MascotYou AI Privacy Policy

1. Information We Collect

How Data is Collected

MascotYou AI collects data in the following ways:

• Directly from Users: When users fill out forms, complete surveys, upload media, or link third-party accounts.
• Automatically: Through cookies, device signals, and app behavior monitoring (such as feature usage, clicks, and session data).
• From Third-Party Integrations: With user permission, we collect data from services like Apple Music, Spotify, LMS platforms, and connected devices to generate personality and mood insights.

MascotYou AI collects only the data necessary to deliver personalized insights, protect user security, and improve service quality. This includes:

• Personal Identifiers: Name, email address, phone number, age, school affiliation, and username.
• Usage Data: App activity such as session times, page views, feature usage, clicks, and interactions within the platform.
• Device Data: IP address, device type, operating system, language preferences, and browser type.
• Content Data: Data derived from analyzed music, documents, messages, and social media content — only if analyzed on-device and permitted by the user.
• Behavioral & Emotional Data: Mood indicators, personality trait scores, sentiment trends, and changes in emotional expression.
• Biometric or Health Data: MascotYou AI does not currently collect biometric or health data. If this changes in the future, users will be notified and consent will be required.
• Derived or Inferred Data: Personality insights, compatibility scores, emotional trends, and mental health risk profiles generated from user interaction and content.

Note: MascotYou AI does not store raw personal content (e.g., messages, documents, music files). All analysis is conducted on-device. Only derived insights are stored in association with your user profile.

2. Legal Bases for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: When you give explicit permission for specific processing activities.
• Contract: When processing is necessary for the performance of a contract with you.
• Legal Obligation: When required by law.
• Legitimate Interests: For purposes such as analytics, platform development, and fraud prevention, unless such interests are overridden by your data protection rights.

3. How We Use Your Information

We use your information to:

• Provide and personalize your experience with MascotYou AI.
• Analyze your digital content to generate personality and mood insights.
• Display customized content, social matches, and wellness recommendations.
• Improve, develop, and optimize our platform and features.
• Conduct surveys, research, and feedback assessments.
• Communicate updates, product launches, promotions, and service-related messages.
• Monitor safety and detect, investigate, or prevent fraudulent or unauthorized activity.
• Comply with applicable laws and enforce our policies.

4. How We Share Information

MascotYou AI may share personal data under strict conditions as outlined below:

• With Vendors and Processors: We use trusted third-party service providers (e.g., cloud storage providers, analytics platforms, customer support software) to help operate, maintain, and enhance the Services. These vendors only process data on our behalf and in accordance with this Privacy Policy.
• With Partners or Affiliates (If Applicable): If MascotYou operates alongside affiliated entities or authorized partners, data may be shared within that ecosystem to enable better service delivery or integration—always under a data-sharing agreement and privacy compliance.
• With Institutions (If Applicable): When MascotYou is used through a school, district, or university, anonymized or aggregated personality insight data may be shared back with institutional partners, in accordance with consent frameworks or applicable education privacy laws (e.g., FERPA).
• With Legal Authorities: If compelled by legal obligations, regulatory authorities, or judicial requests, we may disclose data to comply with applicable law, enforce our terms, or protect rights and safety.
• In Business Transfers: In case of a merger, acquisition, restructuring, or sale of assets, user data may be transferred to the successor entity as part of the transaction.
• With Other Users: Only when explicitly enabled by user actions or profile settings, such as appearing on public leaderboards, participating in community features, or initiating social discovery.

5. Your Rights Under GDPR

You may exercise the following rights:

• Right to Access: Request access to the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, under certain conditions.
• Right to Restriction: Request restriction of processing your personal data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to the processing of your data for direct marketing or based on our legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time, without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe your rights are violated.

To exercise any of these rights, contact us at support@mascotyou.com.

6. Data Storage & Security

We retain your data only as long as necessary for the purposes described in this policy or as required by law. MascotYou AI implements robust technical and organizational measures to safeguard your data, including:

• Storage Location: User data is stored securely on cloud servers located in the United States. For users in the EU or other jurisdictions with data transfer restrictions, we use legal safeguards such as Standard Contractual Clauses (SCCs).
• Encryption: All personal data in transit and at rest is encrypted using industry-standard encryption protocols (e.g., TLS 1.2+ for transmission, AES-256 for storage).
• Anonymization and Aggregation: Raw content is not stored. Only anonymized or pseudonymized insights (e.g., personality traits, mood scores) are stored and used for analytics or research purposes.
• Access Controls: Internal access to user data is strictly limited to authorized personnel based on role, and monitored under principle of least privilege. All access is logged and routinely audited.

We regularly review our security practices and policies to ensure the ongoing integrity, confidentiality, and availability of user data.

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

7. Children’s Privacy

MascotYou AI does not knowingly collect personal information from children under 13. Users under 18 must have parent or guardian permission to use the platform. If you believe a child has provided us with information, please contact us immediately.

8. International Transfers

If you are located in the European Economic Area (EEA), your personal data may be transferred to, and processed in, countries outside the EEA, including the United States. We use appropriate safeguards, such as Standard Contractual Clauses (SCCs), to protect your data in accordance with applicable law.

9. Third-Party Links

Our Services may include links to third-party sites or integrations with social platforms. We are not responsible for the privacy practices of those third parties.

10. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you through the app, email, or other appropriate methods. Your continued use of the Services after changes become effective constitutes acceptance.

11. AI-Specific Considerations

MascotYou AI incorporates artificial intelligence (AI) to generate personality insights and mood assessments. We take transparency and user agency seriously in how our AI operates:

• Automated Decision-Making: MascotYou AI does not make automated decisions that have legal or similarly significant effects on users. Any recommendations or insights are provided for wellness and informational purposes only.
• User Understanding and Challenges: Users may access and review their personality insights at any time through the platform. If a user believes an AI-generated insight is inaccurate, they may request clarification or initiate a re-assessment by updating their content or profile inputs. Support is available at support@mascotyou.com.
• Model Training Data Disclosure: AI models used in MascotYou AI are trained on a combination of public data and anonymized data patterns, never on identifiable personal content. Where applicable, sources used for model improvement will be transparently disclosed.
• Human Oversight: All AI-generated insights are subject to human oversight for platform-wide trends, wellness recommendations, and institutional dashboards. No personal decisions or clinical outcomes are made without user involvement or human review.

12. Contact Us

If you have questions or requests related to this Privacy Policy or to exercise your data rights, contact: