Privacy Policy

Artiol ID (id.artiol.app) is one account for the Artiol apps: Lattice, PolyCal, BackPocket, and later CommonPlace.

What Artiol ID keeps

• Your email and sign-in details.
• The handle and name you choose.
• The profile details you add.
• Your comfort and access settings, which are needs — never conditions or diagnoses.
• Which apps you have connected and exactly what each may see.
• The people you have linked with through private invitation links.
• Who you have blocked.
• Which apps you have access to.

What it cannot read

Your sealed private details. They are locked with your passphrase (or your device’s fingerprint, face, or key) on your own device before they leave it. We store only the locked copy and cannot open it.

Apps see only what you allow, detail by detail, and you can take any app’s access back at any time in Artiol ID → Keys. An app’s sign-in pass does not carry your email.

Nobody can find you by your email, phone number, name, or handle. People are linked only when one of you sends a private link and the other accepts it.

On your device only

• Lattice keeps your map on your device. It leaves the device only as a locked copy, and only if you turn that on; we cannot read that copy.
• Your Lattice health record never leaves your device.
• BackPocket works without an account.

Deleting your Artiol ID removes your account and what you own in every Artiol app at once. You can also download everything first, as one file, in Artiol ID → Your data.

Backups: deleted information stays in our backups for [backup window — to be confirmed] before it is gone.

Legal requests: we can only ever hand over what our servers can read. Sealed details and Lattice’s locked copies cannot be read by us. [final wording pending legal review]

Who processes data for us

• Supabase — the database and sign-in.
• Vercel — hosting.

Neither may use your data for their own purposes.

Lattice and PolyCal can connect to your Google Calendar if you choose to.

What we access, and only when you turn on the feature that needs it

• When you are busy (free/busy times), to work out your free time. This is asked for when you press “Connect Google Calendar.”
• The titles of events on your own calendar, only if you turn on “Show my calendar.”
• Adding an event to your calendar, only when you confirm that change.

How it is used: only to show your own free time and calendar to you, and, if you choose, the free times you decide to share with people you are linked with. Never for advertising, never sold, never used to train AI models, and never shared with anyone else.

Where it is kept: the access Google gives lasts about an hour and stays in your browser. Your calendar is read in your browser; it is not stored on Artiol’s servers. Free time you choose to share is stored as time ranges only, with no event titles.

Taking it back: press “Disconnect Google Calendar” in the app, or remove Artiol at myaccount.google.com/permissions.

Artiol’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you apply to test a pre-release app, we collect some additional information. This is separate from using a released app.

Your Google account email is shared with Google Play for the sole purpose of enrolling you in the test. We do not use beta program data for marketing. Pre-release builds may collect more diagnostic information than released versions; where that is true, we say so in the app. You can leave the program at any time by telling us, and we will remove you and delete your program data on request.

We use what we collect to:

• Give you access to your account and the features you have paid for
• Deliver and support our products
• Fix bugs and crashes
• Understand which features are used, so we know what to build and improve
• Send transactional messages: receipts, password resets, beta instructions, and policy-change notices
• Run the beta testing program and meet our legal obligations

What we do not do

• We do not sell your personal data, under any definition, including the broad definitions in California and other US state privacy laws
• We do not share your data with advertisers or data brokers
• We do not use your creative work to train machine learning models
• We do not track you across other apps or websites
• We do not send marketing email unless you ask us to

The third point deserves saying plainly: the music you make in our apps is yours. We do not claim rights in it, and we do not feed it into anything.

These companies process data on our behalf, or receive data when you choose to send it. Each has its own privacy policy.

Artiol ID, Lattice, PolyCal, and BackPocket on the web use no analytics, no crash reporting services, and no third-party scripts.

We choose providers who process data for us under contract, as service providers, rather than for their own purposes. Adding a new provider that handles personal data means updating this table before it goes live.

Purchase records are the one category we cannot delete on request before the retention period ends. Everything else goes.

You can ask us to:

• Show you what personal data we hold about you
• Correct anything that is wrong
• Delete your account and your data
• Export a copy of your data in a portable format
• Stop or restrict how we process your data
• Opt out of analytics, through the setting in the app

We will not treat you differently for exercising any of these.

Deleting your account

You can request deletion of your account and associated data at artioltechnology.com/delete-account. That page works whether or not you still have an app installed, and whether or not you can sign in. If you have an Artiol website or beta-portal account, you can also delete it from your account settings. The MIDI Sketch app does not create an account; uninstalling it removes the content stored on your device, and you can use the deletion page to request removal of any remaining data tied to your use of the app (such as analytics identifiers), subject to the retention periods above. When you delete your account we remove your profile, your beta program records, and your analytics identifiers. Purchase records are retained as described above. Deletion is completed within 30 days.

State privacy rights

Residents of California, Colorado, Connecticut, Virginia and other US states with comprehensive privacy laws have the rights listed above. We do not sell or share personal information as those terms are defined, and we do not process it for targeted advertising or profiling. To exercise any right, email admin@dynamic-arts.net. We respond within 30 days and ask only for what is necessary to verify your identity.

Our products are not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we delete it. If you believe a child has given us personal information, email admin@dynamic-arts.net and we will remove it.

We encrypt data in transit and at rest, restrict access to the people who need it, and use row-level security so one account cannot reach another’s data. No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

We are based in the United States and our providers process data in the United States. If you use our products from outside the US, your data is transferred there. We rely on standard contractual protections with our providers for those transfers.

We update this policy when our products change. For changes that materially affect how we handle your data, we give notice before they take effect — by email to registered users, and in the app where it applies. Continuing to use our products after that date means the updated policy applies.

Privacy: admin@dynamic-arts.net · General: artioltechnology.com/contact

Dynamic Arts, LLC d/b/a Artiol Technology
Baltimore, MD, United States