1. Personal data we collect
- Account data: your name, email address and profile picture when you sign in (for example with Google), and your language and theme preferences.
- Content you provide: the tasks and messages you send to AI agents, files and images you upload, agent settings, and any notes about yourself you choose to add.
- Connected services: if you connect a Slack, Telegram or Discord bot, or an MCP server, we store the tokens and settings needed to run it. Tokens are stored encrypted.
- Usage and device data: how you use the Services (for example credits used and features opened), device type, app version, IP address and browser information.
- Communications: messages you send to our support team.
2. How we use your data
- To provide the Services: run your tasks with the AI agents you choose, keep your tasks in sync across web and mobile, and show your history.
- To operate your account, credits and plan, and to respond to your requests.
- To keep the Services secure, prevent abuse and fix problems.
- To improve the Services, using aggregated or de-identified information where possible.
- To meet legal and regulatory obligations.
- We do not use the content of your tasks to train third-party AI models for their own purposes.
3. AI processing
- To answer your tasks, the content you send may be processed by AI model providers that we work with. They process it on our behalf to generate a response.
- AI output can be inaccurate. Please review important results before relying on them.
6. Data retention
- We keep personal data for as long as your account is active or as needed to provide the Services, and afterwards only as long as needed for legal, accounting or security purposes.
- You can delete tasks at any time. When you close your account, we delete or anonymise your data within a reasonable period, unless we must keep it by law.
7. Data security
- We use reasonable security arrangements, including encryption of stored credentials and bot tokens, access controls and encrypted connections where available.
- No system is completely secure, so we cannot guarantee absolute security of data sent over the internet.
8. Your rights
- Under the PDPA you may ask to access the personal data we hold about you, ask us to correct it, and withdraw consent to its collection, use or disclosure.
- Withdrawing consent may mean we can no longer provide some or all of the Services.
- To make a request, email jojosam@fynixtech.sg. We will respond within a reasonable time.
9. Children’s privacy
The Services are not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.
10. International data transfers
Our service providers may process data outside Singapore. When we transfer personal data overseas, we take steps to ensure it receives a standard of protection comparable to the PDPA.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the date above. If the changes are significant, we will let you know in the app or by email.
12. Contact us
Questions about this policy or your personal data? Email our Data Protection Officer at jojosam@fynixtech.sg.