Deep 24 AI

1. Scope

This Privacy Policy explains how Deep24 ("we," "our," or "us") collects, uses, and protects personal information when you use the Deep24 web platform, Deep24 for macOS, and Habit Contracts, including use through connected AI assistants and related account and support services (collectively, the "Service").

Legal rights and licensing terms for posted content are governed by our Terms of Service.

2. Information We Collect

We collect the following categories of information:

Account information: email address, authentication identifiers, and profile information you choose to provide.
Local macOS activity context: app usage, sessions, and timeline metadata captured by Deep24 for macOS.
Content you submit: workflow posts, screenshots/files, comments, ratings, profile details, visibility settings, bounty submissions, company/job-related interactions, and related metadata.
Usage and technical information: device and browser details, IP address, log events, timestamps, and analytics about how features are used.
Support communications: messages you send us for support, policy, or abuse reports.

3. Local by Default for macOS

Deep24 for macOS is local-first. Activity context captured in the macOS app is stored locally on your device by default.

We do not treat local capture as server-stored platform data unless you intentionally upload, post, publish, or otherwise submit content to Deep24 web platform features.

4. API Calls to Cloud Providers

To deliver requested AI or categorization features, selected data may be transmitted to third-party cloud or model providers via API requests.

This transmission is used to return feature outputs.
Third-party providers process data under their own terms and privacy policies.

5. Habit Contracts and Connected Assistants

Habit Contracts lets you set goals, report check-ins, and optionally put money or other agreed consequences at stake. You can use it on the web or through an AI assistant that you connect to Deep24. This section describes the data it uses.

Data we store:

Goal title and description, schedule, deadlines, and time zone.
Proof rules, check-ins, notes, and assessment summaries.
Stakes, limits, and any consequences you accept, such as app blocking or an accountability email recipient's name and email address.
Consent records: the exact terms text, terms version, the agreement details you accepted, the time of acceptance, a hashed IP address, and your browser's user agent.
Payment records: Stripe customer and payment references, card brand, last four digits, and expiry date, plus charges, refunds, disputes, and correction requests.
Connected assistant permissions and their status.

How it is used and who receives it:

We use this data to run your goals, decide outcomes, apply the consequences you accepted, collect stakes, handle refunds and disputes, and keep a record of what you agreed to.
Payments: Stripe handles card entry and payments. Your full card number never reaches Deep24 or your connected assistant. When we charge a stake, we send Stripe the amount, a description with the goal title and the missed period (a date, or a date and time), your Stripe customer ID, and Deep24 IDs for your account, the goal, the period, and the charge.
Connected assistants: an assistant you connect receives the results of the Habit Contracts actions you authorize, such as goal details, status, and charge information. The assistant's provider handles that data under its own terms.
Requests from ChatGPT: when you use Habit Contracts through the Deep24 app in ChatGPT, Section 1.2 of the OpenAI App Developer Terms limits how we may process data from those requests. We process it only as needed to follow or respond to your request, or to comply with law. The broader uses in Sections 6 to 8 of this Policy do not expand that permission. This limit comes from OpenAI's terms and applies only to requests that come from ChatGPT.
Photo check-ins through an assistant: the assistant looks at the photo in your conversation and sends Deep24 a text summary of its assessment. It does not send the image to Deep24.
Payment emails: we send charge and payment notices through our email provider. They may include the goal title, date, amount, and result.
Accountability emails: if you explicitly accept this consequence, we send an email through Resend to the person you name. It includes your name, the goal title, and the event time. It does not include proof, media, health readings, or assessment details.
Server photo or video verification: this is optional and is not available for every goal. When a goal uses it, the file is stored in private AWS S3 storage and assessed by Google Gemini. Deletion of the file starts after the final result, or when its 24-hour storage period ends, and is retried if it fails. We keep the result and related details, such as the reason, file type, size, and a file fingerprint (hash).
Error reports: our servers, including Habit Contracts, send error reports and a sample of performance traces to Sentry so we can find and fix problems. We remove some sensitive details before a report is sent. A report can still include technical details about the request or action that failed.

