Legal
Privacy Policy
ATTUNEBYKRIPA
PRIVACY POLICY
Version 1.0
Effective Date: 1 June 2026
Entity Information
Brand Name
AttunebyKripa
Legal Owner / Data Fiduciary
Kripa Suresh Lund, operating AttunebyKripa as a sole proprietorship
Website
https://attunebykripa.com
Privacy Contact Email
attunebykripa@gmail.com
Governing Law
Applicable laws of India
1. Introduction
This Privacy Policy ("Policy") explains how AttunebyKripa, a sole proprietorship owned and operated by Kripa Suresh Lund ("AttunebyKripa", "we", "our" or "us"), collects, uses, stores, shares and otherwise processes personal data when you access or use our Website, create an Account, access Digital Content, communicate with us or otherwise use our Services.
We are committed to handling personal data responsibly and in accordance with applicable data protection and privacy laws in India.
For the purposes of applicable Indian data protection law, AttunebyKripa is the person determining the purpose and means of processing personal data collected through the Website and Services.
Please read this Policy together with our Terms & Conditions, Cookie Policy and any privacy notice or consent request presented to you when particular personal data is collected.
2. Scope of this Privacy Policy
This Policy applies to personal data processed through the AttunebyKripa Website and, where applicable, any future AttunebyKripa mobile application or digital service that refers or links to this Policy.
It applies to visitors to the Website, registered users, individuals who access free or paid Digital Content, individuals who opt in to receive communications, and persons who contact AttunebyKripa through the Website or by email.
This Policy does not govern the independent privacy practices of third-party websites, applications or services that may be linked to or integrated with the Website. Those third parties process personal data in accordance with their own privacy policies and terms.
3. Personal Data We May Collect
Depending on how you use the Website and Services, we may collect the following categories of personal data:
Identity and account information: such as your name, email address, account identifier and information required to create or maintain an Account.
Contact information: such as your email address and, if you choose to provide it or if a future feature requests it, your telephone number.
Authentication information: information received from a third-party authentication provider when you choose to sign in using Google, Apple, Facebook or another supported provider. We do not receive or store your password for those third-party accounts.
Communication preferences: including whether you have chosen to receive newsletters, updates, workshop information or other communications from AttunebyKripa.
Usage and access information: such as visits to the Website, Digital Content accessed or played, play counts, login activity, and information used to operate any free-content sampling or usage-gating functionality.
Technical information: such as device type, browser type, operating system, IP address, approximate location derived from technical information, cookie identifiers and similar technical data that may be collected automatically when you use the Website.
Communications: information you provide when you contact us, submit an enquiry, request support or otherwise communicate with AttunebyKripa.
We will seek to collect only personal data that is reasonably necessary for the purpose for which it is processed.
4. Information Received Through Social Login
If you choose to create or access an Account using a third-party authentication provider such as Google, Apple or Facebook, the provider may share certain information with AttunebyKripa in accordance with your settings and the permissions you grant.
Depending on the provider and your settings, this information may include your name, email address, profile identifier and other basic account information.
AttunebyKripa does not receive your password for your Google, Apple, Facebook or other third-party account.
If you use Apple's Hide My Email or Private Relay functionality, Apple may provide AttunebyKripa with a relay email address rather than your personal email address. Communications associated with your Account may therefore be sent through that relay address.
Your use of a third-party authentication service is also subject to that provider's own privacy policy and terms. AttunebyKripa does not control how those providers independently process your personal data.
5. Information Collected Automatically
When you access or use the Website, certain technical and usage information may be collected automatically through cookies, analytics technologies, server logs and similar tools.
This information may include:
IP address;
browser and device information;
operating system;
date and time of access;
pages viewed and navigation activity;
referring or exit pages;
Digital Content accessed or played;
number of plays or other interactions with Digital Content;
login and session information; and
cookie or similar identifiers.
