information for other purposes with your consent. We process your information only
              when we have a valid legal reason to do so.
            </p>
            <p>
              In what situations and with which types of parties do we share personal information? We may share
              information in specific situations and with specific categories of third parties, such as AI and
              audio-generation providers, analytics services, subscription-management services, and cloud
              infrastructure providers. We do not sell your personal information.
            </p>
            <p>
              How do we keep your information safe? We have adequate organizational and technical processes and
              procedures in place to protect your personal information. However, no electronic transmission over
              the internet or information storage technology can be guaranteed to be 100% secure.
            </p>
            <p>
              What are your rights? Depending on where you are located geographically, the applicable privacy law
              may mean you have certain rights regarding your personal information.
            </p>
            <p>
              How do you exercise your rights? The easiest way to exercise your rights is by contacting us at
              info@core-habits.com. We will consider and act upon any request in accordance with applicable data
              protection laws.
            </p>

            <h2>TABLE OF CONTENTS</h2>
            <div className="toc">
              <p>WHAT INFORMATION DO WE COLLECT?</p>
              <p>HOW DO WE PROCESS YOUR INFORMATION?</p>
              <p>WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?</p>
              <p>WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?</p>
              <p>IMAGE AND PHOTO LIBRARY ACCESS</p>
              <p>PINTEREST API AND PINTEREST DATA</p>
              <p>VOICE AND AUDIO DATA</p>
              <p>IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?</p>
              <p>HOW LONG DO WE KEEP YOUR INFORMATION?</p>
              <p>HOW DO WE KEEP YOUR INFORMATION SAFE?</p>
              <p>DO WE COLLECT INFORMATION FROM MINORS?</p>
              <p>WHAT ARE YOUR PRIVACY RIGHTS?</p>
              <p>CONTROLS FOR DO-NOT-TRACK FEATURES</p>
              <p>DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?</p>
              <p>USER DATA COLLECTION AND USAGE FOR PERSONALIZATION</p>
              <p>DO WE MAKE UPDATES TO THIS NOTICE?</p>
              <p>HOW CAN YOU CONTACT US ABOUT THIS NOTICE?</p>
              <p>HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?</p>
            </div>

