PRIVACY POLICY

Last Updated: August 19, 2026

This Privacy Policy explains how Reine OÜ, operator of the ÇIKA platform (“ÇIKA”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal data when individuals use the ÇIKA website, mobile application, community, marketplace and booking functionality, digital content, memberships, subscriptions, and related services (collectively, the “Platform”).

By using ÇIKA, you acknowledge that you have read this Privacy Policy.

Where consent is required by applicable law, consent will be requested separately.

1. DATA CONTROLLER

For personal data processed by ÇIKA in connection with the Platform, the data controller is:

Reine OÜ
Sakala tn 7-2
Kesklinna linnaosa
Tallinn 10141
Estonia

Public Contact Telephone: +355 69 443 5000
Email: info@cikawellness.com
Privacy and Support Requests: support@cikawellness.com

Independent professionals, partner businesses, app stores, payment providers, and other third parties may separately determine how they process personal data in connection with services that they provide independently.

2. INFORMATION WE PROCESS

The information processed depends on how an individual uses ÇIKA.

Account and Contact Information

When users create or use an account, we may process:

name, display name, or nickname, where provided;
email address;
user ID or account identifier;
authentication or verification information;
profile information;
account preferences;
membership or subscription status.

Authentication may include verification through email or other authentication methods supported by the relevant Platform technology.

Usage and Product Interaction Information

We may process information about interactions with the Platform, including:

content and features accessed;
courses, programs, or digital content viewed;
product and feature interactions;
community interactions;
marketplace and booking interactions;
information necessary to operate, maintain, and improve Platform functionality.

Community and User Content

Where users choose to participate in community or interactive functionality, we may process information they intentionally submit, such as:

profile information;
posts;
comments;
uploaded content; and
other information submitted through those features.

Users should not post sensitive, confidential, or medical information in public or general community areas.

Booking and Marketplace Information

ÇIKA provides access to independent professionals through marketplace and booking functionality.

When a logged-in user chooses to request or manage a booking, information processed may include:

user account identifier;
name or display name associated with the account;
email address;
professional or service selected;
booking date and time;
session duration;
price;
booking or transaction status; and
other information technically necessary to complete or administer the booking.

The standard booking flow does not require users to submit symptoms, diagnoses, prescriptions, medical records, or treatment records.

Technical and Diagnostic Information

Depending on the technology and device used to access ÇIKA, technical information may be processed, including:

device and operating-system information;
browser information where applicable;
IP address;
session and access information;
crash data;
diagnostic information; and
information necessary for security, troubleshooting, and Platform performance.

Payment and Subscription Information

Payments and subscriptions may be processed through third-party providers, including:

Apple App Store;
Google Play Store;
Stripe; and
other payment providers disclosed during the relevant transaction.

Where users enter payment-card information directly with a third-party payment provider, ÇIKA does not store users’ full payment-card details.

ÇIKA may receive limited information necessary to administer purchases and subscriptions, including:

purchase or transaction confirmation;
product or service purchased;
subscription status;
renewal or cancellation status;
transaction identifier; and
payment or booking status.

Marketing and Communications Information

Where applicable, we may process:

email address;
newsletter or marketing subscription status;
communication preferences;
consent status; and
engagement with communications.

Users may unsubscribe from marketing communications at any time.

Professional and Partner Information

Individuals or businesses that apply to participate in ÇIKA as doctors, wellness professionals, trainers, partners, or other providers may provide information necessary to assess and administer their participation.

This may include professional or business profile information, qualifications, credentials, listing information, and contact information voluntarily submitted as part of the application or provider relationship.

3. HOW WE USE PERSONAL DATA

We may use personal data to:

create, authenticate, and manage accounts;
provide access to digital content and Platform features;
administer memberships and subscriptions;
provide community functionality;
operate marketplace and booking functionality;
connect users with independent professionals;
confirm and administer purchases and bookings;
maintain and personalize the user experience;
operate, secure, troubleshoot, and improve the Platform;
analyze Platform performance and product interaction;
provide customer support;
respond to user, privacy, account, or billing requests;
send account, transactional, security, and service communications;
send marketing communications where legally permitted;
prevent fraud, abuse, misuse, and unauthorized access;
enforce applicable Platform terms;
comply with legal, tax, accounting, regulatory, and security obligations; and
establish, exercise, or defend legal claims.