This information may be used to operate and secure the Website, understand how the Website is used, maintain login sessions, measure Website performance, administer free-content access limits and improve the Services.
Where AttunebyKripa uses Google Analytics or another analytics provider, information collected through those technologies may also be processed by the relevant provider in accordance with its own terms and privacy practices.
Further information about cookies and similar technologies will be set out in the AttunebyKripa Cookie Policy.
6. Cookies and Usage-Gating Data
The Website may use cookies and similar technologies to provide essential functionality, remember user preferences, maintain login sessions, understand Website usage and administer access to Digital Content.
During Phase 1, AttunebyKripa may allow users to play a limited number of Digital Content items before requiring the user to create or log into an Account. A cookie or similar identifier may be used on the same device or browser to record the number of plays made before login is required.
Unless otherwise stated on the Website, the sampling limit may count each play or replay of a Digital Content item, rather than only unique items accessed.
Cookie-based usage information may not identify you by name before you create or log into an Account, but it may be associated with a browser, device or cookie identifier.
Once you log into an Account, certain usage information may be associated with your Account where reasonably necessary to provide the Services, understand usage, administer access or maintain listening history or similar features if introduced.
Further information about the types of cookies used, their purposes, duration and available controls will be provided in the Cookie Policy and, where required, through the Website's cookie or consent controls.
7. How We Use Personal Data
AttunebyKripa may process personal data for the following purposes:
to create, authenticate, administer and secure your Account;
to provide access to free or paid Digital Content and other Services;
to operate any sampling, usage-gating or access-control functionality;
to remember your preferences and maintain Website sessions;
to respond to enquiries, requests or support communications;
to send service-related or administrative communications;
to send newsletters, updates, workshop information or other promotional communications where you have chosen to receive them;
to understand how users interact with the Website and Digital Content;
to analyse Website performance, usage and engagement;
to personalise your experience and, where this functionality is available, recommend Digital Content, meditations, courses or other Services that may be relevant to you based on information such as your previous activity, listening history, preferences or interactions with the Website;
to improve, maintain and develop the Website, Digital Content and Services;
to prevent fraud, misuse, unauthorised access and security incidents;
to maintain records reasonably required for business, legal or compliance purposes;
to comply with applicable law, legal process or lawful requests from competent authorities; and
for other purposes that are compatible with the purpose for which the personal data was collected or that are separately explained to you at the time of collection.
AttunebyKripa will not use personal data for a purpose that is materially different from the purpose communicated to you without providing any notice or obtaining any consent required under applicable law.
8. Consent and Other Permitted Processing
Where applicable law requires consent for the processing of personal data, AttunebyKripa will seek consent through a clear affirmative action and will provide information reasonably necessary for you to understand the purpose for which the personal data is requested.
Consent to receive newsletters, promotional updates or other marketing communications is optional and will not be selected automatically on your behalf.
You may withdraw consent for a particular processing activity where processing is based on consent, subject to applicable law and any consequences of withdrawal that are necessary to provide the relevant Service.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Applicable law may also permit personal data to be processed in certain circumstances without consent. Where AttunebyKripa relies on such a permitted basis, it will process the personal data only to the extent allowed by applicable law.
9. Marketing Communications and Your Choices
AttunebyKripa may offer you the option to receive newsletters, information about workshops, new Digital Content, events, courses or other updates.
You will receive promotional or marketing communications only where you have opted in or where such communications are otherwise permitted by applicable law.
You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting AttunebyKripa at attunebykripa@gmail.com.
Unsubscribing from marketing communications will not prevent AttunebyKripa from sending non-promotional communications that are reasonably necessary in connection with your Account, a Service you have requested, security matters, changes to legal terms or other administrative matters.
AttunebyKripa will not treat the creation of an Account or access to free Digital Content as automatic consent to receive marketing communications.
10. Analytics and Usage Information
AttunebyKripa may use analytics services, including Google Analytics or similar services, to understand how visitors and registered users interact with the Website.
