MUNAY®: Privacy Policy and Terms of Service

Data Collection

MUNAY® collects the essential information needed to provide our services—focusing on personal safety, energy forecasting, and health monitoring.

Data Protection & Security

We are committed to building a foundation of trust:

• We implement industry-leading security measures, including end-to-end encryption for all personal communications and alert data transfer.
• All sensitive data is stored in secure cloud environments with reasonable technical and organizational security measures.
• We use strong access controls to ensure that only essential personnel can access anonymized data for system maintenance.
• We have a strict policy against selling personal data to third parties.

Data Breach Notification

In the event of a data breach that may affect your personal information, MUNAY® will notify you and applicable regulatory authorities in accordance with applicable law. Under GDPR, we will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach. Under Colorado HB 18-1128, CCPA, and equivalent state laws, we will notify affected individuals in an expedient manner without unreasonable delay. Notifications will be sent to the email address associated with your account.

Do Not Track

Some web browsers transmit a “Do Not Track” (DNT) signal to websites. MUNAY®’s web platform does not currently respond to DNT signals. MUNAY® does not engage in cross-site behavioral tracking of users.

Health & Fitness Data Integration

Our health and wellness features are entirely opt-in and privacy-focused. MUNAY® integrates with platform health APIs and Bluetooth Low Energy (BLE) wearable sensors on both iOS and Android to provide wellness monitoring during safety journeys.

iOS — Apple Health

• Birth Date Data: Used solely to calculate the Physical, Emotional, and Intellectual Biorhythm cycles for your energy forecast.
• Health Data: HRV, Resting Heart Rate, and Stress Score are read from Apple Health with your explicit permission, anonymized, and used to calculate personalized wellness insights and safety recommendations.
• No specific health values are shared with other users; only aggregated wellness indicators are used for personalized features.
• You can revoke Apple Health data access at any time through the in-app Permissions Hub or iOS Settings.
• Upon account deletion, all associated health and profile data is purged from our active systems.

Android — Google Health Connect

• Data Read (Read-Only): Heart Rate, Resting Heart Rate, Heart Rate Variability (HRV/RMSSD), and Steps are read from Google Health Connect with your explicit permission.
• On-Device Processing: All Health Connect data is processed entirely on your device. It is never uploaded to MUNAY® servers or shared with any third party.
• Baseline Personalisation: First-recorded HRV and Resting Heart Rate values are saved locally on your device as personal baselines to improve the accuracy of your Stress and Readiness Scores over time.
• You can revoke Health Connect access at any time in the Health Connect app or in your Android device settings.
• Access is requested only after a clear explanation of what data is used and why. You may decline without affecting core safety features.

Android — BLE Wearable Heart Rate Sensor

• Supported Devices: MUNAY® connects to Bluetooth Low Energy (BLE) heart rate sensors compatible with the standard Heart Rate GATT profile (e.g., Polar heart rate sensors). BLE hardware is not required to use MUNAY®.
• Data Collected: Real-time Heart Rate (BPM) and RR-interval (PPI) data. On Polar devices, RR-interval data is streamed via the Polar Measurement Data (PMD) proprietary protocol to improve HRV accuracy.
• Journey-Only Activation: Bluetooth scanning and sensor connection are active only during an active safety journey via a foreground service. Bluetooth is automatically stopped when a journey ends.
• Derived Metrics: HRV (RMSSD), Stress Score (1–100), and Readiness Score (1–100) are computed on-device from BLE RR-interval data using standard RMSSD calculations. These scores are personalised using a slow exponential moving average of your baseline HRV over time.
• Data Priority: If Health Connect data is available, it takes precedence over BLE sensor data for display purposes. BLE fills in gaps when Health Connect data is unavailable or stale.
• Permissions: Requires BLUETOOTH_SCAN and BLUETOOTH_CONNECT permissions on Android 12 and above. These permissions are never used for location determination (neverForLocation flag set).
• Journey biometric snapshots (BPM, HRV) recorded during an active safety session may be transmitted to MUNAY® servers solely to provide real-time session status. No raw BLE sensor data is stored beyond the active session.

Age Requirement and Eligibility

This age requirement applies to all MUNAY® features including journey protection, Silent Alert, and wellness monitoring. We reserve the right to verify age through appropriate means and to suspend or terminate accounts that do not meet this requirement.

