ReliAI Privacy Policy

Plain-English Summary

ReliAI is an AI-powered "Life Operating System". To do that, we collect information you give us (like journal entries, mood check-ins, calendar events, and messages with a connected co-parent) and information your device automatically sends (like crash logs and IP addresses).

Here is the short version of what we do with it:

• We do not sell your personal information.
• We do not share your personal information for advertising or to build profiles of you across other apps and websites. ReliAI has no advertising trackers.
• We do not use your identifiable content — your chats, journals, mood logs, messages, or documents — to train our own AI models or to improve our product. We may use de-identified, aggregated usage signals to keep the Service running and secure.
• The AI features run on a third-party model provider under enterprise terms that prohibit training on your data. Your prompts are processed transiently and are not retained by the provider.
• Marketing emails and push notifications are opt-in only. You'll only get them if you turn them on. Account messages (such as a billing receipt or a co-parent invitation) are not marketing.
• You have rights over your data, including the right to access it, correct it, and delete it. See Your Privacy Rights.

If you have any questions, email legal@reliai.app.

1. Scope of This Policy

This Privacy Policy explains how ReliAI, LLC ("ReliAI," "we," "us," or "our") collects, uses, and discloses information when you use:

• The ReliAI mobile app on iOS and Android,
• The ReliAI web app, and
• Communications, support interactions, and other content related to the Service (collectively, the "Service" or the "App").

This Policy does not apply to:

• Third-party services, websites, or apps that you may access through links in the Service. Those are governed by their own privacy policies.
• Information you share with other people outside of ReliAI (for example, if you forward content from the App by email or text).
• The handling of your payment-card information by Apple, Google, or any other payment processor that processes your subscription. Those processors operate under their own privacy practices.

The Service is intended for adults in the United States. It is not directed at children, and it is not actively marketed to users in the European Economic Area (EEA) or the United Kingdom.

2. Who We Are & How to Contact Us

ReliAI is operated by:

ReliAI, LLC, a Delaware limited liability company
9417 Macklin Ct, Alexandria, VA 22309, United States

Privacy and legal inquiries: legal@reliai.app

We respond to verifiable privacy requests within the timelines required by applicable law (typically 30–45 days, with extensions where permitted).

3. Information We Collect

We collect only the categories of information we need to provide and improve the Service. The table below lists what we collect and gives concrete examples.

4. Sources of Information

We get information about you from four sources:

• Directly from you, when you sign up, complete onboarding, or use any feature of the App (journals, mood logs, AI chat, calendar, etc.).
• From a connected co-parent, when they create or modify a record that is shared with you (for example, an event on a shared custody calendar, or an expense that lists you as a co-payer).
• Automatically from your device when you use the Service. This includes technical and usage information described in the Information We Collect section.
• From our service providers, such as our authentication provider (which issues your login credentials) and our subscription-management vendor (which tracks your subscription state).

5. How We Use Your Information

We use your information to:

• Provide and operate the Service, including delivering the features you request — AI chat, journaling, mood tracking, calendars, expenses, documents, voice features, and co-parent collaboration.
• Personalize AI responses to your tone preferences and recent context inside the App.
• Enable co-parent collaboration, including syncing shared calendars, expenses, tasks, documents, and messages with the co-parent you have connected.
• Process subscriptions, including starting trials, charging through the app stores, and reflecting your current plan in the App.
• Detect and respond to crisis signals that the AI may identify in your conversations, so we can surface mental-health and safety resources to you.
• Secure the Service and prevent abuse, including authenticating logins, detecting fraud, and investigating suspected violations of our terms.
• Comply with legal obligations, including responding to lawful requests from courts, regulators, and law enforcement.
• Communicate with you about your account through transactional messages (login alerts, billing receipts, co-parent invitations, important Service updates). These messages are not marketing.
• Send you marketing communications, but only if you opt in. You can opt out at any time.
• Operate, maintain, and improve the Service using aggregated, de-identified analytics.