Analytics information may help AttunebyKripa understand matters such as Website visits, unique users, pages viewed, general engagement patterns, traffic sources, device or browser information and interaction with Digital Content.
Where technically available and appropriate, AttunebyKripa may also use account-based information to understand how frequently registered users return to or use the Website. The extent of any such account-level analytics may depend on the Website's technical implementation and may change over time.
Analytics providers may use cookies, device identifiers or similar technologies and may process information on AttunebyKripa's behalf or for purposes described in their own privacy documentation.
Where consent or another user choice is required for non-essential analytics technologies, AttunebyKripa will seek to provide the relevant controls through the Website.
AttunebyKripa may use aggregated or de-identified information for statistical, analytical and business-planning purposes where that information no longer identifies an individual.
10.1 Personalisation and Recommendations
AttunebyKripa may introduce features that personalise the Digital Content or Services displayed or recommended to you.
Where such features are available, recommendations may be based on information such as Digital Content you have previously accessed, your listening history, preferences, categories you have explored or other interactions with the Website or Services.
Recommendations are intended to help users discover relevant content and should not be interpreted as medical, psychological, therapeutic or other professional advice, or as an assessment of your physical or mental health.
AttunebyKripa will not use information about your health or other sensitive personal circumstances to make personalised recommendations.
11. How We Share Personal Data
AttunebyKripa does not sell personal data.
AttunebyKripa may share personal data only where reasonably necessary to operate the Website and provide the Services, where you have requested or authorised the sharing, or where disclosure is otherwise permitted or required by applicable law.
Personal data may be shared with:
technology and hosting providers that support the Website, databases, cloud infrastructure or related technical services;
authentication providers where you choose to use Google, Apple, Facebook or another supported login service;
analytics providers that help us understand Website usage and performance;
email, communications or customer-support providers used to send requested or opted-in communications and respond to enquiries;
professional advisers, including legal, accounting, compliance or information-security advisers, where reasonably necessary;
payment processors or other transaction service providers if paid Services are introduced in the future; and
government authorities, regulators, courts, law-enforcement bodies or other persons where disclosure is required or permitted by applicable law.
Where third parties process personal data on behalf of AttunebyKripa, we will seek to use providers that offer appropriate safeguards and to limit the personal data shared to what is reasonably necessary for the relevant service.
AttunebyKripa may also disclose personal data in connection with a proposed or completed reorganisation, sale, transfer or restructuring of all or part of the business, subject to applicable law and appropriate protection of the personal data.
12. Third-Party Service Providers
AttunebyKripa relies on third-party service providers to support certain Website and business functions.
These providers may process personal data on our behalf or, in some circumstances, independently under their own privacy policies.
Depending on the functionality in use from time to time, these providers may include:
Google, Apple, Facebook or other authentication providers;
Google Analytics or another analytics provider;
website hosting, cloud storage, database and security providers;
email delivery, newsletter and communications platforms;
customer-support or administrative technology providers;
video or audio hosting and streaming providers; and
payment gateways or payment processors if paid Services are introduced.
AttunebyKripa does not control the independent processing activities of third-party providers acting in their own capacity. You should review the privacy information made available by those providers where relevant.
The specific providers used by AttunebyKripa may change as the Website and Services develop. Where required by applicable law, material information about relevant third-party processing will be made available through this Policy, the Cookie Policy or an appropriate notice.
13. International Processing and Transfers
Some of AttunebyKripa's service providers may operate infrastructure, personnel or systems outside India. As a result, personal data may be processed or stored in jurisdictions outside India in connection with the provision of the Website or Services.
Where personal data is transferred or made available outside India, AttunebyKripa will seek to do so in accordance with applicable Indian data-protection law and any restrictions, conditions or safeguards that may apply at the relevant time.
