Liminal Privacy Policy

1. Who This Policy Applies To

This Privacy Policy applies to all users of the Liminal mobile application (available on iOS and Android), whether you use the free journal, a trial, or Liminal Premium.

Liminal is offered in the countries where it is available on the App Store or Google Play. It is not offered in mainland China, Russia, or countries and regions subject to comprehensive United States sanctions, and it may not be available in some other countries. If you live outside the United States, Section 11 explains how your information is transferred to the United States and Section 16 lists the rights you have where you live. A French version of this Policy is available for people in Quebec.

Liminal is intended for adults 18 years of age and older (or the age of majority where you live, if higher). We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with their information, contact support@programu.app and we will delete it promptly.

2. Information We Collect

Account Data:
• Your email address (from email sign-up, or from Apple or Google when you sign in with them), if you create an account
• Your display name (the name you give us, or your first name if shared by Apple or Google sign-in)

We do not collect your date of birth. Age (18 or older, or the age of majority where you live) is confirmed by your attestation at consent.

Dream Journal Data — this is sensitive data, and we treat it that way (see Section 4):
• Dreams you record: voice recordings, transcripts, and text entries
• Tags and details you add: dream type (lucid, out-of-body, oracular, recurring, and similar), emotions, people, places, lucidity ratings, techniques you tried, and sleep and wake times you log
• Your own read of a dream (what you wrote about what it meant)
• Patterns computed from your own journal: recurring elements ("dream signs"), streaks, and trends
• Conversations with Kairos, Liminal's AI dream specialist, in the Drift: transcripts saved to your history, plus a short running conversation memory (a few sentences summarizing what you two have discussed) kept so she can pick threads back up. You can turn this memory off in the app (About Kairos), and off means nothing new is stored.
• Paper journal pages you photograph into the app: the photo itself, and the text read from your handwriting so the entry is searchable
• Photos you choose to attach to a dream, and a profile photo if you add one
• Reality checks and practice sessions you log
• Partner sharing, if you choose it: when you link with one partner by invite code, the dreams you individually choose to share are copied into a private shared space that only the two of you can read — the title, the text, your tags, and your own read of the dream (including a read you write after sharing), plus photos only if you switch them on for that dream. Never your recordings, Kairos's readings, or Kairos conversations. If you and your partner both share a dream from the same night and both have written a read, either of you can ask Kairos for a reading of that night; it is written from both dreams and both reads and is visible to both of you. Your partner sees your display name; you see theirs; either of you can react to a shared dream or mark it read, and each of you can see those marks. Unsharing a dream, deleting it, or unlinking removes the shared copy.
• Preferences: bedtime, capture settings, notification schedules, and sleep-audio mixes you save

Voice recordings of your dreams are stored in your private account storage so you can replay them and so they can be transcribed for you. They are yours: you can delete any recording, and all of them are erased with your account.

Reports You Send:
If you report something Kairos said (press and hold a reply, tap Report under a reading, or Profile → Send feedback), we store the reported text (for a reading, the reading as you saw it), where it came from, the time, and your own words if you used the feedback form, under your account. A person reads it. Reports are deleted with your account.

Usage Data:
• Feature activity that is itself your own stored record (journal history, conversation history, reality-check logs)
• In-app preferences and notification settings, including your quiet-hours window and a time zone offset used only to time notifications and your weekly and monthly reflections to your local day and to avoid notifying you during your sleep hours
• Feature-usage state stored as simple flags and counts (for example, which first-nights steps you have completed, or whether we have shown you a satisfaction check), never the content of what you wrote
• When you write from a journaling prompt, the prompt text is saved together with your entry so the entry keeps its context
• Your Kairos usage this month (message and voice-minute counts) so the app can show you what your plan includes

We do not run a third-party analytics SDK, and we do not collect behavioral analytics beyond the records described above.

