LEGAL

Privacy Policy

Effective October 21, 2026

This Privacy Policy explains how CR3ALITY LLC ("CR3ALITY", "we", "us") handles personal information when you use the CR3ALITY mobile app, the website at cr3ality.com, and related services (together, the "Service"). By using the Service you acknowledge this policy. Please also read our Terms of Service.

1. Information we collect

Information you give us

• Account details: your email address, your password (stored only in hashed form by our authentication provider), and the name you want the app to use.
• Profile photo (optional): a photo you choose for your profile. It is stored privately on your account.
• Onboarding answers and goals: your goals, areas of life, desired outcomes, identity words, preferences (for example whether you want spiritual language), and your other answers when you set up or update your practice. Some questions ask about your beliefs, your past and how you feel, so your answers can include sensitive personal information, including information about your mental or emotional wellbeing. Share only what you are comfortable with. You can skip or change answers.
• Your program: the affirmations and sessions generated for you, edits you make, and feedback you give on individual lines.
• Journal and evidence entries: notes you write and any photos you choose to attach.
• Voice recording (optional): if you choose to create a personal voice, a recording of you reading a short passage, and the voice model made from it. See section 4.
• Leaderboard name (optional): if you opt in to the leaderboard, the public name you choose.
• Messages to us: what you send when you contact support, including any support report you choose to share from the app.

Information created as you use the app

• Practice activity: sessions played, listening time, practice days, check-ins you complete, progress and unlocks.
• Settings: listening, sound, tone, alarm, reminder and appearance settings, and whether notifications are allowed.
• Subscription status: which plan you have, its renewal dates, and a purchase record linked to your account ID. Payments are handled by Apple. We never receive your card number or billing details.
• Technical information: our hosting and service providers automatically record basic technical data such as IP address, device and operating system type, app version, timestamps and error logs, to run and secure the Service.

Website

If you join the waitlist on cr3ality.com, we collect your email address to confirm your signup and send occasional launch updates. You can unsubscribe from any email.

2. How we use your information

• To create your account, sign you in and keep it secure.
• To generate, store and play your personalized affirmations, sessions, images and audio.
• To show your progress, send the reminders and alarms you set up, and run features like journaling and the optional leaderboard.
• To provide and manage your subscription.
• To respond to support requests and send service messages, such as account and password reset emails.
• To maintain, debug, protect and improve the Service, and to prevent fraud and abuse.
• To comply with legal obligations and enforce our Terms.

We do not use your goals, answers, journal entries, photos or voice to train our own AI models, and we never use them for advertising.

3. AI processing

CR3ALITY uses third-party AI services to build your practice. Before any of your information is sent to them, the app tells you which providers receive what and asks for your permission. If you do not agree, we do not send it, but the app cannot build your program without it.

When you use these features, only the information needed for the task is sent:

• Anthropic receives your goals and onboarding answers to write your affirmations and program.
• OpenAI receives a written description based on your goals to create the images in your program. We do not send photos of you.
• Fish Audio receives the text of your affirmations to turn them into speech and, only if you create a personal voice, your voice recording.

These providers process the data to return the result to us. Anthropic and OpenAI state that they do not use data sent through their business APIs to train their models. Fish Audio's practice for voice recordings is explained in section 4. AI-generated content can be inaccurate or unexpected. You can review and change your affirmations in the app at any time.

4. Your voice

Creating a personal voice is optional. You can always use one of the built-in voices instead.

• Consent: before you record, the app asks you to confirm that the voice is your own and that you agree to send the recording to Fish Audio. We do not record anything without that confirmation.
• Use: we use your recording and the resulting voice model only to read your own affirmations back to you. Your voice model is set to private. We do not sell, lease or trade your voice or voice model, and we do not use it for any other purpose.
• Fish Audio: as the app tells you before you record, Fish Audio's terms allow it to use recordings to train or improve its AI, and it may keep copies after you delete your voice. You can read Fish Audio's terms.
• On your phone: the recording is removed from your device after it uploads.
• Where your voice lives: your recording goes straight from the app, through our server, to Fish Audio to make your voice model. We do not keep the recording. We keep only the ID of your voice model and the affirmation clips spoken in your voice, so your sessions play quickly and offline.
• Deletion and retention: you can delete your voice in the app at any time. When you delete your voice or your account, we delete your voice model from Fish Audio and every clip made in your voice from our storage. Otherwise we keep your voice data only while you use the voice feature, and we permanently delete it no later than three years after your last use of the app.