We do not use your identifiable content — chats, journals, mood logs, messages, or documents — to train our own AI models, nor do we use it to improve the product in any way that re-identifies you.

6. AI Processing — How Your Content Is Handled by AI

Because ReliAI is AI-powered, this section deserves its own attention.

6.1 What happens when you use the AI

When you send a message to the AI assistant, write a journal entry that triggers an emotional-insight feature, or use a voice feature, your input is sent to a third-party AI model provider (an "enterprise-tier" provider, currently expected to be OpenAI Enterprise or a comparable enterprise-tier service). The provider generates a response and returns it to ReliAI, which displays it to you.

6.2 What we do not do

• We do not use your identifiable content to train our own AI models.
• We do not use your identifiable content to improve our product in ways that re-identify you. We may use de-identified, aggregated usage data (for example, "X% of users complete onboarding") to improve products and enhance security.

6.3 What the model provider does not do

The third-party model provider operates under enterprise terms that prohibit the provider from training its models on ReliAI customer data. Inputs are processed transiently to generate the response and are not retained by the provider beyond the request, except as needed for short-term abuse monitoring required under the provider's enterprise terms.

6.4 Crisis-signal detection

The AI may identify language in your conversations that suggests you are in distress (for example, expressions of hopelessness or self-harm). When this happens, ReliAI uses the signal only to surface support resources to you inside the App. Crisis-signal flags do not, by default, trigger outreach to third parties such as emergency services or your contacts.

6.5 AI outputs may be wrong

AI outputs can be inaccurate, incomplete, or outdated. You should not rely on the AI for legal, medical, or mental-health decisions. If you are in crisis, please contact a qualified professional or emergency services.

7. Sensitive Personal Information

Some of the information we collect is treated as sensitive personal information under U.S. state privacy laws. This includes:

• Mental and emotional health-adjacent data, such as mood logs, journal content, and AI conversations about emotional or relationship topics.
• Family and relationship data, including co-parenting status and custody arrangements.
• Information about your children, entered through child profiles.
• Financial data, such as expenses, receipts, and split allocations.
• Voice data, including voice recordings or transcripts processed by our voice-features vendor.

We use sensitive personal information only to provide, secure, and support the Service. We do not use sensitive personal information for:

• Inferring characteristics about you,
• Building user profiles,
• Targeted advertising or cross-context behavioral advertising, or
• Any purpose other than providing, securing, and supporting the Service.

California residents have a right to limit our use of sensitive personal information. See U.S. State Privacy Rights.

8. Children's Privacy & Child-Profile Data

The Service is for adults 18 and older. It is not directed to children and is not designed for use by children.

8.1 We do not knowingly collect data from children

ReliAI does not knowingly collect personal information directly from children under 13 (or under 16 where applicable state law extends children's privacy protections). If we learn that we have inadvertently collected information directly from a child under 13, we will delete that information promptly. If you believe a child has provided personal information to ReliAI, please email legal@reliai.app.

8.2 Child-profile data entered by an adult parent-user

ReliAI lets adult users create child profiles containing information about their children — for example, name, age, schedule, and notes. The adult parent-user is responsible for confirming that they have the legal authority to enter this information.

For purposes of this Policy, child-profile data is treated as personal data of the adult parent-user who entered it. That means the parent-user controls and is responsible for the child profile. The parent-user can edit, export, or delete child-profile data the same way they manage their other account data.

To request deletion of child-profile data, email legal@reliai.app.

9. Co-Parent Sharing & Persistence of Shared Data

This section is important. Please read it.

9.1 What gets shared with a connected co-parent

When you connect with a co-parent in the App, certain data becomes visible to that co-parent. This typically includes:

• Calendar events and recurring custody schedules,
• Tasks and task assignments,
• Expenses, receipts, and split allocations,
• Documents you have shared,
• In-app messages between you and the co-parent.

We share with the co-parent only what you have elected to share through these features. We do not share your private journals, mood logs, AI chats, or other personal entries with the co-parent.