Region:
Your country (from your App Store or Google Play account, your device's region setting, or the country you choose in Profile → Region), your device's time zone, and its language setting. We use them to show crisis lines for your country first, to show our legal terms in French first in Canada or when your device is set to French, and to tell you which country's privacy rights apply to you. They are not used to track your location. We do not store your IP address.

Error Reports:
If the app hits an error, a report may be sent to us containing the error message, a technical stack trace, your user ID, the app version, the device model and operating-system version, never your dream text, recordings, or conversation content. Reports are limited to a few per day per device.

Device Information:
We collect app version and operating system platform at consent time for audit purposes. If you allow notifications, we store the push token your device issues. We do NOT collect advertising identifiers, precise location, or device fingerprinting data.

Subscription and Payment Information:
Payments are processed by Apple (iOS) or Google (Android); they handle your payment details under their own privacy policies. ProgramU LLC receives only your subscription status and a transaction identifier, never your card details. We use RevenueCat to manage subscriptions; it receives your user ID and subscription state only. Current pricing is always shown in the app before you buy.

What You Choose to Share:
Much of what Liminal holds is what you choose to write or say: dreams, reads and conversations with Kairos. Share only what you are comfortable sharing, and please do not share other people's health information or other sensitive details about them.

3. Third-Party Services (Sub-Processors)

We use the following sub-processors to operate Liminal. Each processes only the data necessary for its function:

• Google Firebase: Authentication, Firestore database, Cloud Functions, Cloud Run and private file storage for your dream recordings, dream photos and photographed journal pages. It also hosts our shared, pregenerated sleep-audio library (the same tracks for every user, no personal data). Data is encrypted at rest and in transit, and access is restricted to your authenticated account by security rules. Region: us-central1, United States.

• Inworld AI: Powers Drift's real-time voice conversations: speech-to-text, a fast language model reached through Inworld's model router, and text-to-speech for Kairos's voice. Your live voice audio is processed in transit for the conversation and is not stored by ProgramU LLC. Inworld's router may automatically substitute a comparable model if the primary one is unavailable, which is outside our direct control.

• Google (Gemini): Transcribes your dream voice recordings on our servers (on iPhone, an on-device draft may appear first and is then replaced by the server transcript, unless you have edited the text, in which case your words stand), reads the handwriting in paper journal pages you photograph in, and powers Drift conversation processing through Inworld's router. Google's Gemini is also the backup for our AI safety check when Anthropic is unavailable.

• Anthropic (Claude): Background dream intelligence: generates titles, summaries, and theme and pattern detection from your dream entries so your journal can reflect your own patterns back to you. It also writes, when you ask for them, Kairos's readings of a dream, the Sunday reflection, the Deep Read, the "about you" notes Kairos offers to remember, drafted intentions, and a reading of a night you and a linked partner both dreamed. Those requests carry the dream's words, your own read of it, the nights just before, and what you have told Kairos about yourself, and, for a partner reading, your partner's shared dream and read. Anthropic also runs our AI safety check: it receives Drift messages and call turns that are not clearly in English, only to recognize crisis language in any language (see our Trust & Safety page). Anthropic does not train on our API traffic; per Anthropic's API terms, request and response data may be retained for up to 30 days for abuse detection.

• Expo: Delivers app updates between store releases (your device requests them with the app version, platform and an installation identifier the app generates) and relays push notifications to your device using a device push token: the notification text only, never your journal.

• Resend: Delivers our internal operations and safety emails to our own team. Those emails carry an internal identifier and a category only, never your dreams, recordings, conversation content or the text of a report.

• Sentry: Crash reporting. Reports are scrubbed before transmission: we strip your email, username, and IP address, keep only an opaque user ID, and drop console and input breadcrumbs, so your dream content is never included. Sentry retains reports per its default retention policy (about 90 days).

• RevenueCat, Apple App Store, Google Play: subscription management and payment processing as described in Section 2.

• Apple Sign-In and Google Sign-In: Optional authentication providers, used only if you choose them instead of email. Each processes your sign-in per its own privacy policy.

