Privacy
Policy

This Privacy Policy applies to www.bohn.ai, shop.bohn.ai, www.gowhisperer.com, and shop.gowhisperer.com. It covers, in particular, visits to the websites, listening to free sound previews, local interactions on product pages, contact requests, newsletter subscriptions, purchases of digital audio files, payments, and the provision and use of download links. In this Policy, “personal data” includes “personal information” and equivalent terms under applicable law.

External websites or services that you choose to access or use as a payment method are also governed by the respective provider’s privacy notice. Where a service provider processes personal data for its own purposes, that provider is independently responsible for that processing.

The entity responsible for the processing activities described in this Policy is BOHN AI Inc. (“BOHN AI,” “we,” “us,” or “our”):

Privacy contact: . You may send privacy inquiries, withdrawals of consent, objections, and requests to exercise your rights to this address.

• Data minimization. We process only the data required for a clearly stated purpose.
• Purpose limitation. Order, contact, and usage data is not used for undisclosed purposes.
• No listening profiles. We do not analyze which portions you listen to, how long you listen, or how you respond to a sound.
• No additional sensitive inferences. We do not infer diagnoses, health status, emotional state, or religious or philosophical beliefs from your product selection, purchase, or download.
• No sale of data. We do not sell or rent personal data.
• No personalized advertising. We do not use remarketing, Customer Match, Enhanced Conversions, or personalized ads.
• Consent before analytics. Non-essential analytics or marketing technologies are activated only after valid consent.

Where the data comes from

We generally receive personal data directly from you, automatically from your browser or device, and, where necessary for ordering, payment, and delivery, from Shopify, Sky Pilot, and your selected payment provider. Data may also arise from your communications with our support team.

Legal bases in the EU/EEA and the United Kingdom

Where the EU General Data Protection Regulation (EU GDPR) or the UK GDPR applies, we process personal data in particular on the following legal bases:

Storing information on, or accessing information from, your device is also subject to the applicable rules for cookies and similar technologies, including Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and the Privacy and Electronic Communications Regulations (PECR) in the United Kingdom. We use non-essential technologies only with consent. In other countries, we rely on the corresponding legal bases under applicable law.

The main websites and the files used for free sound previews are hosted by IONOS in Germany. The provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

When you access a page or audio file, the web server automatically processes technical access data, including:

• IP address or, depending on the hosting configuration, an immediately shortened or anonymized version
• date and time of the request
• URL accessed or file requested
• HTTP status code and amount of data transferred
• referrer, if transmitted by your browser
• browser type, operating system, device type, and error and security information

Purpose and legal basis. Technical delivery, stability, error analysis, and defense against attacks. To the extent applicable, the legal basis is our legitimate interest in offering a secure and functional service. Where an access request is directly connected to an order or digital delivery, steps prior to entering into a contract or performance of a contract also apply.

Retention. Standard access logs are retained only for a short period and are routinely deleted or anonymized no later than eight weeks. Where standard IONOS web-hosting logs are used, IONOS states that it anonymizes IP addresses and retains log data for no more than eight weeks. If a specific security incident occurs, relevant excerpts may be preserved separately until the incident has been investigated and legal claims addressed.

IONOS Privacy Policy

When you start a preview, your browser loads the audio file directly from the IONOS server. Like any other page or file request, this technical request may appear in the standard server log.

Beyond that, BOHN AI does not collect player events. In particular, we do not store:

• start, pause, resume, or end of playback
• playback duration, progress, or repetitions
• volume settings
• individual responses or ratings
• any link to an email address, order, or other profile

Buttons such as “Calmer,” “Clearer,” or “Curious” are processed only locally in your browser. Your selection is not transmitted to BOHN AI or any analytics provider and is not stored.

After you download a purchased audio file, we do not track when, how often, how long, or at what volume you play the file on your device.

If you contact us by email or through a contact form, we process the information you provide. This may include your name, email address, subject line, message, related order details, and any technical information you voluntarily send.

Purpose and legal basis. Responding to your request, taking steps prior to entering into a contract, performing the contract, and providing support. Depending on the context, the legal basis is steps prior to entering into or performance of a contract, or our legitimate interest in reliable communication and documentation.

