Privacy Policy

Collectivus LLC, doing business as "Collectivus" ("Collectivus," "we," "our," or "us"), is a limited liability company registered in the State of Texas, United States of America. We operate the Collectivus website, apps and related services (the "Service").

For questions, requests, or concerns about this Privacy Policy, contact us.

Information you give us

• Waitlist — your email address, and your name and phone number if you give them.
• Account — your email address, and your name and phone number if you give them; when you signed in and last used the website; and, if you ask to test our apps, your Apple account's email address.
• Messages — what you write when you send us feedback or an enquiry, and the contact and other details you give with it. Feedback from our apps also carries the Loop, the device and the app version shown before you send.

You need an email address to join the waitlist or create an account.

Information collected automatically

• Usage — which parts of the Service you use and for how long, and how Loops and the objects in them, including a sponsor's, are seen and used.
• Device and connection — device type, operating system, browser, screen resolution and IP address. We do not keep your IP address with usage reports.
• Logs and errors — server logs, error reports and timestamps.
• Codes and short links — the time, the code and the kind of browser when you scan one of our codes or open one of our short links. If you then join the waitlist, the code is kept with your sign-up.
• A random number in your browser — our website may keep one, until you clear your browser's data for our website, to count returning visitors. We do not link it to your name, email address or account.

Information from others

• Cloudflare — aggregated, anonymized data about how people find and use our website.
• Apple — your TestFlight activity, if you test our apps (see Section 5).

We collect information in three ways:

Directly from you — when you join the waitlist, create an account, ask to test our apps, send us feedback, or contact us.

Automatically — through cookies and similar technologies when you use the Service (see Section 6), and through our apps (see "Our Apps").

From our service providers — as Sections 2 and 5 describe.

We use the information we collect:

• To provide the Service — your account and sign-in, delivering Loops, and testing our apps.
• To reach you — waitlist and early access news by email, and one text message when early access opens, where you opted in. We do not send other marketing text messages without separate consent.
• To answer you — reading and replying to the feedback and enquiries you send us.
• To improve the Service — understanding how it is used and fixing problems.
• To keep the Service safe and lawful — enforcing our Terms of Use, protecting the Service, and meeting legal obligations.

We do not sell your personal information or the data our apps collect. We do not use either for targeted advertising or cross-context behavioral advertising.

We may share aggregated, anonymized audience data that cannot identify any individual with brand partners, for sponsorship and partnership purposes.

We rely on these service providers to run the Service. Each processes personal data on our behalf under agreements that restrict its use of that data and require it to protect that data. Each has its own privacy policy.

• Amazon Web Services — Hosts our website and our apps' content; stores waitlist entries, accounts, enquiries and usage reports; and sends the emails we send you and the feedback you send us. Data is stored in the United States.
  Privacy Policy: https://aws.amazon.com/privacy/
• Apple — If we invite you to test our apps through TestFlight, we give Apple your email address so it can send the invitation, or your Apple account's email address if you ask from your account on our website. Apple then shows us your TestFlight activity and device details, including any feedback you send, with your email address and, if Apple has it, your name. Accepting an invitation is covered by Apple's privacy policy and TestFlight's terms. Leaving our email list or deleting your account does not remove you from TestFlight; select "Stop Testing" in TestFlight to do that. Data may be processed in the United States or wherever else Apple operates.
  Privacy Policy: https://www.apple.com/legal/privacy/
• Cloudflare — Network, security and website analytics services, and logs of events on its network. Data may be processed in the United States or Europe.
  Trust Hub: https://www.cloudflare.com/trust-hub/
• Google — Hosts our email, including the feedback and enquiries that reach us and anything you write to us. Data may be processed in the United States or wherever else Google operates.
  Privacy Policy: https://policies.google.com/privacy
• Sentry (Functional Software, Inc.) — Receives crash reports and usage events from our apps, none of them linked to a person. Data is stored in the United States.
  Privacy Policy: https://sentry.io/privacy/

We use cookies and similar technologies to keep you signed in, remember your settings, and count returning visitors (see Section 2). We do not currently use advertising cookies, retargeting pixels, or other tracking technologies for behavioral advertising, and we do not respond to browser "Do Not Track" signals.

You can manage cookies through your browser settings. Disabling the ones that keep you signed in will prevent the Service from working correctly.

Everyone

• Access, correction and deletion — You may ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it.
• Deleting your account — Use your account page, or contact us.
• Leaving our email list — Use the form at https://collectivus.com/early-access#unsubscribe or the leave link in our marketing emails. Leaving deletes your waitlist entry, and any phone number in it, from our database. It does not delete your account.
• Stopping text messages — Reply STOP to any text message we send, or contact us.
• Withdrawing consent — Where we rely on your consent, you may withdraw it at any time by contacting us.

To exercise any of these rights, contact us. We will respond within the timeframe required by applicable law. If we refuse a request, you may appeal by contacting us.

California residents — Under the California Consumer Privacy Act, as amended, you also have the right to know what personal information we have collected about you, including its categories, the purposes for collecting it, and the third parties who received it; to delete it, subject to certain exceptions; to correct it; to opt out of its sale or sharing; and not to be discriminated against for using these rights. We do not sell personal information or share it for cross-context behavioral advertising. To submit a request, contact us. We will verify your identity first, and you may designate an authorized agent to make a request for you.