• Apple Push Notification service and Firebase Cloud Messaging: deliver notifications to your device; receive your device push token and the notification text.

What we do NOT send to sub-processors:
• We do NOT send your email address, display name, payment card details, or device identifiers to Anthropic, Google's Gemini, Inworld, or Sentry beyond what is described above.
• We do NOT use any third-party advertising networks, behavioral advertising pixels or analytics SDKs, and we never track you across other companies' apps or websites.

None of these providers are permitted to use your content to train their models, and your data is never sold or used for advertising.

4. Sensitive Data

Your dreams are yours. What you record in Liminal — the dreams themselves, the people and places in them, the feelings you tag, the patterns they reveal — is sensitive personal information that could embarrass or harm you if it were disclosed. We designed Liminal with that risk in front of us:

• We will never sell your data. Not to data brokers, not to advertisers, not to anyone.
• We will never show you ads or share your data with advertising networks.
• We will never share your journal with any third party beyond the processing described in Section 3, and a partner sees only the dreams you choose to share.
• We delete your data on request. See Section 8.
• You can lock the app behind Face ID, Touch ID or your phone's biometrics (Profile → App lock), free, on-device.

Your dream data exists for one purpose: to support your own practice inside the app. That is the only use we put it to.

Health-Related Information:
Dreams, the emotions and sleep times you log, your reads and your conversations with Kairos can reveal information about your mental or physical health. Many countries treat this as sensitive information that needs your explicit consent, including Canada (and Quebec), Malaysia, India, South Africa and the Philippines. We ask for that consent in the app before you first share this kind of information, we use it only to provide and personalize Liminal as this Policy describes, and you can withdraw it at any time by deleting the content or deleting your account.

Retention Schedule for Recordings:
Your dream voice recordings and the photos you add are kept in your private storage for as long as your account exists, so you can replay and revisit them. We permanently delete a recording when you delete it or its dream, and all of them when you delete your account. We never sell, lease, trade or otherwise profit from your recordings, and we do not disclose them except to the transcription provider named in Section 3, with your consent, or where the law requires.

5. How AI Data Processing Works

Liminal uses AI in two separate ways:

Live conversations (Drift, voice and text) run through Inworld's realtime agent API. Section 13 covers these in detail.

Background processing runs after you save or sync a dream:
• Transcription of your voice recording via Google's speech model on our servers (an on-device draft may show first; your own edits always win)
• A title, short summary, and detected themes for each dream (Anthropic Claude)
• Recurring-element detection across your journal, your dream signs (computed from Claude's per-dream output by our own code)
• When you ask for one: Kairos's readings of a dream, the Sunday reflection, the Deep Read, "about you" notes, drafted intentions, and a reading of a night you and a linked partner both dreamed (Anthropic Claude). These carry the dream's words, your own read of it, the nights just before, what you have told Kairos about you, and, for a partner reading, your partner's shared dream and read

These outputs are saved back to your account, marked as AI-generated, and deleted with it.

Your numbers are computed, not generated. Streaks, counts, and pattern statistics shown in the app or spoken by Kairos are computed by our servers from your own logged data. The AI model never invents these numbers.

AI training and your data:
• Anthropic: does not train on Liminal's API traffic.
• Google (Gemini, transcription and Drift replies): we do not use this data to train any model, and we process it under Google's API terms.
• Inworld (Drift speech-to-text, text-to-speech and routing): Inworld's product policy governs whether and how it may use this data for service improvement. We have requested that Inworld not use our customer data for model training; you may contact support@programu.app for the most current status of this arrangement.
• We never use your dreams, recordings, reads, conversations, or any other personal content to train any AI model that we or any third party operates.

AI-generated content can contain errors. Kairos reads your own journal with you; she says what she thinks and holds it loosely; your read outranks hers, and nothing she says is a prediction, a diagnosis, advice, or fact. Use your own judgment.

