Privacy Notice

Scope and who we are

This Privacy Notice describes how and why SIGMUND may access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• Visit our website at https://www.thesigmundproject.org or any website of ours that links to this Privacy Notice
• Download and use our mobile application (SIGMUND), or any other application of ours that links to this Privacy Notice
• Engage with us in other related ways, including any sales, marketing, or events

Summary of key points

Table of contents

1. Scope and who we are
2. 1. What information do we collect?
3. 2. How do we process your information?
4. 3. Legal bases for processing
5. 4. When and with whom do we share information?
6. 5. Third-party websites
7. 6. Cookies and tracking technologies
8. 7. AI-based products
9. 8. How long do we keep your information?
10. 9. How do we keep your information safe?
11. 10. Do we collect information from minors?
12. 11. Your privacy rights
13. 12. Do-Not-Track controls
14. 13. United States privacy rights
15. 14. Updates to this notice
16. 15. Contact us
17. 16. Review, update, or delete your data

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express interest in information about us or our Services, participate in activities on the Services, or contact us.

Examples of information you may provide

• Names
• Email addresses
• Phone numbers
• Job titles
• Usernames
• Contact preferences
• Country
• Contact or authentication data
• Professor
• Campus
• Ideas or submissions you share on the platform

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Sensitive information

We do not process sensitive personal information.

Payment data

If you make purchases, we may collect data necessary to process your payment. Payment processing and storage is handled by our service providers, including Stripe, MemberSpace, Base44, and Replit. You can review their privacy policies here:

• https://stripe.com/privacy
• https://www.memberspace.com/privacy-policy/
• https://base44.com/privacy-policy
• https://replit.com/privacy-policy

Application data (if you use our app)

If you use our application(s), we may collect device and app information (depending on your permissions) to maintain security and operation, troubleshoot issues, and support analytics and reporting.

• Mobile device data: device ID, model, manufacturer, operating system, browser type/version, IP address (or proxy), ISP/mobile carrier, device/app IDs, and network information.
• Push notifications: we may request to send notifications about your account or app features. You can turn these off in your device settings.

Information automatically collected

When you visit, use, or navigate the Services, we automatically collect certain technical information that does not directly reveal your identity (like your name), such as IP address, device and browser characteristics, operating system, language preferences, referring URLs, country, location, and usage data.

• Log and usage data: diagnostic and performance data (pages viewed, searches, feature use, timestamps), plus error reports.
• Device data: device/app IDs, hardware model, OS and configuration, ISP/carrier, and browser type.
• Location data: approximate or precise location depending on your device settings (you can opt out by disabling location permissions; some features may be limited).

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your prior explicit consent.

Common purposes include

• Facilitate account creation, authentication, and account management
• Request feedback and support your use of Services
• Send marketing and promotional communications (based on your preferences; you can opt out)
• Deliver personalized content and advertising (see Cookies Notice below)
• Identify usage trends and improve our Services
• Measure effectiveness of marketing and promotional campaigns
• Protect an individual’s vital interests (for example, preventing harm)

3. What legal bases do we rely on to process your information?

If you are located in the EU or UK

We process personal information only when we have a valid legal basis, including:

• Consent: you can withdraw consent at any time
• Legitimate interests: where reasonably necessary (for example, improving Services, supporting marketing, and understanding how users engage)
• Legal obligations: complying with laws and lawful requests
• Vital interests: protecting someone’s safety in urgent cases

If you are located in Canada

We may rely on express or implied consent, and in limited cases, other grounds permitted by law (for example, fraud prevention, investigations, legal compliance, or certain business transactions).

4. When and with whom do we share your personal information?

We may share information in specific situations and with categories of third parties who perform services for us or on our behalf and require access to such information.

Categories of third parties we may share with

• Ad networks
• Affiliate marketing programs
• Cloud computing services
• Communication & collaboration tools
• Data analytics services
• Performance monitoring tools
• Retargeting platforms
• Social networks
• Testing tools
• Sales & marketing tools
• Website hosting providers
• Payment processors
• Product engineering & design tools
• User account registration & authentication services
• Order fulfillment service providers
• Government entities (where required)
• Finance & accounting tools
• Data storage service providers
• AI platforms

Additional situations where sharing may occur

• Business transfers: merger, sale, financing, or acquisition
• Affiliates: companies under common control (required to honor this notice)
• Business partners: to offer certain products, services, or promotions
• Offer wall (if applicable): third-party offers in the app may share a unique identifier (like a user ID) to prevent fraud and credit rewards

We do not sell your personal information.