Acceptance and Service Scope

By using MUNAY®, you agree to these Terms. MUNAY® provides a Personal Safety & Journey Protection Platform designed to protect you during vulnerable moments through real-time location sharing, Silent Alert, and guardian coordination features.

Health Device & Biometric Data Disclaimer

• Informational Only: Heart Rate, Resting Heart Rate, HRV (Heart Rate Variability), Stress Score, and Readiness Score displayed in MUNAY® are informational indicators derived from consumer-grade wearable sensors and/or health platform APIs. They are not clinical measurements.
• No Medical Advice: Nothing in MUNAY® constitutes medical advice, diagnosis, or treatment. You should not make health or safety decisions — including decisions about physical exertion, medication, or emergency response — based solely on data displayed in the App.
• Accuracy Limitations: BLE sensor accuracy varies by device, skin contact quality, movement, and environmental conditions. Derived scores (Stress, Readiness) are algorithmic estimates based on personal baseline data and may not reflect your actual physiological state.
• Consult a Professional: If you have concerns about your heart health, stress levels, or overall well-being, consult a qualified healthcare provider.
• Emergency Situations: In a medical emergency, call your local emergency services (e.g., 911) immediately. Do not rely on MUNAY® features as a substitute for emergency medical services.
• No Liability for Health Decisions: Munay LLC expressly disclaims any liability for decisions made based on health metric data or derived scores displayed in the App.

Biometric Data — State Law Notice

MUNAY® does not collect, store, or sell biometric identifiers as defined under the Illinois Biometric Information Privacy Act (BIPA) or equivalent state biometric privacy laws. Derived wellness indicators — including Stress Score and Readiness Score — are computed on-device using standard RMSSD calculations and do not constitute biometric identifiers or templates. Raw RR-interval data streamed from BLE sensors is processed in-memory during an active session only and is not persisted as a biometric template. If you are a resident of Illinois, Texas, Washington, or any other state with biometric-specific privacy protections, your rights under those laws are not affected by your use of MUNAY®.

Third-Party Device Disclaimer — Polar 360 and Other Wearables

Device Responsibility: The manufacturer of your wearable device (e.g., Polar Electro Oy for Polar devices) is solely responsible for:

• Device hardware reliability, durability, and quality
• Device firmware updates and security patches
• Bluetooth Low Energy (BLE) connectivity and pairing stability
• Battery performance and charging functionality
• Data accuracy and sensor calibration
• Device malfunction, defects, or failure to function as intended
• Data loss due to device storage limitations or sync failures
• Manufacturer recalls or product discontinuation

Munay's Role Limited to Integration: MUNAY® acts as an integration layer only. We:

• Connect to your device via standard Bluetooth Low Energy (BLE) protocols during active safety journeys
• Read and process publicly available BLE data (Heart Rate, RR-interval) that your device transmits
• Derive wellness metrics (HRV, Stress Score, Readiness Score) from raw sensor data on your device only
• Do not control, manufacture, support, or warrant third-party device performance

Data Loss and Device Failure: If your wearable device fails, stops functioning, loses data, or disconnects unexpectedly, you must contact the device manufacturer's support team. Munay LLC cannot recover lost data, repair hardware, or provide technical support for third-party devices. MUNAY® is not responsible for any consequences resulting from device failure, including incomplete journey biometric records or inability to access health data during a safety session.

No Warranty Extension: By integrating with MUNAY®, you do not extend, transfer, or modify the manufacturer's warranty for your device. The device manufacturer's standard warranty terms and support channels apply exclusively.

Safety Features

Our safety tools are designed to enhance your personal security during vulnerable moments (e.g., first dates, solo travel, late-night commutes, solo adventures):

• Silent Alert System: Activated via the in-app SOS button (press and hold) on both iOS and Android, this feature instantly sends your precise location to your emergency contacts. No unlock required, no typing needed.
• Journey Protection: Time-bound location sharing with chosen guardians during specific activities, with automatic privacy restoration when journeys end.
• Feature Availability Limitations: Safety features — including Silent Alert, welfare checks, and SOS — require an active internet connection, GPS signal, and sufficient device battery. Network outages, GPS inaccuracy, low battery, background app restrictions imposed by your device’s operating system, or hardware failures may prevent features from operating as intended. MUNAY® makes no guarantee that alerts will be transmitted, received, or acted upon in all circumstances.
• Personal Responsibility: Safety features supplement, but do not replace, your personal judgment, discretion, or local emergency services (e.g., 911).
• MUNAY® is not liable for the outcomes of real-world incidents, including any incident in which a safety feature failed to operate due to technical, environmental, or user-related factors. Users are solely responsible for their own safety decisions and precautions.

