ARTi Privacy Policy

Effective: 13 May 2026 · Last updated: 16 October 2026

October 2026 update: we added Android advertising-identifier measurement for confirmed adults, with an opt-out ("Do Not Sell or Share My Personal Information"), and disclosed Google Ads, Meta and TikTok for Business as advertising partners. Those advertising-measurement provisions took effect on 8 October 2026, with ARTi 1.8.13 for Android, which added the Do Not Sell or Share control. We also disclosed web subscriptions via Stripe, optional voice dictation on iOS, operating-system age-range signals, Sign in with Google, and corrected how consent to AI services is given and withdrawn. On 7 October we also clarified that, on iOS, Apple's SKAdNetwork may report ad-driven installs to advertising networks in aggregate, without identifiers. Also on 7 October we corrected what we send to AI providers and what ARTi keeps (§6.1, §6.2, §10), added each AI provider's training and retention terms, clarified how you agree to and stop AI processing (§6.3, §6.4, §7), and stated that users under 18 need a parent's or guardian's permission (§2, §12). On 9 October we updated what your personalised greeting sends to AI (never your name) and where the privacy settings are in the app, and added information for users in Japan, South Korea and Brazil (§2, §8.5, §8.7, §8.8).

This Privacy Policy explains how E1 Technology, Inc. ("ARTi", "we", "us") collects, uses, shares, and protects information when you use the ARTi mobile application and related services (the "Service"). By using ARTi you agree to this Policy.

If you do not agree, do not use the Service.

1. Who we are

The Service is provided by E1 Technology, Inc., a Delaware corporation headquartered at 7650 Girard Ave, Ste 300, La Jolla, CA 92037, United States. E1 Technology, Inc. is the controller of your personal data.

Privacy contact: privacy@arti.social
General contact: support@arti.social
Postal: see address above.

2. Who can use ARTi

ARTi is intended for users aged 13 and older. During registration, you select an age band (for example 13–17, 18–24, 25–44, 45–59, or 60+). In the mobile apps no under-13 option is offered at all, and anyone identified as under 13 cannot create an account. We do not collect or store your exact date of birth.

Some countries set a higher minimum age than 13. Where local law requires it, that higher age is applied at registration instead — for example 14 in South Korea, 15 in Japan and 18 in India, and the regional minimums described below.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you must be 18 or older to use ARTi. We do not currently offer ARTi to people under 18 in those regions.

Elsewhere, if you are under 18, you must have your parent or legal guardian's permission to use ARTi, including its AI features.

You can browse ARTi without creating an account. Liking, commenting, following, creating content, and chatting with ARTi require an account.

3. Data we collect

3.1 Information you give us

3.2 Information collected automatically

3.3 What we do not collect

• Date of birth. We ask for your age band only (for example 13–17, 18–24, 25–44, 45–59, 60+) — we do not collect or store your exact date of birth.
• Advertising click identifiers. We do not retain the raw install-referrer string or advertising click identifiers (such as gclid, gbraid, fbclid, or ttclid). Install attribution records only a coarse source label such as "google", "meta", "tiktok", or "organic".
• Precise location (no GPS).
• Phone numbers.
• Audio recordings. We do not record or store audio. On iOS you can optionally dictate a chat message with the microphone button: your speech is transcribed by Apple's speech-recognition service (which may process it on Apple's servers under Apple's privacy policy) and only the resulting text is sent to the AI provider. The microphone is used only when you choose to dictate.
• Contacts.
• Browsing or search history outside the app.
• Health, financial, or biometric data.
• Advertising identifier (Android only, adults only). If you use ARTi on Android and have told us you are 18 or older, we collect the Google Advertising ID of your device and use it, through our attribution provider AppsFlyer, to measure which advertising campaign brought you to ARTi and whether our advertising is working (install, account creation, trial start, purchase). This identifier is shared with the advertising platforms that run our campaigns — currently Google Ads, Meta and TikTok for Business — for that purpose only. We do not collect it from anyone under 18 or whose age we have not confirmed, from users in the European Economic Area, the United Kingdom or Switzerland, or from users whose device is set to the Quebec French locale, and we never collect it on iOS (we do not request App Tracking Transparency). You can stop this at any time: Settings → Privacy & Safety → Do Not Sell or Share My Personal Information (see §8.2). We do not link the advertising identifier to your Android ID or any other persistent device identifier.