Please do not send diagnoses, medical findings, health measurements, or other particularly sensitive information unless it is strictly necessary for your request. If we receive such information without asking for it, we do not use it for profiling or product personalization. Where processing is exceptionally necessary, we do so only with your explicit consent or under another statutory exception; otherwise, we delete or restrict the information as soon as reasonably possible.

We send the newsletter through our own setup using IONOS email infrastructure. Subscription uses a double opt-in process: after entering your email address, you receive a confirmation message; you are added to the mailing list only after you use the confirmation link.

We process only the information required for delivery and proof of consent:

• email address
• subscription status
• date and time of subscription and confirmation
• technical confirmation token and the applicable version of the consent wording

We do not use tracking pixels and do not measure opens or link clicks. Newsletter data is not combined with listening behavior or orders to create an interest profile. Customers are not automatically subscribed solely because they made a purchase.

Technical delivery may temporarily generate delivery, error, and bounce information. This information is used solely for reliable delivery, troubleshooting, abuse prevention, and removing undeliverable addresses. No measurement of opens or link clicks and no profiling take place.

Legal basis. Your consent. We also keep minimal records of the double opt-in and any unsubscribe request so that we can demonstrate consent and honor the unsubscribe.

You may withdraw your consent at any time for the future by using the unsubscribe link or emailing . Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. We may retain minimal suppression or evidence data so that we can honor your objection and demonstrate the prior consent.

The store domains are operated through Shopify. BOHN AI Inc. is the store operator, seller, and licensor of the digital audio files. Shopify provides product display, cart, checkout, order management, security features, and the technical store infrastructure.

Shopify services are provided by companies within the Shopify group. Under Shopify’s current terms, BOHN AI, as a merchant with a U.S. business address, contracts in particular with Shopify Inc. in Canada and Shopify Technology (USA) Inc. Shopify Payments is provided for a U.S. merchant account under separate payment terms by Shopify Payments (USA) Inc.; additional payment processors, banks, and financial service providers may be involved. For individuals in the EEA, the United Kingdom, and Switzerland, Shopify states in its own Privacy Policy that personal data is received by Shopify International Ltd. in Ireland. Shopify processes data partly on our behalf and partly, especially for its own Shop, Shop Pay, payment, or security features, as an independent controller or business.

Even before an order is placed, when you visit the store Shopify processes, to the extent necessary for operation, security, and the activated store features, technical device and network data, pages and products viewed, cart and checkout events, and consent, opt-out, and other privacy settings. This processing serves in particular the secure provision of the store, the cart function, error analysis, fraud prevention, and honoring your privacy choices.

When you place an order, the following data may be processed in particular:

• name, email address, and billing address
• country, tax region, and any information required for tax purposes
• selected audio file, order number, date and time, price, currency, and discount information
• payment method, payment status, and transaction reference
• IP address, browser and device information, and security and fraud indicators
• communications about the order, invoice, refund, and support

We offer digital audio products only. There is no physical shipping. The data is processed to complete the purchase, calculate taxes, provide the download, prevent fraud, and comply with legal obligations.

Legal basis. Performance of a contract and steps prior to entering into a contract, compliance with legal obligations, and legitimate interests in security, fraud prevention, and legal defense.

Shopify Network Intelligence is disabled for our store. We therefore do not enable Shopify’s cross-merchant use of our customer data for Enhanced Services that depend on Network Intelligence. Data that Shopify receives directly through a user’s voluntary relationship with Shop or Shop Pay is additionally governed by Shopify’s own privacy notices.

Shopify Consumer Privacy Policy

Shopify Privacy Policy

You do not need a separate BOHN AI customer account to make a purchase. Checkout can generally be completed as a guest.

Shopify may nevertheless offer optional sign-in and accelerated-checkout features such as Shop or Shop Pay in the store, allowing contact and payment data to be saved for later purchases or checkout to be simplified. Shopify is responsible under its own privacy notices for any Shop or Shop Pay account and the data stored there. BOHN AI receives only the information required for ordering, payment, and support.