            <h2>WHAT INFORMATION DO WE COLLECT?</h2>
            <h3>Personal information you disclose to us</h3>
            <p>In Short: We collect personal information that you provide to us.</p>
            <p>
              We collect personal information that you voluntarily provide to us when you use the Services,
              participate in activities on the Services, or otherwise contact us. Perla does not require you to
              create an account or provide an email address to use the App. Within our systems and those of our
              service providers, you are identified only by a randomly generated, pseudonymous identifier rather
              than by your name or email address.
            </p>
            <p>
              Email Address and Communications. When you contact us (for example, by email at
              info@core-habits.com), we collect your email address and the contents of your message in order to
              respond to you. We may also collect and use your email address to send you updates, newsletters, or
              other communications you choose to receive from us; every such message will include an easy way to
              unsubscribe, and we do not send marketing email without your consent.
            </p>
            <p>
              Personal Information Provided by You. The personal information that we collect depends on the context
              of your interactions with us and the Services, the choices you make, and the features you use. The
              personal information we collect may include the following: first name (optional), age and/or date of
              birth (optional), your time and place of birth (optional), gender, current city or country, personal
              relationships and family details, personal goals and aspirations, emotional and mental wellness
              intentions, spiritual or manifestation preferences, lifestyle details, and any other information you
              voluntarily provide through in-app questionnaires or prompts to personalize your experience. This
              information is used only to personalize your experience. Questions that are not necessary for the
              App's core functionality — including your date of birth and your time and place of birth — are
              optional and can be skipped; skipping them does not prevent you from using the App.
            </p>
            <p>
              Sensitive Information. Depending on the information you choose to share, some data may be considered
              sensitive under certain jurisdictions, such as information relating to spiritual beliefs, wellness
              goals, or sexual orientation. Providing such information is entirely optional. We process this
              information only as voluntarily provided by you, on the basis of your explicit consent, and solely
              for the purpose of personalizing your experience. You may withdraw that consent at any time by
              editing or resetting your profile in the App.
            </p>
            <p>
              Payment Data. We may collect data necessary to process your payment if you choose to make purchases.
              All payment data is handled and stored by Apple (App Store) or Google (Google Play). We never receive
              your payment card details — only transaction metadata such as the product purchased and its status.
              You may find their privacy notices here: https://www.apple.com/legal/privacy/ and
              https://policies.google.com/privacy.
            </p>
            <p>
              Application Data. If you use our application(s), we also may collect the following information if you
              choose to provide us with access or permission: Mobile Device Access. We may request access or
              permission to certain features from your mobile device, including your mobile device's photo library
              or camera (to attach images to your entries), microphone (to record your voice), reminders and
              notifications, and other features. If you wish to change our access or permissions, you may do so in
              your device's settings. Photos you attach and the everyday voice recordings you make are stored on
              your device and are processed as described in "IMAGE AND PHOTO LIBRARY ACCESS" and "VOICE AND AUDIO
              DATA" below. Push Notifications. We may request to send you push notifications and reminders
              regarding features of the application(s). If you wish to opt out from receiving these types of
              communications, you may turn them off in your device's settings.
            </p>
            <h3>Information stored only on your device</h3>
            <p>
              The following content is created and stored locally, in the App's private storage on your device, and
              is not transmitted to us: your manifestations and their generated narration text and cached audio;
              your affirmations and saved cards; your notes, gratitude entries, signs, and check-ins, and any
              photos you attach to them; your own voice recordings made to narrate your manifestations; and your
              profile inputs, app settings, sound preferences, and reminder schedule. This content is removed when
              you delete it, use the in-app "Reset all data" function, or uninstall the App.
            </p>
            <h3>Information automatically collected</h3>
            <p>
              In Short: Limited usage information is collected automatically when you use our Services.
            </p>
            <p>
              We use a limited amount of product analytics to understand and improve the Services. This information
              does not reveal your specific identity (like your name or contact information) but may include which
              setup screens you view, the answers you give during setup, which features you use, and basic device
              and technical information. You are identified in our analytics only by a pseudonymous, randomly
              generated identifier. We may use device or advertising identifiers and similar technologies to
              measure the performance of our marketing campaigns; where required by applicable law or platform
              rules (such as Apple's App Tracking Transparency framework), such use takes place only with your
              consent. We do not collect your precise or GPS location, contacts, calendar, clipboard, files, or
              health or fitness data.
            </p>

            <h2>HOW DO WE PROCESS YOUR INFORMATION?</h2>
            <p>
              In Short: We process your information to provide, improve, and administer our Services, communicate
              with you, for security and fraud prevention, and to comply with law. We process the personal
              information for the following purposes listed below. We may also process your information for other
              purposes only with your prior explicit consent.
            </p>
            <p>
              We process your personal information for a variety of reasons, depending on how you interact with our
              Services, including: To deliver and facilitate delivery of services to the user. We may process your
              information to provide you with the requested service — in particular, to generate the personalized
              written and spoken content that is the core of the App, the answers you give during setup are sent to
              our backend and relayed to the AI providers that produce that content. To manage subscriptions and
              purchases. We may process limited information to manage the paywall, your subscription state, and the
              offers you see. To improve our Services. We may process limited usage information to understand how
              the App is used and to improve onboarding and features. To save or protect an individual's vital
              interest. We may process your information when necessary to save or protect an individual's vital
              interest, such as to prevent harm.
            </p>

