EXPLICIT CONSENT FORM

In accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the United Kingdom General Data Protection Regulation (UK GDPR) / Data Protection Act 2018 (DPA 2018), certain personal data processing activities and international data transfers require your explicit, specific, informed, and freely given consent.

By checking the corresponding consent boxes during registration or checkout, you provide your explicit consent to Shellix Smart Solutions Bilişim Teknolojileri Yazılım İthalat ve İhracat Anonim Şirketi ("Shellix Bilişim A.Ş.") and Mistikist LTD ("Mistikist UK") (collectively referred to as "we", "our", "us", or the "Group"), acting as joint data controllers, to process and transfer your personal data under the terms defined below:

1. Consent to Cross-Border / International Data Transfers

To deliver global high-availability binaural and monaural beat stream flows, keep your customized schedules synchronized across devices, and secure international subscription payments, Mistikist operates on top of secure global cloud databases. You provide your explicit consent to transfer your encrypted registration, device telemetry, and transactional metadata outside the European Economic Area (EEA) and the United Kingdom to our verified hosting, processing, and transaction partners:

• Microsoft Azure (Primary virtual servers, application hosting, and main cloud database infrastructure)
• Google Cloud Platform (GCP) (Backup virtual servers and core analytical data systems)
• Google Firebase (SSO verification, real-time database synchronization, and push notifications)
• Amazon Web Services (AWS) (Secondary media asset hosting and global content distribution network CDN)
• Stripe (PCI-compliant global secure credit card processing engine under Mistikist LTD)
• AppsFlyer, Microsoft Clarity & Google/Microsoft Analytics (Foreign-based mobile attribution, user behavior session analytics, heatmaps, and aggregated performance traffic reporting)

2. Consent to Profile Personalization & Personal Audio Processing

To personalize your brainwave entrainment seans modules, train our Mistik AI cognitive wellness recommendation filters, and allow you to upload/modulate customized audio waves, you explicitly consent to our processing of:

• Your **gender** (if voluntarily submitted during onboarding) to personalize profile visuals and customized schedules.
• Your voluntarily uploaded **profile photo** to display inside the app shell.
• Your voluntarily recorded or uploaded **voice clips and personal sound wave files** inside the player engine, which are processed to overlay binaural beats and frequency modulation.

3. Right of Revocation

You have the right to withdraw your explicit consent at any time. To revoke your consent, please email us directly at [email protected]. Upon receipt, we will terminate consent-based processing immediately. Please note that withdrawing consent for international transfers or core audio processing will limit your technical ability to log into your account, stream music assets, or utilize customized recording tools.