TECHRILOGY

Privacy Policy

Effective: May 19, 2026 · Last updated: October 23, 2026

This Privacy Policy explains how Intuitive Corporation, an Oregon corporation (“Intuitive,” “we,” “us,” or “our”), collects, uses, stores, and shares information when you use the Techrilogy service, also marketed as “Life Digital Planner” (the “Service”), including the AI assistants Echo and Astra, available at intuitiveldp.life.

By creating an account or otherwise using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.

1. Information we collect

1.1 Account information

When you create an account, we collect your email address, a hashed password (if you use email/password sign-in) or your provider-issued identifier (if you sign in with Google or Microsoft), and any optional profile information you provide such as a display name or profile photo.

1.2 Content you create in the Service

We store the content you create or save while using the Service, including:

• Conversations with Echo and Astra (your messages and the assistants’ responses)
• Tasks, goals, habits, milestones, journal entries, mood logs, and notes
• Calendar events and contacts you create directly inside the Service
• Files you upload or save via “Save to Files”
• Long-term memories the assistants extract from your conversations to provide continuity

1.3 Information from connected services (Google, Microsoft)

If you choose to connect your Google or Microsoft account, we receive OAuth access and refresh tokens that allow the Service to act on your behalf within the scopes you authorize. The data we access depends on the scopes granted:

• Google Gmail (send only). We use the https://www.googleapis.com/auth/gmail.send scope solely to send emails you have explicitly composed or approved inside Echo or Astra. We do not read your inbox, do not list messages, and do not store the bodies of sent emails beyond the conversation record in which you drafted them.
• Google sign-in identity. We use the openid and https://www.googleapis.com/auth/userinfo.email scopes only to confirm your Google account identifier and email address so we can link the connection to your Techrilogy account.
• What we do not access in Google. We do not request access to read your Gmail inbox, your Google Calendar, your contacts, or your Google Drive files. If we add any of these features in the future, we will update this policy first and ask for your separate consent through Google’s consent screen.
• Microsoft (Outlook). If you connect a Microsoft account, we use the Microsoft Graph delegated permissions User.Read, Mail.Send, Mail.Read, Calendars.Read, and offline_access. These let us identify your account, send Outlook mail you have explicitly composed or approved, show a read-only snapshot of your most recent messages (sender, subject, time, read/flag status, and a short preview) when you ask Echo or Astra to check your inbox, and read your Outlook calendar for scheduling context. We never delete, move, archive, or modify your Outlook messages or calendar events.

Google API Services User Data Policy. Techrilogy’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

1.4 Payment information

Paid subscriptions are processed by Stripe, Inc. We do not store your full card number, expiration date, or CVC on our servers. We retain only a Stripe customer ID, subscription status, plan, billing email, and the last four digits of the card associated with your subscription (provided to us by Stripe for display purposes). Stripe’s handling of your payment information is governed by Stripe’s privacy policy.

1.5 Usage and device information

We collect basic technical information necessary to operate the Service: IP address, user-agent string, approximate device type, timestamps of requests, and per-feature usage counters (for example, the number of assistant messages you have sent in a given billing period, used to enforce plan limits).

2. How we use your information

We use the information described above to:

• Provide, maintain, and improve the Service
• Generate responses from Echo and Astra by sending the relevant portion of your conversation, your saved memories, and (when explicitly requested) the contents of the files you have attached, to our AI subprocessors
• Authenticate you and secure your account
• Send transactional emails (account verification, password resets, billing receipts)
• Process subscription billing and prevent payment fraud
• Enforce our Terms of Service and detect abuse
• Comply with legal obligations

We do not sell your personal data. We do not use the content of your email messages, calendar events, conversations, documents, or files to train any generalized machine-learning model.

3. Subprocessors

We share data with the following third-party service providers (“subprocessors”) as needed to operate the Service. Each is contractually bound to use the data only to provide services to us.

• Supabase Inc. — primary database, file storage, and authentication. All user content is stored in a Supabase project hosted in the United States (us-west-2).
• Vercel Inc. — web hosting, edge serverless functions, and request logs.
• OpenAI, L.L.C. — large-language-model inference for Echo, Astra, and assistant features. We send only the messages and context necessary to answer your prompt. Per OpenAI’s API terms, content sent via the API is not used to train OpenAI models.
• ElevenLabs, Inc. — text-to-speech voice synthesis when you use Echo’s voice features.
• Stripe, Inc. — payment processing for paid subscriptions.
• Google LLC — only the portion of your data necessary to confirm your Google account and send Gmail messages you compose, per the OAuth scopes you grant.
• Microsoft Corporation — only the portion of your data necessary to send Outlook mail you compose, show your inbox snapshot, and read your Outlook calendar, if you connect a Microsoft account.

4. Limited use of Google user data

Consistent with the Google API Services User Data Policy — Limited Use Requirements :

• We use Google user data only to provide and improve user-facing features that are prominent in the Service.
• We do not transfer Google user data to others except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets (in which case we will require equivalent privacy protections from the recipient).
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless we have your affirmative agreement for specific messages, do so for security purposes (such as investigating abuse), to comply with applicable law, or where the data has been aggregated and anonymized for our internal operations.

5. Data security

All traffic to the Service is encrypted in transit using TLS 1.2 or higher. Your data at rest is encrypted by Supabase using AES-256. OAuth refresh tokens for Google and Microsoft are stored in a server-side table that is accessible only via Supabase service-role credentials inside our backend functions and is never exposed to client-side code. Access to production systems is limited to authorized personnel using multi-factor authentication.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to investigating and notifying you of any breach affecting your data without undue delay, as required by applicable law.

6. Data retention

We retain your account data for as long as your account remains active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required to comply with legal obligations (for example, billing records that must be kept for tax purposes), resolve disputes, or enforce our agreements. Backup copies are purged on our routine backup-rotation schedule, typically within 60 days.

You can revoke a connected Google or Microsoft account at any time from Workspace → Connections inside the Service, or directly from your Google Account permissions page or your Microsoft account security page. Revocation invalidates the tokens we hold and stops all future access immediately.

7. Your rights

Depending on where you live, you may have rights under data-protection laws such as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or comparable U.S. state laws. These may include the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data
• Object to or restrict certain processing
• Receive a portable copy of your data
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email us at intuitiveldp.life-help@outlook.com . We will respond within 30 days. We will not discriminate against you for exercising any of these rights.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International transfers

Intuitive Corporation is based in the United States, and the Service’s primary infrastructure is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Service you consent to this transfer.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version at intuitiveldp.life/privacy and update the “Effective” date above. Material changes will be announced inside the Service or by email to your account address before they take effect.

11. Contact us

Intuitive Corporation
Attn: Privacy
Oregon, United States
Email: intuitiveldp.life-help@outlook.com