Legal

Privacy policy.

Your story stays yours. This page explains what we collect, why, how we protect it, and how to make us delete it.

Draft, prepared for Karuna Labs Inc. and pending legal review. Effective date: October 28, 2026.

Scope · What we collect · How we use it · When we share it · Health information · Security · Retention and deletion · Your rights · Children · Changes · Contact

1. Scope

This policy covers the website at cindra.ai (the “Site”) and the Cindra mobile application (the “App”), both operated by Karuna Labs Inc. (“Karuna Labs”, “we”, “us”). Where Cindra is provided to you through a clinic or care team, that organization’s own privacy notice may also apply, and some of your information may be handled under a Business Associate Agreement as described in our HIPAA statement.

2. What we collect

On the Site

Waitlist details you give us: name (optional), email address, and whether you describe yourself as a person living with pain, a clinician, or other.
Server logs kept by our hosting provider for security and reliability, which include IP address, browser type, and the pages requested.

Optional website analytics

With your permission, we use Google Analytics 4 to understand website visits and count successful waitlist signups. Analytics is off until you choose Allow analytics. You can reject it without affecting the website or signup form, and change your choice using Analytics settings at the bottom of a page. We also keep analytics off when your browser sends a Global Privacy Control or Do Not Track signal.

When allowed, Google receives a cookie-based browser identifier, basic browser and device information, and limited visit and event information. Network requests also expose your IP address to Google for processing. We send fixed website section labels: health articles are grouped as Learn, without their individual URLs or titles. We remove query strings and fragments, reduce referring URLs to their website origin, and suppress campaign parameter values. We do not send form contents, names, email addresses, notes, health details, user IDs, or app conversations to Analytics. A successful signup is counted as an event without the submitted information.

Our Analytics cookies last up to 90 days after use. Your allow or reject choice is stored in this browser for 180 days. Revoking permission removes our Analytics cookies and reloads the page with analytics off. Analytics event-level retention is set to two months; aggregate reports may be retained longer. Google Analytics is used for this public website, not the Cindra app. Advertising features and automatic form, search, and outbound-link tracking are disabled.

Google processes analytics information on our behalf under the terms for our Analytics account. Learn more in Google's explanation of partner-site data. This website analytics setup is separate from information you choose to submit through the waitlist form.

In the App

Account information: name, email, and login credentials.
What you share with Cindra: daily check-ins, how you describe your pain and your day, lessons you complete, goals you set, and messages you exchange with Cindra.
Care-team information if you choose to connect a clinician: who they are and what you choose to share with them.
Device and usage information: device type, operating system, app version, crash reports, and how features are used, so we can keep the App working well.

3. How we use it

To provide Cindra: personalizing check-ins and lessons, remembering your history, and showing your progress.
To connect you with your care team, only in the ways you choose.
To tell you about early access and important changes to the service.
To keep the service secure, reliable, and improving. Where we use information to improve Cindra, we use it in de-identified or aggregated form wherever practical.

We do not sell personal information, and we do not use what you tell Cindra for advertising.

Your care team, when you connect them and to the extent you choose.
Service providers who host, store, or process data on our behalf under contracts that restrict their use of it (for example, cloud hosting and customer relationship tools). Waitlist details are stored in our email list provider (Mailchimp) and, where enabled, our customer relationship management system.
When the law requires it, or to protect the safety of a person.
In a business transfer, such as a merger or acquisition, under the same protections as this policy.

5. Health information

Much of what you share with Cindra is sensitive. We treat it accordingly: it is used to help you, shown to others only when you choose, and protected with the safeguards described in our HIPAA statement. Cindra provides education and support; it is not a medical device and does not diagnose or treat conditions. See our Terms.

6. Security

Information is encrypted in transit and at rest. Access inside Karuna Labs is limited to people who need it to do their jobs, is logged, and is reviewed. No system is perfectly secure; if a breach affects your information we will notify you and the relevant authorities as the law requires.

7. Retention and deletion

We keep your information while you have an account or remain on the waitlist, and for as long afterwards as needed to meet legal obligations or resolve disputes. You can delete your account and data at any time from within the App or by emailing us; we complete deletion within 30 days, except where we must retain records by law.

8. Your rights

Wherever you live, you can ask us to access, correct, export, or delete your personal information, and to stop emailing you. Residents of some jurisdictions, including California and the European Economic Area, have additional rights under local law, which we honor. To exercise any right, email info@karunalabs.com with “Privacy” in the subject. We will verify your identity before acting and will not treat you differently for making a request.

9. Children

Cindra is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

10. Changes

We will post any changes here and update the effective date. For material changes, we will also notify you by email or in the App.

11. Contact

Karuna Labs Inc. · info@karunalabs.com