Acceptable Use and Community Standards

MUNAY® is built to foster responsible use of safety and journey protection features:

• Honest Representation: Provide accurate information in your profile (especially birth date for Biorhythms).
• Respectful Communication: No harassment, discrimination, or hate speech against any user.
• Lawful Use: Compliance with all local laws and regulations.
• Misuse of Safety: The emergency alert system must not be used for false reports or non-emergency testing.

Account Responsibilities

By using MUNAY®, you agree to:

• Maintain the security of your login credentials.
• Immediately report any suspicious activity, technical vulnerabilities, or inappropriate content to the MUNAY® Team.
• Ensure your Location and Notification permissions are correctly set up to help maximize reliability of safety features.

MUNAY® Trademark and Intellectual Property Rights

The MUNAY® name, logo, design elements, and all proprietary content are owned by Munay LLC. You may not use, copy, reproduce, or distribute our trademark, logo, or proprietary materials without written permission. Unauthorized use may result in legal action and account termination.

User Content and Intellectual Property

You retain ownership of content you upload (photos, profile information, messages), but grant MUNAY® a license to use this content to provide our services. You represent that:

• You own or have permission to use all content you upload
• Your content does not infringe on third-party rights
• You will not upload inappropriate, misleading, or copyrighted material
• Profile photos must accurately represent your current appearance

Prohibited Content and Behavior

The following are strictly prohibited on MUNAY®:

• Fake profiles, impersonation, or misrepresentation of identity
• Spam, commercial solicitation, or promotional content
• Nudity, sexually explicit content, or inappropriate images
• Harassment, stalking, or threatening behavior
• Content promoting illegal activities, violence, or discrimination
• Attempts to circumvent safety features or app security

Termination and Account Deletion

Either you or MUNAY® may terminate your account at any time:

• Your Rights: You may delete your account at any time through app settings. Upon deletion, your profile and personal data will be permanently removed within 30 days.
• Our Rights: We may suspend or terminate accounts that violate these terms, engage in prohibited behavior, or for safety reasons.
• Data Retention: Some data may be retained for legal compliance, safety investigations, or technical requirements as outlined in our Privacy Policy.
• Effect of Termination: Upon termination, your access to MUNAY® services will cease, but these terms will continue to apply to prior use.

In-App Subscriptions (Premium & VIP)

MUNAY® offers optional paid membership tiers — Premium and VIP — purchased through the Apple App Store or Google Play Store. The following terms apply:

• Billing: Subscriptions are billed by Apple or Google on their standard billing cycles. MUNAY® does not process or store payment card information.
• Auto-Renewal: Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period.
• Cancellation: You may cancel at any time through your Apple ID or Google Play account settings. Cancellation takes effect at the end of the current paid period — no partial refunds are issued for unused time.
• Refunds: Refund requests are handled by Apple or Google under their respective policies. Contact Apple Support or Google Play Support for refund inquiries.
• Downgrade on Expiry: If a subscription expires or is cancelled, your account automatically reverts to the Basic (free) tier. Access to Premium or VIP features ceases at that time.
• Price Changes: MUNAY® may change subscription pricing. You will be notified in advance and given the opportunity to cancel before the new price takes effect.
• Complimentary Access: MUNAY® may grant complimentary Premium or VIP access at its sole discretion. Complimentary access is not subject to automatic downgrade and may be revoked at any time.