9.2 Shared records persist after account deletion — by design

If you and a co-parent both have records inside a shared resource (a calendar, an expense, a message thread, a shared document), those records remain visible to the co-parent even after you delete your account.

This is intentional. Shared custody, financial, and scheduling records often need to remain accessible to the other co-parent for ongoing co-parenting and for recordkeeping (for example, in a legal or tax context). Deleting one parent's account should not erase the other parent's history.

When you delete your account:

• Your personal copy of shared records, your private content (journals, mood logs, AI chats), and your identifiable account data are removed on the timeline described in Data Retention.
• The connected co-parent's copy of shared records remains in their account.
• Your name or identifier may continue to appear on shared records as the historical author or as the source of an event or expense.

9.3 Once shared, content may exist outside ReliAI

Your co-parent can export, screenshot, copy, or otherwise retain shared content outside of the App. ReliAI cannot retract content from the co-parent's device or any export they have made. Please share with this in mind.

10. How We Share Information

• We do not sell your personal information.
• We do not share your personal information for cross-context behavioral advertising or targeted advertising. ReliAI does not use advertising pixels (such as Meta, Google Ads, TikTok, or LinkedIn) or participate in advertising data exchanges.

We share your information only as follows:

• With service providers (sub-processors) that help us run the Service. See Service Providers / Sub-Processors below.
• With a connected co-parent, but only the data you have elected to share with them through co-parenting features.
• For legal and safety reasons, if we believe in good faith that disclosure is required by law (subpoena, court order, regulatory request) or is necessary to protect rights, safety, property, or to prevent fraud or abuse.
• In a business transfer, if ReliAI is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will give you reasonable notice before your information becomes subject to a different privacy policy.
• With your consent, for purposes you specifically authorize.

11. Service Providers / Sub-Processors

The vendors below help us deliver the Service. Each operates under a written agreement that limits how they may use your information.

We update this list when our sub-processors change.

12. Google API Services User Data

ReliAI integrates with Google Calendar so you can sync co-parenting events (custody schedules, tasks, appointments) between ReliAI and your Google Calendar. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

12.1 Data accessed

When you connect your Google account, we request the OAuth scope https://www.googleapis.com/auth/calendar.events. This scope allows ReliAI to view, create, edit, and delete events on the Google Calendars you own. We access only event data (title, description, start/end time, attendees, location, recurrence). We do not access your Gmail, Contacts, Drive, profile photo, or any other Google data.

12.2 Data usage

Calendar event data is used solely to:

• Display your existing Google Calendar events alongside ReliAI events in the in-app calendar view,
• Push events you create in ReliAI (e.g., custody handovers, child appointments) to your Google Calendar, and
• Keep the two calendars in sync when you update or delete events.

Google user data is not used for advertising, is not sold, is not used to train AI/ML models, and is not read by humans except (i) with your explicit consent, (ii) for security investigations, or (iii) to comply with applicable law.

12.3 Data sharing

We do not share Google user data with any third party. Calendar data is not sent to our AI providers, analytics providers, or any other sub-processor. The data flows only between Google's servers, ReliAI's backend (hosted on AWS), and your device.

12.4 Data storage and protection

OAuth refresh tokens are stored encrypted at rest in our database. All data in transit is protected with TLS 1.2 or higher. Access to production systems is restricted by role-based access controls and audit logging. Calendar event payloads are processed in memory; only minimal sync metadata (event ID mappings) is persisted.

12.5 Data retention and deletion

We retain Google OAuth tokens and sync metadata only while your Google account remains connected to ReliAI. You can disconnect at any time from Settings → Integrations → Google Calendar, which immediately revokes our access and deletes the stored tokens and sync mappings. You can also revoke ReliAI's access directly from your Google Account permissions page. When you delete your ReliAI account, all Google-derived data is deleted within 30 days. To request manual deletion, email legal@reliai.app.

13. Data Retention

We keep your information for as long as we need it to provide the Service or to meet legal obligations, then we delete or de-identify it. The table below summarizes our standard retention periods.