            <h2>WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?</h2>
            <p>
              In Short: We only process your personal information when we believe it is necessary and we have a
              valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to
              comply with laws, to provide you with services to enter into or fulfill our contractual obligations,
              to protect your rights, or to fulfill our legitimate business interests.
            </p>
            <p>
              If you are located in the EU or UK, this section applies to you. The General Data Protection
              Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to
              process your personal information. As such, we may rely on the following legal bases to process your
              personal information: Consent. We may process your information if you have given us permission (i.e.,
              consent) to use your personal information for a specific purpose. This includes any optional
              sensitive information you choose to provide, which we process only on the basis of your explicit
              consent. You can withdraw your consent at any time. Performance of a Contract. We may process your
              personal information when we believe it is necessary to fulfill our contractual obligations to you,
              including providing our Services or at your request prior to entering into a contract with you.
              Legitimate Interests. We may process your information when we believe it is reasonably necessary to
              achieve our legitimate business interests — such as improving and securing the Services — and those
              interests do not outweigh your interests and fundamental rights and freedoms. Legal Obligations. We
              may process your information where we believe it is necessary for compliance with our legal
              obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or
              defend our legal rights, or disclose your information as evidence in litigation in which we are
              involved. Vital Interests. We may process your information where we believe it is necessary to
              protect your vital interests or the vital interests of a third party, such as situations involving
              potential threats to the safety of any person.
            </p>
            <p>
              If you are located in Canada, this section applies to you. We may process your information if you
              have given us specific permission (i.e., express consent) to use your personal information for a
              specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You
              can withdraw your consent at any time.
            </p>

            <h2>WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?</h2>
            <p>
              In Short: We may share information in specific situations described in this section and/or with the
              following categories of third parties.
            </p>
            <p>
              Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with
              third-party vendors, service providers, contractors, or agents ("third parties") who perform services
              for us or on our behalf and require access to such information to do that work. We have contracts in
              place with our third parties, which are designed to help safeguard your personal information. This
              means that they cannot do anything with your personal information unless we have instructed them to
              do it. They will also not share your personal information with any organization apart from us. They
              also commit to protect the data they hold on our behalf, to retain it for the period we instruct, and
              to provide the same or an equal level of protection for your personal information as set out in this
              Privacy Notice.
            </p>
            <p>
              The categories of third parties we may share personal information with are as follows: AI and Machine
              Learning Service Providers — currently OpenAI — which receive the relevant setup answers and requests
              you make in order to generate your personalized written content and to convert your spoken answers to
              text; Audio Generation Services — currently ElevenLabs — which receive the text to be voiced in order
              to generate spoken audio and, if you opt in, the voice sample you record in order to create a
              personal narration voice; Data Analytics Services — currently Mixpanel, configured for EU data
              residency — which receive pseudonymous product-analytics events; Subscription and Paywall Management
              Services — currently Superwall — which receive limited attributes to manage the paywall and your
              subscription state; Cloud Computing and Infrastructure Services — currently Cloudflare — which host
              our backend; and App Distributors (Apple App Store and Google Play, for purchases).
            </p>
            <p>
              We also may need to share your personal information in the following situations: Business Transfers.
              We may share or transfer your information in connection with, or during negotiations of, any merger,
              sale of company assets, financing, or acquisition of all or a portion of our business to another
              company. Legal Obligations. We may disclose your information where we are legally required to do so
              in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or
              legal process.
            </p>
            <p>We do not sell your personal information, and we have not sold or shared personal information for advertising purposes.</p>

            <h2>IMAGE AND PHOTO LIBRARY ACCESS</h2>
            <p>
              Certain features of the App allow you to attach images to the content you create — for example,
              adding photos to your gratitude entries, notes, and other parts of your private space in the App. To
              enable this, the App may request permission to access your device's photo library and/or camera.
              This permission is requested through the standard permission dialog of your operating system, is
              entirely optional, and can be changed or revoked at any time in your device's settings. If you
              decline, the rest of the App remains fully functional.
            </p>
            <p>
              If you grant access, we access only the specific images you choose to select or capture. Images you
              attach are stored in the App's private storage on your device and are used to display them back to
              you within the App as part of the content you created. Where a feature you choose to use requires
              processing an image — for example, generating personalized content from a photo you select — we and
              our service providers may process that image solely to provide that feature to you. We do not use
              your images for advertising purposes or to train AI models, and we do not scan or read your wider
              photo library. Attached images are removed when you delete the related entry, use the in-app "Reset
              all data" function, or uninstall the App.
            </p>