Any future introduction of a separate BOHN AI customer account would require a separate privacy review and an update to this Policy.

After successful payment, you receive the download link by email. For secure digital delivery, we use Sky Pilot, a service of Corknine Development Limited (trading as Sky Pilot), Fasken office, 550 Burrard Street, Suite 2900, Vancouver, British Columbia, Canada.

Sky Pilot processes the following data on our behalf in particular:

• name and email address
• order number and the specific audio file purchased
• IP address
• download timestamps and technical access logs

This processing is used solely to provide the correct download, control access and delivery, resolve technical issues, and make misuse or unauthorized sharing more difficult. Download logging is not an analysis of your later listening behavior. Sky Pilot does not receive information about how you play the file on your device after downloading it.

Sky Pilot is based in Canada; according to its current provider information, its servers are located in the United States, and additional subprocessors may also operate in the United States or other countries. For transfers from the EU/EEA and the United Kingdom, the provider uses the EU Standard Contractual Clauses and the UK Addendum. Sky Pilot retains data for the term of the service agreement and initiates deletion within up to 60 days after termination; IP addresses and download timestamps may be retained for as long as necessary for security and fraud prevention.

Sky Pilot Data Processing Addendum

Depending on your country, device, and availability, we may offer Shopify Payments, credit and debit cards, PayPal, Shop Pay, Apple Pay, and Google Pay.

When you select a payment method, the data required for payment is transmitted to the relevant payment provider, participating banks, card networks, and technical service providers. This may include your name, billing address, email address, purchase amount, currency, order or transaction reference, device and security data, and, directly with the payment provider, card, account, or wallet data.

BOHN AI does not store full card or bank-account details on its own systems. We generally receive only the information required for order processing, accounting, refunds, and support, particularly payment status and the transaction reference.

Payment providers act independently for parts of payment review, identity verification, fraud prevention, anti-money-laundering controls, and risk assessment. They may use automated checks. Their own privacy notices and contractual terms govern their processing.

Legal basis. Performance of the contract, compliance with legal obligations, and legitimate interests in secure payment processing and fraud prevention.

PayPal Privacy Statement

Transactional messages

Order confirmations, payment status updates, invoices, download links, replacement links provided upon request, notices about material technical corrections, security issues, access changes, or a required re-delivery of the purchased file, refunds, and support messages are necessary to perform and support the contract. They are not newsletters and cannot be unsubscribed from while they remain necessary to process your order or provide the purchased service.

Abandoned checkout reminder

If you enter an email address during checkout but do not complete the purchase, Shopify may store the initiated checkout data. This typically includes your email address, cart contents, time, and technical checkout information.

We send a reminder email only where documented consent exists or a specific statutory exception demonstrably applies under the law applicable to you. In the EU/EEA and the United Kingdom, merely entering an email address does not constitute consent. Every reminder email includes an easy way to opt out.

Our services use cookies and similar technologies. We distinguish between strictly necessary and optional technologies.

Strictly necessary technologies

These technologies are needed to provide pages securely, enable the cart and checkout, store language or region, prevent fraud, and remember your privacy choices. Where the TDDDG or comparable rules apply, access to the device is based on the strictly necessary exemption; subsequent processing is based, depending on the purpose, on performance of a contract or legitimate interests.

Optional analytics and conversion technologies

Google Analytics and Google Ads Conversion Tracking are activated only after your consent. Google tags are completely blocked before consent; we also do not send so-called cookieless pings to Google before you agree.

In the Shopify store, we use Shopify’s native cookie banner. On the main websites, Google Analytics and Google Ads remain disabled until an effective consent-management solution is available there.

In the Shopify store, you can change your choice at any time through the permanently available privacy settings. On the main websites, a corresponding link will be provided before any optional analytics or conversion technologies are activated. To implement and document your choice, we may store consent status, time, region, banner version, and a technical identifier. This data is not used for advertising or listening profiles.

Shopify provides operationally necessary and aggregated reports, for example on page views, orders, conversion, revenue, countries, devices, and technical errors. We use this information to understand and improve store functionality, security, and commercial operations.