Automated Safety Checks and Human Review:
Our crisis check and content filters are automated. When one of them stops a message or pauses a call, that decision is made by automated processing. If you think it was a mistake, email support@programu.app: a person will review it, tell you the main reasons, and you can give us your side. The check itself keeps only a record that it ran (when, where in the app and which kind), not what you wrote.

6. How We Use Your Information

We use your information to:
• Provide the core Liminal service: your journal, transcription, dream intelligence, sleep audio, Drift conversations, partner sharing you set up, and reminders you opt into
• Personalize your experience from your own data: your dream signs, patterns, and preferences
• Process subscriptions (via Apple, Google and RevenueCat)
• Catch and diagnose errors (with personal content stripped, as described in Section 2)
• Understand how the app is used, which screens and features are reached, using counters stored in our own database (no third-party analytics)
• Keep you safe: our crisis check and content filters read Drift conversations to spot a crisis or content we don't allow
• Comply with legal obligations and prevent fraud or abuse

We do NOT use your information to:
• Show you ads or sell ad space
• Train AI models
• Sell, rent, or trade your personal data
• Build advertising profiles of you or track you across other apps or websites

Legal disclosures: we may disclose information where required by law or legal process; to enforce our Terms of Service; to respond to a payment dispute with records of the subscription and acceptance; or to protect the rights, property, or safety of ProgramU LLC, our users, or the public.

7. Data Security

Your data is stored in Google Firebase (database and private file storage), which employs industry-standard security practices:

• TLS encryption for all data in transit
• Encryption at rest for stored data, including your voice recordings
• Firebase Security Rules restricting every read and write to your authenticated account

We minimize logging of personal content: your dream text, recordings, and conversation content are never written to operational logs or crash reports.

No system is perfectly secure, and we cannot guarantee absolute security. But we apply modern best practices and continuously work to improve our safeguards, because of what this data is.

8. Your Rights

Access and Correction:
• Update your profile, journal entries, and settings at any time within the app
• Export your complete journal at any time in the app (Profile → Storage & export): every dream as text and JSON, your Kairos conversations, and all your recordings in one archive, or a text-only version, or a printable PDF dream log. You may also request a copy by emailing support@programu.app

Deletion:
You can permanently delete your account and all associated data at any time, in the app (Profile → Delete account) or by emailing support@programu.app. Account deletion permanently wipes your journal (text, transcripts, photos and voice recordings), Drift conversation history and memory, shared copies of your dreams in a partner space, reports you sent, computed patterns, preferences, and your authentication account. Most deletions complete within minutes; in rare cases, full deletion may take up to 30 days.

Deleting your account cannot cancel a subscription bought through the App Store or Google Play. Cancel it in your Apple or Google Play subscription settings first, or it will keep renewing.

Data Portability:
The in-app export above is yours to run whenever you like; the archive is placed in your private storage and handed to you as a file you can save or send anywhere.

Right to Object:
You may object to certain processing activities by contacting support@programu.app.

More Rights Where You Live:
If the law where you live gives you more rights or a shorter deadline, we follow it; Section 16 lists them by country. We answer requests within 30 days, or sooner where your law requires (for example, 20 working days in New Zealand and 21 days in Malaysia). We may need to confirm your identity before acting on a request.

9. Data Retention

Your data is retained for as long as your account remains active. We do not automatically delete inactive accounts; your journal remains yours until you delete it.

What gets deleted when you delete your account:
• Firebase Auth account, your user document, and all subcollections (dreams, conversations and memory, reality checks, preferences, computed patterns, reports, consent records)
• Every voice recording and photo in your private storage
• Shared copies of your dreams in a partner space, and the link to your partner
• Your RevenueCat subscriber record
• On-device data (preferences, local caches, profile photo) is removed when you delete the app

