ARTi Privacy Policy

Effective: 13 May 2026 · Last updated: 12 June 2026

This Privacy Policy explains how E1 Technology Inc. ("ARTi", "we", "us") collects, uses, shares, and protects information when you use the ARTi mobile application and related services (the "Service"). By using ARTi you agree to this Policy.

If you do not agree, do not use the Service.

1. Who we are

The Service is provided by E1 Technology Inc., a Delaware corporation headquartered at 7650 Girard Ave, Ste 300, La Jolla, CA 92037, United States.

Privacy contact: privacy@arti.social
General contact: support@arti.social
Postal: see address above.

2. Who can use ARTi

ARTi is intended for users aged 13 and older. During registration, you select your age band — under 13, 13–15, 16–17, or 18+. Users who select under 13 cannot create an account. We do not collect or store your exact date of birth.

For users between 13 and the local digital-consent age (16 in the EU under GDPR Art. 8, with national variations — for example 14 in Spain, 13 in Belgium, 15 in France), a parent or legal guardian must review and accept our Terms of Service before the user creates an account. We rely on the registration flow's parental-consent acknowledgement to satisfy GDPR-K and COPPA verifiable parental consent.

3. Data we collect

3.1 Information you give us

3.2 Information collected automatically

3.3 What we do not collect

• Date of birth. We ask for your age band only (under 13, 13–15, 16–17, or 18+) — we do not collect or store your exact date of birth.
• Precise location (no GPS).
• Phone numbers.
• Audio recordings or voice transcriptions.
• Contacts.
• Browsing or search history outside the app.
• Health, financial, or biometric data.
• Advertising identifiers (the IDFA or Android Advertising ID). ARTi does not request App Tracking Transparency (ATT), does not use advertising identifiers, and does not track you across other companies' apps or websites.

4. How we use information

We use information to:

• Provide and maintain the Service.
• Authenticate users and secure accounts.
• Personalize the experience (suggested topics, language).
• Process subscriptions and Gem economy.
• Generate AI content from your text prompts and from any photos or images you choose to upload as visual reference.
• Detect and prevent abuse, spam, fraud, and Community Guidelines violations.
• Respond to support and legal requests.
• Comply with legal obligations.

4.1 Marketing communications

We may use your email address to send you marketing communications about ARTi — new features, content highlights, subscription offers, and product updates. This is first-party marketing only: it is sent by ARTi about ARTi.

• You can opt out of marketing emails at any time using the unsubscribe link at the bottom of every marketing email, or by writing to privacy@arti.social.
• Opting out of marketing does not affect transactional or service emails (account, security, subscription, legal, abuse reports).
• For users in the EEA, UK, and Switzerland, our legal basis for first-party marketing to existing users is legitimate interests under GDPR Art. 6(1)(f) and Recital 47 (soft opt-in for similar products). You may object at any time under Art. 21.

4.2 What we don't do with your information

• We do not share your email or any other personal data with third parties for their own advertising or marketing.
• We do not engage in cross-context behavioral advertising.
• We do not use the IDFA or Android Advertising ID and do not request App Tracking Transparency (ATT).
• We do not track you across other companies' apps or websites.
• We do not sell or rent personal information as defined by the CCPA / CPRA.

5. Service providers and sub-processors

We share data only with the following providers, all of whom are bound by data-processing agreements:

6. AI services — what we send, where it goes, and your consent

ARTi uses third-party AI services to generate visual content (images, videos, infographics, games) and to power the AI chat experience. To do this, your text prompts — and, when you choose, photos or images you upload as visual reference — are sent over the network to AI providers operated by Google LLC and OpenAI, L.L.C. This section explains exactly what is sent, to whom, and how you give and withdraw your consent.

6.1 What we send

• The text prompt you type. When you tap "Create" and submit a prompt to generate an image, infographic, video, or game — or when you send a message in the AI chat — the prompt text is transmitted to the AI provider over HTTPS.
• Any photo or image you choose to upload as visual reference. When you explicitly pick a photo from your camera roll, take a new photo, or upload an image as visual input to an AI generation flow, that image is transmitted along with your prompt to the AI provider. Photo or image upload is always opt-in and per-action — we never read your camera roll without your tapping to select a specific image, and AI generation works without uploading anything.
• No personal identifiers alongside the prompt or image. We do not send your email address, your username, your display name, your User ID, your Device ID, your age band, your location, or your device data alongside the prompt. EXIF metadata on uploaded images (which can contain location and device information) is stripped before the image is sent.
• No prior conversation history beyond the immediate session context the AI needs to respond. Cross-session history is not transmitted.
• No audio, no video, no files other than the image you explicitly select. ARTi does not access your microphone or arbitrary files on your device.

