Privacy Policy

Effective February 16, 2026 · Last Updated February 28, 2026

Bristlecone Labs LLC ("Bristlecone Labs," "we," "us," or "our") operates mobile applications (collectively, the "Apps") available on the Apple App Store and Google Play Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our Apps.

Individual Apps may have supplementary privacy policies that describe app-specific data practices. In the event of a conflict between this Privacy Policy and an app-specific privacy policy, the app-specific policy shall prevail for that App.

By using our Apps, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we may collect your email address. Some Apps support anonymous sign-in, in which case we assign a unique identifier to your account.
• Preferences and Settings: We collect the preferences and configuration choices you provide within our Apps to personalize your experience.
• AI Inputs: If an App includes AI-powered features, we collect the prompts, preferences, and other text inputs you submit to generate personalized content.
• User Interactions: We record how you interact with content within our Apps, such as items you save, like, dislike, or dismiss.
• Communications: If you contact us for support, we may retain your correspondence.

1.2 Information Collected Automatically

• Usage Data: We collect information about how you use our Apps, including features accessed, screens viewed, time spent, and interaction patterns.
• Device Information: We may collect device type, operating system version, and unique device identifiers.
• Push Notification Tokens: With your permission, we collect device tokens to deliver push notifications.

1.3 Information We Do NOT Collect

Unless explicitly stated in an app-specific privacy policy:

• Location Data: We do not collect or access your precise device location.
• Contacts or Photos: We do not access your contacts, photos, or other device media.
• Health or Financial Data: We do not collect health, fitness, or financial information.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Apps and their features
• Generate personalized content and recommendations using AI based on your preferences and inputs
• Moderate user-submitted inputs for safety and appropriateness before processing them with AI models
• Process subscription payments through the applicable app store
• Send push notifications about relevant App activity (with your consent)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve user experience and inform product development
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

3. AI-Generated Content and Content Moderation

3.1 AI Content Generation

Some of our Apps use third-party artificial intelligence and large language model (LLM) services to generate personalized content based on your preferences and inputs. Your inputs and preferences are sent to these AI services solely to produce results within the App. AI-generated content is stored in our database and associated with your account.

3.2 Content Moderation

User-submitted inputs are screened for safety before being sent to AI models. We use automated content moderation systems, including third-party moderation APIs, to detect and block inputs that contain harmful, abusive, or inappropriate content. Inputs flagged by our moderation systems will be rejected.

3.3 Input Storage

Your AI inputs may be stored in our systems to provide continuity in your experience and to improve the quality of our services. You may request deletion of your stored inputs at any time (see Section 8).

3.4 No Training on Your Data

We do not use your personal data or inputs to train AI models. Inputs are sent to third-party AI providers for inference only.

4. Third-Party Services

We use third-party services to operate our Apps. The specific services used vary by App and are detailed in each App's supplementary privacy policy. Categories of third-party services we use include:

These services may collect information sent by your device or our servers as part of providing their services to us. When your inputs are sent to AI services for content generation or moderation, those services may process the text in accordance with their own privacy policies.

For a complete list of third-party services and links to their privacy policies, please refer to the privacy policy of each individual App.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly agree to share information.
• App Features: Some Apps include collaborative or social features that allow you to share data with other users (e.g., connected partners or shared lists). Details are described in each App's supplementary privacy policy.
• Service Providers: With third-party vendors who assist us in operating our Apps, subject to confidentiality obligations. This includes AI model providers that process your inputs to generate content.
• Legal Requirements: If required by law, regulation, subpoena, or legal process.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred as part of that transaction. We will notify you of any such change.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. AI inputs and generated content are retained as part of your account data. When your account is deleted, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest where applicable
• Access controls and authentication for internal systems
• Regular review of our data collection, storage, and processing practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

8.1 All Users

• Access and Update: You can access and update your preferences and account information within each App.
• Delete Account: You can request deletion of your account and all associated data (including stored inputs, interactions, and connections) by contacting us at [email protected].
• Notifications: You can manage push notification preferences in the App settings or your device settings.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

8.2 European Economic Area (EEA) Residents — GDPR Rights

If you are in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request limitation of processing.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Legal Basis for Processing: We process your data based on:

• Performance of a contract — providing App services you have requested
• Your consent — push notifications, optional data collection
• Legitimate interests — analytics, service improvement, content moderation, fraud prevention

8.3 California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: We do not sell personal information, so this right does not apply.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, contact us at [email protected].

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where Bristlecone Labs LLC is based. These countries may have different data protection laws than your jurisdiction.

By using our Apps, you consent to the transfer of your information to these countries. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

For users in the European Union, we rely on appropriate legal mechanisms for international data transfers, including Standard Contractual Clauses where applicable.

10. Children's Privacy

Our Apps are not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to promptly delete that information.

If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Post the updated Privacy Policy and update the "Last Updated" date
• Notify you of material changes through our Apps or by other reasonable means

Your continued use of our Apps after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you must stop using our Apps.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Bristlecone Labs LLC
Email: [email protected]