4. How we use information

We use information to:

• Provide and maintain the Service.
• Authenticate users and secure accounts.
• Personalize the experience (suggested topics, language, and — for adult users — the order of content in your feed based on your interests and activity).
• Measure and optimise our own advertising campaigns (Android, confirmed adults only — see §3.3 and §8.2).
• Process subscriptions and Gem economy.
• Generate AI content from your text prompts and from any photos or images you choose to upload as visual reference.
• Detect and prevent abuse, spam, fraud, and Community Guidelines violations.
• Respond to support and legal requests.
• Comply with legal obligations.

4.1 Marketing communications

We may use your email address to send you marketing communications about ARTi — new features, content highlights, subscription offers, and product updates — and to invite you to take part in optional product research, such as user surveys. This is first-party marketing only: it is sent by ARTi about ARTi. If you allow notifications, we may also send occasional promotional push notifications, such as an invitation to come back to ARTi or to resume a trial. You can turn notifications off at any time in your device settings. In South Korea, we send them only with your prior consent (§8.8).

• Survey and research invitations are sent only to adult users (18 or over). Taking part is entirely voluntary, and declining has no effect on your account or your use of the Service. Surveys are hosted on Google Forms (see §5); we do not collect your email address through the survey form itself.
• You can opt out of marketing emails at any time using the unsubscribe link at the bottom of every marketing email, or by writing to privacy@arti.social.
• Opting out of marketing does not affect transactional or service emails (account, security, subscription, legal, abuse reports).
• For users in the EEA, UK, and Switzerland, our legal basis for first-party marketing to existing users is legitimate interests under GDPR Art. 6(1)(f) and Recital 47 (soft opt-in for similar products). You may object at any time under Art. 21.

4.2 What we don't do with your information

• We do not sell personal information, and we never give third parties your email address, name or content for their own advertising or marketing. What advertising partners receive is described under "Advertising partners" in §5: on Android, for confirmed adults who have not opted out, that includes the advertising identifier and a few app events, which partners may also use to improve their advertising systems.
• We do not show third-party advertising inside ARTi and do not build advertising profiles of our users.
• We do not use advertising identifiers on iOS and do not request App Tracking Transparency (ATT).
• On Android, for confirmed adults only, we use the Google Advertising ID for the sole purpose of measuring and optimising our own advertising campaigns; this is described in §3.3 and §8.2, and you can opt out at any time.
• We do not sell or rent personal information as defined by the CCPA / CPRA.

5. Service providers and sub-processors

We share data only with the following providers, all of whom are bound by data-processing agreements:

Advertising partners (third parties). The platforms that run our advertising campaigns are Google LLC (Google Ads), Meta Platforms, Inc. and TikTok Inc. (United States) / TikTok Pte. Ltd. (Singapore) (TikTok for Business). Each uses what it receives under its own privacy policy and may use it to improve its advertising systems. To measure and optimise our advertising, our attribution provider AppsFlyer forwards — on Android only, for confirmed adults who have not opted out and are outside the EEA, the United Kingdom, Switzerland and Quebec — the Google Advertising ID, the install event, and the events "account created", "trial started" and "purchase" (never your content, messages, name, email address or phone number). For everyone else, including all iOS users, partners receive at most an identifier-free confirmation that an install attributed to their ad took place, and on iOS Apple's aggregate SKAdNetwork reports. Google and Meta are not our processors here: they receive this data for their own purposes. Under California law this is "sharing" for cross-context behavioural advertising; you may opt out at any time (§8.2). For users Meta identifies as California residents we enable Meta's Limited Data Use, which restricts Meta to processing on our behalf. We do not sell personal information for money.