            <h2>PINTEREST API AND PINTEREST DATA</h2>
            <p>
              The Services may offer an optional integration with Pinterest, and we use the Pinterest API to
              provide it. If you choose to connect your Pinterest account or use a Pinterest-powered feature, we
              access only the Pinterest data you authorize — such as boards, Pins, and images you select — and we
              use that data solely to provide the relevant features to you within the App, for example to let you
              browse and save imagery into your own vision or gratitude content. We do not sell, resell, or
              redistribute Pinterest content or Pinterest-derived data to third parties, we do not use it for
              advertising purposes, and we do not use it to train AI models. Our use of the Pinterest API is
              subject to the Pinterest Developer Terms.
            </p>
            <p>
              You can disconnect Pinterest at any time in the App or by revoking the App's access in your Pinterest
              account settings. When you disconnect, we stop accessing your Pinterest data, and any
              Pinterest-derived data held on our systems is deleted within thirty (30) days. Images you have
              expressly saved into your own entries are stored in the App's private storage on your device, like
              any other attached image, and remain until you delete them, use the in-app "Reset all data" function,
              or uninstall the App.
            </p>
            <p>
              Perla and Mb Core Habits are not endorsed by, sponsored by, or affiliated with Pinterest. Pinterest
              and the Pinterest logo are trademarks of Pinterest, Inc. Pinterest's own processing of your personal
              information is governed by the Pinterest Privacy Policy, available at
              https://policy.pinterest.com/privacy-policy.
            </p>

            <h2>VOICE AND AUDIO DATA</h2>
            <p>
              If you grant microphone permission, you can record your own voice to narrate your manifestations.
              These everyday recordings are stored on your device and are not transmitted to us. If you choose to
              answer a question by speaking instead of typing, the short recording is sent to our backend and
              relayed to a speech-recognition provider (currently OpenAI) solely to convert it to text; the
              recording is not retained after transcription. Separately, if you
              choose to create an optional personal narration voice, the short voice sample you record is uploaded
              through our backend to our audio-generation provider (currently ElevenLabs) to create a synthetic
              voice for you. Voice
              characteristics can be biometric in nature; this feature is optional, is used only with your explicit
              consent, and you may only submit your own voice. You can request deletion of a created voice at any
              time by contacting us at info@core-habits.com.
            </p>

            <h2>IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?</h2>
            <p>
              In Short: We may transfer, store, and process your information in countries other than your own.
            </p>
            <p>
              Our service providers are located in the European Union, the United States, and other countries. If
              you are accessing our Services from outside these countries, please be aware that your information
              may be transferred to, stored by, and processed in the facilities of the third parties with whom we
              share your personal information (see "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"
              above).
            </p>
            <p>
              If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then
              some of these countries may not necessarily have data protection laws or other similar laws as
              comprehensive as those in your country. However, we will take all necessary measures to protect your
              personal information in accordance with this Privacy Notice and applicable law. In particular, we
              rely on the European Commission's Standard Contractual Clauses and/or adequacy decisions for
              transfers of personal information to our third-party providers outside the EEA. These clauses require
              recipients to protect all personal information that they process originating from the EEA in
              accordance with European data protection laws and regulations. Further details can be provided upon
              request.
            </p>