After account deletion, data may persist briefly at sub-processors under their own retention policies:
• Firestore automatic backups (managed by Google Cloud): up to 35 days
• Google Cloud operational logs: about 30 days
• RevenueCat and the App Store or Google Play: transaction history retained per payment-processor compliance requirements (typically 7 years for tax and audit purposes), at the Apple Account or Google Account level for the stores
• Sentry error reports: retained per Sentry's default policy (about 90 days); not retroactively deleted
• Anthropic API request and response data: up to about 30 days for abuse detection under Anthropic's terms
• Inworld and the routed model provider: conversation data per their own platform retention policies (Section 13)

What ProgramU keeps after deletion:
• A minimal deletion record: your account's internal ID and the dates the deletion was requested and completed. It contains no personal details or content, and is kept indefinitely so a deleted account is never billed or recreated.
• A deletion audit record: the same dates and a checklist of which data categories were removed, kept as proof the deletion happened. It contains none of your content.
• Emails you sent to our support inbox, kept separately so we can answer them. Email support@programu.app if you want them deleted.

None of this retained data is used to contact you or re-identify you after deletion.

10. Children's Privacy

Liminal is intended for adults 18 years of age and older (or the age of majority where you live, if higher). Age is confirmed by your attestation during onboarding consent.

ProgramU LLC does not knowingly collect personal information from anyone under 18. If we become aware that we have, we will delete that information immediately. If you are a parent or guardian who believes we have collected data from a minor, contact support@programu.app.

11. Where We Operate and International Transfers

ProgramU LLC is organized in the State of Wyoming, United States. Liminal is offered in the countries where it is available on the App Store or Google Play. It is not offered in mainland China, Russia, or countries and regions subject to comprehensive United States sanctions.

Where Your Information Is Stored:
We store your information in the United States (Google Cloud, region us-central1). Our sub-processors (Section 3) process it in the United States and in other countries where they operate. If you live outside the United States, your personal information is transferred to the United States, where privacy laws may differ from those where you live, and where it may be accessible to courts, law enforcement and national security authorities under U.S. law.

How We Protect Transfers:
We transfer your information only as needed to provide Liminal. Our sub-processors are bound by written agreements that require them to protect it to a standard comparable to this Policy. Where the law of your country relies on consent for transfers abroad, we ask for your consent in the app. For people in Quebec, we assessed these transfers before making them, as Quebec law requires. For information from the European Economic Area, Switzerland and the United Kingdom, we rely on the safeguards in our providers' data processing terms, such as the European Commission's standard contractual clauses (with the UK addendum and the Swiss adjustments), or on the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where the provider is certified.

We do not sell your personal information.

12. California and Other State Residents

Residents of certain U.S. states have additional rights under applicable privacy laws, including the right to know what personal information we collect, to delete it, to correct it, to opt out of its sale or sharing (Liminal does not sell or share personal information), to limit the use of sensitive personal information, and to non-discrimination for exercising these rights.

To exercise any of these rights, email support@programu.app. We will respond within the timeframe required by applicable law (typically 45 days).

ProgramU LLC does not sell or share personal information for cross-context behavioral advertising.

Consumer Health Data (Washington and Nevada):
If you live in Washington or Nevada, our Consumer Health Data Privacy Policy, in the app at Profile → Consumer Health Data Privacy and at liminal-dreams.web.app/consumer-health-data, explains what health-related information we collect, why, who receives it, and how to use your rights, including how to appeal our decision on a request.

13. Drift — AI Dream Conversations (Voice and Text) — Data Flow

Drift is where you talk with Kairos, Liminal's AI dream specialist. This section describes exactly how conversation data moves.

Live voice data flow. When you talk with Kairos, the conversation runs on Inworld's realtime agent API in three steps, in real time:

1. Your spoken audio is transmitted to Inworld and transcribed to text (speech-to-text)
2. The transcribed text, together with context from your own dream journal so Drift can reflect your patterns back, goes to a fast language model reached through Inworld's model router, which generates the reply
3. The reply is synthesized into Kairos's voice (text-to-speech) and played to you

In text mode, only step 2 applies.

Your live voice audio exists in transit only. It is processed to be transcribed and is not stored by ProgramU LLC. It is NOT used to create a voiceprint and NOT used to train any model. (Your dream voice recordings from the journal are different: those you chose to record, and they are stored privately for you; see Section 2.)