5.1 Minors, advertising, and measurement

ARTi applies a deliberately conservative standard to users under 18, wherever they are:

• No behavioural or targeted advertising to minors. We do not build advertising audiences, remarketing lists, or lookalike audiences from the data of users under 18.
• The attribution SDK does not run for minors. Where a user's age band indicates they are under 18 — or while their age is not yet established — our attribution provider (AppsFlyer) is not started, and no identifiable measurement data is sent for that user. On iOS, Apple's SKAdNetwork may still report the install to the advertising network in aggregate; that report contains no identifier and nothing about you.
• No advertising identifiers for minors. We never collect an advertising identifier from a user under 18 or whose age is not yet established, and our attribution provider is not started for them. We do not knowingly sell or share the personal information of anyone under 16 (California Civil Code §1798.120(c)).
• Aggregate measurement only on iOS. Campaign measurement on iOS relies on Apple's SKAdNetwork, which is designed to report results in aggregate rather than about an individual.
• Age signals are used only for safety. Where the operating system offers an age signal (Apple's Declared Age Range on iOS, Google Play age signals on Android), we use it solely to apply the correct age-appropriate experience and age limits — never for advertising, marketing, profiling, or analytics.

6. AI services — what we send, where it goes, and your consent

ARTi uses third-party AI services to generate visual content (images, videos, infographics, games) and to power the AI chat experience. To do this, your text prompts — and, when you choose, photos or images you upload as visual reference — are sent over the network to AI providers operated by Google LLC and OpenAI OpCo, LLC This section explains exactly what is sent, to whom, how you agree to it, and how to stop it.

6.1 What we send

• The text prompt you type. When you tap "Create" and submit a prompt to generate an image, infographic, video, or game — or when you send a message in the AI chat — the prompt text is transmitted to the AI provider over HTTPS.
• Any photo or image you choose to upload as visual reference. When you explicitly pick a photo from your camera roll, take a new photo, or upload an image as visual input to an AI generation flow, that image is transmitted along with your prompt to the AI provider. Photo or image upload is always opt-in and per-action — we never read your camera roll without your tapping to select a specific image, and AI generation works without uploading anything.
• Few personal details, and never your email address or account ID. We do not send your email address, your account ID, your device ID, your age band or your location to an AI provider. A few personal details are sent where a feature needs them: your streak, up to three of your interests and the title of a project you left unfinished, so ARTi can write your personalised greeting (never your name); the username and display name you choose, which are checked by AI for safety when you pick them; and the usernames of other people that ARTi mentions in a reminder it writes for you.
• Photo metadata. Photos you share with ARTi are sent to the AI provider to answer you and are not stored by ARTi. In the current versions of the ARTi apps (1.8.14 and later) and on the web, every photo you add is re-encoded on your device before it is sent, which removes embedded metadata such as where and when it was taken and the device model. Our servers also remove this metadata from JPEG and PNG images. If you use an older version of the app, update it to get the same protection.
• No prior conversation history beyond the immediate session context the AI needs to respond. Cross-session history is not transmitted.
• No video and no files other than the image you explicitly select. ARTi does not read arbitrary files on your device. On iOS you may optionally dictate a chat message with the microphone; only the transcribed text is sent to the AI provider, never the audio (see §3.3).

6.2 Where it goes

Each provider handles your prompts and photos under its own terms, summarised in the table above. What ARTi itself keeps:

• Chat. ARTi's replies are not saved. On iPhone, the questions you type in chat are saved in our topic log (below); on Android and the web they are not saved.
• What you create. The topic, title, description and prompt of a project or creation are stored with it, and the prompt may appear on its public page. Deleting a creation deletes it and its prompt. Deleting your account deletes your creations, but projects you started stay visible under "Deleted account", including their topic and structure.
• Topic log. The topics you type to create something, and on iPhone your chat questions, are kept in a topic log for content planning, together with your age band, country, time zone and the local time and day. The log does not include your account ID, but it is not anonymous, and it is not deleted when you delete your account.
• Failed creations. If a creation fails, we keep its prompt and the error details with your account so we can fix the problem. They are deleted when you delete your account.
• Photos. ARTi does not store the photos you share.

