Privacy Policy

1. Scope

This Privacy Policy explains how ARDA AI, INC. ("ARDA," "we," "us," or "our") handles information when you visit ardaapp.com, join our waitlist, contact us, participate in a beta, or use the ARDA iPhone application and related services (collectively, the "Service").

The initial Service is intended for adults in the United States. If a product notice presented at collection differs from this Policy, the more specific notice applies to that collection.

2. Information we collect

Website and waitlist information

• Your email address when you join the waitlist or contact us.
• Basic submission context, such as time, referring page, referrer, and campaign parameters.
• Website analytics and diagnostic information, including browser, device, approximate region, pages viewed, interactions, and error information.

Account and app information

• Account identifiers, sign-in information, settings, subscription status, and support communications.
• Life Audit answers, selected priorities, goals, commitments, and profile information you choose to provide.
• Accepted evidence, updates, ratings, confidence, trajectories, plans, rating explanations, corrections, deletions, and history.
• Conversations with ARDA and feedback you send about a fact, interpretation, rating, or product experience.
• App diagnostics, feature use, notification state, and information needed to secure and operate the Service.

Some Life Audit and app information may be sensitive, including information about health, mental state, finances, substance use, relationships, or personal circumstances. You should provide only information you are comfortable asking ARDA to process. Sensitive questions are designed to include a way to decline where appropriate.

Optional Apple Health connection

With your permission, ARDA reads height, weight, steps, exercise, workouts, and sleep from Apple Health for on-device views. Imported Health records remain in protected local storage on your iPhone, excluded from device backups. They are not uploaded to ARDA's servers, sent to AI providers, or used to automatically change Life Ratings. ARDA does not write to Apple Health.

This local-only handling applies to the imported records. Health information you separately type or paste into an audit, context import, or conversation is submitted app content and may be stored and processed as described elsewhere in this Policy.

Context imported from another assistant

You can copy a handover prompt into another AI assistant and paste its response into ARDA. ARDA does not connect to that assistant's account. The text you submit is processed by ARDA and its AI provider to prepare a review before you choose what to keep. Review and remove unwanted sensitive information before submitting the text.

The raw pasted text is not retained as a server-side transcript or file. Prepared review items and supporting excerpts are temporarily associated with the import session until confirmation, discard, or expiry. Only the items you select are retained in your account's Life Profile or Plan when you confirm the import. AI-provider retention limits still apply to requests already processed.

3. How we collect information

We collect information directly from you, automatically through the website or app, from service providers that help us operate the Service, and from integrations you deliberately connect or authorize. ARDA does not treat a model assumption as a confirmed personal fact. Information extracted from free text must be validated or accepted before it becomes scoring evidence.

4. How we use information

• Provide the Life Audit, Life Profile, ratings, evidence history, plans, conversations, and other requested features.
• Personalize questions and explanations to your active domains, goals, circumstances, and permissions.
• Maintain account state, send service messages, provide support, and manage purchases if paid features are offered.
• Secure, debug, measure, and improve the Service.
• Send launch or product updates you requested. You can unsubscribe from marketing email at any time.
• Comply with law, enforce our Terms, and protect users, ARDA, or others from fraud, abuse, or harm.

We do not use app engagement, positive language, or time spent in the app as evidence that your life improved.

5. AI processing

ARDA uses artificial intelligence to structure relevant information, identify potential contradictions, generate explanations and plans, and support conversation. When a feature requires AI processing, ARDA sends the information relevant to that request to an AI service provider, including OpenAI.

Our product design configures eligible OpenAI API requests not to create stored response application state through the API (store: false) and does not opt your personal app content into general-purpose model training. Under standard OpenAI API controls, limited prompt and response content may still remain in abuse-monitoring logs for up to 30 days. ARDA will describe Zero Data Retention only after it is approved, enabled, and verified for the production project. This processing is separate from any personal ChatGPT account you may have.

Before affected personal information is sent for AI processing, the launch app is designed to explain the purpose, identify the contracted providers in linked details, and ask for affirmative permission. Withdrawing permission stops future AI processing but cannot recall a request already sent.

AI output can be incomplete or wrong. ARDA is designed to distinguish accepted evidence from interpretation, expose uncertainty, and allow correction. Do not rely on ARDA as a substitute for professional judgment or emergency assistance.