We process reports arising directly from orders or technically necessary store events to perform the contract and based on legitimate interests. Where Shopify Analytics uses additional optional cookies or similar technologies on your device, the relevant measurement is activated only after your consent. Shopify Network Intelligence remains disabled.

We use Google Analytics 4 solely for aggregated reach and usage statistics and only after your consent. For users in the EU/EEA, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; other Google companies, particularly Google LLC in the United States, may also participate in the processing.

After consent, the following information may be processed in particular:

• page viewed, referrer, and technical events
• time, language, and approximate region
• browser, operating system, device type, and screen characteristics
• cookie or client identifier, where analytics storage has been permitted
• IP address in the form technically required for transmission, security, and coarse geolocation

According to Google, individual IP addresses are not logged or stored in Google Analytics 4. For users in the EU/EEA, Switzerland, and the United Kingdom, Google discards the IP address before logging; before it is discarded, the address may be used technically to derive a coarse location.

Our configuration does not use Google Signals, User-ID, personalized ads, remarketing, or links to an email address, order, or customer identity. We do not send player events, playback duration, reactions, order numbers, or purchased audio files as Analytics parameters. Standard page measurement may, however, include the path and title of a public page and therefore indicate which product or topic page was viewed. Such data is used only after consent for aggregated page statistics and is not linked to a customer identity, order data, or listening behavior.

User-level and event-level data in Google Analytics is limited to the shortest period sufficient for the purpose and is retained for no more than 14 months. Aggregated reports may remain available for longer.

Legal basis. Your consent. You may withdraw it at any time for the future through the privacy settings. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Google Privacy Policy

Google Ads Conversion Tracking is used only after your consent to measure, in aggregated form, whether an ad led to a website visit or purchase. This may involve an ad or click identifier, time, technical device and browser information, conversion value, and currency.

We do not use remarketing, personalized advertising, Customer Match, or Enhanced Conversions. Email addresses, phone numbers, and other first-party customer data are not uploaded to Google for advertising matches. The conversion we define does not contain player data or health- or wellness-related labels as separate conversion parameters; only the technical information required for measurement, the conversion type, value, and currency, and, where needed to prevent duplicate counting, a pseudonymous transaction reference are processed.

Legal basis. Your consent. Refusing consent does not affect your ability to use the website or make a purchase.

Some sound titles or product descriptions relate to topics such as sleep, stress, recovery, concentration, or well-being. An order necessarily includes the name of the selected audio file.

BOHN AI does not treat this selection as a diagnosis and does not draw additional conclusions about your physical or mental health. The information is used only for ordering, payment, delivery, support, security, accounting, and legal obligations. It is not linked to listening behavior and is not used for personalized or cross-merchant advertising.

In certain U.S. states, information relating to a product, page, or purchase may fall within broadly defined terms such as “consumer health data.” Where such a law applies, the additional requirements and rights under that law apply. Optional analytics or conversion measurement on affected product, checkout, or purchase pages remains disabled unless any required separate consent has been validly obtained. Where applicable law requires a separate Consumer Health Data Privacy Policy, that policy will be provided through a distinct and conspicuous link before any covered processing begins.

Personal data is disclosed only to parties that need it for a purpose described in this Policy. These may include:

• IONOS for hosting, audio files, email infrastructure, and newsletter delivery
• Shopify for the store, checkout, orders, security, analytics, and optional Shopify or Shop Pay features
• Sky Pilot / Corknine Development Limited for digital delivery and download control
• Shopify Payments, card providers, PayPal, Shop Pay, Apple Pay, Google Pay, banks, and payment networks
• Google for analytics and conversion measurement only after consent and in a privacy-reduced configuration
• tax advisors, accounting providers, legal counsel, auditors, courts, and authorities where necessary or legally required

Where service providers act on our behalf, we limit them contractually, organizationally, and technically to what is necessary. BOHN AI does not disclose personal data for a recipient’s independent advertising purposes.