6.3 How you agree to AI processing

AI is how ARTi's creation and chat features work. Before you first use them, during sign-up, the app shows you what is sent to AI providers and to whom, and you agree by tapping Continue. No prompt or photo is sent to an AI provider before you agree.

Adding a photo is always optional and a separate, deliberate action on your part — there is no automatic camera-roll access.

6.4 Stopping AI processing

We process what you send to AI providers to provide the features you ask for. To stop it, stop using the AI features, or delete your account in Settings → Delete account, which ends all processing. You can also write to privacy@arti.social, and we will delete your account and its data for you.

• Browsing, reading and likes do not involve AI providers. Comments and anything else you post are checked by AI for safety.
• Deleting your account deletes your creations; §10 explains what remains.

6.5 Using ARTi without AI

You can browse ARTi as a guest — without an account and without agreeing to AI processing — and read, watch and take quizzes on content others have created. Creating an account means agreeing to the AI processing described in this section, because the AI companion and AI-assisted creation are central to the Service.

7. Legal bases (GDPR / UK GDPR)

For users in the European Economic Area, the United Kingdom, and Switzerland we process personal data under one or more of:

• Performance of a contract — providing the Service you signed up for, including the AI generation and chat features you ask for (GDPR Art. 6(1)(b)).
• Legitimate interests — security, fraud prevention, product analytics, and AI safety checks of content posted to the Service. You may object at any time.
• Consent — push notifications, optional analytics where required.
• Compliance with legal obligations — tax, anti-fraud, response to lawful requests.

In these regions ARTi is available only to adults (18 and over), so we do not rely on parental consent there.

8. Your rights

Depending on where you live, you have some or all of the following rights. To exercise them write to privacy@arti.social.

8.1 GDPR / UK GDPR

Access, rectification, erasure, restriction of processing, data portability, objection to processing, withdrawal of consent, and the right to lodge a complaint with your supervisory authority (e.g., the ICO in the UK, the AEPD in Spain, the CNIL in France). We respond within one month. If you are in France, you can also give us instructions about what happens to your personal data after your death.

We are appointing representatives under GDPR Article 27 (EU), UK GDPR Article 27 (UK), and the Digital Services Act, and will publish their contact details here once designated. In the meantime, you may contact us at privacy@arti.social regarding any data-protection matter.

We do not collect advertising identifiers from users in the EEA, the United Kingdom or Switzerland.

8.2 California (CCPA / CPRA)

You have the right to know, access, correct, delete, and to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, to non-discrimination for exercising your rights, and to designate an authorized agent.

Your Privacy Choices — Do Not Sell or Share My Personal Information. On Android, for confirmed adults, we "share" (as defined by the CCPA/CPRA) the Google Advertising ID and the events listed in §3.3 with our advertising partners for cross-context behavioural advertising measurement. We do not sell personal information for money. To opt out: in the ARTi app go to Settings → Privacy & Safety → Do Not Sell or Share My Personal Information and turn it on (it takes full effect the next time the app starts), or email privacy@arti.social with the subject "Do Not Sell or Share". We honour the request, we do not discriminate against you for exercising it, and an authorised agent may submit it for you. We do not knowingly sell or share the personal information of consumers under 16. Our websites do not currently share personal information with advertising partners, so there is nothing to opt out of there; if that changes we will honour the Global Privacy Control signal.

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have the right to opt out of targeted advertising and of the sale of personal information. The same control (Settings → Privacy & Safety) exercises that right.

8.3 Mexico (LFPDPPP)

You have ARCO rights (Acceso, Rectificación, Cancelación, Oposición). We respond within 20 business days. The Spanish-language Privacy Notice ("Aviso de Privacidad") is available at https://legal.arti.social/es/privacy-policy.