We do not use personal data for purposes that are incompatible with the purpose for which it was collected without an appropriate legal basis.

4. ÇIKA AND INDEPENDENT PROFESSIONALS

ÇIKA provides its own digital content, memberships, subscriptions, courses, programs, publications, community functionality, and other Platform services.

Separately, ÇIKA may facilitate access to doctors, wellness professionals, trainers, specialists, consultants, and other independent service providers.

These professionals provide their professional services independently.

ÇIKA does not provide medical diagnosis, medical treatment, or emergency medical services.

Information that a user provides directly to an independent professional in connection with that professional’s service may be subject to the professional’s own legal, confidentiality, and privacy obligations.

5. MEDICAL AND HEALTH INFORMATION

ÇIKA does not require users to provide medical records, diagnoses, prescriptions, treatment records, symptoms, or similar medical information as part of the standard ÇIKA account or standard booking process.

A booking may identify the professional or type of service selected, together with booking details such as date, time, price, and status.

Users should not submit sensitive medical information through general profile fields, community areas, comments, or other general Platform functionality.

Any medical or health information provided directly to an independent professional outside the standard ÇIKA account and booking process is the responsibility of the relevant professional and may be subject to that professional’s own privacy and confidentiality obligations.

6. LEGAL BASIS FOR PROCESSING

Where the General Data Protection Regulation (“GDPR”) or similar applicable data-protection law applies, ÇIKA processes personal data on one or more appropriate legal bases.

Performance of a Contract

Where processing is necessary to:

create and manage an account;
provide Platform functionality;
administer a membership or subscription;
provide purchased digital services;
process or administer a booking; or
respond to service-related requests.

Consent

Where consent is required, including for certain:

marketing communications;
non-essential cookies or similar technologies; or
optional processing activities.

Consent may be withdrawn at any time.

Legitimate Interests

Where necessary for legitimate purposes such as:

Platform operation and improvement;
security;
analytics and performance;
fraud prevention;
customer support; and
establishment or defense of legal claims,

provided those interests are not overridden by the rights and freedoms of the individual.

Legal Obligation

Where processing is required to comply with applicable legal, tax, accounting, regulatory, or other legal obligations.

7. SERVICE PROVIDERS AND SHARING OF PERSONAL DATA

ÇIKA may use trusted third-party providers where necessary to operate the Platform.

Kajabi

Kajabi provides technology used for parts of the ÇIKA website, Branded Mobile App, user accounts, digital content, community functionality, communications, and related Platform services.

Sharetribe

Sharetribe provides technology used for ÇIKA marketplace and booking functionality.

When users choose to use marketplace or booking functionality, Sharetribe may technically process information necessary to provide that functionality, such as account information and booking or transaction information.

Payment and Subscription Providers

Payment and subscription services may be provided through:

Apple;
Google;
Stripe; and
other payment providers disclosed to users where applicable.

These providers may process information in accordance with their own applicable terms and privacy policies.

Other Service Providers

ÇIKA may use providers for purposes such as:

hosting and infrastructure;
communications;
technical support;
security;
analytics and performance; and
customer support.

Where a service provider processes personal data on behalf of ÇIKA, it is permitted to process that information only as necessary for the relevant service and subject to applicable data-protection requirements.

Independent Professionals

Where a user chooses to request a service from an independent professional, information necessary to facilitate the booking or service may be made available to the relevant professional.

Legal Requirements

Personal data may be disclosed where required by law or where reasonably necessary to comply with a lawful request, protect rights or security, or establish, exercise, or defend legal claims.

ÇIKA does not sell users’ personal data.

8. MOBILE APP DATA AND TRACKING

The ÇIKA mobile application uses technology provided through the Kajabi Branded App environment together with other ÇIKA functionality made accessible through the app.

