What we see, and what we don’t.

Aegin is run by its founder from India as a sole proprietorship trading as "Aegin" (the "operator"). The operator is the data controller for all personal data processed through the aegin.live website, the Aegin mobile applications, Aegin Desktop for Windows and macOS, and the services attached to them (together, the "Services"). Its postal address for legal notices is available on request.

For any question, request, or complaint about your personal data, wherever you live, write to support@aegin.live. We reply within thirty days where the law requires it and within ninety days otherwise, and we may extend that where a request is complex or where you have made several.

Aegin is a behavioral system. It cannot limit what it cannot observe, so the categories below are broad by design rather than by accident. Each one is described at the level of the category rather than the field, because the fields change as the product changes.

IDENTITY

Account identifiers, including your email address, the username you choose, and any identifier passed to us by a sign-in provider you elect to use. If you add them, also your name, profile photo, bio, and date of birth.

REGION

The country or region we place your account in, worked out from signals such as your IP address and your device’s language and region settings. It sets the prices you see, the AI usage in your plan, and your local time and formats. We do not collect your precise location.

BEHAVIORAL

How you use your device and how you use Aegin. Screen-time totals, per-app usage, the times of day activity happens, requests you make to be let past a limit and how they were decided, sessions, and interactions inside the app. On a computer with Aegin Desktop, this includes the apps and website domains in front and for how long, as set out in the Aegin Desktop section below.

DEVICE AND APP INVENTORY

A list of the applications installed on your device that can be placed under a limit, so the app picker has something to show and so a limit can be attached to the right target. On Android this is package identifiers and the labels the operating system reports. On iOS it is opaque references only, described in the Screen time and enforcement section below.

COMMUNICATIONS

What you write inside the Services. Messages to other users, messages to the assistant, notes and journal entries, anything you publish on your profile, and anything you choose to attach, such as a screenshot added to a problem report. If you dictate by voice, we receive the text, not the audio.

HEALTH AND BIOMETRIC

Only where you connect a health source yourself, such as Apple Health or Health Connect: sleep, heart rate, resting heart rate, and heart-rate variability. We read what the platform gives us and nothing more, and we never write to it.

INFERRED

What the system works out about you from everything above. This covers scores such as your willpower index, assessments of how likely you are to lose control of your use of a particular app, patterns in your attention and routine, and comparisons between what you said you wanted and what you actually did. Some of these are inferences about your health, and they are treated as such throughout this policy. The specific signals, models, and weights involved are not itemized here, for the reasons given in the Automated decision-making section.

TECHNICAL

Operational data such as IP address, device and installation identifiers, when the app was installed on each device and when it appears to have been removed, operating system, app version, language, timezone, and crash and diagnostic logs.

AI QUALITY

For each answer the assistant gives, a short-lived structured trace: the surface, the intent and time range requested, which data sources were asked for and loaded, how fresh the evidence was, where the answer came from, which model ran, review status, latency, and any failure code. The trace holds no text from your question or the answer. If you mark an answer helpful, we store the rating only. If you mark it unhelpful, we also keep that question and answer. It stays until you want it deleted, and it is deleted 30 days after you ask.

TRANSACTIONAL

Subscription tier, billing status, and the transaction identifiers our processors issue. Card numbers and bank details are handled by the payment processors and never reach our systems.

The purposes below apply across the categories above. The legal basis varies with where you live, and the description given is the one that applies under the EU and UK GDPR, with equivalents elsewhere.

Running the product. Delivering the Services, keeping your account working, computing your scores and reports, operating messaging and the social features (which means passing what you send to the people you send it to), and running the assistant, including remembering context you have chosen to let it keep. Legal basis: performance of a contract. On Max, persistent assistant memory is on by default so it carries context between conversations. You can turn it off in the app under Settings and then Privacy, which stops new notes being kept and stops the assistant reading the ones already held, leaving it with the current conversation only. Turning it off does not delete them. Deletion is a separate action on the same screen, and single notes can be deleted from the assistant’s memory screen.

