Your data and how we handle it.

1. Who we are

Stratogenic AI Ltd is a company registered in England and Wales under company number 16228684. Our products include Unfold, Still, Bonds, Sort, Ground, and Move, all released under the Stratogenic name.

Contact: admin@stratogenic.ai

2. What this policy covers

This policy applies to:

• The Stratogenic Studio website (studio.stratogenic.ai)
• The Unfold mobile application
• The Still mobile application
• The Bonds mobile application
• The Sort mobile application
• The Ground mobile application
• The Move mobile application
• Any future Stratogenic mobile products, unless a separate policy is published

3. The website

The studio website does not use analytics, advertising scripts, or tracking pixels. No personal data is collected through the website beyond what you voluntarily send, such as an email to our contact address.

4. The mobile apps - what stays on your device

The mobile apps store core state locally on your device using the operating system's local storage. This includes settings and the working state needed to run the app without requiring an account.

For users on the free Dignity tier, most app history remains device-local. For users on the paid Depth tier, selected history and behavioural context may also be synced to our servers so the product can provide continuity across sessions, verify subscription-linked entitlement, and improve adaptation over time.

Because Stratogenic apps do not require user accounts, synced Depth memory is not currently offered as a guaranteed cross-device backup or full account recovery service. Restoring a Depth purchase through the App Store or Google Play does not necessarily restore app history from another device.

5. The mobile apps - what we receive

When you use an app, it may send data to our servers. This can include:

• A device identifier: a randomly generated identifier created on your device. It is not directly linked by us to your name, email address, or a user login, but it lets us recognise the same device over time.
• Event names: such as app opened, action completed, action not completed, friction type reported.
• Event properties: such as estimated action duration, friction category, or product state needed to understand how the apps are performing.
• For generation requests, the text you submit and a summary of recent app context needed to produce the next action or response.
• For Depth features, selected history and behavioural context such as resolved actions, notes, reckonings, bids, or movement history, depending on which product you use.

We use this data to understand how the engine is performing, where adaptations are working, where the product can improve, and, for Depth users, to provide continuity and longer-memory behaviour support.

We describe this data as pseudonymous rather than anonymous. It is linked to a device identifier and subscription state, not directly to your name or email.

Some app domains can touch sensitive parts of life, including sleep, movement, relationships, money, values, and personal difficulty. We do not ask users to enter clinical diagnoses, financial account details, or emergency information. Organisations that recommend the apps do not receive user activity, outcomes, contact names, notes, or app history under the current consumer model.

6. Action generation

When you request a suggested next action or equivalent product response, the app sends your text input and a summary of recent app context to our servers, which may then forward the relevant content to OpenAI's API. OpenAI processes this content to generate the response.

Your text input is transmitted to OpenAI for this purpose. It is not linked to your name or contact details. OpenAI's privacy policy governs how they handle this data: openai.com/policies/privacy-policy.

By using the generation feature, you acknowledge that your text input will be processed by OpenAI for this purpose.

7. Subscriptions and billing

Paid subscriptions (the Depth tier) are purchased and billed through the Apple App Store or Google Play. Billing data and payment processing are handled by Apple or Google under their terms. We do not receive or store payment card information.

We use RevenueCat to verify subscription status. RevenueCat receives subscription and purchase data linked to your App Store or Play Store account under RevenueCat's own systems. We use RevenueCat to determine whether the Depth entitlement is active and to support restore flows. See revenuecat.com/privacy.

8. Third parties we use

We do not sell personal data. We share data only with:

• OpenAI (US) - receives text and relevant app context for generation
• RevenueCat (US) - verifies subscription status and supports restore flows
• Railway (US) - provides server infrastructure where telemetry, synced Depth history, and related app records are stored
• Sentry (EU) - receives crash and error diagnostics from the mobile apps so we can find and fix reliability issues. We configure Sentry not to collect default personal identifiers.
• Apple / Google - manage app distribution and billing

9. Legal bases for processing (UK GDPR / EU GDPR)

For users in the UK and European Economic Area, we process personal data under the following legal bases:

• Legitimate interests - pseudonymous telemetry and product-performance data, to understand engine performance and improve the product. You can object to this at any time.
• Performance of contract - text and app context processed for action generation or equivalent product responses, as this is the function you have requested.
• Performance of contract - subscription status verification and Depth continuity features, including synced history where those features are part of the product.

If a future partnership or deployment would involve special category data, protected health information, service-user records, or organisational reporting, it would require a separate privacy assessment and agreement before launch.

10. International data transfers

Our infrastructure and third-party processors are primarily based in the United States. We rely on standard contractual clauses and the UK International Data Transfer Agreement where required for transfers of personal data outside the UK.

11. How long we keep data

• Pseudonymous telemetry events: retained for up to 24 months, then deleted
• Crash and error diagnostics: retained in Sentry according to our Sentry project settings and deleted when no longer needed for reliability work
• Device-local app data: stored on your device until you reset the app or uninstall it
• Depth synced history and behavioural context: retained while needed to provide the feature and operate the service, then deleted or overwritten in the ordinary course
• Subscription records: retained by RevenueCat in accordance with their policy

12. Children

Our products are not directed at anyone under the age of 16. We do not knowingly collect data from children under 16. If you believe we have inadvertently received data relating to a child, contact us at admin@stratogenic.ai and we will delete it promptly.

13. Your rights

Under UK GDPR and EU GDPR, you have the right to access, correct, delete, restrict, or receive a portable copy of your personal data, and to object to processing based on legitimate interests.

To exercise these rights, contact admin@stratogenic.ai. Because our app records are generally linked to a device identifier rather than your name or email, we may ask for your device identifier to locate relevant records.

You have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or, if you are in the EU, with your local supervisory authority.

14. California residents (CCPA / CPRA)

We do not sell or share personal information as defined under the California Consumer Privacy Act. California residents have the right to know what data we hold, to request deletion, and to non-discrimination for exercising these rights. Contact admin@stratogenic.ai.

15. Changes to this policy

If we change how we handle data in a material way, we will update this page and revise the date at the top. Changes that affect app users will be communicated through the apps themselves before they take effect.