Depending on the functionality used, mobile-app processing may include:

name or display name where provided;
email address;
user or account identifier;
authentication information;
product interaction;
marketplace and booking interaction;
crash data; and
other diagnostic data.

Under the current configuration, ÇIKA does not use these data categories for third-party advertising tracking across unrelated apps or websites.

If the Platform’s data-processing practices materially change, applicable privacy disclosures will be updated as required.

9. DATA SECURITY

ÇIKA uses reasonable and appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Depending on the relevant service, these measures may include:

secure data transmission;
access controls;
authentication and verification measures;
secure infrastructure;
monitoring;
security and fraud-prevention measures; and
appropriate service-provider safeguards.

No electronic system can guarantee absolute security.

10. DATA RETENTION

Personal data is retained only for as long as reasonably necessary for the purpose for which it was processed or as required or permitted by applicable law.

Retention depends on the type of information and purpose of processing.

For example:

account information may be retained while an account remains active;
booking and transaction information may be retained as reasonably necessary to administer transactions, resolve disputes, or comply with legal obligations;
accounting and transaction records may be retained for legally required periods;
technical and diagnostic information may be retained for a limited period necessary for security, troubleshooting, and Platform maintenance;
support correspondence may be retained as reasonably necessary to address the relevant request;
marketing information may be retained until the user withdraws consent, unsubscribes, or the information is no longer required.

When information is no longer required, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.

11. ACCOUNT AND DATA DELETION

Users may initiate deletion of their ÇIKA account through the account-deletion functionality made available by the Platform where available.

Users may also contact:

support@cikawellness.com

for privacy-related assistance.

When account deletion is completed, personal data associated with the account will be deleted or anonymized except where information must or may lawfully be retained for purposes including:

legal or regulatory compliance;
accounting or tax obligations;
fraud prevention;
security;
dispute resolution;
outstanding transactions; or
establishment or defense of legal claims.

Deleting a ÇIKA account does not automatically cancel an active subscription managed separately through Apple or Google.

Such subscriptions must be managed through the applicable app-store account.

12. PRIVACY RIGHTS

Depending on applicable law and location, individuals may have rights including:

access to personal data;
correction of inaccurate personal data;
deletion of personal data;
restriction of certain processing;
objection to certain processing;
withdrawal of consent where processing is based on consent;
data portability where applicable;
objection to direct marketing; and
the right to lodge a complaint with a competent data-protection authority.

To exercise a privacy right, contact:

support@cikawellness.com

We may need to verify the identity of the person making a request.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

13. INTERNATIONAL DATA TRANSFERS

Some technology or service providers used by ÇIKA may process personal data outside the European Economic Area.

Where applicable law requires safeguards for such transfers, appropriate lawful mechanisms may be used, including:

adequacy decisions;
European Commission Standard Contractual Clauses; or
other lawful transfer mechanisms.

14. COOKIES AND SIMILAR TECHNOLOGIES

The ÇIKA website may use cookies and similar technologies for purposes including:

essential functionality;
security;
authentication;
preferences;
performance; and
analytics.

Where applicable law requires consent, non-essential cookies and similar technologies will be used only after the required consent has been obtained.

Additional information is provided in the ÇIKA Cookies Policy.

15. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to or integrations with independent websites, applications, professionals, businesses, or services.

Where a third party independently determines how personal data is processed, that third party is responsible for its own processing and privacy practices.

Users should review relevant third-party privacy information when providing personal data directly to an independent third party.

16. CHILDREN

The ÇIKA Platform is intended for individuals who meet the eligibility requirements stated in the ÇIKA Terms & Conditions.

ÇIKA does not knowingly seek to collect personal data from children who are not legally eligible to use the Platform independently.

If such information is identified, appropriate steps will be taken in accordance with applicable law.

17. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated to reflect changes in:

Platform functionality;
data-processing practices;
technology providers;
applicable law or regulation; or
security or operational requirements.

The current version will display the most recent Last Updated date.

Where required by applicable law, material changes will be communicated through an appropriate method.

Where a new processing activity requires consent, consent will be requested separately where required.

18. CONTACT

For privacy questions, complaints, account-deletion assistance, or requests relating to personal data, contact: