PRIVACY POLICY

Last updated: 12.08.2026

This Privacy Policy explains how the ÇIKA Platform (“ÇIKA”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when users access or use the ÇIKA website, mobile application, and related services.

By accessing or using ÇIKA, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will request it separately.

1. Information We Collect

Depending on how you use the ÇIKA Platform, we may collect and process the following categories of information:

Contact Information

  • Email address

Account Information

  • Display name or account identifier
  • Login and authentication information
  • Profile information
  • Account preferences

Usage Information

  • Actions and product interactions within the platform
  • Content and features accessed
  • Interactions with community and platform features
  • Information relating to the use of third-party services made available through the platform

Technical and Diagnostic Information

Depending on the service and technology used to access ÇIKA, technical information may be processed, including:

  • Device type
  • Browser type
  • IP address
  • Operating system
  • Crash data
  • Other diagnostic and performance information

Payment and Subscription Information

Payments and subscriptions may be processed securely by third-party payment providers, including:

  • Stripe
  • Apple App Store
  • Google Play Store

ÇIKA does not store or have access to users’ full payment card details.

We may receive limited transaction or subscription information necessary to confirm a purchase, manage access to paid services, provide customer support, and comply with applicable financial or legal obligations.

Marketing Information

Where applicable, we may process:

  • Email and communication preferences
  • Content engagement
  • Community participation
  • Marketing consent status

2. How We Use Your Information

We may use personal data to:

  • Create, authenticate, and manage your ÇIKA account
  • Provide access to digital content and platform features
  • Facilitate access to community features and independent third-party professionals available through the platform
  • Manage subscriptions and facilitate payments through third-party providers
  • Personalize and maintain the user experience
  • Monitor, maintain, troubleshoot, and improve platform functionality
  • Develop and improve features and services
  • Provide customer support and respond to user requests
  • Send service-related communications and important platform updates
  • Send newsletters or marketing communications where permitted by law or where consent has been provided
  • Maintain platform security and prevent fraud, misuse, or unauthorized access
  • Comply with applicable legal, tax, accounting, and regulatory obligations

Platform Role Clarification

ÇIKA Wellness operates as a digital platform and intermediary.

ÇIKA does not provide medical advice, medical diagnosis, medical treatment, or healthcare services.

Any medical, health, or wellness services offered by third-party professionals through or in connection with the platform are provided independently by those professionals. Such professionals are not employees, agents, or representatives of ÇIKA unless expressly stated otherwise.

3. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar applicable data protection laws apply, we process personal data on one or more of the following legal bases:

Performance of a Contract
Where processing is necessary to create and manage an account, provide requested platform functionality, administer subscriptions, or deliver paid services.

Consent
Where consent is required, including for certain marketing communications, non-essential cookies, or similar technologies.

Legitimate Interests
Where processing is necessary for legitimate business purposes such as maintaining and improving the platform, analytics, security, fraud prevention, and customer support, provided those interests are not overridden by users’ fundamental rights and freedoms.

Legal Obligation
Where processing is required to comply with applicable tax, accounting, regulatory, or other legal obligations.

4. Sharing Your Information

We may share or otherwise make personal data available to third parties where necessary to operate the ÇIKA Platform, provide requested services, comply with legal obligations, or protect the platform and its users.

These third parties may include:

Payment and Subscription Providers

  • Stripe
  • Apple
  • Google

Platform and Infrastructure Providers

  • Kajabi
  • Cloudflare
  • Google Workspace

Analytics and Performance Providers

We may use analytics and performance technologies, including Google Analytics where applicable, to understand platform usage, performance, and engagement.

The information processed through these technologies depends on the relevant service configuration and applicable privacy settings.

Service Providers

We may use service providers for functions including:

  • IT and technical support
  • Customer support
  • Hosting and infrastructure
  • Security and fraud prevention
  • Platform maintenance

These providers may process personal data only as necessary to perform services on our behalf and subject to applicable contractual and data-protection requirements.

Legal Compliance

We may disclose personal data to competent authorities, regulators, courts, or other parties where required by applicable law or where reasonably necessary to establish, exercise, or defend legal rights.

ÇIKA does not sell users’ personal data.

