Privacy Policy
This Privacy Policy describes how personal information and contextual data are collected, processed, and safeguarded across the EMMI intelligence platform and the MOVEN productivity application.
Notice to Users & Legal Counsel: This public working draft sets forth operational privacy, intellectual property, and AI usage terms for EMMI and MOVEN. Statutory placeholders remain subject to final verification and legal sign-off.
This Privacy Policy explains how personal information is handled by EMMI Technologies (“EMMI”, “we”, “us”, or “our”) when you access or interact with EMMI (an artificial intelligence platform developed around multimodal perception, contextual reasoning, and emotional intelligence) and MOVEN (an intelligent productivity and scheduling application powered by EMMI).
We believe in clarity, restraint, and transparency regarding personal information. This document outlines what data may be processed, the technical reasons for processing, how artificial intelligence services interact with third-party infrastructure, and how you can exercise your privacy rights.
About the Policy
This policy applies to all public websites, web dashboards, developer APIs, mobile applications, research prototypes, and interactive experiences provided by EMMI and MOVEN.
EMMI provides foundational intelligence models, contextual reasoning loops, and multimodal perception capabilities under the philosophy “Where Intelligence Meets Emotion”. MOVEN is a focused application powered by EMMI designed to assist users with daily schedule calibration, proactive task management, focus alignment, and productivity orchestration.
Depending on the product, feature, or deployment configuration you use, specific data practices may vary. Where experimental features or local testing environments operate under differing data paths, those differences are described in this document or presented at the point of feature activation.
Information We May Process
We collect and process only the information reasonably required to deliver, secure, and refine our services. Depending on how you interact with EMMI and MOVEN, this may include:
A. Information You Directly Provide
- Account & Profile Information: Email address, display name, account credentials, and contact preferences submitted during registration or authentication.
- Tasks & Productivity Data: Task titles, descriptions, priority markers, due dates, project tags, and completion statuses provided within MOVEN.
- Schedule & Calendar Entries: Events, time blocks, recurring routines, and availability intervals configured within the scheduling interface.
- Optional Wellbeing & State Indicators: Optional self-reported mood, energy ratings, daily reflections, or focus feedback submitted to calibrate assistance.
- Communications & Inquiries: Messages, feedback, support inquiries, and recruitment or partnership applications sent to our team.
B. Google User Data (When Connecting Google Services)
When you sign in using Google or connect Google Calendar to MOVEN, we access the following specific categories of Google user data:
- Google Account Profile Information: Your name, email address, profile picture URL, and unique Google account identifier (via standard Google Sign-In / OAuth 2.0 scopes: openid, email, profile).
- Google Calendar Metadata & Events: Calendar identifiers, event summaries/titles, start and end dates and times, event descriptions, event locations, recurrence patterns, and attendee response statuses (via authorized Google Calendar scopes, such as calendar.events.readonly or calendar.events).
C. Technical, Device, and Operational Data
- Device & Client Identifiers: Operating system type and version, browser client, application version, device model, and language preference.
- Network & Request Metadata: Internet Protocol (IP) address, approximate regional location, timestamped access logs, and referral URLs.
- Performance & Diagnostic Telemetry: Crash reports, API response latencies, error codes, and operational metrics essential to maintain platform stability.
Why We Use Information
We process collected information under legitimate operational purposes, contractual necessity to deliver requested features, and user consent where required by applicable law. Specific purposes include:
- Delivering Core Productivity Functionality: Operating user accounts, synchronizing tasks across devices, displaying schedule commitments, and rendering personalized productivity views.
- Google User Data Functionality: Authenticating your account, displaying your Google Calendar events alongside MOVEN tasks in a unified timeline, detecting schedule conflicts, finding open focus intervals, and allowing event creation or updates.
- Calibrating Contextual AI Assistance: Generating the MOVEN Morning Brief, providing real-time task recommendations, analyzing productivity patterns, and enabling conversational context in EMMI interactions.
- Infrastructure Reliability & Security: Monitoring API traffic, preventing abuse, detecting automated scraping, verifying user authentication, and debugging application crashes.
