Privacy Policy
Last updated: August 8, 2026
1. Introduction
Kanika Batra ("we," "us," or "our") operates the website kanikarose.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, purchase our products, use our services, or participate in our community. By using the Site, you consent to the data practices described in this policy.
2. Information We Collect
Personal Information You Provide
- Name and email address (when you create an account, purchase a product, or subscribe to our newsletter)
- Payment information (processed securely through our payment processors, we do not store card details)
- Quiz and assessment responses (when you take the Dark Mirror Assessment)
- Community posts, comments, and messages (when you participate in The Consilium)
- Coaching session notes and questionnaire responses
- Contact form submissions
- The Blood Pact. The track you choose, the signature you draw, the three goals you write when you sign, and every weekly journal entry you make afterwards. If you choose to share a note publicly it is posted to the member feed; you may post it under your name or anonymously, and where you choose anonymously we still store the link between you and the note so that we can moderate it and so that you can edit or retract it later
- The 12 Week Transformation. Your intake answers and your journal entries for each week
- Receipts. Any conversation you paste in for analysis. This usually contains messages written by somebody else, so please remove names and identifying details before you paste if you would rather they were not sent
- Training you write in your own words. Your answers in Gauntlet mode and your side of a roleplay in The Lab
Information Collected Automatically
- IP address, browser type, and device information
- Pages visited, time spent on pages, and navigation patterns
- Referring URL and search terms used to find our Site
- Cookies and similar tracking technologies (see Section 7)
3. How We Use Your Information
- To process purchases and deliver digital products (books, quiz results, course access)
- To manage your account and community membership
- To provide coaching services and schedule sessions
- To send transactional emails (purchase confirmations, download links, password resets)
- To send marketing emails (newsletter, product announcements), only with your consent
- To personalise your experience based on your quiz results and preferences
- To improve our Site, products, and services
- To generate replies, scores and safety checks on what you write, using an AI model (see Section 4, which sets out exactly which features and what happens to the text)
- To prevent fraud and ensure platform security
- To comply with legal obligations
4. AI Processing and the Crisis Protocol
Some features send what you write to an AI model (Anthropic's Claude) to produce a reply, a score, or a safety check. We want you to know exactly which ones, because several of them involve the most personal writing on the site.
- Journal entries, in The Blood Pact and the 12 Week Transformation. Every entry is read by a safety classifier before anything else happens to it, and some receive a written reply
- Receipts. The conversation you paste is sent in full so the tactics in it can be named
- The Lab. Your side of the roleplay, so the character can answer
- Gauntlet mode in the Simulator. Your answers in your own words, so they can be judged against the scenario
Your writing is sent for processing and to generate your result. It is not used to train any AI model, ours or anyone else's, and it is not sold.
The crisis protocol
Every journal entry is checked for signs of crisis before any reply is generated. If the check finds one, no AI reply is written at all. You are instead shown a short, human-written message pointing you to real help (in the US, call or text 988; elsewhere, findahelpline.com), and the entry is flagged for a person to review. The check fails safe: if it cannot run, the entry is treated as though it found something rather than waved through.
This matters enough to state plainly: an AI writing in somebody else's voice is the wrong thing to answer a person in crisis, and the product is built so that it cannot.
5. How We Share Your Information
We do not sell your personal information. We share your data only with:
- Payment processor. Stripe (stripe.com) handles all payments and stores card details on our behalf
- Email providers. Resend and Nodemailer SMTP deliver transactional and marketing emails; open/click tracking may be enabled
- AI processing. Anthropic (anthropic.com) receives the text described in Section 4 to generate replies, scores and safety checks. It is not used to train models
- Real-time chat. Pusher (pusher.com) powers Consilium chat rooms and receives message content in transit
- Media storage. Cloudflare R2 stores voice notes and member avatars
- Analytics. Google Analytics (anonymised IP) tracks aggregate site usage
- Error tracking. Sentry captures application errors (personal data masked by default)
- Hosting. Railway serves the application and database
- Legal authorities, if required by law, court order, or to protect our rights
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Purchase records are retained for 7 years for accounting and tax compliance. You may request deletion of your account and associated data at any time by emailing Kanika@kanikarose.com.
If you cancel your Consilium subscription, your posts, comments, and chat messages remain visible to other members under your pseudonym. If you request full deletion, your content is either removed or anonymised at our discretion. Voice note files you received continue to be accessible via your original email delivery links until they expire.
The Blood Pact. A broken pact is sealed permanently and cannot be edited or erased, which is the point of it: a record you can revise is not a record. That permanence is a rule inside the product, not a claim on your data. Deleting your account deletes the pact along with it, including your signature, your goals and every journal entry, and it cancels any pact subscription at the same time.
7. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies, authentication tokens, session management (required for the Site to function)
- Analytics cookies. Google Analytics to understand how visitors use our Site
- Preference cookies, to remember your settings and choices
You can disable cookies through your browser settings, though this may affect Site functionality.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Data portability, receive your data in a structured format
- Withdraw consent for marketing communications at any time
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at Kanika@kanikarose.com.
9. Security
We implement appropriate technical and organisational measures to protect your personal information, including encrypted data transmission (SSL/TLS), secure password hashing, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at Kanika@kanikarose.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Site after changes are posted constitutes acceptance of the revised policy.
12. Contact Us
For questions about this Privacy Policy or your personal data, contact us at:
Email: Kanika@kanikarose.com