Limiting your device. Working out where you are overusing something, deciding what limit should apply, applying it, escalating or easing it over time, and deciding requests to be let past one. This is the core function of the product and the reason most of the behavioral data exists. Legal basis: performance of a contract, and our legitimate interest in operating a restriction system you installed in order to be restricted by it.

Prices and plans for your region. Working out which region your account belongs to, so we can show you the right prices and currency, set the AI usage in your plan, and stop attempts to get around regional pricing. Legal basis: performance of a contract, and our legitimate interest in pricing by region and preventing abuse.

Inferences about your health. Where the system produces inferences that bear on your health, including assessments of compulsive use and anything derived from biometric inputs you have connected, we rely on your explicit consent under Article 9(2)(a) of the EU and UK GDPR and the equivalent condition under your own law. That consent is taken at sign-up by a separate affirmative action, distinct from accepting the Terms. If you connect a wearable or health source, consent for those inputs is taken separately again, immediately before the connection. Either consent can be withdrawn by deleting your account from in-app settings, which stops all processing of biometric inputs and health-related inferences. Withdrawal does not make earlier processing unlawful.

Security and fraud prevention. Detecting, preventing, and responding to abuse, account takeover, account sharing, tampering with the app, and payment fraud. This includes keeping records of the devices linked to your account. Legal basis: legitimate interest and legal obligation.

Messages from us. Sending you notifications and emails about your account, your limits and your activity, reminders when you have been away, and occasional offers about Aegin. Notifications can be turned off in your device settings, and every offer email has a one-click unsubscribe link. Legal basis: performance of a contract for messages about your account, and our legitimate interest, or your consent where your law requires it, for reminders and offers.

Aggregate analytics. Understanding how the product is used in aggregate, including which screens and features are used, so we can improve it, using anonymized or pseudonymized data only. Legal basis: legitimate interest. On by default, and you can turn it off in the app under Settings and then Privacy.

Model improvement. Training and improving our own models using pseudonymized behavioral signals and de-identified numeric embeddings derived from your activity. This does not use the raw text of your conversations. Legal basis: legitimate interest. On by default, and you can turn it off in the app under Settings and then Privacy. Turning it off stops your activity being used this way from that point on. What is stored is a de-identified numeric embedding rather than anything that reads back as you, and a signal already folded into a trained model cannot be pulled back out of it.

Service quality. Catching answers that were ungrounded, stale, failed, or sent to the wrong place, and measuring whether a fix worked. This uses the structured traces described above, which exclude conversation text, plus any rating or comment you choose to send. Legal basis: legitimate interest. An unhelpful rating also keeps that question and answer. It stays with us until you want it deleted, and it is deleted 30 days after you ask.

Legal compliance. Meeting the tax, accounting, regulatory, and law-enforcement obligations that apply to us. Legal basis: legal obligation.

We do not sell personal data. We do not share it for cross-context behavioral advertising. We do not give it to data brokers, and we do not run advertising in the product.

Aegin cannot limit a device without watching it. This section sets out what the enforcement layer actually sees on each platform, what stays on your phone, and what reaches us. It is the part of this policy worth reading closely.

ANDROID · FOREGROUND DETECTION

The app uses the Android accessibility service (BIND_ACCESSIBILITY_SERVICE), requested only after a prominent in-app explanation and your own action to grant it. It does three things. It reads the package name of whichever app is currently in the foreground, so a block can appear before the app is usable. For a small, named set of browsers, it reads that browser’s address-bar field, so that opening the website of an app you have locked is caught as well without you having to configure anything. And while Aegin limits Instagram or YouTube, it reads the identifiers of the elements on screen in that app, never their text, so it can close Reels and Shorts and leave the rest of the app open. It does not read the content of any web page, any other text field, messages, or your keystrokes. The only action it takes on your behalf is pressing Back when you tap Back on Aegin’s own block screen. It is expressly not declared as an accessibility tool.

ANDROID · SUPPORTING PERMISSIONS

Usage access (PACKAGE_USAGE_STATS) as a fallback detector and to compute screen-time totals. Display over other apps (SYSTEM_ALERT_WINDOW) to draw the block screen above the app being blocked. A foreground service to keep enforcement alive while it is running, and a boot receiver (RECEIVE_BOOT_COMPLETED) to restart it after a reboot. Where the manufacturer kills background work aggressively, the app will point you at your own system settings to exempt it from battery optimization or to enable auto-start. Those changes are made by you, in your device settings, and only if you choose to make them.