The model behind Drift, precisely: replies are generated by Google's Gemini model, reached through Inworld's routing infrastructure. Because Inworld acts as a ROUTER, if Gemini is unavailable or fails, Inworld may automatically route the request to a comparable third-party model, which is outside ProgramU LLC's direct control. Anthropic's Claude does NOT power live Drift conversation; it is used for the background dream intelligence described in Section 3 and for the any-language crisis check.

Journal context. Kairos knows your dreams because your own journal is injected as context: a list of every dream's date, title, and detected signs, the summaries or text of your recent dreams and of any dreams that match what you are talking about, and the patterns computed from your journal. That context exists to serve you and is never shared beyond the AI processing described here. You can switch it off in About Kairos.

Conversation memory. After conversations, a short structured summary (a few sentences: what was discussed, what you're practicing, open threads) is generated and folded into one running memory document in your account, so Kairos can remember your work across conversations. It is yours: the controls live in the app (About Kairos), turning memory off stops new writing and removes it from her context, and the document is erased with your account.

Your controls. In About Kairos you can switch off, independently: her access to your journal, her memory of your conversations, and her access to photographed handwriting. Off is enforced server-side; the data simply is not loaded into her context.

Kairos's language. Kairos can talk with you in the languages the app offers. The rest of Liminal is in English.

Safety. Drift is an AI dream specialist, not a therapist, and it does not process crises. Every message and every call turn goes through our crisis check: an instant English pattern check, and, for anything not clearly in English, an AI check that reads any language (Anthropic's Claude, with Google's Gemini as backup). If a conversation indicates you may be in danger, the app pauses the conversation and routes you to the crisis lines for your country. A minimal internal alert (your user ID and a category only, never the content of what you said) may notify our team so we can review that our safety systems worked.

Reported replies. If you report something Kairos said, we store the reported text, where it came from and the time under your account, and a person at ProgramU reads it. We are told by email that a report arrived; the email does not contain what was reported. Reports are deleted with your account.

Consent flow. Liminal's onboarding consent covers the AI nature of conversations, data handling, safe listening, and the not-medical-care acknowledgment. Your acceptance (timestamp, version and the language you chose) is stored under your account. You will be asked to re-accept when these documents materially change. Every chat and every call also shows a line reminding you that Kairos is an AI, not a person, and can make mistakes.

Zero Data Retention status, honestly: ProgramU LLC does not currently have a Zero Data Retention agreement with Inworld, so Inworld and the routed model provider may retain conversation data for some period under their own platform policies (see inworld.ai/privacy). ZDR is offered on higher service tiers and we intend to adopt it as we scale, but it is not in place today. Treat Drift conversation content as data processed by third parties under those terms.

Transcript storage: after a voice call ends, a text transcript (what was said by you and by Kairos, with timestamps and a short AI-generated title) is stored in your private account so you can revisit conversations in the in-app history. Raw call audio is never stored on our servers. Transcripts and chat threads are deleted when you delete your account; per-conversation deletion from within the app is on our roadmap. Until then, contact support@programu.app to remove a specific conversation.

14. Changes to This Policy

We may update this Privacy Policy as Liminal evolves. When we make material changes, we will notify you in the app and ask you to review and re-accept before continuing; quiet edits to the rules are not how we operate. The "Last Updated" date at the top always reflects the current version, and the current version is always in the app at Profile → Privacy Policy and at liminal-dreams.web.app/privacy. For minor changes (such as typo fixes), we may update without requiring re-acceptance.

15. Contact Us

For privacy questions, data requests, or to exercise your rights:

• Privacy and data requests: support@programu.app
• Safety concerns: support@programu.app
• General support: support@programu.app
• Phone: +1 615-669-4644

Privacy Officer:
Zachary Fleshman, Founder — privacy@programu.app. This person is our privacy officer in Canada, Australia and New Zealand; the person in charge of the protection of personal information in Quebec; our data protection officer in Singapore and the Philippines; our grievance officer in India; and our information officer in South Africa.