- Product Evaluation & Engineering: Analyzing aggregated and anonymized feature usage to guide product development, optimize model efficiency, and enhance user experience.
- User Communication: Responding to support requests, providing critical service notices, and sharing product updates when authorized.
AI Processing and Third-Party Providers
EMMI and MOVEN utilize artificial intelligence models to deliver contextual reasoning, dynamic schedule optimization, speech processing, and conversational support. Understanding how data moves through these systems is essential:
Token & Media Transmission: When you use AI-assisted capabilities (such as automated schedule generation, conversational assistance, morning brief synthesis, voice input, or document parsing), relevant inputs (prompt text, task descriptions, audio recordings, or document images) are transmitted securely to authorized inference endpoints.
Third-Party Specialized AI Providers: Depending on the specific feature invoked, processing is handled by verified AI infrastructure partners under enterprise API agreements:
• Groq: Utilized for high-speed deterministic reasoning, fast task scheduling, and language inference over secure API endpoints.
• Google Gemini: Utilized for multimodal perception, vision understanding, and document analysis.
• Sarvam AI: Utilized for high-accuracy voice transcription and regional speech processing when voice features are utilized.
Provider Data Commitments: Enterprise API agreements with these inference providers prohibit them from using customer prompt data or uploaded content to train public or foundation models, subject to the providers' enterprise data terms and settings.
Configuration Dependency: Actual data transit paths depend on feature flags and deployment architecture. We do not claim that all AI computation is performed exclusively on-device or that prompt data never traverses network boundaries.
Google API Services User Data Policy & Limited Use Disclosures
MOVEN offers optional integration with Google API Services (including Google Sign-In and Google Calendar) to allow seamless schedule synchronization and account access. We strictly honor user trust and comply with Google’s API requirements:
A. Google User Data Accessed
Depending on the permissions you explicitly grant, MOVEN accesses only the Google data necessary to deliver your requested features:
- Account Identity: Google profile details (name, email address, profile picture URL, and account ID) for authentication and account verification.
- Calendar Content: Calendar identifiers, event titles, scheduled start and end timestamps, descriptions, event locations, attendee statuses, and recurrence rules to populate your schedule.
B. How MOVEN Uses Google User Data
Our application uses Google user data strictly to provide and improve user-facing features within MOVEN:
- Displaying your external calendar events alongside your tasks, habits, and commitments in a unified view.
- Calculating free/busy intervals to recommend optimal focus blocks and prevent double-booking.
- Generating your personalized Morning Brief summarizing your upcoming day.
- Allowing you to create, modify, or sync scheduled calendar events directly from MOVEN.
- We do NOT use Google user data for any purposes outside of these user-requested productivity features.
C. Sharing, Transfer, and Disclosure Restrictions
We maintain strict restrictions regarding the sharing and disclosure of Google user data:
- No Selling or Renting: We do NOT sell, rent, lease, or monetize Google user data under any circumstances.
- No Advertising Transfers: We do NOT share or transfer Google user data to data brokers, information resellers, or advertising networks.
- No Commercial Profiling: We do NOT use Google user data for targeted advertising, personalized advertising, retargeting, interest-based promotions, credit-worthiness assessment, or lending purposes.
- Limited Infrastructure Transfers: Google user data is transferred only to trusted cloud infrastructure providers (specifically Supabase for secure encrypted database hosting and Vercel for web serving) as strictly necessary to deliver user-facing features, under binding confidentiality and security agreements.
D. Security Protections for Sensitive Data
We implement robust technical safeguards to protect Google user data:
- Encryption in Transit: All data exchanged between your client application, our servers, and Google APIs is encrypted using modern Transport Layer Security (TLS 1.2 / TLS 1.3 via HTTPS).
- Encryption at Rest: Google OAuth credentials (access tokens and refresh tokens) and cached event metadata are encrypted at rest using industry-standard AES-256 encryption within secure, isolated database vaults.
- Restricted Access: Internal access to production database systems is strictly controlled using role-based access control, principle of least privilege, and multi-factor authentication (MFA).