BOHN AI Inc. is based in the United States. Some service providers or subprocessors are also located in the United States, Canada, or other countries. As a result, personal data may be processed outside your country of residence or accessed from there.

Where EU/EEA, UK, or Swiss data protection law applies, we rely, depending on the recipient and transfer mechanism, on an applicable adequacy decision or, where no such decision applies, on appropriate safeguards. These include Binding Corporate Rules, the EU Standard Contractual Clauses, the UK Addendum or UK International Data Transfer Agreement, and supplementary technical and organizational measures.

Shopify describes the use of Binding Corporate Rules and Standard Contractual Clauses for international transfers. Sky Pilot uses the EU Standard Contractual Clauses and the UK Addendum under its Data Processing Addendum. You may request more information about the safeguards used for a specific transfer by emailing .

Despite contractual and technical safeguards, the level of data protection in a third country may differ from that in the EU/EEA, the United Kingdom, or Switzerland; in particular, government access may be possible under the laws of the recipient country.

Information required from you

You can use the general websites and sound previews without providing voluntary contact, newsletter, or order data. To make a purchase, however, we need the information identified as required fields during checkout. Without it, we cannot perform the contract, process the payment, or provide the download. Newsletter subscriptions and optional analytics remain voluntary.

No significant automated decision by BOHN AI

BOHN AI does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Payment and security providers may independently perform automated risk, fraud, identity, or credit checks. Their privacy notices provide more information.

We retain personal data only for as long as necessary for the relevant purpose or while legal obligations and permissible evidentiary or defense interests apply. We then delete or anonymize the data or, where deletion is not yet permitted, restrict its processing.

We use appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and disclosure. These measures include encrypted transmission, access restrictions, authorization controls, security updates, logging of security-relevant events, backups, and careful selection of service providers.

No method of data transmission or storage system can guarantee absolute security. If a security incident occurs, we act in accordance with the applicable assessment, reporting, and notification obligations.

Our services are not directed to children under 16. We do not knowingly collect personal data from children without any consent required by applicable law. If we learn that such processing has occurred, we review the data and delete or block it unless a legal obligation requires otherwise.

The specific rights available to you depend on where you live and the law that applies. You may submit a request at any time to . We may request reasonable information to verify your identity so that data is not disclosed to an unauthorized person.

EU/EEA and United Kingdom

• access to your personal data
• correction of inaccurate data and completion of incomplete data
• deletion, unless an overriding obligation or lawful basis requires retention
• restriction of processing
• data portability where the statutory requirements are met
• objection to processing based on legitimate interests
• withdrawal of consent at any time for the future
• objection to direct marketing at any time and without giving a reason

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before the withdrawal.

United States, Canada, Switzerland, and Other Countries

Depending on applicable law, you may have rights to confirmation, access, correction, deletion, a copy of your data, restriction of sensitive data, and to object to or opt out of sales, sharing, or targeted advertising, as well as a complaint or appeal process. BOHN AI will not discriminate against you for exercising a statutory privacy right. An authorized agent may submit a request where legally permitted. If we deny a request, you may, where applicable law provides an appeal right, ask us to review the decision by emailing with the subject line “Privacy Request Appeal.”

BOHN AI does not sell personal data and does not use it for cross-context or cross-merchant behavioral advertising. If local law nevertheless classifies a particular measurement disclosure as “sharing” or “targeted advertising,” you may reject or withdraw the optional processing through the privacy settings.

Please contact first with any question or complaint so that we can review your concern. You may also contact a competent data protection or consumer protection authority.

In the EU/EEA, this is in particular the supervisory authority for your habitual residence, place of work, or the place of the alleged infringement. In the United Kingdom, the competent authority is generally the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner; in Canada, the Office of the Privacy Commissioner or a competent provincial authority; and in the United States, the authority designated under applicable state law.

We update this Privacy Policy when services, data flows, legal requirements, or security requirements change. Material changes will be clearly identified on the affected websites. Before introducing a separate customer account, new Shopify apps with access to customer data, personalized player features, or additional analytics or marketing services, we will conduct a new privacy review.

The version published on the website at the relevant time applies. This version was last updated on August 3, 2026.