Last updated: 9/24/2025

COOKIE POLICY

Last Updated: September 24, 2025

Introduction

Sonaia Health ("we," "us," or "our") uses cookies and similar tracking technologies on our wellness courses platform. This Cookie Policy explains what cookies are, how we use them, and your choices regarding their use. We respect your privacy and are committed to being transparent about our data practices.

What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better, faster, and more secure experience while respecting your privacy preferences. Cookies enable essential features like keeping you logged in and remembering your preferences.

Types of Cookies We Use

We categorize cookies based on their function and purpose:

Strictly Necessary Cookies

These cookies are essential for the website to function properly and cannot be disabled:

Authentication Cookies - NextAuth.js session tokens ('next-auth.session-token' or '__Secure-next-auth.session-token') keep you logged in securely across pages. These cookies expire after 30 days of inactivity
Consent Preferences - Your cookie consent choices ('cookie-consent') are stored locally to remember your privacy preferences
Security Cookies - Used for secure authentication, OTP verification, and protecting against fraudulent activity

Performance/Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting anonymous information:

Google Analytics - When enabled, we use Google Analytics ('_ga', 'ga*' cookies) to collect aggregated data about site traffic, user behavior, and performance metrics
Plausible Analytics - A privacy-friendly, cookieless alternative that doesn't store any personal data on your device

Functional Cookies

These cookies enable enhanced functionality and personalization:

Language Preferences - We may store your language preference ('NEXT_LOCALE') to display content in your preferred language (English and Russian)
User Preferences - Remember your settings and preferences for a more personalized experience

Marketing/Advertising Cookies

These cookies track your online activity to help deliver more relevant content:

Google Advertising - When consented, Google Analytics may use cookies for remarketing and advertising purposes ('ad_storage', 'ad_user_data', 'ad_personalization')
Conversion Tracking - Measure the effectiveness of our services and track course purchases through Stripe payment integration

Third-Party Services

We integrate with the following third-party services that may use cookies:

Stripe - Secure payment processing (uses session cookies for fraud prevention)
Google Analytics - Website analytics (when consented)
Plausible Analytics - Privacy-focused analytics (cookieless)
Termly - Consent management and compliance tracking

How We Use Cookies

We use cookies to:

Keep you signed in to your account securely
Remember your privacy and cookie preferences
Analyze site performance and user behavior (with consent)
Improve our services based on usage patterns
Process payments securely
Provide customer support and respond to inquiries
Comply with legal obligations under GDPR and other regulations

Managing Your Cookie Preferences

Through Our Consent Banner

When you first visit our website, you'll see a cookie consent banner where you can:

Accept all cookies
Reject all non-essential cookies
Customize your preferences by category

You can change your preferences anytime by clicking the "Cookie Settings" link in our website footer.

Through Your Browser

Most browsers allow you to:

View and delete cookies
Block all cookies
Allow cookies from specific sites only
Receive a warning before a cookie is stored

Please note that blocking all cookies may impact your ability to use certain features of our website, particularly those requiring authentication.

Browser-Specific Instructions

Data Retention

Session cookies - Deleted when you close your browser
Authentication cookies - Expire after 30 days of inactivity
Consent cookies - Stored until you clear them or change your preferences
Analytics cookies - Google Analytics cookies expire after 2 years; other analytics data follows our general retention policy

International Transfers

Some of our third-party services may transfer data internationally:

Google Analytics may process data in the United States
We ensure appropriate safeguards are in place for any international data transfers in compliance with GDPR

Your Rights

Under GDPR (EU/UK) and CCPA/CPRA (California), you have the right to:

Access information about the cookies we use
Withdraw consent for non-essential cookies at any time
Request deletion of your data
Opt-out of the sale of personal information (we do not sell personal data)
Export your data in a portable format
Object to processing of your personal data

Updates to This Policy

We may update this Cookie Policy to reflect changes in our practices or legal requirements. We'll notify you of significant changes through our website or via email if you're a registered user. The "Last Updated" date at the top of this policy indicates when it was last revised.

Contact Us

If you have questions about this Cookie Policy or our use of cookies, please contact us:

Email: [email protected]

Website: https://sonaia.health

For data protection inquiries or to exercise your rights, please include "Cookie Policy Inquiry" in your subject line.

When contacting us, please provide:

The specific issue or question you have
Any relevant details about your browser or device
Your cookie preferences or concerns

Compliance

This policy is designed to comply with:

EU General Data Protection Regulation (GDPR)
EU ePrivacy Directive
UK Data Protection Act 2018
California Consumer Privacy Act (CCPA/CPRA)
Other applicable international privacy laws

We maintain audit logs of all consent choices for compliance verification and regularly review our cookie usage to ensure minimal data collection while providing optimal service.

Enforcement

If you believe we have not adhered to this policy or have concerns about our cookie practices, please contact us immediately. If you are not satisfied with our response, you may contact the relevant data protection authority in your jurisdiction.

This Cookie Policy forms part of our overall Privacy Policy and should be read in conjunction with our Terms of Service.