Privacy Policy

1. Scope and contact

This policy explains data processing on sonozen.shop, in the app at app.sonozen.shop and through integrations needed to sell and deliver the Sono Zen service. Contact details for privacy matters appear at the beginning and end of this page.

Hotmart and other providers may also process data under their own policies, particularly during checkout or when you visit their websites. This policy does not replace their information.

2. Data we process

• Account and access: email, internal identifier, plan, access status, expiration where applicable and records needed for authentication. Passwords are stored as hashes, not as readable text.
• Purchases: information received from Hotmart, such as buyer email, product, offer, transaction status and dates. The transaction identifier used to link a purchase to access is stored as a hash. The country provided at checkout may be used to choose the access message language.
• App use: account favorites, language preferences and technical data required for playback and security. Using the service does not require downloading the entire library.
• Browsing and campaigns: IP address, technical browser and device information, pages and visit source, UTM parameters and advertising identifiers, when present and processed by configured tracking services.
• Support: email, message content and order details you provide to answer questions or resolve problems.

Full card details are entered at the Hotmart checkout, not in a Sono Zen form. We do not request medical diagnoses to use the app. Do not send passwords, full card details or unnecessary sensitive information to support.

3. Purposes and legal bases

• Contract performance and pre-contract steps: confirming purchases, creating and authenticating accounts, enabling plans, managing access periods, maintaining favorites and providing service-related support.
• Legal obligations and legal claims: keeping necessary records, handling refunds and disputes and responding to authorities where legally justified.
• Legitimate interests, where applicable: protecting the platform, preventing fraud and abuse and carrying out proportionate technical operations, with consideration for user rights and expectations.
• Consent, where required: non-essential advertising technologies and other processing that depends on this basis. Consent must be specific and withdrawable; reading this page or buying the product does not replace it.

We do not use the audio tracks for diagnosis or clinical decisions. Access may be enabled automatically based on payment events and your plan; you may request human review if you identify an error.

4. Cookies, local storage and advertising

• App session: the sz_member cookie maintains authentication, with a configured maximum lifetime of 7 days. It uses HttpOnly, Secure and SameSite protections. Logging out ends the corresponding session.
• App language: the sonozen-language preference may be saved in your browser's local storage until changed or removed. The sales page selects its language on the server, without requesting GPS location.
• Campaigns: the sales page includes UTMify scripts and its pixel integration. They may collect browsing events, campaign sources and identifiers and send information to Meta/Facebook according to the configured integration. UTM parameters and advertising identifiers in the URL may also be passed along in the checkout link.

In the current sales-page version, UTMify scripts load automatically. These legal pages do not load those scripts. Third-party technology names and lifetimes may vary by provider and configuration. Publishing this policy does not implement a consent mechanism.

You can remove local data and restrict cookies or scripts through browser settings. Blocking authentication resources may affect login. Where processing is consent-based, you may refuse or withdraw consent without losing purchased access for that reason. Contact the privacy channel if you cannot find the relevant control.

5. Language selection by IP

To deliver the page in English, Portuguese or Spanish before display, the server may query api.country.is, sending the connection's public IP address to obtain a country estimate. We do not request GPS or permission for precise device location. The estimate may fail or reflect a VPN or proxy country.

The local cache stores the country and expiration in a file outside the public directory, named with a hash of the IP address. Results may be reused for up to 24 hours; failures, for 10 minutes. These periods describe cache validity, not guaranteed immediate deletion of all infrastructure records. A hashed filename does not anonymize the IP received by the provider. If the lookup fails, we use the browser's reported language.

6. Sharing with providers

Providers used or supported in the service configuration include:

• Hotmart: checkout, payment processing and management, subscriptions, refunds and events used to link purchases to plans.
• Hostinger: hosting and operating the sales page and its server resources.
• OpenAI Sites and Cloudflare infrastructure: app hosting, database and audio-file delivery in the current architecture.
• UTMify and Meta: campaign attribution and advertising tracking according to configured scripts and integrations.
• Country.is: IP-based country estimates for language selection.
• Resend, when email delivery is enabled: sending transactional messages, such as private activation links.

Data may also be shared where necessary to comply with a legal obligation, a valid order or legal claims. Sharing must be limited to relevant purposes. This list does not mean every provider receives all your account data.

7. International transfers

Hosting, payment, email and advertising providers may operate or store data outside your country, including outside Brazil. Applicable legal mechanisms and safeguards are required for those transfers. You may request information about sharing and transfers relevant to your case; we do not assume all servers are located in the same country.

8. Retention and security

Account, purchase and favorite data are retained as needed to deliver access, provide support, fulfill obligations and handle legal claims. The end of the Basic 30-day period does not automatically erase the account or necessary history. Deletion must be requested and assessed; records may be retained where legally justified.

Activation links have limited validity; in the current configuration, an activation token is valid for 30 minutes and stored as a hash. Token validity is not a deletion deadline for all associated records. Logs and third-party data follow those services' retention periods and requirements.

We use HTTPS, password and token hashing, protected cookies, access controls and login-attempt controls. No system is completely risk-free. Keep your password secure and report suspicious access. Incidents with significant impact must be handled and communicated according to applicable requirements.

9. Your rights and how to request them

Depending on applicable law, you may request confirmation of processing and access, correction, sharing information, portability where available, anonymization, restriction or deletion of unnecessary or unlawfully processed data, withdrawal of consent and deletion of consent-based data subject to legal exceptions. You may also challenge processing and request review of automated decisions affecting access.

Send your request to the contact on this page, preferably from your account email. We may request proportionate information to verify your identity and prevent unauthorized access. Do not send sensitive documents unless necessary and requested. Requests will be assessed and answered within applicable legal deadlines.

Requesting data deletion does not replace subscription cancellation in Hotmart. Where applicable, you may also contact the competent data protection authority; in Brazil, the ANPD.

10. Minors and updates

The service is not specifically directed at children. Purchases and processing of minors' data must follow legally required authorizations and protections, including their best interests. Guardians may contact the privacy channel for information or assistance with a minor's account.

This policy may be updated when features, providers or practices actually change. The date above identifies the version. Material changes must be communicated through available channels, and fresh consent will be needed where required. Using the service does not waive your rights.