We may retain information longer where required by law, necessary to enforce our agreements, or to resolve a dispute, investigate a security incident, or comply with a legal hold.

14. Account Deletion

You can request deletion of your ReliAI account and its associated data at any time. This section explains how to request deletion, what we delete, what we retain (and why), and the timeline.

14.1 How to request deletion from inside the App

1. Open the ReliAI app and sign in.
2. Go to My Profile.
3. Tap Delete Account.
4. Enter your current password to confirm the request. (If your account uses social sign-in only and does not have a password set, the password step is skipped.)
5. Tap Delete. Your account is immediately marked for deletion, you are signed out, and you can no longer sign back in.

14.2 How to request deletion without the App

If you no longer have the App installed, were unable to complete the in-app flow, or cannot sign in to your account, email legal@reliai.app from the email address on your account with the subject line "Account Deletion Request". We will verify your identity and process the request on the timeline below.

14.3 What is deleted

When deletion completes, we delete the following from our systems:

• Your profile information (name, email, phone, age range, photo),
• Onboarding answers and AI assistant preferences (tone, configuration),
• AI chat history, AI chat summaries, AI feedback, and AI moderation records,
• Journal entries and journal-related data,
• Mood check-ins and mood logs,
• Your personal tasks and personal calendar events,
• Documents you uploaded (files stored in our cloud storage),
• Voice transcripts processed through the App,
• Child profiles you created,
• Push-notification device tokens,
• Your authentication account with our authentication provider (Clerk),
• Google OAuth tokens and Google Calendar sync mappings (if you connected Google Calendar).

14.4 What is retained, and why

A limited set of information is retained after account deletion, either because the law requires it, because a connected co-parent has their own right to the shared record, or because retention protects the security and integrity of the Service. Specifically:

• Co-parent shared records — calendar events, expenses, tasks, in-app messages, and shared documents you exchanged with a connected co-parent remain visible to that co-parent, because they are also the co-parent's records. Your name may continue to appear on those records as the historical author. See Co-Parent Sharing & Persistence of Shared Data.
• Payment and transaction records — kept for up to 7 years to meet U.S. tax and financial recordkeeping requirements.
• Authentication and security logs — kept for up to 1 year for abuse prevention, fraud investigation, and incident response.
• Crisis-signal flags and safety logs — kept for 90 days.
• Encrypted backups — your data may persist in routine backups for up to 90 days before backups are rotated and purged.
• Marketing suppression list — if you ever opted out of marketing, we keep that record indefinitely so we continue to honor your opt-out.
• Aggregated, de-identified analytics — usage signals that no longer identify you may be retained indefinitely.

14.5 Deletion timeline

• Day 0 (immediately) — your account is soft-deleted: you are signed out, login is disabled, and your account is no longer visible to other users in the App.
• Within 30 days (restore window) — you can cancel the deletion by emailing legal@reliai.app from your account email. After 30 days, deletion is irreversible.
• After 30 days — an automated job permanently deletes your profile and cascade-deletes the records listed in What is deleted from our database and from our authentication provider.
• Within 90 days — your data is rotated out of encrypted backups, and any Google Calendar-derived data is fully purged.

14.6 Need help with deletion?

If you have any questions or run into trouble deleting your account, email legal@reliai.app with the subject line "Account Deletion Request". We respond within the timeframes described in Your Privacy Rights — General.

15. Your Privacy Rights — General

Depending on where you live, you may have the right to:

• Access the personal information we hold about you,
• Correct information that is inaccurate,
• Delete your information,
• Receive a copy of your information in a portable format,
• Object to or restrict certain processing,
• Withdraw consent where we rely on consent, and
• Appeal a decision we make about your request, where state law requires.

How to submit a request

Email legal@reliai.app with the subject line "Privacy Request", and tell us which right you want to exercise. You can also use the data tools available inside the App (for example, in-app account deletion).