The data-protection laws of another jurisdiction may differ from those applicable in India. AttunebyKripa will take reasonable steps, where required, to ensure that service providers handling personal data on its behalf are subject to appropriate contractual, technical or organisational safeguards.
Nothing in this section authorises a transfer to a country or territory where such transfer is prohibited under applicable Indian law.
14. Data Retention
AttunebyKripa will retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, including to provide the Services, administer Accounts, maintain appropriate business records, resolve disputes, enforce agreements and comply with applicable legal or regulatory obligations.
The applicable retention period may vary depending on the type of personal data, the purpose for which it is processed, whether you continue to maintain an Account, and any legal, accounting, security or operational requirements.
Where personal data is no longer required for the purpose for which it was collected and there is no lawful reason to retain it, AttunebyKripa will take reasonable steps to delete, anonymise or otherwise cease retaining the personal data in identifiable form.
Certain information may remain temporarily in backups, logs or archival systems after deletion from active systems, subject to ordinary backup cycles, security requirements and applicable law.
Aggregated or de-identified information that no longer identifies an individual may be retained for statistical, analytical, security or business-planning purposes.
15. Data Security
AttunebyKripa will take reasonable technical and organisational measures appropriate to the nature of the personal data and the risks involved in processing it.
These measures may include, as appropriate, access controls, authentication safeguards, secure hosting practices, encryption or secure transmission technologies, software and infrastructure updates, restricted administrative access, backups and other measures intended to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.
Access to personal data should be limited to AttunebyKripa and those service providers, contractors or advisers who reasonably require access for an authorised purpose.
Although AttunebyKripa takes reasonable steps to protect personal data, no website, internet transmission, electronic storage system or security measure can be guaranteed to be completely secure. You should therefore take reasonable care when using online services and protect your own Account credentials and devices.
If AttunebyKripa becomes aware of a personal-data breach or security incident, it will assess and respond to the incident and provide any notifications required under applicable law.
16. Your Privacy Rights
Subject to applicable law, you may have rights in relation to personal data processed by AttunebyKripa.
These may include the right to request access to information about your personal data and the processing activities relating to it; request correction, completion or updating of inaccurate or incomplete personal data; request erasure of personal data where applicable; withdraw consent where processing is based on consent; and raise a grievance regarding the processing of your personal data.
Where applicable Indian data-protection law provides additional rights, including rights relating to grievance redressal or nomination, AttunebyKripa will facilitate those rights in accordance with the requirements in force at the relevant time.
AttunebyKripa may need to verify your identity before acting on a privacy request. We may also request information reasonably necessary to locate the relevant personal data or understand the scope of your request.
Privacy rights may be subject to limitations or exceptions under applicable law. Where AttunebyKripa is unable to fulfil a request in whole or in part, we will respond as required by applicable law.
17. Withdrawal of Consent and Account Deletion
Where AttunebyKripa processes personal data on the basis of your consent, you may withdraw that consent in accordance with applicable law.
You may also request deletion of your Account and associated personal data by using any account-deletion functionality made available through the Website or by contacting AttunebyKripa at attunebykripa@gmail.com.
Withdrawal of consent or deletion of an Account may affect our ability to provide Services that require the relevant personal data. For example, deleting an Account may result in loss of access to listening history, saved preferences, personalised recommendations, course access or other account-based features, where applicable.
Following a valid deletion request, AttunebyKripa will take reasonable steps to delete or de-identify personal data that is no longer required, subject to any information that may lawfully or necessarily be retained for legal, security, fraud-prevention, dispute-resolution, accounting, backup or other permitted purposes.
Withdrawal of consent does not affect processing lawfully carried out before the withdrawal.
18. Children's Personal Data
The Website and general Services are intended primarily for adults.
Individuals under the age of eighteen (18) should use the Website or Services only with the involvement and consent of a parent or lawful guardian, where required.
Where AttunebyKripa knowingly processes personal data relating to a child, it will seek to comply with the requirements of applicable Indian data-protection law, including any requirement for verifiable consent from a parent or lawful guardian and any restrictions applicable to the processing of children's personal data.