            <h2>HOW LONG DO WE KEEP YOUR INFORMATION?</h2>
            <p>
              In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this
              Privacy Notice unless otherwise required by law.
            </p>
            <p>
              We will only keep your personal information for as long as it is necessary for the purposes set out
              in this Privacy Notice, unless a longer retention period is required or permitted by law (such as
              tax, accounting, or other legal requirements). We do not maintain server-side user accounts; the
              setup data sent to generate your content is not used by us to build a long-term profile of you. Data
              stored on your device is kept until you delete it, use "Reset all data," or uninstall the App. When
              we have no ongoing legitimate business need to process your personal information, we will either
              delete or anonymize such information, or, if this is not possible (for example, because your personal
              information has been stored in backup archives), then we will securely store your personal
              information and isolate it from any further processing until deletion is possible.
            </p>

            <h2>HOW DO WE KEEP YOUR INFORMATION SAFE?</h2>
            <p>
              In Short: We aim to protect your personal information through a system of organizational and
              technical security measures.
            </p>
            <p>
              We have implemented appropriate and reasonable technical and organizational security measures
              designed to protect the security of any personal information we process, including encryption of data
              in transit. However, despite our safeguards and efforts to secure your information, no electronic
              transmission over the Internet or information storage technology can be guaranteed to be 100% secure,
              so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties
              will not be able to defeat our security and improperly collect, access, steal, or modify your
              information. Although we will do our best to protect your personal information, transmission of
              personal information to and from our Services is at your own risk. You should only access the
              Services within a secure environment.
            </p>

            <h2>DO WE COLLECT INFORMATION FROM MINORS?</h2>
            <p>
              In Short: We do not knowingly collect data from or market to children under 16 years of age or the
              equivalent age as specified by law in your jurisdiction.
            </p>
            <p>
              We do not knowingly collect, solicit data from, or market to children under 16 years of age or the
              equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal
              information. By using the Services, you represent that you are at least 16 or the equivalent age as
              specified by law in your jurisdiction, and that if you are under 18 you use the Services with the
              permission and supervision of a parent or guardian. If we learn that personal information from users
              under 16 years of age or the equivalent age as specified by law in your jurisdiction has been
              collected, we will take reasonable measures to promptly delete such data from our records. If you
              become aware of any data we may have collected from children under age 16 or the equivalent age as
              specified by law in your jurisdiction, please contact us at info@core-habits.com.
            </p>

            <h2>WHAT ARE YOUR PRIVACY RIGHTS?</h2>
            <p>
              In Short: Depending on your state of residence in the US or in some regions, such as the European
              Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you
              greater access to and control over your personal information.
            </p>
            <p>
              In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable
              data protection laws. These may include the right (i) to request access and obtain a copy of your
              personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of
              your personal information; (iv) if applicable, to data portability; and (v) not to be subject to
              automated decision-making. In certain circumstances, you may also have the right to object to the
              processing of your personal information. You can make such a request by contacting us by using the
              contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.
            </p>
            <p>We will consider and act upon any request in accordance with applicable data protection laws.</p>
            <p>
              If you are located in the EEA or UK and you believe we are unlawfully processing your personal
              information, you also have the right to complain to your Member State data protection authority or UK
              data protection authority. Our processing is supervised by the State Data Protection Inspectorate of
              the Republic of Lithuania (vdai.lrv.lt). If you are located in Switzerland, you may contact the
              Federal Data Protection and Information Commissioner.
            </p>
            <p>
              Withdrawing your consent: If we are relying on your consent to process your personal information,
              which may be express and/or implied consent depending on the applicable law, you have the right to
              withdraw your consent at any time. You can withdraw your consent at any time by contacting us by
              using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below,
              or, for information you provided during setup, by editing or resetting your profile in the App.
              However, please note that this will not affect the lawfulness of the processing before its withdrawal
              nor, when applicable law allows, will it affect the processing of your personal information conducted
              in reliance on lawful processing grounds other than consent.
            </p>
            <p>
              In-app controls: You can edit your profile, turn narration and sounds on or off, manage or disable
              reminders, and use "Reset all data" to erase the content stored on your device.
            </p>
            <p>
              If you have questions or comments about your privacy rights, you may email us at
              info@core-habits.com.
            </p>

