Privacy Policy

Welcome to AIary, a mental health and wellness application operated by APLICART, S.L.U ("we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our mobile application and related services.

We are committed to protecting your privacy and ensuring the security of your personal data, especially given the sensitive nature of mental health information. This policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy regulations.

By using AIary, you agree to the collection and use of information in accordance with this policy.

We collect several types of information to provide and improve our services:

**Account Information:** When you create an account, we collect basic information such as your device identifier, platform (iOS/Android), and language preferences. We do not require email addresses or personal names for basic functionality.

**Journal Entries:** Your diary entries, mood data, and AI conversation history are collected to provide personalized responses and track your emotional wellness journey.

**Usage Data:** We collect information about how you use the app, including features accessed, session duration, and interaction patterns to improve our services.

**Device Information:** We may collect device-specific information such as operating system version, app version, and device model to ensure compatibility and optimal performance.

**Analytics Data:** We collect aggregated, anonymized usage statistics to understand user behavior and improve our app functionality.

We use your personal information for the following purposes:

**Service Provision:** To provide AI-powered responses, mood tracking, and personalized wellness recommendations based on your journal entries.

**Personalization:** To customize your experience and provide relevant content, insights, and features tailored to your emotional wellness journey.

**Communication:** To send you important service updates, notifications, and respond to your support requests.

**Improvement:** To analyze usage patterns and improve our AI algorithms, user interface, and overall service quality.

**Legal Compliance:** To comply with applicable laws, regulations, and legal processes.

**Safety:** To protect the safety and security of our users and prevent misuse of our services.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

**Service Providers:** We work with trusted third-party service providers who help us operate our services, such as cloud hosting, analytics, and customer support. These providers are bound by strict confidentiality agreements.

**Legal Requirements:** We may disclose information if required by law, legal process, or government request, or to protect our rights, property, or safety.

**Business Transfers:** In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

**Consent:** We may share information with your explicit consent or at your direction.

**Emergency Situations:** If we believe disclosure is necessary to prevent serious harm to you or others, we may share relevant information with appropriate authorities or emergency services.

We implement industry-standard security measures to protect your personal information:

**End-to-End Encryption:** All journal entries and sensitive data are encrypted using advanced encryption protocols before being stored or transmitted.

**Secure Storage:** Your data is stored on secure servers with multiple layers of protection, including firewalls, access controls, and monitoring systems.

**Access Controls:** We limit access to your personal information to authorized personnel who need it to provide services, and all access is logged and monitored.

**Regular Security Audits:** We conduct regular security assessments and updates to ensure our systems remain secure against evolving threats.

**Data Minimization:** We collect and retain only the minimum amount of data necessary to provide our services effectively.

While we strive to protect your information, no security system is 100% secure, and we cannot guarantee absolute security.

You have several important rights regarding your personal data:

**Right to Access:** You can request a copy of the personal information we hold about you.

**Right to Rectification:** You can request correction of inaccurate or incomplete personal information.

**Right to Erasure:** You can request deletion of your personal data, subject to certain legal limitations.

**Right to Portability:** You can request your data in a structured, machine-readable format to transfer to another service.

**Right to Restrict Processing:** You can request that we limit how we process your personal information in certain circumstances.

**Right to Object:** You can object to certain types of processing of your personal information.

**Right to Withdraw Consent:** Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, please contact us using the information provided at the end of this policy.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

**Active Accounts:** While your account is active, we retain your data to provide continuous service and maintain your journal history.

**Deleted Accounts:** When you delete your account, we begin the process of removing your personal data from our systems within 30 days, unless we have a legal obligation to retain certain information.

**Legal Requirements:** Some data may be retained longer if required by law, for legal proceedings, or to protect our legitimate interests.

**Aggregated Data:** We may retain anonymized, aggregated data indefinitely for research and service improvement purposes.

You can request earlier deletion of your data by contacting our support team.

Our mobile application may use technologies similar to cookies to enhance your experience:

**Local Storage:** We store preferences and settings locally on your device to improve app performance and remember your choices.

**Analytics:** We use analytics tools to understand app usage and improve our services. This data is typically anonymized and aggregated.

**Third-Party Services:** Some features may involve third-party services that use their own tracking technologies, subject to their respective privacy policies.

**Opt-Out:** You can control certain tracking through your device settings or by contacting us for assistance.

We do not use tracking technologies for advertising purposes.

Our app integrates with certain third-party services to provide enhanced functionality:

**OpenAI:** We use OpenAI's services to power our AI responses. Your journal entries are processed by OpenAI to generate personalized responses, subject to their privacy policy.

**RevenueCat:** We use RevenueCat for subscription management. They process payment information and subscription status, subject to their privacy policy.

**Cloud Services:** We use secure cloud hosting services to store and process your data with appropriate security measures.

**Analytics Providers:** We may use analytics services to understand app usage, always with appropriate data protection measures.

We carefully vet all third-party services and require them to maintain appropriate privacy and security standards.

AIary is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children under 13.

**Age Verification:** While we don't require age verification for basic use, we recommend parental supervision for users under 18.

**Parental Rights:** Parents or guardians can contact us to review, modify, or delete their child's information if they discover their child has provided information without consent.

**Teen Users:** For users between 13-17, we recommend parental involvement in their mental health journey and app usage.

If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

As a company based in Andorra, we may transfer your personal data to other countries to provide our services:

**Data Protection:** We ensure that any international transfers comply with applicable data protection laws and provide adequate protection for your personal data.

**Safeguards:** We use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data during international transfers.

**Service Providers:** Our cloud hosting and AI service providers may be located in different countries, but all are required to maintain appropriate data protection standards.

**Your Rights:** Your privacy rights remain protected regardless of where your data is processed.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements:

**Notification:** We will notify you of significant changes through the app or by email if we have your contact information.

**Effective Date:** Changes become effective when posted, unless otherwise specified.

**Review:** We encourage you to review this policy periodically to stay informed about how we protect your information.

**Continued Use:** Your continued use of AIary after changes indicates your acceptance of the updated policy.

Previous versions of this policy are available upon request.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Email:** contact@aiary.io **Support:** Use the contact form in our app or website **Mail:** APLICART, S.L.U, Carrer de la Solana 91, Andorra

We are committed to addressing your privacy concerns promptly and transparently. For data protection inquiries, please include "Privacy Request" in your subject line to ensure proper routing.

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe we have not adequately addressed your concerns.