Privacy Policy

Scope & Who We Are

GEDO PTE. LTD. is the data controller for the Service. This Policy applies to account holders and to visitors who interact with published digital persona pages. It does not cover third-party services you choose to connect.

Information We Collect

• Account data — email address, password hash or third-party sign-in identity (Apple / Google), language preference, invite code used.
• Your content — conversations with your AI, memories, goals and tasks, imported sources (files, links, chat exports), persona configuration, and reflections you write.
• Visitor interactions — messages visitors send to a published digital persona, and the persona’s replies.
• Subscription data — plan, billing period, subscription status and channel (Stripe / App Store / Google Play). Card details are handled by Stripe and never touch our servers; app-store billing is handled by Apple or Google.
• Usage & device data — feature usage counters (e.g. smart-credit consumption), approximate request metadata (timestamps, app version, browser type), and logs needed for security and abuse prevention.

We do not collect advertising identifiers, and we do not sell personal data.

How We Use Information

• To provide the Service: generating AI replies, building your long-term memory, planning and insight features, syncing across devices.
• To operate subscriptions: entitlement checks, billing status, receipts and subscription lifecycle emails.
• To keep the Service safe: authentication, rate-limiting, abuse and fraud prevention.
• To communicate: transactional emails (verification, password reset, receipts) and, only with your consent, product updates.
• To improve the Service using aggregated, de-identified usage statistics — never the content of your memories without consent.

AI Processing & Service Providers

To generate replies and reports, relevant excerpts of your content are sent to AI model providers as processors. Under our agreements with them, this data is not used to train their models. We use the following categories of subprocessors:

• Anthropic and OpenAI — large-language-model inference (chat, planning, insight generation).
• Stripe — web payment processing.
• Apple App Store / Google Play — in-app subscription billing on mobile.
• RevenueCat — cross-platform subscription state management (receives subscription events and your account ID, never your content).
• Resend — transactional email delivery.
• Cloud infrastructure providers — hosting, storage and encrypted backups.

Model Training & Your Consent

We never use your content to train models without your separate, explicit consent. Optional programs (such as training your personal Twin model) each require an independent opt-in, are limited to the stated purpose, and can be withdrawn at any time — withdrawal stops further use and deletes the training copies.

Retention & Deletion

We keep your data while your account is active. You can hard-delete individual memories at any time, pause long-term memory, or delete your entire account in-app (Settings → Privacy → Delete account) or on the web — deletion is permanent and cascades to memories, goals, persona data and subscription records. Residual copies in encrypted backups are rotated out within approximately 60 days. Records we must keep for legal reasons (e.g. tax and billing records) are retained as required by law.

Your Rights & Controls

• Access & export — download your memory archive (GMP format) anytime.
• Correction — edit or update your account data and content.
• Deletion — hard-delete items or your whole account, in-app.
• Consent withdrawal — revoke optional consents (e.g. Twin training) at any time.
• Complaint — contact us first at support@gedo.ai; you may also lodge a complaint with your data protection authority (in Singapore, the PDPC).

Security

All traffic is encrypted in transit (TLS). Access to production data is restricted and audited, backups are encrypted, and secrets are isolated. During beta we deliberately describe our safeguards precisely — see the Security & Privacy Statement at gedo.ai/security for the current, versioned description of our measures. No internet service can guarantee absolute security; notify us at support@gedo.ai of any suspected incident.

Children

The Service is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

International Transfers

Our infrastructure and subprocessors may process data outside your country (including Singapore and the United States). Where required, we use appropriate safeguards such as contractual protections that meet PDPA transfer requirements.

Cookies & Analytics

We use essential cookies for sign-in sessions and preferences. Usage analytics are first-party and privacy-respecting; we do not use third-party advertising trackers.

Changes & Contact

We will notify you of material changes to this Policy (in-app or by email) before they take effect. Privacy questions and data requests: support@gedo.ai. General enquiries: info@gedo.ai.