AttunebyKripa does not intend to use children's personal data for behavioural monitoring, tracking or targeted advertising in a manner prohibited by applicable law.
If you believe that a child has provided personal data to AttunebyKripa without the consent required by applicable law, please contact us at attunebykripa@gmail.com so that the matter can be reviewed.
19. Third-Party Websites and Services
The Website may contain links to third-party websites, applications, social-media services or other digital services that are not operated or controlled by AttunebyKripa.
This Privacy Policy does not apply to the independent collection or processing of personal data by those third parties.
AttunebyKripa is not responsible for the privacy, security or data-processing practices of third-party websites or services. You should review the applicable privacy policy and terms before providing personal data to a third party.
20. Future Paid Services and Payment Information
AttunebyKripa may introduce paid Services in the future, including paid meditations, courses, memberships, workshops, retreats or other offerings.
Where payments are accepted online, AttunebyKripa may use a third-party payment gateway or payment processor to process the transaction.
Payment providers may collect information such as payment-card details, bank or payment identifiers, billing information and transaction information directly from you. Unless expressly stated otherwise, AttunebyKripa does not intend to store full payment-card details on its own systems.
AttunebyKripa may receive and retain limited transaction information from a payment provider, such as your name, contact information, transaction identifier, amount paid, payment status, date of transaction and details of the Service purchased, where reasonably necessary for fulfilment, accounting, support, refunds, fraud prevention or legal compliance.
Additional privacy notices or payment terms may be presented when paid Services are introduced.
21. Future Mobile Applications
AttunebyKripa may make Services available through a mobile application in the future.
Where an AttunebyKripa mobile application links to or incorporates this Privacy Policy, this Policy will apply to personal data processed through that application, subject to any additional notice provided for application-specific functionality.
A mobile application may request access to device information, notifications, storage, media, or other device permissions only where relevant to a feature offered through the application. Where permission is required, you will be able to grant or decline it through the application or your device settings, subject to the functionality of the relevant feature.
If application functionality results in materially different categories or uses of personal data, this Privacy Policy will be updated or an additional privacy notice will be provided before or when that functionality is introduced.
22. Personal Data Breaches and Security Incidents
If AttunebyKripa becomes aware of a personal-data breach or security incident affecting personal data under its control, it will take reasonable steps to contain, investigate and remediate the incident.
AttunebyKripa will make any notifications to affected individuals, competent authorities or other persons that are required under applicable law and within the applicable time or manner prescribed by law.
The nature and extent of any notification will depend on the circumstances of the incident and the legal requirements in force at the relevant time.
23. Changes to this Privacy Policy
AttunebyKripa may amend or update this Privacy Policy from time to time to reflect changes in the Website, Services, technology, business practices or applicable law.
When this Policy is updated, the revised version will be published on the Website and the 'Last Updated' date will be amended.
Where a change materially affects the way personal data is processed or where applicable law requires additional notice or consent, AttunebyKripa will take reasonable steps to provide the required notice or obtain the required consent.
You are encouraged to review this Privacy Policy periodically.
24. Grievance Redressal and Privacy Contact
If you have a question, concern, grievance or request relating to this Privacy Policy or the processing of your personal data, you may contact AttunebyKripa at:
Email: attunebykripa@gmail.com
Website: https://attunebykripa.com
AttunebyKripa will review privacy-related grievances and requests and respond in accordance with applicable law.
Where applicable law requires AttunebyKripa to identify or publish the contact details of a designated person or grievance officer, the relevant details will be added to this Policy and made available through the Website.
25. Governing Law and Effective Date
This Privacy Policy is intended to operate in accordance with applicable laws of India, including applicable data-protection and privacy requirements in force from time to time.
This Privacy Policy is effective from 1 June 2026 and will remain in effect until amended or replaced by AttunebyKripa.