Privacy Notice

This Privacy Notice explains how Metatable Inc. d/b/a Mosaic ("Mosaic", "we", "us", "our") collects, uses, and shares your personal information when you use the Mosaic mobile application ("App") and related services (collectively, "Services").

We are committed to protecting your privacy and will process your personal information in accordance with the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA"), California Privacy Rights Act ("CPRA"), and other applicable privacy laws.

1. Scope

This Privacy Notice applies to personal information processed through our Mosaic mobile application and related services. It does not apply to third-party websites, applications, or services that may be linked from our Services.

2. Personal Information We Collect

The categories of personal information we collect depend on how you interact with our Services.

2.1 Information You Provide

(a) Text Input. We collect text that you enter when interacting with AI Experiences, including prompts, messages, and conversations with AI characters and advisors.

(b) Voice Input. When you use voice features, your voice is processed in real-time by our AI systems to generate responses. Voice recordings are streamed for real-time processing and are not stored on our servers after processing is complete.

(c) Images. We collect images you upload for AI-powered experiences such as photo transformations and room redesign. Images may contain faces or other personal information.

(d) Generated Content. We may temporarily store AI-generated content (such as transformed images and conversation outputs) to provide you with our Services.

(e) Purchase Information. If you make purchases, we receive transaction information from Apple or Google, including a pseudonymous identifier. We do not receive or store your payment card details.

2.2 Information Collected Automatically

(a) Device Information. We collect information about your device, including device type, operating system, unique device identifiers, mobile advertising identifiers, and app version.

(b) Usage Information. We collect information about how you use our Services, including which Experiences you interact with, session duration, features used, and interaction patterns.

(c) Log Data. We automatically collect log data such as IP address, access times, and referring URLs.

2.3 Analytics Services

We use third-party analytics services to help us understand how our Services are used. These services collect anonymized and aggregated data. Our analytics partners include: Amplitude (product analytics), Google Analytics (usage patterns), AppFollow (app store analytics), and RevenueCat (subscription analytics). Please refer to each provider's privacy policy for more information.

3. How We Use Your Information

3.1 Providing Our Services

Processing your text, voice, and image inputs through AI systems to deliver interactive Experiences; generating AI responses, image transformations, and other outputs; managing subscriptions and processing transactions; and providing customer support.

3.2 Improving Our Services

Analyzing usage patterns to improve and develop new Experiences; identifying and fixing technical issues; and conducting research using aggregated, anonymized data.

3.3 Safety and Security

Detecting and preventing fraud, abuse, and security incidents; enforcing our Terms of Service; and protecting the rights and safety of our users and third parties.

3.4 Legal Compliance

Complying with applicable laws, regulations, and legal processes; and responding to lawful requests from government authorities.

Important: We do NOT use your personal User Content (text, voice, images) to train our own AI models.

4. How We Share Your Information

(a) AI Service Providers. We share your inputs (text, voice, images) with Google (Gemini) to power AI Experiences. See Section 5 for details.

(b) Analytics Providers. We share device and usage data with Amplitude, Google Analytics, AppFollow, and RevenueCat for analytics purposes.

(c) Cloud Service Providers. We use cloud hosting services to store and process data.

(d) Payment Processors. Payments are processed by Apple (App Store) and Google (Google Play). We receive only transaction confirmations and pseudonymous identifiers.

(e) Legal and Safety. We may share information when required by law, to protect rights and safety, or to respond to legal processes.

(f) Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

We do not sell your personal information.

5. Third-Party AI Services

Our Services use Google Gemini API to power AI Experiences. When you interact with AI features, your inputs are processed by Google's AI systems.

We use Google's paid API tier, which provides enhanced privacy protections: your prompts and responses are generally not used to train Google's general AI models; data is treated as confidential under Google's Data Processing Addendum; and Google does not share your data with other customers.

For more information, please review Google's Privacy Policy at https://policies.google.com/privacy.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

(a) Access: Request confirmation of whether we process your personal information and obtain a copy of it.

(b) Correction: Request correction of inaccurate personal information.

(c) Deletion: Request deletion of your personal information.

(d) Portability: Request a copy of your personal information in a portable format.

(e) Objection: Object to certain processing of your personal information.

(f) Withdrawal of Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at hello@trymosaic.app. We will respond within the timeframe required by applicable law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses approved by the European Commission.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law.

(a) Voice Input: Processed in real-time and not stored after processing.

(b) Text Input: May be retained temporarily for session continuity, then deleted.

(c) Uploaded Images: Retained for up to 30 days to enable service features, then deleted.

(d) Generated Content: Retained for up to 30 days, then deleted.

(e) Device and Usage Data: Retained in aggregated/anonymized form for analytics purposes.

In general, we do not retain personal data for more than 2 years after you stop using our Services. When we have no ongoing legitimate business need to process your personal data, we will delete or anonymize it. We may retain certain records longer if required by law (e.g., tax or accounting regulations, litigation, or legal compliance).

10. Notice for California Residents

This section applies to California residents and supplements our Privacy Notice with information required by the CCPA and CPRA.

In the preceding 12 months, we have collected the following categories of personal information: Identifiers (device identifiers, IP addresses); Internet or electronic network activity (usage data, interaction patterns); Sensory data (images, voice processed in real-time); and Inferences (preferences derived from usage).

"Sales" of Personal Information: Mosaic does not "sell" personal information as defined by the CCPA/CPRA, nor do we have actual knowledge of any "sale" of personal information of minors under 16 years of age.

California Privacy Rights: California residents have the right to: know what personal information we collect; request deletion of personal information; opt-out of "sales" (we do not sell); and not receive discriminatory treatment for exercising privacy rights.

To exercise your California privacy rights, please contact us at hello@trymosaic.app.

11. Notice for European Residents

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional information applies to you.

Legal Basis for Processing: We process your personal information based on: (a) your consent (for processing inputs to provide AI Experiences); (b) performance of a contract (to provide our Services); (c) legitimate interests (for analytics, security, and service improvement); and (d) legal obligations.

Data Controller: Metatable Inc. is the data controller for your personal information.

Supervisory Authority: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law. The list of EU data protection authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

12. Children's Privacy

Our Services are not directed to children under 13 years of age (or other age as required by local law), and we do not knowingly collect personal information from children. If you learn that your child has provided us with personal information without your consent, please contact us at hello@trymosaic.app. If we learn that we have collected personal information from a child in violation of applicable law, we will promptly take steps to delete such information.

13. Changes to This Notice

We may update this Privacy Notice from time to time. If we make material changes, we will notify you by posting the updated Notice in the App and updating the "Last amended" date. Your continued use of the Services after such changes constitutes your acceptance of the updated Privacy Notice.

14. Contact Us

If you have any questions about this Privacy Notice or our privacy practices, please contact us at:

Metatable Inc.

Email: hello@trymosaic.app