6.2 Where it goes

Both providers handle your prompts and uploaded images under their own privacy and data-retention policies. ARTi does not retain your prompts or uploaded images on our servers after the AI response is delivered.

6.3 Your consent — required before we send anything

The first time you tap an AI feature (Create → AI generation, or the AI chat), the app shows a consent screen that explains:

• What data will be sent (your text prompt and, when you choose to upload one, the photo or image you select as visual reference)
• Who it will be sent to (Google LLC and/or OpenAI, L.L.C.)
• For what purpose (to generate the content you requested)
• That you can revoke consent at any time

You must explicitly accept the consent before any prompt or image is transmitted to an AI provider. Until you accept, AI features are unavailable. Uploading a photo is always optional and a separate, deliberate action on your part — there is no automatic camera-roll access.

6.4 Withdrawing consent

You can revoke your AI-services consent at any time in Settings → Privacy → AI Services. When you withdraw consent:

• AI features (Create → image/video/infographic/game; AI chat) become unavailable until you re-consent.
• The free, non-AI content types remain available: Reflection, Fun Fact, Quiz, and Glossary.
• Content you already created with AI is not deleted (you can delete individual items via the content detail screen).
• Withdrawing consent does not affect any other parts of the Service.

6.5 Using ARTi without AI

You can use ARTi without ever consenting to AI services. You can still create free text-based content (Reflection, Fun Fact, Quiz, Glossary), engage with the community via likes and comments, participate in projects, manage your subscription, and use every other non-AI feature. Consent to AI services is required only for the AI generation and AI chat features themselves.

7. Legal bases (GDPR / UK GDPR)

For users in the European Economic Area, the United Kingdom, and Switzerland we process personal data under one or more of:

• Performance of a contract — providing the Service you signed up for.
• Legitimate interests — security, fraud prevention, product analytics, AI service operation. You may object at any time.
• Consent — push notifications, optional analytics where required.
• Compliance with legal obligations — tax, anti-fraud, response to lawful requests.
• Verifiable parental consent for users below the local digital age (GDPR Art. 8).

8. Your rights

Depending on where you live, you have some or all of the following rights. To exercise them write to privacy@arti.social.

8.1 GDPR / UK GDPR

Access, rectification, erasure, restriction of processing, data portability, objection to processing, withdrawal of consent, and the right to lodge a complaint with your supervisory authority (e.g., the ICO in the UK, the AEPD in Spain, the CNIL in France). We respond within one month.

We have not designated an EU representative under GDPR Art. 27 because the Service is not targeted at EU data subjects on a large scale. If our user base composition changes, we will appoint one.

8.2 California (CCPA / CPRA)

You have the right to know, access, correct, delete, and to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, to non-discrimination for exercising your rights, and to designate an authorized agent.

ARTi does not sell or share personal information as defined by CCPA / CPRA, and we do not use personal information for cross-context behavioral advertising. Our optional "Your Privacy Choices" disclosure is contained in this section.

8.3 Mexico (LFPDPPP)

You have ARCO rights (Acceso, Rectificación, Cancelación, Oposición). We respond within 20 business days. The Spanish-language Privacy Notice ("Aviso de Privacidad") is available at https://legal.arti.social/es/privacy-policy.

8.4 Colombia (Ley 1581 / Habeas Data)

You may consult, update, rectify, suppress, or revoke authorization for the treatment of your personal data, request proof of authorization granted, and submit complaints to the Superintendencia de Industria y Comercio (SIC). E1 Technology Inc. acts as the data controller ("responsable del tratamiento"); Supabase and AWS act as data processors ("encargados").

8.5 Brazil (LGPD)

Confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, withdrawal of consent. Complaints can be directed to the ANPD.

9. International transfers

ARTi operates from the United States. By using the Service, you understand your data will be transferred to and processed in the United States. We rely on:

• The EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. DPF (where certified).
• Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement, including supplementary technical and organizational measures.

10. Retention

When you delete your account, your private data is removed; public content you posted may remain on the platform with attribution removed.

11. Security

We use TLS in transit, encryption at rest, scoped database access, audit logging, rate limiting on sensitive endpoints, and least-privilege practices. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you in line with applicable law.

12. Children

We block accounts for users under 13 at registration. For users 13 to the local digital-consent age, we require a parent or guardian to review and accept our Terms on the user's behalf. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, write to privacy@arti.social and we will investigate and delete it.

13. Changes to this Policy

We will update the "Last updated" date and, for material changes, give in-app or email notice at least 14 days before the change takes effect. Continued use of the Service after the change constitutes acceptance.

14. Contact

E1 Technology Inc.
7650 Girard Ave, Ste 300
La Jolla, CA 92037, United States
privacy@arti.social · support@arti.social