Privacy Policy

1. Introduction

Gentle Moves is an Amazon Alexa skill developed by MindStream Media (MindStream Media LLC). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Alexa skill, including any associated services and features.

Please read this privacy policy carefully. If you do not agree with our policies and practices, please do not use our skill. By using the skill, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

2.1 Information Automatically Collected by Alexa

When you enable and use the Gentle Moves skill on your Alexa device, Amazon automatically collects:

• Audio Input: Your voice commands (processed through AWS speech recognition)
• Device Information: Device ID, device type, locale, timezone
• Usage Data: Interactions with the skill, timestamps, command types
• Account Information: Amazon customer account linked to the Alexa device

2.2 Information We Actively Collect

The Gentle Moves skill specifically collects:

2.3 Information You Provide Directly

When you use the skill's features, you may provide:

• Choice of breathing exercises or seated stretches
• Selection of pre-built workout routines
• Voice commands to navigate or pause sessions

2.4 Non-Personally Identifiable Information

We may collect non-personally identifiable information such as browser type, device type, operating system, referring URLs, pages visited, and time spent on pages. This information helps us understand how users interact with the skill and improve our service.

3. How We Use Your Data

We use the information we collect for the following purposes:

1. To Provide the Skill: To deliver the core functionality of the Gentle Moves skill
2. To Personalize Experience: To remember your preferences and customize responses
3. To Improve the Skill: To analyze usage patterns and identify areas for enhancement
4. To Provide Support: To respond to your inquiries and troubleshoot issues
5. For Analytics: To understand user behavior and skill performance (in aggregated form)
6. To Send Communications: To notify you about skill updates, features, or changes to this policy
7. To Ensure Safety: To detect, prevent, and address fraud and security issues
8. For Legal Compliance: To comply with legal obligations and enforce our terms

4. Data Retention Policy

4.1 Retention Periods

4.2 Data Deletion

You can request deletion of your data at any time. When you disable the skill or delete your associated account, we will delete your personal data within 30 days, unless we are required to retain it for legal or compliance purposes.

4.3 Legal Obligations

We may retain your data longer if required by law, regulation, or legal proceedings. In such cases, we will retain only the minimum data necessary to fulfill the legal requirement.

5. Your Rights and Choices

5.1 Right to Access

You have the right to request a copy of the personal data we hold about you. To exercise this right, contact us at support@mindstream-media.com with the subject "Data Access Request."

5.2 Right to Correction

You may request correction of inaccurate or incomplete personal data. Please contact us with specific details of what needs to be corrected.

5.3 Right to Deletion

You have the right to request deletion of your personal data (the "right to be forgotten"). We will comply with deletion requests within 30 days, except where we must retain data for legal compliance.

5.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., CSV, JSON). To request a data export, contact support@mindstream-media.com with the subject "Data Portability Request."

5.5 Right to Withdraw Consent

If your use of the skill is based on your consent, you may withdraw that consent at any time by disabling the skill in your Alexa app or contacting us directly.

5.6 Right to Opt-Out of Analytics

You may opt out of optional analytics and improvement programs. You can opt out by saying 'Alexa, disable analytics' within the skill or contacting us.

8. Third-Party Services and Integrations

8.1 Amazon Web Services (AWS)

This skill is hosted on and uses Amazon Web Services, including:

• AWS Lambda: For executing skill logic
• Amazon Alexa Service: For voice processing and device communication
• DynamoDB: For storing user preferences and data (if applicable)
• Amazon S3: For storing static skill assets

AWS processes data in accordance with the AWS Privacy Notice. See AWS Privacy Policy.

8.2 Amazon Alexa Privacy

Amazon Alexa's collection and use of data is governed by Amazon's Privacy Notice. See Alexa and Alexa Device Privacy Notice.

8.3 Google Gemini Integration

This skill integrates with Google Gemini API for [SPECIFIC_FEATURE]. When you use this feature, your input is sent to Google Gemini servers. Google processes this data according to its Privacy Policy: Google Gemini Privacy Notice.

8.4 Other Third-Party Services

The Gentle Moves skill may integrate with the following third-party services:

8.5 No Third-Party Marketing

We do not sell, rent, or disclose your personal information to third parties for their marketing purposes without your explicit consent. Third-party services access only the minimum data necessary to provide their service.

9. Data Security

9.1 Security Measures

We implement technical, administrative, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, and destruction:

• Encryption: Data in transit is encrypted using TLS/SSL protocols
• At-Rest Encryption: Data stored in AWS services is encrypted at rest
• Access Controls: Access to user data is restricted to authorized personnel only
• Authentication: Strong authentication mechanisms for user accounts
• Monitoring: Continuous monitoring for suspicious activity and security threats
• Incident Response: Procedures for rapid detection and response to security breaches

9.2 AWS Security

The infrastructure supporting this skill is provided by Amazon Web Services, which maintains industry-leading security certifications including ISO 27001, SOC 2, and HIPAA compliance. See AWS Security for details.

9.3 Limitations of Security

While we take security seriously, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your Alexa device and account credentials.

9.4 Security Breach Notification

In the event of a security breach involving personal data, we will notify affected users without undue delay (and within timeframes required by applicable law). Notifications will include details of the breach, data affected, and recommended actions.

10. Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or report a privacy concern, please contact us using the information below:

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. We will post the updated policy on this page with a new "Last Updated" date.

Significant Changes: If we make material changes to this policy that affect how we handle your personal data, we will notify you by email (if we have your email address) or through prominent notification in the skill.

Your continued use of the skill after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

12. Document Information