            <h2>CONTROLS FOR DO-NOT-TRACK FEATURES</h2>
            <p>
              Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track
              ("DNT") feature or setting you can activate to signal your privacy preference not to have data about
              your online browsing activities monitored and collected. At this stage, no uniform technology
              standard for recognizing and implementing DNT signals has been finalized. As such, we do not
              currently respond to DNT browser signals or any other mechanism that automatically communicates your
              choice not to be tracked online. If a standard for online tracking is adopted that we must follow in
              the future, we will inform you about that practice in a revised version of this Privacy Notice.
              California law requires us to let you know how we respond to web browser DNT signals. Because there
              currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not
              respond to them at this time.
            </p>

            <h2>DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?</h2>
            <p>
              In Short: If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or certain
              other US states, you may have the right to request access to and receive details about the personal
              information we maintain about you and how we have processed it, correct inaccuracies, get a copy of,
              or delete your personal information. You may also have the right to withdraw your consent to our
              processing of your personal information. These rights may be limited in some circumstances by
              applicable law. More information is provided below.
            </p>
            <p>
              Categories of Personal Information We Collect. In the past twelve (12) months, we have collected the
              following categories of personal information, as described in more detail in "WHAT INFORMATION DO WE
              COLLECT?": Identifiers (a pseudonymous, randomly generated identifier; we do not require your real
              name, postal address, telephone number, or email address) — YES. Personal information as defined in
              the California Customer Records statute — NO. Protected classification characteristics under state or
              federal law (such as gender, age, and date of birth, where you voluntarily provide them) — YES.
              Commercial information (transaction metadata about purchases, handled by Apple or Google) — YES.
              Biometric information (an optional voice sample, only if you opt in to the personal voice feature) —
              YES, only with your explicit consent. Internet or other similar network activity (limited product
              analytics about feature and setup-screen usage) — YES. Geolocation data (precise device location) —
              NO. Audio, electronic, sensory, or similar information — only as described in "VOICE AND AUDIO DATA."
              Professional or employment-related information — NO. Education information — NO. Inferences drawn
              from collected personal information — NO. Sensitive personal information — only as voluntarily
              provided by you during setup, with your consent, to personalize your experience.
            </p>
            <p>
              We will use and retain the collected personal information as needed to provide the Services or as
              described in "HOW LONG DO WE KEEP YOUR INFORMATION?" We may also collect other personal information
              outside of these categories where you interact with us directly, for example through customer support
              channels.
            </p>
            <p>
              Will your information be shared with anyone else? We may disclose your personal information to our
              service providers pursuant to a written contract between us and each service provider, as described
              in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" We have not sold or shared any
              personal information to third parties for a business or commercial purpose in the preceding twelve
              (12) months.
            </p>
            <p>
              Your Rights. You have rights under certain US state data protection laws. However, these rights are
              not absolute, and in certain cases, we may decline your request as permitted by law. These rights
              include: Right to know whether or not we are processing your personal data. Right to access your
              personal data. Right to correct inaccuracies in your personal data. Right to request the deletion of
              your personal data. Right to obtain a copy of the personal data you previously shared with us. Right
              to non-discrimination for exercising your rights. Right to opt out of the processing of your personal
              data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance
              of decisions that produce legal or similarly significant effects ("profiling") — we do not engage in
              these activities. Depending upon the state where you live, you may also have the right to obtain a
              list of the categories of third parties to which we have disclosed personal data, and the right to
              limit use and disclosure of sensitive personal data.
            </p>
            <p>
              How to Exercise Your Rights. To exercise these rights, you can contact us by emailing us at
              info@core-habits.com. Under certain US state data protection laws, you can designate an authorized
              agent to make a request on your behalf. We may deny a request from an authorized agent that does not
              submit proof that they have been validly authorized to act on your behalf in accordance with
              applicable laws.
            </p>
            <p>
              Request Verification. Upon receiving your request, we will need to verify your identity to determine
              you are the same person about whom we have the information in our system. We will only use personal
              information provided in your request to verify your identity or authority to make the request. If we
              cannot verify your identity from the information already maintained by us, we may request that you
              provide additional information for the purposes of verifying your identity and for security or
              fraud-prevention purposes.
            </p>
            <p>
              Appeals. Under certain US state data protection laws, if we decline to take action regarding your
              request, you may appeal our decision by emailing us at info@core-habits.com. We will inform you in
              writing of any action taken or not taken in response to the appeal, including a written explanation
              of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state
              attorney general.
            </p>
            <p>
              California "Shine The Light" Law. California Civil Code Section 1798.83, also known as the "Shine The
              Light" law, permits our users who are California residents to request and obtain from us, once a year
              and free of charge, information about categories of personal information (if any) we disclosed to
              third parties for direct marketing purposes and the names and addresses of all third parties with
              which we shared personal information in the immediately preceding calendar year. We do not disclose
              personal information to third parties for their direct marketing purposes. If you are a California
              resident and would like to make such a request, please submit your request in writing to us by using
              the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"
            </p>