IOS · SCREEN TIME API

On iOS, enforcement runs through Apple’s Screen Time frameworks (Family Controls, Device Activity, and Managed Settings) after you grant authorization to Apple, not to us. You pick apps in Apple’s own picker, and iOS hands back opaque tokens that we cannot resolve into app names or bundle identifiers. What we send to our servers is a one-way hash of that token, which is meaningless anywhere except on your device. Our servers reject app labels and encoded Screen Time tokens outright.

IOS · WHAT STAYS ON THE PHONE

The per-app breakdown of your day on iOS is produced inside an Apple-sandboxed reporting extension that has no network access. It is drawn on your screen and it does not reach us. That is a limitation Apple imposes and we have not tried to work around it.

WHAT LEAVES THE DEVICE

Durations, counts, and timestamps of app usage, tied to a package identifier on Android and to an opaque hash on iOS. On Android, time spent on a limited app’s own website in a supported browser, counted under that app, and enforcement events that name that website’s domain (for example instagram.com). No other web address, and no page or path, is sent. The inventory of apps that can be limited. Events from the enforcement layer, such as a limit being applied, a block being shown, or a request being made. That is what the server needs to decide anything, and it is the whole of it.

WHAT WE NEVER COLLECT

Screen contents. Keystrokes. Form input. Passwords. The contents of your messages or feeds inside other apps. Web page content. Audio recordings, your camera, your contacts, or your precise location. Screenshots, other than one you choose to attach yourself. None of these are collected through the enforcement layer, and none of them are collected anywhere else in the app.

MICROPHONE

Used only while you choose to dictate by voice, and only after you allow it. Your phone’s own speech service, from Apple or Google, turns what you say into text, and we receive only the text.

TURNING IT OFF

Every permission above can be revoked from your device’s own system settings at any time, and the app can be uninstalled at any time. Either disables or degrades enforcement. Neither closes your account or affects the rest of your data.

Mobile operating systems change, and the mechanisms available for this work change with them. We may add, replace, or drop a detection or enforcement mechanism, and we may ask for a different permission if a platform requires it. Where a change means collecting a category of data not described here, we will update this section before it ships.

Aegin Desktop for Windows and macOS counts how your computer is used and holds your limits on it. This section sets out what it reads on the computer, what it keeps there, and what reaches us. Everything in the Screen time and enforcement section about what we never collect applies to it as well.

APPS IN FRONT

Every few seconds, and on Windows also whenever you switch apps, Desktop notes which app is in front and for how long: its name and, on Windows, its program file, or on macOS its bundle identifier. Time while you are idle for a few minutes or the screen is locked is not counted. It also works out whether an app is a game.

BROWSERS

In a supported browser, Desktop works out which website is in front and keeps its domain only, for example youtube.com. On macOS this needs your permission, once per browser. Paths, queries, page titles and page content are read in memory and dropped. They are never stored or sent. Private and incognito windows are skipped.

TERMINALS

In a terminal, Desktop reads the front tab’s title and the names of the programs running in it to tell whether a coding agent such as Claude Code is running there, so that time is shown under the agent’s name. Titles are compared in memory and dropped.

WHAT LEAVES THE COMPUTER

For each day: the total screen time, the time per app and per website domain, and a running total by hour, uploaded to your account about every five minutes as this computer’s screen time. While a site, app or game that your schedule or a Focus Block covers is in front, its running total for the day, so your phone and your computer share the same limits. When the computer is registered: a random identifier for this installation, a one-way hash of the computer’s own identifier so a reinstall is recognized as the same computer, the computer’s name, and whether it runs Windows or macOS. A request to lift a lock, with what you write in it. For Agent Call: the agent’s name, a session ID, whether it finished, needs you or failed, a short reason, and the name of the project folder. Never your prompts, code, files or transcripts.