E. Data Retention and Deletion for Google Data
We enforce clear data minimization and retention timelines for Google user data:
- Retention Period: We retain Google user data only for the length of time needed to fulfill the user-facing scheduling features outlined in this policy or until you disconnect your Google integration.
- Automatic Deletion on Disconnect: When you disconnect your Google Calendar or delete your MOVEN account, all cached Google Calendar events and associated OAuth tokens are immediately marked for deletion and permanently destroyed from active production databases.
- User Deletion Inquiries: You can request immediate, verified deletion of any stored Google user data at any time by emailing [email protected] with the subject “Google Data Deletion Request”.
- Revoking Access via Google: You may revoke MOVEN’s access to your Google account at any time through Google Security Settings at https://myaccount.google.com/permissions. Revocation takes effect immediately.
F. Google API Limited Use & Non-Personalized AI/ML Training Prohibition
EMMI and MOVEN’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AI/ML Model Training Prohibition: EMMI and MOVEN explicitly affirm that Google Workspace APIs, Google Calendar data, and Google user data are NEVER used to develop, improve, or train generalized, foundation, or non-personalized artificial intelligence (AI) and/or machine learning (ML) models.
Human Review Restrictions: No human at EMMI or MOVEN reads your Google Calendar events or user data unless: (1) we have obtained your explicit, affirmative consent for specific troubleshooting requests; (2) it is necessary for security reasons (such as investigating abuse or vulnerabilities); (3) it is required to comply with applicable law; or (4) the data is aggregated and de-identified for internal technical performance monitoring.
User Control and Permissions
We provide granular controls to manage your information and connected permissions:
- Integration Permissions: You can grant or revoke calendar, notification, and device permissions at any time through your operating system settings (for example, iOS Settings > Privacy > Calendars) or in-app settings.
- Google Account Revocation: You can disconnect Google services in MOVEN settings or revoke permissions directly at https://myaccount.google.com/permissions.
- Optional Data Fields: Inputting wellbeing scores, mood markers, and reflections is entirely voluntary. You may use MOVEN for standard scheduling without providing emotional or wellbeing data.
- Input Editing & Removal: You can modify, edit, or delete individual tasks, schedule blocks, and personal notes directly within the application interface.
- Marketing Preferences: You may opt out of non-essential product announcements by following unsubscribe instructions included in emails or contacting support.
Information Sharing and Disclosure Restrictions
We do not sell, rent, or trade your personal information, productivity content, or Google user data to data brokers, advertisers, or third-party marketing networks.
We disclose information strictly under the following limited circumstances:
A. Trusted Service Providers
We engage reputable infrastructure and technology vendors who assist us in operating our platform under binding confidentiality and data protection terms:
- Database & Persistent Storage: Supabase PostgreSQL for persistent application data, user profiles, tasks, and encrypted credentials.
- Authentication Services: Firebase Authentication for secure Google Sign-In and session token verification.
- Backend API Hosting: Google Cloud Run hosting our FastAPI backend services in secure, isolated containers.
- Web Hosting & Content Delivery: Vercel for web application delivery, edge caching, and serverless compute.
- Transactional Communications: Verified email delivery platforms for essential authentication links and system alerts.
B. Legal and Safety Requirements
We may disclose information if required to do so by applicable law, regulation, subpoena, court order, or governmental demand, or where good-faith evaluation indicates disclosure is reasonably necessary to protect the rights, property, or safety of EMMI, our users, or the public.
C. Business Transfers
In the event of a merger, acquisition, corporate restructuring, financing, or sale of company assets, user information may be transferred as part of the transaction, subject to standard confidentiality protections and prior notice.
Data Retention and Deletion
We retain personal information only for as long as necessary to provide the services you requested, fulfill the legitimate purposes outlined in this policy, and satisfy statutory, tax, or legal retention obligations.
When an account is closed or a verified deletion request is received:
- Account Records: We initiate deletion of primary account records, personal profile identifiers, and submitted tasks from active databases.
- Connected Integration Data: All cached external calendar entries and Google OAuth credentials are immediately destroyed upon account closure or integration disconnect.
- Backup Lifecycles: Data existing in secure system backups and disaster-recovery snapshots is purged in accordance with standard backup rotation cycles (typically within 30 to 90 days).