Secondary purpose and transfers (aviso de privacidad). For adult users of our Android app, we process the Google Advertising ID for the secondary purpose of measuring and optimising our own advertising, and transfer it, together with the events listed in §3.3, to Google LLC and Meta Platforms, Inc. (United States) and to TikTok Inc. (United States) / TikTok Pte. Ltd. (Singapore). You may oppose this secondary purpose at any time in Settings → Privacy & Safety → Do Not Sell or Share My Personal Information, or by writing to privacy@arti.social. Your ARCO rights are unchanged.

Under the Mexican federal data-protection law in force since 2025 (LFPDPPP), you may also object to decisions taken solely by automated means that significantly affect you. ARTi does not make legal or similarly significant decisions about you by automated means; automated processing is used to personalise the content feed and recommendations. You may object to that personalisation by writing to privacy@arti.social. Complaints may be directed to the competent Mexican data-protection authority.

8.4 Colombia (Ley 1581 / Habeas Data)

You may consult, update, rectify, suppress, or revoke authorization for the treatment of your personal data, request proof of authorization granted, and submit complaints to the Superintendencia de Industria y Comercio (SIC). E1 Technology, Inc. acts as the data controller ("responsable del tratamiento"); Supabase and AWS act as data processors ("encargados").

8.5 Brazil (LGPD)

Confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, withdrawal of consent. Complaints can be directed to the ANPD.

Encarregado (data protection officer): Diego Aranguren, Head of Finance, Revenue & Ops — privacy@arti.social. You can write to the encarregado in Portuguese.

Legal bases (LGPD Art. 7): performance of a contract (Art. 7, V) to provide the Service, including the AI generation and chat features you ask for; legitimate interest (Art. 7, IX) for security, fraud prevention, product analytics, AI safety checks of content posted to the Service and, for adults on Android, the advertising measurement described in §3.3, which you can turn off in Settings → Privacy & Safety; consent (Art. 7, I) for push notifications; and compliance with legal obligations (Art. 7, II). We process adolescents' data in their best interest (Art. 14).

8.6 Canada

We rely on your implied consent for the advertising measurement described in §3.3, which you may withdraw at any time through Settings → Privacy & Safety. We do not enable the advertising identifier for users whose device is set to the Quebec French locale, pending a consent mechanism that meets Quebec's Law 25. The person in charge of the protection of personal information is Diego Aranguren, Head of Finance, Revenue & Ops (privacy@arti.social).

8.7 Japan (APPI)

For users in Japan, we publish the following under the Act on the Protection of Personal Information:

• Business operator: E1 Technology, Inc., 7650 Girard Ave, Ste 300, La Jolla, CA 92037, United States. Representative: Roberto Ibarra.
• Purposes of use: as described in §4.
• Your requests: you can ask us to notify you of the purposes of use of your retained personal data, to disclose, correct, add to or delete it, to stop using it or providing it to third parties, or to disclose records of its provision to third parties. Write to privacy@arti.social from the email address on your account; we verify your identity and respond without delay. We do not charge a fee.
• Complaints: privacy@arti.social. You can also contact Japan's Personal Information Protection Commission.
• Security measures: access to personal data is limited to authorised staff on a least-privilege basis; data is protected with TLS in transit, encryption at rest, scoped database access, audit logging and rate limiting (§11); and our infrastructure runs in our providers' physically secured data centres.
• Countries where your data is handled: the United States, where our service providers listed in §5 store and process it (our main database is hosted in Oregon); Google may also process AI requests in other countries where Google Cloud operates; Sentry hosts error data in the United States and Germany; AppsFlyer (AppsFlyer Ltd., Israel) hosts attribution data in the European Union; and our database provider is Supabase Pte. Ltd. (Singapore). We have reviewed the personal-information protection systems of these countries using the information published by Japan's Personal Information Protection Commission, and we handle your data with the measures above.
• Transfers to providers outside Japan: the service providers that process your personal data on our behalf, such as Supabase, Google Cloud and OpenAI, do so under data-processing agreements that require protections equivalent to those of the APPI, including confidentiality, security, use only on our instructions, control of sub-processors and deletion at the end of the service. We check their implementation periodically, and you can ask us for more information about these measures at privacy@arti.social. Apple and Google also receive some data as operators of their app stores, sign-in and notification services, under their own terms and privacy policies.
• Minimum age: 15 (§2).