Mailing address:

ProgramU LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States

Thank you for trusting us with something this personal. We take that trust seriously.
— The Liminal Team

16. Your Rights by Country

Everyone Outside the United States:
Wherever you live, you can ask us for a copy of your personal information, correct it, delete it, and withdraw any consent you gave, and you can complain to your data protection authority. The law where you live may give you more; the country sections below cover the countries whose laws we have mapped in detail. To use any of these rights, email support@programu.app. We would appreciate the chance to put things right first.

Canada:
You can access and correct your personal information and withdraw your consent. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Quebec:
You can also ask for the computerized personal information you gave us in a structured, commonly used technological format; the in-app export (Section 8) provides it. We use your country only for the purposes in Section 2, never to track your location. You can complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Australia:
You can access and correct your personal information under the Australian Privacy Principles. Your information is disclosed to recipients in the United States and in the other countries where our sub-processors operate (Section 3). You can complain to us first, and then to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand:
You can access and correct your personal information under the Privacy Act 2020, and we answer within 20 working days. If we collect information about you from someone else (for example, your subscription status from Apple or Google, or a dream your partner shares with you), we will make sure you know. You can complain to the Office of the Privacy Commissioner (privacy.org.nz).

Malaysia:
You can access your personal data (we answer within 21 days) and correct it, withdraw your consent, ask us to stop processing that is likely to cause you damage or distress, and ask us to stop using your data for direct marketing. You can complain to the Personal Data Protection Commissioner (pdp.gov.my).

Singapore:
You can access your personal data and ask how it has been used or disclosed in the past year, correct it, and withdraw your consent. Our data protection officer is listed in Section 15. You can complain to the Personal Data Protection Commission (pdpc.gov.sg).

India:
You can ask for a summary of your personal data and how we process it; have it corrected, completed, updated or erased; withdraw your consent as easily as you gave it; and nominate someone to exercise your rights if you die or cannot act. You can ask for this Policy in English or in any language listed in the Eighth Schedule to the Constitution of India. Our grievance officer (Section 15) acknowledges complaints within 48 hours and resolves them within one month. After using our grievance process, you can complain to the Data Protection Board of India.

South Africa:
You can access, correct and delete your personal information, object to its processing, withdraw your consent, and refuse direct marketing. You can complain to the Information Regulator (inforegulator.org.za).

Philippines:
You have the rights to be informed, to access, to object, to correct, to erasure or blocking, to data portability and to damages. You can complain to the National Privacy Commission (privacy.gov.ph).

European Economic Area, Switzerland and the United Kingdom:
ProgramU LLC is the controller of your personal data. We use it on these legal bases: to provide the Service you signed up for (contract); with your explicit consent, for the health-related information you choose to record in your journal and share with Kairos (you can withdraw consent at any time by deleting the content or your account); for our legitimate interests in keeping the Service safe, secure and working, and in improving it; and to comply with the law. You can access, correct and delete your personal data, restrict or object to its processing, receive it in a portable format (the in-app export), and withdraw consent at any time. Liminal works without an account; to save your journal beyond one phone you need to give us an email address (or sign in with Apple or Google). Everything else is up to you, though some features need what you write for them (a reading needs a dream and your read of it, for example). We do not make decisions with legal or similarly significant effects about you based solely on automated processing, and a person can review our automated safety checks (Section 5). Your data is transferred to the United States as described in Section 11. You can complain to the data protection authority where you live or work, to the Federal Data Protection and Information Commissioner in Switzerland (edoeb.admin.ch), or to the Information Commissioner's Office in the United Kingdom (ico.org.uk).

Data Breaches:
If a breach of your personal information puts you at real risk of significant harm, we will tell you, and the regulators your law requires, within the time it requires.

By continuing to use Liminal, you acknowledge that you have read and understood this Privacy Policy.