Privacy Policy

Effective date: 2026-09-30

This Privacy Policy explains how INVIX (“we”, “us”) handles personal information when you use our mobile applications (the “Apps”), including Orimind: Calm & Balance, Ember, and MoonChat, and when you contact support at support@invix-solution.com.

1. Data we collect

We collect only the data needed to run the App and answer support requests:

• Account data (when you create an account): email, display name, and a salted password hash. Anonymous device-only flows store a random device UUID instead.
• Profile & reflection data you enter inside the app (e.g. mood check-ins, journal reflections, mindfulness activity notes, or relationship context).
• App content you create: prompts, AI chat messages, reflections, and practice progress.
• Technical identifiers: an in-app user id or device UUID, plus standard request metadata (IP and user-agent) that our infrastructure logs briefly for abuse prevention.

2. Data we do NOT collect

• No location, contacts, calendars, photos, microphone or camera data.
• No advertising identifiers (IDFA / AAID).
• No third-party analytics, crash, or ad SDKs (no Firebase, Sentry, Crashlytics, AdMob, Meta SDK).
• No clinical health records, biometric, or banking information.

3. How we use the data

• To provide the features you use (authentication, mindfulness protocols, AI replies, chat, tracker).
• To prevent abuse, debug issues, and keep the service running.
• To reply when you contact support.

We do not sell your data, and we do not use it for advertising profiles.

4. Third-Party AI Services & Data Protection

Certain features (such as Orimind’s ORI AI and ORI ASTRO companion, Ember’s Analyst / Composer, and MoonChat’s cosmic chat) use third-party AI services to generate real-time empathetic responses, reflections, and guidance.

In compliance with privacy standards and store guidelines:

• What data is sent: Only the immediate message text, mood selections, and reflection context necessary to generate the response. We never transmit your account credentials, email address, password, or contact lists to any AI provider.
• Who data is sent to: We transmit data over secure, encrypted HTTPS APIs to vetted third-party AI service providers (including DeepSeek, OpenAI, and Timeweb Cloud AI infrastructure).
• User permission: The App explicitly explains what data is shared, identifies the recipient, and obtains your clear permission via an in-app consent dialog before any data is transmitted to a third-party AI service. You may review or decline this at any time in the app settings.
• Equal protection confirmation: We confirm that all third-party AI providers we share data with are contractually and technically bound to provide equal or greater privacy protection. Data transmitted to AI providers is processed under strict confidentiality, is retained only as transiently necessary to return the completion, and is not used to train public AI models.

5. Medical & Health Disclaimer

Orimind: Calm & Balance and our other Apps provide tools for personal reflection, mindfulness, and emotional wellness. The Apps do not provide medical advice, diagnosis, or clinical treatment. Always seek the advice of a qualified physician or healthcare provider with any questions you may have regarding a medical condition and before making any medical decisions. Never disregard professional medical advice or delay in seeking it because of something you read or experienced in the Apps.

6. Storage and retention

Data is stored on infrastructure controlled by us in encrypted form in transit and at rest where supported by the provider. Backups are retained for up to 30 days. You can delete your account at any time (see Section 7); after deletion we remove identifying records within 30 days, except where law requires longer retention.

7. Sharing

We share data with third parties only as needed to operate the Apps: our hosting and database providers, and the AI model provider you enable. We do not share data with advertisers or data brokers.

8. Your rights

You can request access to, correction of, or deletion of your personal information at any time by writing to support@invix-solution.com from the address linked to the account. We action requests within 30 days. Depending on where you live, you may also have rights under the GDPR, UK GDPR, or CCPA — those rights apply.

9. Children

The Apps are not directed to children under 13 (or the minimum digital-consent age in your country). If we learn we have collected data from a child without proper consent, we will delete it.

10. Changes

If we materially change this policy we will update the “Effective date” at the top and, where required, prompt you in the App. Continued use after that date means you accept the update.

11. Contact

Privacy questions: support@invix-solution.com.