Identity verification

To protect you, we will verify your identity before responding to a request. Verification typically means confirming control of your account email or providing additional information that matches your account record. We will only use what you provide to verify the request.

Response timelines

We respond to verifiable requests within the timeframes required by applicable law — generally 30–45 days, with one extension if reasonably necessary and where law permits. If we deny your request, we will tell you why and how to appeal.

Authorized agents

You may use an authorized agent to submit a request on your behalf. The agent must provide written authorization, and we may still verify your identity directly.

Non-discrimination

We will not deny, charge different prices for, or provide a different level of service because you exercise a privacy right.

16. U.S. State Privacy Rights

This section consolidates state-specific rights for U.S. residents. State coverage is expanding, and residents of states with comprehensive privacy laws generally have similar rights even if their state is not specifically listed here.

16.1 California (CCPA / CPRA)

In the past 12 months, ReliAI has collected the categories of personal information described in Information We Collect, including the following statutory categories:

• Identifiers,
• Customer records information (e.g., name, contact),
• Commercial information (subscription state),
• Internet or other electronic-network activity,
• Geolocation (approximate, derived from IP),
• Audio information (voice features),
• Professional or employment-related information (only if you provide it),
• Inferences (limited; we do not build behavioral profiles),
• Sensitive personal information, as described in Sensitive Personal Information.

We collect this information from the sources described in Sources of Information and use it for the business purposes described in How We Use Your Information. We disclose personal information to the categories of recipients described in How We Share Information (service providers, the connected co-parent, legal/safety recipients, business-transfer recipients, and parties you authorize).

ReliAI does not sell personal information as the term "sell" is defined under the CCPA/CPRA, and ReliAI does not share personal information for cross-context behavioral advertising. We have not done so in the past 12 months.

California residents have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share,
• Delete their personal information,
• Correct inaccurate personal information,
• Opt out of sale or sharing of personal information (not applicable here, because we do not sell or share for advertising — but you may submit such a request and we will confirm),
• Limit the use and disclosure of sensitive personal information to what is necessary to provide the Service. Note: ReliAI already limits its use of sensitive PI in this way as a default. A "right to limit" request is unlikely to change how we already handle your sensitive PI.
• Non-discrimination for exercising any of these rights.

To exercise any of these rights, email legal@reliai.app. You may use an authorized agent.

"Do Not Sell or Share My Personal Information"

ReliAI does not sell or share personal information for cross-context behavioral advertising. There is therefore no "sale" or "sharing" to opt out of. We provide this section to make our position clear under California law.

16.2 Virginia (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a portable copy of their personal information; to opt out of targeted advertising, sale of personal data, and certain profiling; and to appeal our decision on a privacy request.

To submit a request, email legal@reliai.app. To appeal, reply to our response with the subject line "Privacy Appeal".

16.3 Colorado, Connecticut, Texas, Utah, Oregon, Montana, and other states

Residents of Colorado, Connecticut, Texas, Utah, Oregon, Montana, and other states with comprehensive privacy laws have substantially similar rights — access, correction (where applicable), deletion, portability, and the right to opt out of sale, targeted advertising, or certain profiling. Several of these states also provide an appeal mechanism.

To exercise these rights, email legal@reliai.app. We will identify ourselves as the controller of your data, verify your request, and respond within the timeframe required by your state's law.

16.4 Other U.S. states

If you live in a U.S. state that has enacted a comprehensive privacy law, you generally have the rights outlined above. We will treat your request in line with the requirements of your state's law, even if it is not specifically named here.

17. EEA / UK Rights (GDPR / UK GDPR)

The Service is intended for users in the United States. ReliAI is not actively offering the Service in the EEA or UK during the MVP phase. If you access the Service from the EEA or UK, the following applies.

17.1 Controller

The controller of your personal data is ReliAI, LLC, 9417 Macklin Ct, Alexandria, VA 22309, United States. Contact: legal@reliai.app.