WHAT STAYS ON THE COMPUTER

Each day’s record is kept in Aegin’s own folder on the computer, so the totals survive a restart. The settings of a coding tool are changed only after you click Connect for it in Agent Call, and Disconnect or uninstalling removes what Aegin added.

UPDATES

Desktop checks our update server shortly after it starts and every few hours. Like any request, that check shows our hosting provider your IP address and the version you run. A new version downloads in the background and installs when you press Update.

TURNING IT OFF

Starting at sign-in can be turned off in Desktop’s settings. On macOS, a browser’s access can be withdrawn in System Settings, under Privacy & Security and then Automation. Uninstalling stops all recording on that computer. None of these closes your account or cancels a subscription.

Connecting Apple Health or Health Connect is optional, and your phone asks for your permission first. If you connect one, Aegin reads sleep, heart rate, resting heart rate, and heart-rate variability, and uses them only for the features they support in Aegin, such as your willpower index and the context of a request to be let past a limit. Aegin never writes to them.

Data from Apple Health or Health Connect is never used for advertising or marketing, never sold, and never shared with anyone except the service providers that store or process it for us. You can stop access at any time in Apple Health, in Health Connect, or in the app, and what we hold is erased when your account is deleted.

If you live in Washington, Nevada, or another US state with a consumer health data law, our Consumer Health Data Privacy Policy at /legal/health-data also applies.

To answer a request, Aegin AI may send the text of your message and a pseudonymized summary of the relevant context to a third-party AI provider acting as our processor. Your name, email address, and account identifier are not sent.

Our AI providers may not train their models on your data, and keep it only as long as they need to answer, to check for abuse, or as the law requires. We may change providers at any time without notice. The current list is at /legal/privacy/recipients.

Assistant memory is tiered. Behavioral outcomes, meaning what happened rather than what was said, are part of running the product. Notes the assistant keeps about you between conversations are a Max feature and can be switched off, which stops them being added to and stops them being read, but does not delete them. Deleting them is a separate action you can take at any time. Anything that contributes to improving our models across users is limited to de-identified numeric embeddings and outcomes, never raw text from one user shown to another, and that too can be switched off.

Conversations with the assistant are not read in real time by a person. We may review a conversation where you report a problem, where an automated signal flags possible abuse or a safety risk, or where the law requires it.

Nothing you tell the assistant is used to advertise to you, is sold, or is disclosed to another user.

Aegin has private messages and group messages. This is what we do and do not read, and what happens when someone reports something.

We do not scan your conversations. Messages between people who follow each other are not inspected by us or by any model. There is one exception: a first message from someone you do not follow back is checked against a list of terms before it reaches you, and if it matches it goes to a separate requests folder instead of your inbox. That check happens on our servers, produces nothing more than a category label, and no person sees the message because of it.

When someone reports a conversation, a profile or a message, that changes. We read the reported content, the messages around it, and, where a person reviews the case, the conversation between the two of you. We also look at the account histories on both sides, meaning previous reports, previous restrictions, and how many people have blocked each account. We cannot assess a report without seeing what was reported. The lawful basis is our legitimate interest in keeping the service safe for other people, and in the case of unlawful content, compliance with a legal obligation.

Reported content may be sent to a third-party AI provider acting as our processor for classification, under the same terms described under Artificial intelligence. Reports concerning a risk of self-harm are never sent to a model and are handled by a person.

Reports are assessed automatically, and that assessment decides the outcome for most of them. Serious cases and cases the assessment is not confident about are decided by a person. Where a decision restricts your ability to send messages, you are told, and you can ask for it to be reviewed by a person from the notice itself. That review can remove the restriction.

A record of reports and of decisions taken is kept for as long as the account exists and for the period set out under How long we keep it, because a pattern across time is the only way to tell a one-off from repeated behavior, and because we have to be able to show why a decision was taken. Reports are not deleted when they are resolved.

The person you reported is not told who reported them. If you are reported, you are not told what the outcome was for the other person.

Your username, name, photo and bio can be seen by other people using Aegin and by anyone on the web, including on your profile page at aegin.live, which search engines may list unless your account is private.

