Privacy Policy

1. INTRODUCTION

Omnity Technologies LTD ("Company", "We", "Us", or "Artilect AI") respects your privacy. This Privacy Policy explains how we collect, use, disclosure, and safeguard your information when you use our mobile application and website (the "Service").

We are a company registered in England and Wales. For the purposes of the General Data Protection Regulation (UK GDPR), we are the Data Controller.

2. DATA WE COLLECT

We collect information to operate our "Energy System" algorithms and provide the Service.

2.1. Personal Data You Provide

• Account Data: Email address, name, password (encrypted).
• Profile Data: Age, gender, weight, height (used for calorie/fitness calculations).
• User Content: Task lists, goals, notes, and custom entries.

2.2. Financial Data (User-Submitted)

Manual Entry: We collect the financial data that you manually enter into the Service (e.g., expense amounts, income categories, budget limits).

No Bank Connections: We do not connect to your bank accounts via third-party APIs (such as Plaid or TrueLayer). We do not have access to your bank login credentials, account numbers, or real-time transaction history.

2.3. Health and Fitness Data

We may request access to health data providers (e.g., Apple HealthKit, Google Fit).

Data Types: Step count, heart rate, workout duration, calories burned.

Purpose: This data is used solely to calculate your "Energy Score" and "XP" within the application.

2.4. Usage and Device Data

We collect standard technical logs to ensure the security and performance of the Service.

• Technical Data: IP address, device model, OS version, and unique device identifiers (e.g., IDFV or Android ID).
• Behavioral Data: Feature usage, session duration, and "tap" patterns (used for internal analytics and product improvement).

2.5. Technical Data & "No Cookie" Policy

Strictly Necessary Architecture: Unlike many platforms, we do not use third-party advertising cookies, tracking pixels, or external analytics scripts (such as Google Analytics or Facebook Pixel) on our website or application.

Local Storage: We use local storage and tokens solely for authentication (keeping you logged in via Supabase) and essential application functionality.

Exemption: Because these technologies are "strictly necessary" for the provision of the Service, no Cookie Consent banner is required under the UK PECR or EU ePrivacy Directive.

3. HOW WE USE YOUR DATA

We use your data for the following legal bases:

3.1. To Provide the Service (Performance of Contract)

• Calculating your "Energy" and "XP" scores based on financial and health inputs.
• Managing your subscription and "PRO" status.
• Syncing your data across devices.

3.2. To Improve the Service (Legitimate Interests)

• Training our deterministic algorithms to provide better "Smart Analytics."
• Debugging technical issues and preventing fraud.

3.3. To Comply with Legal Obligations

• Retaining transaction records for tax purposes.
• Complying with court orders or regulatory requests.

4. DATA SHARING AND DISCLOSURE

4.1. Service Providers

We share data with specific infrastructure providers who help us operate the "Clean Stack":

• Hosting & Database: Supabase (Encrypted Storage).
• Payments: Apple App Store, Google Play Store, RevenueCat (We do not store credit card numbers).
• No Ad Tech: We do not share data with marketing agencies, ad networks, or third-party behavioral trackers.

4.2. Aggregated and Anonymized Data (The "Asset" Clause)

We may de-identify, anonymize, or aggregate your data so that it can no longer be linked to you ("Aggregated Data").

Ownership: We own all right, title, and interest in Aggregated Data.

Usage: We may use, sell, license, and share Aggregated Data with third parties (such as financial researchers, insurers, or advertisers) for market analysis, benchmarking, and trend forecasting.

No Consent Required: As Aggregated Data is not "Personal Data," it is not subject to GDPR/CCPA restrictions on transfer.

4.3. Business Transfers

If Omnity Technologies LTD is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data becomes subject to a different Privacy Policy.

5. DATA RETENTION

We retain your Personal Data only for as long as necessary to fulfill the purposes set out in this Privacy Policy.

• Account Data: Retained until you delete your account.
• Financial/Health Logs: Retained for the duration of your account life to generate historical charts.
• Legal Compliance: We may retain certain data for longer periods if required by tax or legal authorities.

6. SECURITY

We use commercially reasonable administrative, technical, and physical security measures to protect your Personal Data (e.g., encryption in transit and at rest). However, no transmission over the Internet is 100% secure. You accept the inherent security risks of providing information online.

7. INTERNATIONAL DATA TRANSFERS

Your information, including Personal Data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ (e.g., the United States).

UK/EU Users: If we transfer data to the US, we rely on Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA) to ensure your data is protected.

8. YOUR DATA PROTECTION RIGHTS (UK & GDPR)

If you are located in the UK or EEA, you have certain rights:

• Right to Access: Request a copy of the Personal Data we hold about you.
• Right to Rectification: Correct inaccurate data.
• Right to Erasure: Request deletion of your data ("Right to be Forgotten"), subject to legal retention obligations.
• Right to Object: Object to processing based on legitimate interests.

To exercise these rights: Email us at legal@artilectai.com. We will respond within 30 days.

9. NOTICE TO CALIFORNIA RESIDENTS (CCPA/CPRA)

This section applies solely to visitors, users, and others who reside in the State of California.

Categories Collected: Identifiers, Commercial Information (financial history), Biometric Information (health data), Internet Activity.

No Sale of Personal Data: We do not sell your Personal Data for money. Furthermore, because we do not use third-party ad trackers, we do not "share" data for cross-context behavioral advertising.

Aggregated Data: We may share Aggregated Data (which is not Personal Data).

Shine the Light: You may request a list of third parties to whom we have disclosed personal data for direct marketing purposes. The answer is: None.

10. CHILDREN'S PRIVACY

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent and you are aware that your child has provided us with Personal Data, please contact us.

11. CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. CONTACT US

If you have any questions about this Privacy Policy, please contact us: