Pyxie Privacy Policy

Important Notice

This Privacy Policy sets forth the privacy practices of Pyxie, Inc. ("Pyxie," "us," or "we"). Pyxie is the controller of any Personal Data submitted to our Services and is committed to respecting and protecting your privacy. You should only use the Services if you have read and understood the terms of this Privacy Policy in effect at the time of your use. This Privacy Policy should be read together with our Terms of Service (the "Terms of Service"). Capitalized terms used but not defined in this Privacy Policy have the meaning given to them in the Terms of Service.

Pyxie is a voice-first companion for the household. It helps a parent and a caregiver coordinate care around their children without surveillance. To provide the Services, we need to store certain information that you and other members of your household choose to give us. This Privacy Policy is intended to tell you exactly how we collect, protect, use, and share that information. For purposes of this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person, and in any event as defined by applicable law.

Our privacy commitments

Some of our practices differ from those of a typical app, so we state them up front. Everything below is consistent with these commitments.

• We never sell or rent your data, and we never share it for advertising.
• No surveillance. We do not collect your location, we do not record audio, and we do not use video.
• Household data stays inside your household. Your data is accessible to the members of your household only, enforced at the database level.
• No human at Pyxie reads your household content except in the narrow circumstances described in the "Human access" section below.
• Our AI does not train on your data. Content sent to our AI provider is contractually excluded from training their models.

Revisions to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes to our Services or to legal, regulatory, or operational requirements. If we make a material change, we will provide notice before the change goes into effect, and we will re-prompt you to acknowledge the updated policy in the app. If you object to any changes, you may stop using our Services. Your continued use of the Services after a change goes into effect indicates your acknowledgment and acceptance of that change.

What Information We Collect

When you use our Services, we collect the following types of Personal Data to provide the Services.

1. Account information

We collect the information you provide when you sign up for an account, such as your name and email address. We do not require a phone number or a mailing address to create an account.

2. Household and care-manual content you provide

Pyxie is built around a shared care manual for your household. You and other members of your household may voluntarily provide information about your family so that a caregiver has what they need, including your children's names, ages, routines, dietary information, medical information, comfort preferences, household details, and similar notes, as well as information about pets. Some of this information may include health-related or otherwise sensitive details. You choose what to add, and you can edit or remove it at any time.

Certain sensitive fields, such as medical information and access or door codes, are stored securely and are excluded from the information made available to the AI. See the "How Our AI Uses Your Data" section for detail.

3. Information about other members of your household

The care manual and related features necessarily include information about people other than you, such as your children, your co-parent, and your caregiver. Please only add information about others where you are permitted to do so, and see the "Information You Provide About Others" section below.

4. Voice input

Some features let you speak instead of type. Speech is converted to text on your device. Transcription is opt-in for each utterance, and the audio is not recorded or stored by us. We do not retain recordings of your voice.

5. Photos and images

You may choose to add images to your account, such as a profile avatar. When you do, we store the image you upload. You may remove images you have added at any time.

6. Your questions to Pyxie and related interactions

Pyxie can answer questions grounded in your household's care manual. When you ask a question, we process your question together with relevant care-manual content in order to generate an answer. We may retain your questions and Pyxie's answers so that you can review them and so that we can maintain and improve the quality of the Services.

7. Product usage information

We collect information about the way you use our Services, such as actions you take in the app and which features you use. We use this information to diagnose and troubleshoot issues and to identify ways to improve the Services. This usage information is limited to categorical, boolean, and numeric signals. It does not include the content of your care manual, your questions, your children's names, or other sensitive details.

8. Device information

We collect information from and about the devices you use to access our Services, such as the operating system, device type, app version, language settings, and identifiers associated with your device (for example, a push-notification token used to deliver notifications you have enabled). Our infrastructure and analytics providers may also process your IP address in the ordinary course of operating and securing the Services.

What we do not collect

For clarity, and consistent with our commitments above, we do not collect your precise or GPS location, we do not record audio or video, we do not access your email accounts, we do not access your contacts, calendar, or files, and we do not use advertising trackers.

Cookies and Analytics

Our website uses Google Analytics to understand which pages people find useful. Google Analytics sets a cookie in your browser that records an anonymised identifier, the pages you visit, and rough location derived from your IP address. We use this only in aggregate, to decide what to write and what to improve. We do not use advertising cookies, we do not build advertising profiles, and we do not sell or share this data.

Analytics cookies are switched off until you accept them. When you first visit, our website asks for your choice and stores it in your browser. Until you accept, Google Analytics runs without storing a cookie. You can change your mind at any time by clearing this website's site data in your browser, which will make the choice appear again.

Cookies that are strictly necessary for the website to function are always set, and they do not track you between sites. The Pyxie mobile app does not use cookies.

How We Use Your Personal Data

We may use your Personal Data for the following purposes.

1. To provide and personalize our Services

We use your information to operate the Services, including maintaining your household's shared care manual, coordinating information between a parent and a caregiver, and answering questions grounded in your care manual.

2. To power AI features

We use relevant care-manual content and your questions to generate grounded answers. Our use of AI is described in detail in the "How Our AI Uses Your Data" section below.

3. To understand, troubleshoot, and fix issues

We may use Personal Data, such as feedback you provide or bug reports you submit, to identify and troubleshoot issues and to make sure the Services are working properly.

4. To evaluate and develop new features and improvements

We use product usage information to understand how the Services are used and to develop new features and improvements that we think will benefit our users.

5. To communicate with you

We use your information to communicate with you, provide customer support, respond to your requests, and contact you about your use of the Services. For example, we may send you a welcome email, respond to feedback you submit, or send push notifications you have enabled. We may also contact you about changes to your account or to this Privacy Policy or our Terms of Service.

6. To send product updates

We may occasionally send you news about features and improvements to the Services. You can opt out of these messages at any time (see "Your Preferences and Privacy Rights" below). Even if you opt out, we will still send you service-related messages, such as security notices and changes to your account or our policies.

7. To protect you, others, and our business

We use Personal Data to protect you, others, and our business, including to detect, investigate, and prevent fraud, abuse, and other harmful activity, to enforce our Terms of Service and other policies, and to protect our systems from security risks.

8. To comply with legal obligations

We may process Personal Data to comply with applicable law, to respond to lawful requests from public authorities, and to establish, exercise, or defend legal claims.

9. For our internal business purposes

We may use Personal Data for internal business purposes such as auditing, security, business planning, and analysis. We may also generate de-identified or aggregated information (which does not identify you) and use it for any lawful purpose, including to keep the Services safe and to understand general trends in how the Services are used.

How Our AI Uses Your Data

Pyxie uses artificial intelligence to answer questions grounded in your household's care manual. Because this is central to the product, we describe it specifically.

• We use Google's Gemini models as our AI provider. When you ask Pyxie a question, we send your question and the relevant care-manual content to the model over a secure connection in order to generate an answer.
• Your data is not used to train AI models. Content we send to our AI provider is processed under a paid, business-tier agreement that contractually excludes it from being used to train or improve their models.
• Sensitive fields are withheld from the AI. Certain sensitive information, such as medical information and access or door codes, is stored for your household's reference but is excluded from the content made available to the AI.
• No human at Pyxie reads your household content to run the AI. The AI operates automatically. We do not use human reviewers to read your care manual or your questions in order to generate answers.

Information You Provide About Others

The content you choose to add to Pyxie, including information about your children, your co-parent, your caregiver, and your pets, may include personal information about people other than you. If you add information about another person, please make sure you are permitted to do so, and, where appropriate, that you have their consent. Members of your household will be able to see household content in accordance with the roles and permissions in the app.

Who We Share Your Data With

We do not sell, rent, or trade your Personal Data, and we do not share it for advertising. We share data only with the following categories of recipients, and only as needed to provide, protect, and improve the Services.

1. Service providers (sub-processors)

We use a small set of trusted service providers to operate the Services. They process data on our behalf, under contract, and only for the purposes of providing their service to us. Our current sub-processors are:

We may update this list as our providers change. Push notifications are also delivered through the operating-system notification services on your device (Apple Push Notification service and Firebase Cloud Messaging).

2. Members of your household

Pyxie is a shared tool. Information added to your household is visible to the members of that household in accordance with the roles and permissions in the app. This is a core function of the Services, not a disclosure to an unrelated third party.

3. Law enforcement and the public interest

We may disclose your data to third parties if we determine, in good faith, that doing so is reasonably necessary to comply with a legal obligation or valid legal process, to protect any person from death or serious bodily injury, to prevent fraud or abuse of the Services, or to protect the rights, property, or safety of Pyxie, our users, or the public.

4. Parties in connection with a corporate transaction

We may share your Personal Data in connection with a corporate transaction, such as a merger, financing, reorganization, or sale of all or a portion of our assets. In that event, we will continue to protect your Personal Data, and we will give you reasonable notice before your Personal Data becomes subject to a different privacy policy.

5. With your consent

We may share information about you with third parties where you have asked us to or otherwise consented.

We may also use and share de-identified or aggregated information, which does not identify you, for any lawful purpose.

Retention and Deletion of Your Data

We retain your Personal Data for as long as your account is active or as needed to provide the Services. You can delete your account from within the app. When you delete your account, we erase the Personal Data associated with it, including the content you authored. Some shared household content may be retained for the remaining members of your household where it no longer identifies you.