Unless you hide them or make your account private, your streak and level are shown with your profile, people you connect with can see when you are active, and some of your activity, such as achievements and focus sessions, appears to them. In a group, other members see your streak, and your screen time for the day if you choose to share it. If you pair with a Partner, each of you sees the other’s daily screen-time total and whether you each held your line.

A screenshot you attach to a problem report is stored at an unlisted web address that anyone with the link can open.

Notifications, widgets and lock-screen activities can show your limits, timers and progress to anyone who can see your device. You can change most of this in the app’s settings and in your device settings.

Some tools on aegin.live work without an account, such as the Open Bench. What you type there is stored with a scrambled form of your IP address, may be sent to an AI provider to write the verdict, and is published with the verdict at a link anyone can open. Obvious personal details are stripped first, but do not include anything personal.

If you give us your email address on one of these pages, we keep it, the page it came from and a scrambled form of your IP address, and use it to send you news and offers about Aegin. Legal basis: your consent, which you can withdraw at any time by unsubscribing or by writing to support@aegin.live.

Personal data is shared with the categories of recipient below. Service providers act on our instructions under written data-processing agreements and may not use your data for their own purposes.

OTHER USERS

When you send a message or publish something through the social features, it goes to the people you sent it to. That is the feature working.

INFRASTRUCTURE

Providers that host the database, the authentication layer, and the application itself.

AI PROCESSORS

Third-party model providers that process prompts and return output, on the terms described in the Artificial intelligence section above.

PAYMENTS

The payment processors and subscription-management providers that bill you and validate purchases. They receive only what is needed to take the money and confirm the entitlement.

SIGN-IN PROVIDERS

If you sign in with Apple or Google, that provider takes part in the authentication exchange and receives the identifiers it needs to complete it.

OPERATIONAL PROVIDERS

Providers that deliver transactional email, deliver push notifications, receive crash and error reports, and hold the problem reports you send us, so we can find and fix faults.

LEGAL AND COMPLIANCE

Tax authorities, law enforcement, courts, and regulators, where we are compelled by valid legal process or where disclosure is necessary to protect rights, safety, or the integrity of the Services.

CORPORATE TRANSACTIONS

A buyer, investor, or successor entity, where the operator is involved in a merger, acquisition, financing, reorganization, or sale of assets. Any recipient takes the data subject to this policy.

Every named sub-processor that receives personal data on our behalf is listed on the Recipients page below, along with what each one receives, the agreement that governs the relationship, where they process, and the transfer mechanism we rely on.

That page is the current answer, not a permanent one. We add, remove, and substitute providers as the product changes, and we update the page when we do rather than announcing each change individually. Continuing to use the Services after a change is made means accepting the list as it then stands.

Aegin is operated from India and our providers may process data in countries other than yours. Where personal data is transferred out of your jurisdiction, we rely on the safeguards available under your own law, which may include Standard Contractual Clauses, an adequacy decision, provider-level certification, or your explicit consent where nothing else applies.

If you are somewhere that requires a specific transfer mechanism, write to us and we will tell you which one covers your transfer.

We keep personal data for as long as your account is open, and afterwards for as long as we need it to meet legal, accounting, tax, and dispute-resolution obligations. Inferred data and behavioral history may be kept for the whole life of the account, because the system reasons over long stretches of time and cannot do its job from a short window.

Structured AI quality traces, which contain no conversation text, expire after ninety days. Ratings, selected reasons, and feedback comments expire after one hundred and eighty days. Those records end sooner if the account or the trace is deleted first. Where you mark an answer unhelpful, that question and answer stay until you want them deleted, and are deleted 30 days after you ask.

When you ask us to delete your account it first enters a ninety-day restricted period: hidden from other users, all behavioral and AI processing stopped, and the data kept only so the account can be brought back if you sign in. If you do not sign in within ninety days, it is erased. Asking by email does not change that. The full process is at /legal/delete-account.

When you replace or remove a device, its history stops appearing in your account and stops counting toward anything. Records relating to the devices linked to your account are kept for as long as the account exists, to prevent account sharing and abuse.

Backups are a separate matter. Copies of deleted data can persist in encrypted backups until they rotate out, which takes up to ninety days after erasure.