Independent Professional Service Providers

Where users choose to interact with doctors, wellness professionals, or other independent professionals through the platform, information intentionally provided by the user to that professional may be exchanged directly between the user and the relevant professional.

ÇIKA does not access, store, review, or control medical records, diagnoses, prescriptions, or treatment information exchanged directly between users and independent professionals, except where processing is technically necessary for a specific platform feature and has been separately disclosed to the user.

5. Data Security

We use reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Depending on the relevant service and infrastructure, these safeguards may include:

  • Encrypted data transmission
  • Secure infrastructure and servers
  • Access controls
  • Security monitoring
  • Fraud-prevention measures
  • Periodic review of security practices

No internet-based service or electronic storage system can guarantee absolute security. We therefore continuously review appropriate measures in light of the nature of the data and available technology.

6. Data Retention and Account Deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.

Retention periods may vary depending on the type of information and the reason it is processed. In general:

  • Account information may be retained while an account remains active
  • Transaction, accounting, and payment-related records may be retained for the period required by applicable tax, accounting, or other legal obligations
  • Technical and diagnostic information may be retained for a limited period necessary for security, troubleshooting, analytics, and platform maintenance
  • Marketing information may be retained until consent is withdrawn, the user unsubscribes, or the information is no longer required for the relevant purpose

Users may request deletion of their account and associated personal data through the account-deletion functionality provided by ÇIKA where available, or by contacting us at support@cikawellness.com.

When an account-deletion request is completed, personal data associated with the account will be deleted or anonymized, except for information that ÇIKA is required or permitted to retain for legitimate purposes such as legal, regulatory, tax, accounting, fraud-prevention, dispute-resolution, or security obligations.

7. International Data Transfers

Some service providers used by ÇIKA may process personal data outside the European Economic Area (EEA).

Where applicable, we use legally recognized safeguards for international transfers, which may include:

  • European Commission Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other lawful transfer mechanisms available under applicable data-protection legislation

We take reasonable steps to ensure that service providers processing personal data on our behalf are subject to appropriate contractual, technical, and organizational data-protection requirements.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete personal data
  • Request deletion of your personal data
  • Request restriction of certain processing
  • Object to certain processing
  • Withdraw consent at any time where processing is based on consent
  • Request a portable copy of eligible personal data
  • Lodge a complaint with a competent data-protection authority

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your privacy rights, contact us at:

support@cikawellness.com

We may need to verify your identity before processing certain privacy requests.

9. Cookies and Similar Technologies

The ÇIKA website may use cookies and similar technologies to:

  • Provide essential website and platform functionality
  • Maintain security
  • Remember user preferences
  • Measure and improve performance
  • Understand platform usage and engagement

Where required by applicable law, non-essential cookies or similar technologies will be used based on the user’s consent.

For additional information, please refer to our Cookies Policy.

10. Third-Party Links and Services

The ÇIKA Platform may contain links to, integrations with, or access to third-party websites, platforms, professionals, products, or services.

Third parties operate under their own terms and privacy practices. ÇIKA is not responsible for the privacy practices, security, availability, or content of independent third-party services.

Users should review the applicable privacy policies of third-party services before providing personal information directly to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to the ÇIKA Platform, applicable laws, technologies, or our data-processing practices.

The current version will be made available through the ÇIKA Platform and will display its most recent update date.

Where required by applicable law, material changes will be communicated through appropriate means, which may include email or an in-platform notification.

12. Contact Us

For questions, privacy requests, or concerns regarding this Privacy Policy or the processing of personal data by ÇIKA, contact:

ÇIKA Wellness
Email: support@cikawellness.com

13. Health and Medical Information

ÇIKA Wellness is not a healthcare provider and does not provide medical advice, diagnosis, or treatment.

The platform may facilitate connections between users and independent medical, health, or wellness professionals.

Any medical or health-related services are provided exclusively by the relevant independent professional, who is responsible for the professional services they provide and for any information collected directly in connection with those services.

ÇIKA does not intentionally collect or maintain medical records, diagnoses, prescriptions, treatment records, or other special-category health data as part of the standard ÇIKA account.

Users should not submit sensitive medical or health information through general profile fields, community areas, or other platform features that are not specifically designed for confidential health information.

Where a user communicates health-related information directly to an independent professional, the handling of that information may also be governed by the professional’s own privacy and confidentiality obligations.