We may retain limited information where necessary to comply with our legal obligations, prevent fraud or abuse, resolve disputes, or enforce our agreements. De-identified and aggregated information may be retained and used as described above.

If you would like us to delete your data and are unable to do so in the app, you can contact us using the details in the "Contact" section below.

Children

You must be 18 years of age or older to create an account and use the Services. The Services are not directed to children, and children may not use them.

Pyxie is designed to help adults coordinate care, so an account holder may choose to store information about their own minor children (for example, a child's name, age, routine, or dietary and medical notes). That information is provided by the adult account holder about their family. It is stored under the account holder's household and is subject to this Privacy Policy. We do not knowingly allow anyone under 18 to create an account or use the Services directly. If you believe a person under 18 has created an account, please contact us and we will take appropriate steps.

Security

Where Personal Data is transmitted to us, we use technology designed to encrypt it in transit. We also use reasonable physical, electronic, and administrative safeguards designed to protect the security, integrity, and confidentiality of the data we hold. Access to household data is restricted at the database level so that it is available only to members of the relevant household.

No method of transmission over the Internet or method of storage is completely secure, so we cannot guarantee absolute security, and you use the Services at your own risk. You also play a role in keeping your information safe. Please keep your account credentials confidential, do not share your password, and notify us promptly of any unauthorized use of your account or any other breach of security.

Human access

We do not allow our personnel to read your household content except where it is necessary to provide or support the Services (for example, to investigate a bug you have reported or a security incident), to comply with applicable law, or where the data has been de-identified or aggregated. We do not use human reviewers to read your care manual or your questions in order to operate the AI.

Your Preferences and Privacy Rights

Push notifications

We may send push notifications through our mobile app for features you have enabled. You can turn push notifications off at any time in your device settings or in the app.

Product-update emails

You can opt out of product-update emails by using the unsubscribe option in those emails or by contacting us. You may not opt out of service-related messages, such as security notices and changes to your account or our policies.

Voice and transcription

Speech-to-text is opt-in for each utterance. You can simply type instead of speaking, and you can decline transcription at any time. We do not record or store your audio.

Your data rights

Depending on where you live and subject to applicable law, you may have the following rights over your Personal Data:

• Access or know the Personal Data we process about you.
• Rectification of Personal Data that is inaccurate or incomplete.
• Erasure of your Personal Data.
• Restriction of certain processing of your Personal Data.
• Objection to certain processing of your Personal Data.
• Portability, meaning a copy of your Personal Data in a portable electronic format.
• Withdrawal of consent where we rely on your consent to process Personal Data.

Many of these actions can be taken directly in the app, including editing your information and deleting your account. To exercise a right that is not available in the app, contact us using the details below. We may need additional information to verify your identity before responding, and we may decline a request where permitted by law.

Third-Party Websites and Services

Our Services and communications may contain links to websites and services operated by third parties. We are not responsible for the privacy practices or content of those websites and services. Any information you provide to them is at your own risk, and we encourage you to read their privacy policies.

Notice to California Residents

If you are a California resident, you have certain rights under California law, including the rights described in the "Your data rights" section above. We do not sell your Personal Data, and we do not share it for cross-context behavioral advertising. To exercise your rights, contact us as described in the "Contact" section below. We will not discriminate against you for exercising your rights.

Notice to European Residents

This section applies to individuals in the European Economic Area (EEA) and the United Kingdom (UK). Where we process Personal Data about you, that information is controlled by Pyxie, Inc.

We process your Personal Data for the purposes described in this Privacy Policy where we have a legal basis under applicable EU and UK data protection law, such as the performance of our contract with you, your consent, our legitimate interests, or compliance with a legal obligation. We keep your Personal Data in a form that identifies you for no longer than is necessary for the purposes for which it is processed.

Subject to applicable law, you may have the rights described in the "Your data rights" section above. To make a request, contact us using the details below. We will verify your identity before responding.

If you believe we have not complied with our obligations under this Privacy Policy or applicable law, we ask that you contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with your local Data Protection Authority.

You are not generally obliged to provide us with Personal Data. However, if you choose not to provide certain information, we may be unable to offer some or all of the Services to you.

Access from Outside the United States

If you access the Services from outside the United States, information we collect about you may be transferred to, and stored and processed in, the United States and other countries where our service providers operate, where data-protection laws may differ from those in your country. Where required, we put appropriate safeguards in place for such transfers. To request more information about those safeguards, contact us using the details below.

Contact

If you have any questions about this Privacy Policy, or if you would like to exercise your privacy rights, please contact us at:

Email: hello@mypyxie.com