Retention and your controls:

Disconnecting an assistant removes its access. It does not cancel your goals or erase their history.
Deleting your account cancels active goals, scheduled charges, and scheduled accountability emails, and starts deletion of stored proof files.
If a payment is still processing, account deletion is blocked. You must try account deletion again after that payment finishes.
After account deletion, we keep goal, check-in, consent, payment, and other financial records. These records do not currently have an automatic deletion period.
The account data download does not currently include Habit Contracts records. To ask for access, correction, or deletion of this data, contact us at the address in the Contact section. Some records may need to be kept for legal, payment, or dispute reasons.

6. How We Use Information

We use personal information to operate and improve the Service, including to:

Create and manage accounts.
Publish and display user-submitted content.
Provide platform features like comments, ratings, bounties, and job visibility.
Maintain security, detect abuse, and enforce platform policies.
Send service messages (for example, account and policy updates).
Measure performance and improve platform reliability and usability.
Create indexes, search products, analytics, derivative datasets, and other commercial or research outputs from public-facing web platform content.
Comply with legal obligations.

7. Public, Private, and Distributable Web Content

The web platform supports different visibility settings. If you make content public or unlisted, post to public/community surfaces, or submit to a feature that is described as public, searchable, exportable, distributable, or marketplace-facing, that content may be visible to other users, visitors, search engines, researchers, partners, customers, and other downstream recipients.

Public-facing web content may be copied, cached, quoted, exported, licensed, sold, combined with other data, or used to create derivative products and datasets. Deleting the original post may not remove copies, backups, model artifacts, archives, or prior downstream distributions.

Non-public or account-restricted web content is used to operate, secure, support, and improve the Service, and may be disclosed to service providers or as otherwise described in this Policy. We do not treat local-only macOS capture as server-stored web platform data unless you intentionally upload or post it.

Do not post sensitive personal information that you do not want to be public or commercially distributed.

8. Sharing, Licensing, and Disclosure

We may share, disclose, license, or otherwise make information available in the following ways:

With service providers that help us operate hosting, infrastructure, analytics, and security.
With customers, partners, researchers, or licensees when you intentionally submit public-facing or distributable web platform content and related metadata to features that are designed for public display, search, export, benchmarking, syndication, licensing, resale, or other commercial distribution.
In aggregated, deidentified, or derivative form for analytics, benchmarking, model, search, or business development purposes.
For legal reasons when required by law, regulation, court order, or to protect rights and safety.
During business transfers such as merger, acquisition, financing, or asset sale.
With your direction when you choose to connect or share data with third-party services.

9. Data Retention

We keep data for as long as needed to provide the Service and meet legal or operational requirements:

Account and profile data are retained while your account is active.
Web platform content may remain available until removed by you, removed by moderation, or deleted under platform processes, but backups, archives, logs, derivative datasets, model artifacts, and prior distributions may persist longer.
Security and audit logs are retained for a limited period needed for fraud prevention and reliability.
Some Habit Contracts records are kept after account deletion. See Section 5.

10. Your Choices and Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export certain personal information, and to object to or restrict some processing. If applicable law gives you the right to opt out of sale or sharing of personal information, you may contact us to submit that request.

To make a request, contact us using the details below. We may need to verify your identity before processing requests and may ask you to identify the relevant account, content, or email address.

You can also download your data or delete your account yourself, at any time, from your account page. The download does not include Habit Contracts records; see Section 5 for how to request them.

If your content was public or previously distributed to third parties, deleting it from the Service may not remove copies, citations, exports, archives, or derivative products already created from that content.

11. Data Security

We use administrative, technical, and organizational safeguards to protect personal information. No system is perfectly secure, but we work to protect data against unauthorized access, loss, misuse, and alteration.

12. Children's Privacy

The Platform is not intended for children under 13, and we do not knowingly collect personal information from children under 13. Habit Contracts has the same minimum age of 13 for free contracts and contracts with money at stake.

If we know that a user is under 16, we do not knowingly sell or share that user's personal information except as permitted by applicable law and with any consent required by law.

13. International Transfers

If you use the Platform outside the United States, your information may be processed in the United States and other countries where our providers operate.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be posted here with a revised "Last Updated" date.

15. Contact

For privacy or data requests, contact: oliver@helloamber.ai. Including a subject line such as "Privacy Request," "Deletion Request," or "Opt-Out Request" helps us route the request more quickly.