Where a specific retention period is not stated above, we keep the data for as long as the purpose it was collected for still applies, and then delete or anonymize it.

Aegin decides things about you automatically. It decides when a limit should apply and how strict it should be, whether to grant a request to be let past one, when to escalate, what your scores are, and how much of your AI usage a request consumes. These decisions are taken by software, without a person involved, and they are the mechanism by which the product works rather than an incidental feature of it.

The logic in general terms: the system reads your recent and historical usage, the context surrounding the request or the moment, the goals you set when you signed up, patterns it has learned from your own past behavior, and, where you have consented, signals derived from a connected health source. It weighs those into a score, compares the score against a threshold, and acts. Both the weights and the thresholds move over time, per user, as it learns.

What we will not disclose. We do not publish, and will not disclose on request, the thresholds, budgets, weights, scoring functions, model parameters, timings, or escalation rules behind any individual decision. Schedules the app shows you are the exception. Two reasons. They are our trade secrets. And a restriction system whose exact numbers are known is a restriction system that can be planned around, which would defeat the purpose for you and for everyone else using it. This is the limit recognized in Recital 63 of the GDPR, which provides that the right of access should not adversely affect the rights and freedoms of others, including trade secrets and intellectual property, and by the equivalent carve-outs in other data-protection laws. What we will always tell you is that a decision was automated, what it did, and which categories of data fed it.

What these decisions are not. They concern your use of Aegin and nothing else. They are not decisions about credit, employment, housing, insurance, education, immigration, benefits, or policing, they produce no legal effect on you outside the product, and they are neither designed nor validated for any such purpose.

Where your law gives you a right to have an automated decision reviewed by a person, write to support@aegin.live and we will review it and tell you the outcome. Disagreeing with a decision is not on its own a reason for review, and a review does not extend to the parameters described above.

We use strictly necessary cookies only. The Services set first-party authentication and session cookies, issued by our authentication provider with the "sb-" prefix, that keep you signed in, hold your session across pages, and protect against cross-site request forgery. Without them you could not sign in or stay signed in.

We do not use cookies or any similar technology for analytics, advertising, retargeting, marketing profiles, cross-site tracking, audience measurement, or session replay.

Because the cookies are strictly necessary, prior consent is not required under the EU ePrivacy Directive (2002/58/EC as amended), the UK Privacy and Electronic Communications Regulations 2003, or the equivalent provisions elsewhere that exempt strictly necessary cookies. You can block or delete cookies in your browser at any time, which will sign you out and may prevent you signing back in.

If we ever introduce a non-essential cookie or a third-party tracking technology, we will update this section, present a consent interface that lets you accept or refuse each non-essential category before anything loads, and change the effective date at the top of this page.

Which of these you have depends on where you live. We honor them in line with the law that applies to you, and we honor several of them everywhere regardless.

ACCESS

You can ask whether we process your personal data and get a summary of the categories we hold, why we hold them, who receives them, and how long they are kept. Write to support@aegin.live.

CORRECTION

You can ask us to correct an identity field that is wrong. Behavioral history is recorded by the system rather than entered by you, so it cannot be edited. Where you think a particular record is wrong, write to support@aegin.live and we will look at it.

DELETION

You can delete your account at any time from your settings, or by writing to support@aegin.live if you cannot get in. Either way starts a ninety-day restricted period during which the account is hidden and processing stops. Signing back in inside that window restores it in full. If you do not, erasure completes at ninety days and the retention timelines above take over. The question and answer kept with an unhelpful rating stay until you ask for them to be deleted, and are deleted 30 days after you ask.

PORTABILITY

Where your law grants a statutory right to portability, including in the European Union, the United Kingdom, the European Economic Area, Quebec, Brazil, China, California, and other places with equivalent rights, we will give you a structured, machine-readable export of the raw and observed personal data you provided. Inferred and derived data falls outside statutory portability rights and is not included. Write to support@aegin.live.

OBJECTION AND RESTRICTION

Where your law grants a right to object to or restrict processing, write to support@aegin.live and we will assess the request against the basis for the processing concerned. Two of the activities we run on legitimate interest are already in your hands: aggregate analytics and model improvement can both be switched off in the app under Settings and then Privacy, with no need to contact us. Switching off model improvement stops that use from the point you switch it off. It does not undo what was already derived.