17.2 Legal bases

We process your personal data on the following legal bases:

• Contract — to provide the Service you have signed up for.
• Legitimate interests — to secure the Service, prevent abuse, and operate the business. Where we rely on legitimate interests, you can ask us about the balancing test.
• Consent — for marketing communications and certain optional features. You can withdraw consent at any time.
• Legal obligation — to comply with applicable law.

17.3 Your rights

You have the right to access, rectify, erase, restrict, and port your personal data, to object to certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority in your country of residence.

17.4 International transfers

Your data is processed in the United States. Where required, we rely on appropriate transfer safeguards, such as Standard Contractual Clauses, to provide an adequate level of protection.

18. Cookies and Similar Technologies (Web)

Our web app uses cookies and similar technologies in three categories:

• Strictly necessary — for authentication, session management, and security. These cannot be turned off without breaking core features.
• Functional — for remembering your preferences (such as language and time zone).
• Analytics — to understand how the Service is used so we can improve it.

We do not use advertising or targeting cookies.

You can control cookies through your browser settings. Where we offer in-app analytics opt-outs, you can use those as well.

19. Marketing Communications

Marketing communications are opt-in only. You will not receive marketing emails or marketing push notifications from ReliAI unless you affirmatively turn them on.

You can opt out at any time by:

• Toggling marketing preferences in the App,
• Clicking the "unsubscribe" link in any marketing email, or
• Adjusting OS-level push notification settings on your device.

Transactional and account messages — login alerts, billing receipts, co-parent invitations, important Service updates, and security notifications — are not marketing and will continue regardless of your marketing preferences.

20. Security

We take security seriously. Our safeguards include:

• Encryption in transit (TLS) for data moving between your device and our servers,
• Encryption at rest for data stored in our cloud infrastructure,
• Access controls that limit which ReliAI personnel can access user data, with role-based permissions,
• Vendor due diligence on the sub-processors listed in Service Providers / Sub-Processors,
• Monitoring and logging to detect unusual activity, and
• Incident-response procedures to act quickly if something goes wrong.

No security program is perfect. You can help by using a strong, unique password, enabling multi-factor authentication through our authentication provider where offered, keeping your devices up to date, and being careful about what you share with a connected co-parent.

21. Data Breach Notification

If we experience a security incident that affects your personal information, we will notify you and applicable regulators consistent with state breach-notification laws and other obligations that apply to us. The notice will describe, to the extent we know, what happened, what information was involved, what we are doing about it, and what you can do.

22. App Store Privacy Disclosures

ReliAI maintains:

• An Apple App Store Privacy Nutrition Label for the iOS app, and
• A Google Play Data Safety disclosure for the Android app.

Those disclosures summarize this Policy for the app stores. In case of any inconsistency between an app-store disclosure and this Policy, this Policy controls.

23. International Users / Data Transfers

Your data is processed in the United States. If you are accessing the Service from outside the United States, you understand and agree that your data is transferred to and processed in the U.S., where data-protection laws may differ from those in your country. Where required, we use appropriate transfer safeguards. See EEA / UK Rights.

24. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date at the top of this Policy reflects the most recent change.

If we make a material change — for example, a change to how we use your data, who we share it with, or your rights — we will notify you in advance by email or by an in-app notice, and we will give you a reasonable opportunity to review the change before it takes effect. Continued use of the Service after the effective date of a change constitutes your acceptance of the updated Policy.

25. Contact Us

For privacy questions, requests, or appeals:

ReliAI, LLC
9417 Macklin Ct
Alexandria, VA 22309 United States
legal@reliai.app

26. Definitions

• "Personal information" (or "personal data") means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you.
• "Sensitive personal information" has the meaning given in applicable U.S. state privacy laws and includes the categories listed in Sensitive Personal Information.
• "Service Provider" or "Sub-Processor" means a third party that processes personal information on ReliAI's behalf under a written agreement that limits use of the information to ReliAI's instructions.
• "Sale" and "Share" have the meanings given in the CCPA/CPRA and similar state laws. ReliAI does not sell or share for cross-context behavioral advertising.