- Anonymized Telemetry: De-identified technical logs and aggregate analytical metrics that cannot reasonably be linked back to you may be retained for long-term engineering analysis.
- Operational Requests: You may initiate an account or data deletion request at any time by emailing [email protected] with the subject “Data Deletion Request”.
Security and Sensitive Data Protection
We implement technical, physical, and organizational security controls designed to protect personal data and connected integration tokens from unauthorized access, alteration, disclosure, or destruction:
- Encryption in Transit: All public web, API, and third-party integration communications are encrypted using standard Transport Layer Security (TLS 1.2 / TLS 1.3).
- Encryption at Rest: Core application databases, cloud storage volumes, and sensitive OAuth tokens employ industry-standard AES-256 encryption at rest.
- Access Restriction: Internal access to production systems and databases is strictly restricted to authorized engineering personnel using multi-factor authentication.
- Vulnerability Monitoring: Periodic code audits, dependency tracking, and automated security scans.
International Processing
EMMI and MOVEN utilize globally distributed cloud infrastructure, edge computing nodes, and third-party AI endpoints. Consequently, your information may be transferred to, processed, and maintained on computers located outside of your state, province, or country of residence, where data protection laws may differ from those in your jurisdiction.
Where cross-border data transfers occur, we take reasonable measures to ensure that your information receives an adequate level of legal protection through standard contractual clauses, provider data protection agreements, and industry-accepted security practices.
Privacy Rights and Requests
Depending on your geographic location and applicable data privacy legislation (such as India’s Digital Personal Data Protection Act, the European General Data Protection Regulation (GDPR), or relevant regional privacy statutes), you may possess specific rights regarding your personal data:
- Right of Access: The right to request confirmation of whether we process your data and receive a readable copy of personal information we maintain.
- Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal details.
- Right to Erasure (Deletion): The right to request the deletion of your personal information, subject to statutory retention exceptions.
- Right to Restrict or Object to Processing: The right to request limitations on how your data is processed under specific circumstances.
- Right to Withdraw Consent: Where processing is grounded in your consent, the right to withdraw that consent at any time without retroactive penalty.
- Right to Grievance Redressal: The right to register a grievance with our designated privacy team regarding our data handling practices.
Submitting a Request
To exercise any of these rights, please email [email protected] with the subject line “Privacy Rights Request”. To safeguard user privacy, we will require you to verify your identity before processing sensitive data requests.
Children and Age Requirements
Our services are not directed to, marketed toward, or intended for use by children under the age of 18 (or the statutory age of contractual majority in your jurisdiction).
We do not knowingly collect, solicit, or maintain personal information from minors. If you believe that a minor has provided us with personal information without required parental or legal guardian consent, please notify us immediately at [email protected] so that we may promptly remove the information.
Third-Party Services
Our websites and applications may contain links to external websites, third-party authentication services, or connected calendar providers. We do not control and are not responsible for the privacy practices, content, or policies of external third-party services.
We strongly encourage you to review the privacy notices of any third-party services you choose to connect, access, or interact with.
Policy Changes
We may update this Privacy Policy from time to time to reflect modifications in our technology, operational practices, legal obligations, or product roadmap.
When material updates are made, we will update the “Last Updated” date at the top of this document and, where appropriate, provide visible notice across our web portal or within application interfaces. Your continued use of EMMI or MOVEN after the effective date of an updated policy signifies your acknowledgment and understanding of the revised terms.
Contact and Grievances
If you have questions, comments, concerns, or grievances regarding this Privacy Policy or our data processing practices, please contact us:
Primary Privacy Inquiries
- Email: [email protected]
- Subject Line: Attention: Privacy Team
- Platform: EMMI Intelligence Platform & MOVEN
Statutory & Entity Details
- Designated Grievance Officer: [Designated Grievance / Privacy Officer: Pending Statutory Appointment]
- Registered Entity Name: [Registered Entity Name: Pending Corporate Verification]
- Corporate Jurisdiction: [Designated Corporate Jurisdiction: Pending Final Verification]
- Physical Address: [Registered Corporate Address: Pending Formal Verification]