WITHDRAW CONSENT

Where processing rests on consent you can withdraw it at any time. The behavioral and health-inference consent the product depends on is withdrawn by deleting your account, and requesting deletion stops that processing immediately even though final erasure completes at the end of the ninety days. Withdrawal does not affect the lawfulness of what was processed beforehand.

COMPLAIN

You can complain to your data-protection authority. In India that is the Data Protection Board of India. In the European Union and the European Economic Area it is your national supervisory authority. Elsewhere it is whichever regulator has jurisdiction over your data. We would rather you came to us first, but nothing requires you to.

We respond within thirty days where the law requires it and within ninety days otherwise, which matches the window under India’s Digital Personal Data Protection Rules, 2025. We have to verify who you are before acting on a request, and we may ask for more information to do that. Where a request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee or decline it, and we will say which.

There is no self-service export tool. Rights are exercised by written request to support@aegin.live. Where you have no statutory right to a particular outcome, we will honor the request where we can and decline it where we cannot, and we will tell you which of the two happened.

Aegin is not for anyone under eighteen. We do not knowingly collect personal data from anyone under eighteen, and where we find that we have, we delete it. The floor is set at eighteen to clear the highest threshold across the places we operate, including the requirement under India’s Digital Personal Data Protection Act 2023 for verifiable parental consent before processing the personal data of anyone under eighteen. We may use age information from your app store or device, or a date of birth you give us, to check this.

If you are a parent or guardian and think a minor in your care has an account, write to support@aegin.live and we will close it and purge the data.

This section supplements the policy for residents of California and applies where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, covers our processing of your personal information.

The categories of personal information we collect are those set out in the What we collect section: Identity, Region, Behavioral, Device and app inventory, Communications, Health and biometric, Inferred, Technical, AI quality, and Transactional. Sources are you, your device, a health source you connect, and our payment processors. The business and commercial purposes are those set out in the Why we process it section. The categories of third party we disclose to are those set out in the Who receives it section.

We do not sell personal information for monetary or other valuable consideration, and we do not share it for cross-context behavioral advertising. We have not done either in the preceding twelve months.

Sensitive personal information. We collect two categories. First, biometric information from a wearable or health source you choose to connect, used only to compute derived behavioral signals and never used to identify you as a consumer. Second, information concerning health, in the form of inferences the system draws about compulsive use and related behavioral-health signals from the activity you have chosen to provide. We use and disclose sensitive personal information only for the purposes permitted by California Code of Regulations, title 11, section 7027(m): performing the services you asked for, detecting and responding to security incidents and malicious or illegal activity, and verifying or maintaining the quality of the Services. Because our use is confined to those purposes, the right to limit under California Civil Code section 1798.121 does not apply to our processing and no "Limit the Use of My Sensitive Personal Information" link is provided. If that ever changes, we will provide one.

California residents may exercise the right to know, to delete, to correct, to portability, to opt out of sale or sharing, and to limit the use of sensitive personal information. We honor the opt-out by default, since we do neither. Send requests to support@aegin.live. An authorized agent may act for you with proof of authorization.

We do not discriminate against anyone for exercising these rights.

We apply technical and organizational measures appropriate to the risk, including encryption in transit and at rest, access controls, row-level authorization in the database, isolation of server-only credentials, and monitoring. Access to production data is limited to what is needed to operate the Services.

No system is perfectly secure and we will not pretend otherwise. If there is a breach affecting personal data we will notify the relevant authorities and, where the law requires it, you, within the timeframes the law sets.

Keeping your own credentials safe is your part of this. Use a password you do not use anywhere else, and tell us at support@aegin.live if you think someone else has your account.

We update this policy as the product changes. The version in force is always the one on this page, with the date it took effect at the top. Where a change is material we will tell active subscribers by email or in the app, and we will flag it at the top of this page.

Continuing to use the Services after a change takes effect means you accept the updated policy. Where a change requires your consent under the law that applies to you, we will ask for it before the change reaches you.