EgnaFlex Inc. ("EgnaFlex", "we", "our", "us") is committed to ensuring that all users have clear, accessible, and enforceable rights over their personal and sensitive data. Your rights may vary depending on your location (e.g., EU/EEA, UK, US, or other jurisdictions). This page summarizes all data rights available to you under GDPR, CCPA, MHMD, and other applicable privacy laws.

1. Right to Access Your Data

You have the right to request:

• A copy of the personal data we hold about you
• A summary of how your data is used
• Categories of data processed
• Third parties involved in data processing

We will provide this in a structured, accessible format within 30 days.

2. Right to Delete Your Data

You may request deletion of:

• Your EgnaFlex account
• All personal data
• All health & wellness data
• Daily entries & tracking logs
• Profile data
• Device data
• Analytics identifiers

When deletion is requested:

• All encrypted health data is wiped permanently
• Backups are also cleared
• Data cannot be recovered due to end-to-end encryption

3. Right to Correct Your Data

If any personal information is inaccurate or incomplete, you may request corrections at any time.

4. Right to Withdraw Consent

For any data processing that is based on your consent, you may withdraw that consent at any time without penalty.

Examples:

• Health data logging
• Analytics tracking
• Notifications
• Optional profiling (AI-powered insights)

5. Right to Data Portability

You may request:

• Export of your full data set
• Export of encrypted data logs
• Export of daily tracking entries

Data will be delivered in a machine-readable format (JSON or CSV).

6. Right to Restrict Processing

You may request that we stop using your data while still allowing us to store it.

7. Right to Object to Processing

You may object to:

• Analytics processing
• Profiling
• Certain product features
• Non-essential data collection

We will honor requests where legally required.

8. Rights for EU / UK Users (GDPR)

You have all GDPR fundamental rights:

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Automated decision-making opt-out

9. Rights for California Users (CCPA/CPRA)

You may:

• Request what personal information has been collected
• Request deletion
• Request information about data sharing
• Opt-out of sale or sharing (EgnaFlex never sells data)

10. How to Submit a Data Request

You can submit a data request via:

• Email: info@egnaflex.com
• Or through the app: Settings → Account → Privacy → Request Data / Delete Account