Some laws treat voiceprints as biometric information. We handle your voice data according to this section and do not disclose it except to Fish Audio to provide the feature, or where the law requires.

5. Who we share information with

We share personal information only as described here:

• Service providers that run parts of the Service for us: Supabase (database, authentication and file storage), Anthropic, OpenAI and Fish Audio (the AI features described above), RevenueCat (subscription management), Apple (app distribution and payments), Resend (email delivery), Vercel (website hosting) and Kit (waitlist emails). We share only what each needs to do its job. They are bound by contract or their terms to use it only to provide their service to us and to protect it at least as well as this policy requires, except for Fish Audio's use of voice recordings described in section 4.
• The public leaderboard, only if you opt in. Other people can see your chosen name, weekly listening time, practice days and rank. Your program, answers, email and real identity are never shown. You can opt out at any time.
• Legal and safety reasons: when we believe in good faith it is required by law or legal process, or necessary to protect the rights, property or safety of you, our users, us or others.
• Business transfers: if CR3ALITY is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction, and it stays protected by this policy.
• With your permission, for example when you share a support report or export your data.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.

6. How long we keep information

We keep your information while your account is active and as long as needed to provide the Service.

When you delete your account in the app, we delete your account and the personal data linked to it, including your answers, program, audio, photos, journal entries and voice model, and we delete your voice model from Fish Audio. Our other providers keep what they processed for us only as long as their own retention terms allow. Copies may remain in routine backups for up to 30 days before they are overwritten. We may keep limited records where the law requires it, such as purchase records, or to resolve disputes and enforce our Terms.

Older audio replaced by a new version of your program is removed automatically. Images from earlier programs stay with your account, so finished programs can still be viewed, until you delete them with your account.

7. Your choices and rights

• Access and export: download a copy of your data from Profile in the app.
• Correct: edit your name, goals and affirmations in the app.
• Delete: delete your voice, photos, journal entries or your whole account in the app.
• Withdraw consent: delete your personal voice at any time, turn off reminders and alarms in the app or in your device settings, or delete your account to stop all processing.
• Leaderboard: opt in or out at any time.
• Email: unsubscribe from marketing emails using the link in any email.

Depending on where you live, you may have more rights. These can include the right to know what personal information we hold, to request access, deletion or correction, to object to or restrict certain processing, to data portability, to withdraw consent, and not to be discriminated against for using these rights. If you live in a US state with a consumer health data law, such as Washington or Nevada, you also have the right to know which health-related information we collect and share and to have it deleted. Our Consumer Health Data Privacy Policy explains this in full. Residents of the European Economic Area, the United Kingdom and similar places may also complain to their local data protection authority.

To make a request, email support@cr3ality.com. We will respond within the time the law requires, usually within 30 days. We may need to verify your identity first, and you may use an authorized agent where the law allows. If we deny your request, you can appeal by replying to our decision.

Where the GDPR or similar laws apply, we process your information:

• to perform our contract with you (providing the Service);
• on your consent, for example for your voice recording, AI processing of your answers, and notifications, which you can withdraw at any time;
• for our legitimate interests in running, securing and improving the Service;
• and to comply with legal obligations.

8. Security

We use reasonable technical and organizational measures to protect your information, including:

• encryption in transit;
• access controls that keep each person's data private to their own account;
• private storage for audio and photos;
• secure storage on your device for sensitive onboarding data.

No system is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.

9. Children

The Service is for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

10. International users

CR3ALITY is based in the United States. We and our providers may process information in the United States and other countries, which may have different data protection laws from where you live. Where the law requires it, we rely on appropriate safeguards for these transfers, such as Standard Contractual Clauses.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here and change the effective date. If a change is significant, we will tell you in the app or by email before it takes effect.

12. Contact us

CR3ALITY LLC
Email: support@cr3ality.com