Third-Party Services

MUNAY® integrates with third-party services to enhance functionality:

• Apple Health: Optional integration subject to Apple's terms and your device permissions
• Android Health Connect (Google): Optional read-only integration for Heart Rate, Resting Heart Rate, HRV, and Steps. Data is processed on-device only and governed by Google's Health Connect Privacy Policy and your device permissions.
• Apple App Store: iOS app distribution subject to Apple's App Store Review Guidelines
• Google Play Store: Android app distribution subject to Google Play's Developer Program Policies
• Location Services: Used for emergency features and journey session tracking
• Apple App Store / Google Play: In-app subscription billing. Payment is handled entirely by Apple or Google — MUNAY® receives only subscription status and transaction identifiers.
• Groq AI (llama-3.3-70b-versatile): When AI-powered features are active, de-identified session data — including aggregated biometric indicators (e.g., stress level category, readiness tier) and journey statistics — is transmitted to Groq, Inc. for processing. Your name, email address, precise GPS coordinates, and direct personal identifiers are not included in data sent to Groq. Groq processes this data under a Data Processing Agreement with MUNAY®. You may disable AI features in app Settings at any time. See Groq’s privacy policy at groq.com/privacy for their data practices.
• We are not responsible for third-party service failures, privacy practices, or terms changes

Data Sub-Processors: Third parties who process your personal data on MUNAY®’s behalf include cloud infrastructure and hosting providers, Groq Inc. (AI processing under a Data Processing Agreement), and Apple / Google for subscription billing verification. We require all sub-processors to maintain appropriate data protection standards consistent with this Privacy Policy.

Limitation of Liability and Disclaimers

Maximum Liability: Our total liability to you is limited to the amount you paid for your current MUNAY® subscription in the 12 months preceding the claim (or $0 for Basic / free users). We disclaim liability for indirect, incidental, or consequential damages including personal injury, property damage, or emotional distress.

Indemnification

You agree to indemnify and hold harmless Munay LLC, its officers, directors, employees, and agents from any claims, damages, losses, or expenses arising from:

• Your use of MUNAY® services
• Your violation of these terms
• Your interactions with other users
• Content you upload or share
• Any misuse of safety or emergency features

Governing Law and Dispute Resolution

These terms are governed by the laws of the State of Colorado, United States, without regard to conflict of law principles. Any disputes will be resolved through binding arbitration in Colorado, except for claims involving intellectual property or injunctive relief.

• Arbitration: Disputes must be resolved individually through binding arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules. AAA rules are available at adr.org. The arbitration will be conducted in Colorado.
• No Class Actions: You waive any right to participate in a class action lawsuit or class-wide arbitration against MUNAY®.
• Jurisdiction: Colorado state and federal courts have exclusive jurisdiction for non-arbitrable matters (including intellectual property and injunctive relief claims)
• Time Limit: Claims must be brought within one year of when they arise

Service Availability

MUNAY® provides its services “as available.” We do not warrant that the service will be uninterrupted, error-free, or available at all times. Service may be temporarily unavailable due to scheduled maintenance, system failures, third-party service outages, or circumstances beyond our reasonable control — including but not limited to natural disasters, government actions, internet infrastructure failures, or acts of third parties. MUNAY® shall not be liable for any delay or failure to perform resulting from causes outside its reasonable control.

Changes to Terms

We may update these terms as MUNAY® evolves and new safety features are introduced. We will:

• Notify you of material changes via email and in-app notifications
• Provide 30 days notice before changes take effect
• Allow you to review changes before they become binding
• Give you the option to delete your account if you disagree with new terms

Continued use of MUNAY® after changes take effect constitutes acceptance of the updated terms.

European Union - GDPR Compliance

California - CCPA Compliance

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (We do not sell personal data)
• Right to Non-Discrimination: Equal treatment regardless of privacy choices

To exercise CCPA rights, contact us at info@munay.life with "CCPA Request" in the subject line.

Other International Jurisdictions

We respect privacy rights in all jurisdictions where MUNAY® operates:

• Canada (PIPEDA): Privacy rights and data breach notification requirements
• Australia (Privacy Act): Australian Privacy Principles compliance
• Brazil (LGPD): Data protection rights similar to GDPR
• Other Countries: Local privacy laws are respected where applicable

Data Retention Periods

International Age Requirements

Age requirements may vary by jurisdiction:

• Global Minimum: 18 years (as specified in Terms of Service)
• EU/UK: 18 years (above GDPR consent age of 16)
• Higher Local Requirements: We comply with stricter local age requirements where applicable

Cross-Border Data Processing

MUNAY® operates globally with servers primarily in the United States. When you use our services from outside the US:

• Your data may be transferred to and processed in the United States
• We implement appropriate safeguards for international transfers
• Standard Contractual Clauses (SCCs) protect EU data transfers
• We comply with applicable data localization requirements