Privacy Policy.

Who We Are

Triban Online Group is the legal entity and data controller responsible for Infinette AI. Triban Online Group operates the Infinette Hub brand under which Infinette AI is published.

KVK number: 93458649

Registered office: Villafloraweg 1, 5928 SZ Venlo, Netherlands

Email: hello@infinettehub.com

When this policy refers to "we", "us", or "our", it means Triban Online Group operating Infinette AI. For data protection inquiries, contact hello@infinettehub.com.

Age Requirement

Infinette AI is built for adults. You must be at least 18 years old to create an account and use the service.

We do not knowingly collect personal data from anyone under 18.

If we learn that an account belongs to someone under 18, we will delete the account and its data.

If you are a parent or guardian and believe a child has created an account, contact hello@infinettehub.com and it will be removed.

What Information We Collect

We collect information you give us directly and information generated through your use of our service.

Information you provide:

• Full name and email address when you create an account
• Password, stored securely and encrypted, we never see it in plain text
• Messages and conversations you have with Ate Nette
• Journal entries you write within the app
• Reminders and personal notes you create
• Payment information, processed securely by Stripe, we do not store your card details

Information collected automatically:

• Basic usage data such as which features you use and how often
• Browser type and device information
• IP address and approximate location at country level only

Health and wellness data you choose to log: You may optionally log personal wellness information including sleep, mood, energy levels, weight, water intake, habits and daily health notes. This data is stored securely in your personal account and is never shared, sold, or used for any purpose other than displaying it back to you inside the app. It is never used for employment, insurance, or eligibility decisions.

Voice input: When you use the microphone feature, your spoken words are converted to text and sent to Ate Nette as a message. We do not store raw audio recordings.

Health Data Declaration

We do not use Android Health Connect APIs or body sensor permissions. All health and wellness data in the Tracker is entered manually by you. We do not access, read or sync data from your device, sensors or any external health application.

How We Use Your Information

We use your information only to provide and improve the Infinette AI service. Specifically:

• To create and manage your account
• To power your conversations with Ate Nette
• To save your journal entries and reminders
• To process payments for your subscription
• To send you important account and service emails
• To improve the app using anonymous usage patterns, such as which features are opened and how often, never the contents of your journals, conversations or trackers

We do not sell your personal data. We do not use your data for advertising. Your conversations with Ate Nette are private and not used for any other purpose.

Your journal entries, conversations and tracker logs are yours, and nobody at Infinette AI reads them. Your words are sent to the AI providers listed in the How Your Data Is Protected section for the sole purpose of letting Ate answer you in the moment, and each of those providers is bound by a data processing agreement. Neither Infinette AI nor those providers use your content to train AI models.

Legal Basis for Processing (GDPR)

As we operate from the Netherlands, we comply with the General Data Protection Regulation (GDPR). Our legal bases for processing your data are:

• Contract performance, to provide the service you signed up for
• Legitimate interests, to improve and secure the service
• Legal obligation, where required by Dutch or EU law
• Consent, where you have explicitly agreed, such as marketing emails

How Your Data Is Protected

Your privacy matters deeply to us. Infinette AI runs on a small number of trusted service providers, each bound by strict data processing agreements. They act only on our behalf and never use your data for their own purposes.

The subprocessors include Anthropic for AI conversation processing inside Ate, Supabase for the user account database, chat persistence, journal entries and app data storage, Stripe for payment processing and subscription management, and MailerLite for transactional and brand email sends. Netlify handles website hosting and serverless function infrastructure. ElevenLabs provides voice synthesis for voice features, OpenAI provides voice transcription, and Perplexity provides real-time web search inside Ate's chat for current information. Google provides analytics and OAuth for Calendar integration, and Zoho hosts brand email at hello@infinettehub.com for inbound customer support communications.

Browser push notifications (VAPID): Push notifications are a web browser feature only and are not available in the Infinette AI Android app. On the web, push delivery uses the W3C VAPID protocol and is handled directly by your own browser vendor (Apple, Google, Microsoft, Mozilla) through their own push services. No third-party processor sits between Infinette AI and your browser for push delivery. You can disable push notifications at any time through your browser settings.

When you connect your Google Calendar, we access your event titles, dates, times and descriptions only to display your schedule and power your daily briefing with Ate Nette. We sync automatically every 30 minutes while connected. We do not sell, share, or use your calendar data for advertising or any purpose beyond displaying it to you. You can disconnect at any time from Settings inside the app or directly from your Google Account at myaccount.google.com/permissions. Our use of Google Calendar data complies with the Google API Services User Data Policy including the Limited Use requirements.

Every provider on this list was chosen carefully. Your conversations, your trackers, your plans, your life inside Infinette AI stays yours.

Where Your Data Is Processed

Infinette AI is built and run from the Netherlands, and your account, your chats and your journal entries live on servers here in Western Europe.

Some of the tools that help Ate do her work are run by companies based outside Europe, mostly in the United States. When your data travels to them, it travels protected. Every one of them is bound by a data processing agreement and by the European Commission's Standard Contractual Clauses, which are the safeguards European law requires. Your data stays yours, wherever it is being handled.

Data Retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by Dutch or EU law to retain it longer.

Your journal entries, reminders, and conversation history are deleted immediately upon account deletion.

For step-by-step instructions on how to delete your account, including specific data deletion options, see our dedicated Delete Account page.

Your Rights Under GDPR

As a resident of the EU or EEA you have the following rights regarding your personal data:

• Right of access, request a copy of the data we hold about you
• Right to rectification, ask us to correct inaccurate data
• Right to erasure, ask us to delete your data, the right to be forgotten
• Right to restriction, ask us to limit how we process your data
• Right to data portability, receive your data in a machine-readable format
• Right to object, object to certain types of processing
• Right to withdraw consent, where processing is based on your consent

To exercise any of these rights email us at hello@infinettehub.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl.

Cookies

We use cookies and similar technologies to keep you logged in and to understand how the service is used. For full details please read our Cookie Policy.

Security

We take the security of your data seriously. We use industry-standard encryption, secure authentication via Supabase, and HTTPS across all pages. No system is completely risk-free so we encourage you to use a strong unique password and keep it safe.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do we will update the date at the top of this page and notify you by email if the changes are significant. Continued use of Infinette AI after changes means you accept the updated policy.