5. What is our stance on third-party websites?

Our Services may link to third-party websites, services, or mobile applications and/or include ads from third parties. We are not responsible for the privacy practices of those third parties. Please review their policies directly.

6. Do we use cookies and other tracking technologies?

We may use cookies and similar tracking technologies (like pixels and web beacons) to collect and store information. Some technologies help with security, account protection, crash prevention, bug fixes, preferences, and basic site functions.

We also permit third parties and service providers to use tracking technologies for analytics and advertising, including tailoring ads and (where enabled) abandoned cart reminders based on your communication preferences.

Cookie Notice

Details on cookies and how to refuse certain cookies are set out here: https://thesigmundproject.org/terms-and-conditions.

Google Analytics

We may use Google Analytics to track and analyze use of the Services. To opt out, visit https://tools.google.com/dlpage/gaoptout. For Google’s privacy info, visit https://policies.google.com/.

7. Do we offer artificial intelligence-based products?

We may offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (“AI Products”) to enhance your experience. This Privacy Notice governs your use of AI Products within our Services.

AI service providers

We provide AI Products through third-party providers, including Anthropic, DALL·E, ElevenLabs, Google Cloud AI, Midjourney, and OpenAI. Your inputs, outputs, and personal information may be shared with and processed by these providers to enable AI features, consistent with this Privacy Notice and applicable legal bases.

Examples of AI product functions

• AI bots
• Image generation
• AI insights
• AI search
• AI translation
• Natural language processing
• Video generation
• Text analysis

You must not use AI Products in ways that violate any AI provider’s terms or policies.

8. How long do we keep your information?

We keep personal information only as long as necessary for the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or legal requirements).

No purpose in this notice requires keeping your personal information longer than the period during which you maintain an account with us, except where legally required.

9. How do we keep your information safe?

We implement reasonable technical and organizational security measures to protect personal information. However, no electronic transmission or storage can be guaranteed 100% secure. Use the Services at your own risk and access them within a secure environment.

10. Do we collect information from minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age (or the equivalent age as specified by law in your jurisdiction), and we do not knowingly sell such personal information.

If you believe we may have collected information from a minor, contact privacy@sgmnd.org.

11. What are your privacy rights?

Depending on where you are located (for example, the EEA, UK, Switzerland, Canada, and certain US states), you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to certain processing, and request data portability (where applicable).

Marketing preferences

You can unsubscribe from marketing emails at any time via the unsubscribe link in our emails, or by contacting privacy@sgmnd.org. We may still send service-related messages necessary to run your account.

SMS / mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services (such as customer service) is permitted. Text messaging opt-in data and consent will not be shared with third parties.

Account management

• Log in to your account settings to update your information
• Contact us at privacy@sgmnd.org

12. Controls for Do-Not-Track features

Most browsers and some mobile operating systems include a Do-Not-Track (“DNT”) setting. There is no uniform standard for recognizing DNT signals, so we do not currently respond to them. If a standard is adopted that we must follow, we will update this notice.

13. Do United States residents have specific privacy rights?

If you are a resident of California (and depending on other state laws), you may have rights to request access, correct inaccuracies, obtain a copy of, or delete your personal information, and to opt out of certain processing such as targeted advertising (“sharing” under some state laws).

High-level categories we may collect

We may use cookies for targeted/marketing and social media purposes as described in the cookies section.

California “Shine the Light”

California residents may request information about any disclosures to third parties for direct marketing purposes. Submit requests to privacy@sgmnd.org.

14. Do we make updates to this notice?

Yes. We may update this Privacy Notice from time to time to stay compliant with relevant laws. The updated version will be indicated by an updated “Last updated” date at the top of this page. If we make material changes, we may also notify you by posting a notice or sending a notification.

15. How can you contact us about this notice?

If you have questions or comments, email privacy@sgmnd.org or contact us by post:

16. How can you review, update, or delete the data we collect from you?

Depending on where you live, you may have the right to request access, details on how we processed your information, correct inaccuracies, delete your personal information, or withdraw consent.