Texas residents — Under the Texas Data Privacy and Security Act, you also have the right to confirm whether we process your personal data, access it, correct it, delete it, obtain a portable copy of it, and opt out of targeted advertising, the sale of personal data, and profiling. We do not sell personal data or process it for targeted advertising. To submit a request, contact us.

Section 5 says where each service stores your information.

We use reasonable technical and organizational measures to protect personal information, including encryption in transit and access controls. No system can guarantee complete security. You are responsible for keeping access to your account secure. If you believe your account has been compromised, contact us immediately.

Data retention — We keep personal information for as long as your account is active or as long as necessary for the purposes in this policy. In particular:

• Waitlist entries — until you leave the list or delete your account.
• Your Apple account's email address — until you delete your account or ask us to remove it.
• Usage reports and counts of codes and short links — 395 days. Totals made from them, which contain no device's or browser's number, may be kept longer.
• Crash reports and usage events at Sentry — 30 days.
• Messages — until we no longer need them or you ask us to delete them.

When you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required by law or necessary for legitimate business purposes such as fraud prevention. Deleting an account does not delete messages you sent us; contact us to have those deleted too.

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has given us personal information, we will take prompt steps to delete it.

If you are a parent or guardian and believe that a child under 13 has given us personal information, contact us and we will respond promptly.

If you are in the European Economic Area (EEA) or the United Kingdom, this section also applies.

Data controller — Collectivus LLC, doing business as Collectivus, is the data controller. Contact us.

Lawful bases — Under Article 6 of the GDPR, we process your personal information on these bases:

• Contract — to provide your account and the Service.
• Legitimate interests — to improve the Service, answer messages you send us, keep the Service secure, and send service updates.
• Consent — for marketing email and text messages, for giving your email address to Apple for a TestFlight invitation, and for cookies where consent is required. Withdrawing consent does not affect processing before you withdrew it.

Your rights — Subject to the law's conditions, you may access, correct, erase or port your personal data, restrict how we process it, and withdraw consent at any time. To exercise any of these rights, contact us. We will respond within 30 days (one month), or longer where the law allows.

Your right to object — You may object at any time to processing based on legitimate interests, including for direct marketing.

Complaints — You may complain to your local data protection authority. In the EU, find yours at https://edpb.europa.eu/about-edpb/about-edpb/members_en. In the UK, it is the Information Commissioner's Office: https://ico.org.uk.

International transfers — Your personal data is sent outside the EEA and UK to the services in Section 5. Amazon Web Services, Cloudflare and Sentry incorporate the European Commission's Standard Contractual Clauses into their data processing addenda. Apple relies on those clauses, as its privacy policy states. Google relies on them, or another transfer solution its Cloud Data Processing Addendum allows. You may contact us to request a copy of these safeguards.

This section covers the Collectivus apps for iPhone, iPad, Mac and Apple TV ("the apps"). They collect the same things on each device.

No accounts. You do not sign in or give us your name, email address or phone number to use the apps.

Usage events. The apps tell us when they are opened, on what kind of device; which Loops are opened and for how long; and whether downloads and the Loop Pool load. We use these events to count devices, see which Loops are used, and find failures.

Crash reports. If an app crashes, it sends Sentry a report with technical details of the crash, your device's model and settings (such as operating system version, language, region and time zone), and the app's activity just before the crash. We use these reports to fix crashes. Sentry also creates a random number for each installation, to measure sessions that end without a crash.

Test copies. Copies we distribute through Apple's TestFlight also create a random number for each installation, to count returning devices, and report how each visit to a Loop goes: whether the Loop is showing, whether its sound is on, whether someone appears to be there, and how its objects, including a sponsor's, are seen and used. That includes whether a sponsor's code or link was shown or opened, and whether you used the Loop's photo or share button, but never the photo. The App Store copy does not do any of this. Neither random number is an advertising identifier.

IP addresses. To deliver Loops and receive reports, our servers receive your device's IP address. They do not keep it, and we do not use it to identify or locate you.

On your device. Your downloaded Loops, a saved copy of the Loop Pool, a few settings and the random numbers are saved on your device. Deleting the app removes all of them.

Feedback. The feedback form is part of our website, whether you open it in an app or on the site. Section 2 ("Messages") describes what it sends, and the rest of this section does not cover it.

No tracking. The apps do not track you across other companies' apps or websites.

Children. The apps are rated 13+ on the App Store (see Section 9).

Your choices. Because the apps have no accounts and nothing they send is linked to you, we cannot tell which data came from your device, so we cannot look it up or delete it. Deleting an app stops it sending anything. To ask about the apps' data, contact us.

We may update this Privacy Policy. When we make material changes, we will update the date at the top of this page. Where a change significantly affects how we use personal information you have already given us, we will notify you at the email address on your account before it takes effect.

Minor updates take effect on posting.

If you keep using the Service after an update, you accept the revised policy. If you do not agree to a material change, you may delete your account before it takes effect.

For privacy-related questions, requests, or concerns — including requests to access, correct, or delete your personal information — contact us at:

Collectivus LLC d/b/a Collectivus
[email protected]

We will acknowledge your request within a reasonable period and respond within the timeframe required by applicable law.