6. Service providers and disclosures

We disclose information to vendors that perform services for us. We require service providers that receive ARDA personal information to use it only for authorized purposes and provide the same or equal protection described in this Policy and required by applicable Apple rules. Current launch providers and roles are:

• Supabase: Waitlist and app database, authentication, private storage, server functions, queues, and backups.
• OpenAI: Bounded AI interpretation, drafting, explanations, planning, and safety classification.
• Apple: App Store distribution, Sign in with Apple, Apple-controlled platform services, and purchases if subscriptions are offered.
• Google Workspace: Transactional authentication email and support communications.
• Railway: Hosting and delivery of the public website.
• Google Analytics and Microsoft Clarity: Analytics, conversion measurement, and diagnostics for the public website. These website tools do not receive private Life Audit answers or ARDA conversations from us.
• Professional advisers, regulators, law enforcement, or parties to a corporate transaction when reasonably necessary and legally permitted.

We do not sell Life Audit answers, personal evidence, ARDA conversations, or domain ratings. We do not use that private app content to create advertising audiences.

7. Website analytics and cookies

Our website uses cookies or similar technologies for analytics, security, performance, and conversion measurement. Google Analytics, Google Tag Manager, Google Ads measurement, and Microsoft Clarity may process device and interaction information under their own terms. These tools do not receive your Life Audit answers or private ARDA conversations from us.

You may limit cookies through browser controls. Some privacy tools or browser settings may reduce analytics functionality without preventing access to the public website.

8. Retention

• Waitlist: We retain your email until we have provided relevant launch updates, you unsubscribe, or you ask us to delete it, subject to limited suppression and legal records.
• Anonymous Life Audit: The current product design retains an abandoned anonymous audit under a random session identifier for up to seven days unless you discard it sooner.
• Account data: We retain account and app information while your account is active and as needed to provide the Service, resolve disputes, prevent abuse, or satisfy legal obligations.
• Imported Health records: Local copies are removed when you sign out, delete your account, or choose to remove them in ARDA's Health controls. Stopping import alone does not delete existing copies. Removing local copies does not delete the originals in Apple Health.
• Support requests: User-supplied support content is normally retained for up to 90 days after resolution unless an earlier deletion request or documented legal hold applies.
• Operational records: Content-minimized telemetry and job records use limited schedules appropriate to their purpose. Deidentified aggregate metrics may be retained for up to 13 months.
• Deletion: ARDA-controlled active account data is designed to be removed and Supabase backup copies to expire within seven days after an accepted account-deletion request. Limited content-free completion proof may remain for 24 months. OpenAI abuse-monitoring logs may remain for up to 30 days under the provider controls described above.

Deleting evidence may change a rating, lower confidence, or make an area unassessable. Correction history and deletion are separate: a correction preserves a linked record of the change, while deletion removes the personal evidence according to the applicable process.

9. Your choices and rights

Depending on your location and relationship with ARDA, you may be able to:

• Access, correct, export, or delete personal information.
• Correct or challenge accepted evidence and interpretations inside the product.
• Withdraw an optional permission or disconnect an integration.
• Unsubscribe from marketing email.
• Initiate deletion of your full account through the app or request privacy assistance by email.

The ARDA app provides in-app deletion of individual conversations and permanent deletion of the full account. Account holders can begin full deletion in Settings → Delete Account. Access, export, correction, permission, or more limited deletion requests may be sent to contact@ardaapp.com.

See Privacy Choices for current request instructions and in-app paths. We may verify your identity and authority before fulfilling a request. If an authorized agent submits a request, we may ask for evidence of authorization.

10. Consumer health data

Health, fitness, mood, substance-use, and related information may receive additional protections under state consumer health privacy laws. Our Consumer Health Data Privacy Policy describes the categories, sources, purposes, recipients, rights, and appeal process for that information.

11. Security

We use administrative, technical, and organizational safeguards intended to protect information against unauthorized access, loss, misuse, or alteration. No system is perfectly secure. Protect your account credentials and contact us if you believe your account or information has been compromised.

12. Age eligibility

The initial ARDA app is intended only for people who are at least 18 years old. We do not knowingly permit children to complete the Life Audit or create an account. If you believe a minor provided personal information, contact us so we can investigate and delete it where appropriate.

13. International processing

ARDA and its providers may process information in the United States and other countries. Those countries may have different privacy laws. Where required, we use appropriate contractual or legal protections for cross-border processing.

14. Changes to this Policy

We may update this Policy as the Service changes. We will revise the date above and provide additional notice when required by law or when a change materially affects how we handle personal information. Review the current Policy when the iPhone app becomes available.

15. Contact

Questions, requests, or concerns may be sent to:

ARDA AI, INC.
contact@ardaapp.com