            <h2>USER DATA COLLECTION AND USAGE FOR PERSONALIZATION</h2>
            <p>
              To generate personalized written and audio content, we collect information you voluntarily provide
              through in-app questionnaires, preference selections, free-text prompts, and other input methods.
              This may include your personal goals, intentions, affirmations, and other details you share to tailor
              your experience. This data is used to generate and deliver personalized content to you within the
              app: when you generate a manifestation, affirmations, or a guided practice, the relevant answers are
              sent to our backend, which relays them to our AI text and audio providers to produce your
              personalized content, and limited attributes are shared with our subscription-management provider to
              tailor the offers you see. The Services may also include interactive or conversational AI features,
              such as an in-app chat or companion; messages you send within such features are processed in the same
              way — relayed through our backend to our AI providers to generate a response. We may also use this
              data in aggregate or de-identified form to improve our personalization and develop new features. All
              user-provided data is processed using encryption in transit, with access restricted to systems and
              personnel required to deliver and maintain the Service.
            </p>

            <h2>DO WE MAKE UPDATES TO THIS NOTICE?</h2>
            <p>In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.</p>
            <p>
              We may update this Privacy Notice from time to time. The updated version will be indicated by an
              updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this
              Privacy Notice, we may notify you either by prominently posting a notice of such changes or by
              directly sending you a notification. We encourage you to review this Privacy Notice frequently to be
              informed of how we are protecting your information.
            </p>

            <h2>HOW CAN YOU CONTACT US ABOUT THIS NOTICE?</h2>
            <p>
              If you have questions or comments about this notice, you may email us at info@core-habits.com or
              contact us by post at:
            </p>
            <p>
              Mb Core Habits<br />
              Lithuania
            </p>

            <h2>HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?</h2>
            <p>
              Based on the applicable laws of your country or state of residence in the US, you may have the right
              to request access to the personal information we collect from you, details about how we have
              processed it, correct inaccuracies, or delete your personal information. You may also have the right
              to withdraw your consent to our processing of your personal information. These rights may be limited
              in some circumstances by applicable law. Much of the content you create in Perla is stored only on
              your device and can be deleted directly in the App, including with the "Reset all data" function. To
              request to review, update, or delete other personal information — including requests to have
              provider-side data deleted — please email info@core-habits.com.
            </p>
          </div>
        </article>
      </main>
      <PerlaFooter />
    </div>
  );
}

const root = ReactDOM.createRoot(document.getElementById('root'));
root.render(<PerlaPrivacyPolicyPage />);
