Cookie Policy
Effective date: 1 May 2025 · Last updated: 9 May 2025
This Cookie Policy explains how Bodha Labs Ltd. ("we", "our", "us") uses cookies and similar technologies on Bodha App (bodhaapp.com) and Pivot by Bodha (pivot.bodhaapp.com) (the "Platform"). It applies to all users and includes specific information for users in the EU/EEA, India, California, and Brazil.
1. What Are Cookies?
Cookies are small text files stored on your device by your browser when you visit a website. We also use similar technologies such as local storage and session tokens. Some are essential for the Platform to work; others are optional and used for analytics or preferences.
2. How We Use Cookies
- Keep you authenticated and maintain your session state.
- Remember your language and display preferences.
- Understand how users interact with the Platform to improve performance.
- Support magic-link login flows.
3. Types of Cookies We Use
| Type | Purpose | Consent required? | Retention |
|---|---|---|---|
| Essential | Session authentication, CSRF protection, magic-link state | No — strictly necessary | Session / up to 30 days |
| Analytics | Usage measurement via Google Analytics (anonymised/pseudonymised) | Yes | Up to 13 months |
| Functional | Language preference, cookie consent status | No — functional necessity | Up to 12 months |
| Third-party | Set by embedded third-party services (Google Analytics) | Yes (if analytics accepted) | Varies by provider |
4. Managing or Withdrawing Consent
You can control cookies by:
- Clicking "Accept" or "Decline" on our cookie banner when you first visit.
- Clearing cookies in your browser settings at any time.
- Using the Google Analytics opt-out browser add-on.
- Emailing privacy@bodhaapp.com to withdraw consent for any optional cookies.
Disabling essential cookies may prevent the Platform from functioning correctly. Declining analytics cookies will not affect your access to any features.
5. EU/EEA Users — GDPR
We only set non-essential cookies after obtaining your explicit consent, as required by the GDPR and the ePrivacy Directive. You may withdraw consent at any time with no impact on your account. Consent records are stored for accountability purposes. Analytics data transferred to Google LLC in the USA is covered by EU Standard Contractual Clauses (SCCs).
6. India Users — DPDPA
Under India's Digital Personal Data Protection Act, 2023, we obtain your free, informed, and specific consent before setting optional cookies. You may revoke consent at any time using the mechanisms in Section 4 above. Our cookie banner is designed to meet the DPDPA consent standard — no pre-ticked boxes, clear language, and easy withdrawal.
7. California Users — CCPA / CPRA
We do not sell your personal information and do not share it for cross-context behavioural advertising.
Analytics cookies may result in data being shared with Google LLC for analytics purposes only — this does not constitute a "sale" under CCPA. If you wish to limit this sharing, use the opt-out mechanisms in Section 4.
To exercise your full CCPA rights (access, delete, correct, opt out), see our Privacy Policy — Section 9 or email privacy@bodhaapp.com.
8. Brazil Users — LGPD
Brazilian users' cookie data is processed under the legal basis of consent or legitimate interest as permitted by the LGPD. You may withdraw consent and request deletion of cookie-derived data at any time by using the opt-out mechanisms in Section 4 or contacting our DPO. See our Privacy Policy — Section 10 for your full LGPD rights.
9. International Data Transfers
Analytics data may be processed by Google LLC or similar providers located outside the EEA, India, or Brazil. We use EU Standard Contractual Clauses (SCCs) and equivalent safeguards to ensure lawful transfers. A current list of sub-processors is available in our Privacy Policy — Section 5.
10. Updates to This Policy
We may update this Cookie Policy periodically. The current version is always available at bodhaapp.com/cookie-policy. Material changes will be notified via the cookie banner or by email.