8.8 South Korea (PIPA)

For users in South Korea, we publish the following under the Personal Information Protection Act.

Minimum age: 14 (§2).

Transfers outside Korea. ARTi is operated from the United States, so the personal information described in §3 is transferred outside Korea to the service providers below, which process it to provide the Service. Most process it on our behalf; Apple and Google also act under their own terms as operators of their app stores, sign-in and notification services. It is transferred when you use the Service, over encrypted connections (TLS). How long each provider keeps it is described in §6.2 (AI providers) and §10; otherwise, until you delete your account or our contract with that provider ends.

These transfers are necessary to provide the Service. You can refuse them by not using ARTi or by deleting your account, in which case you cannot use the Service. Transfers for optional features, such as web payments or survey answers, happen only when you use those features. Data that advertising partners receive as third parties is described under "Advertising partners" in §5.

Age of majority: in South Korea the age of majority is 19. If you are under 19, you need the consent of your legal representative to use ARTi.

Your rights: you can ask to access, correct, delete or suspend the processing of your personal information (Personal Information Protection Act, Arts. 35–37) by writing to privacy@arti.social; your legal representative or a person you authorise can make the request for you. We respond within 10 days.

Destruction: when the retention period ends or the purpose of processing has been achieved, we delete personal information without delay. Electronic records are deleted so that they cannot be restored, and copies in backups are overwritten when those backups expire.

Advertising messages: we send advertising messages to users in South Korea only with their prior consent, mark them "(광고)", and do not send them between 9 p.m. and 8 a.m. without separate consent.

Chief Privacy Officer: Diego Aranguren, Head of Finance, Revenue & Ops — privacy@arti.social.

Remedies: besides contacting us, you can seek help from the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Supreme Prosecutors' Office (www.spo.go.kr, 1301) or the Korean National Police Agency's Cyber Bureau (ecrm.police.go.kr, 182).

9. International transfers

ARTi operates from the United States. By using the Service, you understand your data will be transferred to and processed in the United States. We rely on:

• Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement, including supplementary technical and organizational measures.

10. Retention

When you delete your account, we delete your account data and your creations. Projects you started, and your comments and stickers, stay on the platform under "Deleted account" without your name. Event logs follow their own retention period above, and the topic log described in §6.2 is not affected.

11. Security

We use TLS in transit, encryption at rest, scoped database access, audit logging, rate limiting on sensitive endpoints, and least-privilege practices. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you in line with applicable law.

12. Children

Children under 13. ARTi is not available to children under 13. The mobile apps do not offer an under-13 option at registration, and anyone identified as under 13 cannot create an account. If we learn that an account belongs to a child under 13, we block or delete the account and delete the data collected from it.

In the European Economic Area, the United Kingdom, and Switzerland, ARTi is currently limited to users 18 and older. Elsewhere, if you are under 18, you must have your parent or legal guardian's permission to use ARTi, including its AI features. If you believe a child under 13 has created an account, write to privacy@arti.social and we will investigate and delete it.

13. Changes to this Policy

We will update the "Last updated" date and, for material changes, notify you in-app or by email. Changes take effect when posted unless we state a later date; where a change gives you a new choice (such as an opt-out), it takes effect no earlier than the app update that makes that choice available. Continued use of the Service after the change constitutes acceptance.

14. Contact

E1 Technology, Inc.
7650 Girard Ave, Ste 300
La Jolla, CA 92037, United States
privacy@arti.social · support@arti.social