Privacy Policy

Effective date: October 1, 2026 Last updated: October 1, 2026

This Privacy Policy explains how Helpm AI Inc. ("we," "us," or "our") collects, uses, shares, and protects personal information when you use Tutelox, including our website at tutelox.com, our emails and notifications, and related services (the "Service"). It also explains the choices and rights you have.

The short version:

• We use your birth details, the tasks and goals you share, and your feedback to generate your readings and briefs.
• We do not sell your birth details, tasks, notes, uploaded files, or Decision Brief content, and we never share them with advertising partners.
• We do not use your content to train AI models.
• We use advertising and analytics tools on our website. Under some state laws, this is considered "sharing" personal information for targeted advertising. You can opt out at any time on our Your Privacy Choices page, and we honor Global Privacy Control signals automatically.
• You can access, download, correct, or delete your data at any time.

---

1. Information We Collect

1.1 Information you give us

1.2 Information collected automatically

1.3 Information from third parties

• Calendar providers. If you connect a calendar (by subscription link or by signing in with a provider such as Google), we receive event titles, times, and descriptions for the relevant dates. See Section 2.3.
• Payment processor. Stripe tells us whether a payment succeeded, your subscription status, and limited card details.
• Advertising partners. Meta may provide us with aggregated reports about the performance of our ads. We do not receive your Meta profile information.

1.4 Information we do not want

Please do not submit government ID numbers, financial account numbers, passwords, medical records, or other people's personal information (including their birth details) unless you have their permission.

---

2. How We Use Information

2.1 To provide the Service, including to:

• Calculate your natal chart and daily transits from your birth details;
• Generate your daily, weekly, and on-demand content, including by sending relevant information to our AI model providers (Section 5);
• Send your daily brief, check-in reminders, weekly review, and other emails and notifications you have enabled;
• Process payments, manage subscriptions and credits, and send receipts;
• Provide customer support.

2.2 To improve and secure the Service, including to:

• Understand how people use the Service, measure what works, fix bugs, and test new features;
• Monitor content quality and AI costs;
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
• Identify messages indicating that a user may be in crisis, so that we can show crisis resources instead of generated content.

2.3 Google user data. If you connect a Google account, our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We use Google Calendar data only to show your events in the Service and to tailor your briefs; we do not use it for advertising, do not sell it, and do not use it to train AI models.

2.4 For marketing, including to:

• Measure and improve the effectiveness of our advertising (see Section 6);
• Send you marketing emails, only if you have opted in.

2.5 For legal reasons, including to comply with law, enforce our Terms, and protect the rights, safety, and property of our users, us, and others.

2.6 Aggregated and de-identified data. We may create aggregated or de-identified information that cannot reasonably be used to identify you (for example, "the average workday rating during a given week") and use it for any purpose, including publishing research. We will not attempt to re-identify de-identified data.

2.7 No AI training on your content. We do not use your birth details, tasks, notes, check-ins, uploaded files, or Decision Brief content to train AI models, and our AI providers are contractually restricted, under their terms as of the effective date, from using data we send them via their APIs to train their models.

2.8 No automated decisions with legal effects. We do not use your information to make decisions that produce legal or similarly significant effects about you.

---

3. Sensitive Information

We do not ask for, and do not intend to collect, sensitive personal information as defined by applicable state laws (such as government ID numbers, precise geolocation, health information, or information about racial or ethnic origin, religion, or sexual orientation). Your place of birth is collected at the city level and is not precise geolocation. If you choose to include sensitive information in free-text fields or uploaded files, we use it only to provide the Service to you, and we do not use it to infer characteristics about you.

---

4. How We Share Information

We do not sell personal information for money. We share personal information only as follows:

4.1 Service providers (processors). We share information with vendors that process it on our behalf and under our instructions, bound by contracts that restrict their use of it. See Section 5.

4.2 Advertising partners. See Section 6. We never share your birth details, tasks, notes, check-ins, uploaded files, or Decision Brief content with advertising partners.

4.3 At your direction. For example, when you share a brief to social media, the content you choose to share becomes visible to others.

4.4 Legal and safety. When we believe in good faith that disclosure is necessary to comply with law or legal process, protect the rights, property, or safety of anyone, or detect and prevent fraud or security issues.

4.5 Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality protections. We will notify you before your information becomes subject to a different privacy policy.

---

5. Service Providers

---

6. Advertising and Your Opt-Out Rights

6.1 What we do. We advertise on Meta platforms (Facebook and Instagram). To measure whether our ads work and to reach people who may be interested in the Service, we use the Meta Pixel on our website and Meta's Conversions API. These may share with Meta: pages you visit on our website, events such as "signed up" or "started a trial" and their value, your IP address and browser information, cookie identifiers, the ad click identifier, and a hashed (encrypted) version of your email address.

6.2 What we never share with advertisers: your birth details, tasks, calendar data, notes, check-ins, feedback text, uploaded files, or Decision Brief content.

6.3 "Sharing" under state law. Under the California Consumer Privacy Act (as amended) and similar laws, providing this information to Meta for cross-context behavioral advertising may be considered "sharing" or "targeted advertising." You have the right to opt out.

6.4 How to opt out:

• Visit Your Privacy Choices and turn off "Sharing for targeted advertising." This works whether or not you are signed in; if you are signed in, we apply your choice to your account on all devices.
• Global Privacy Control: If your browser sends a Global Privacy Control (GPC) signal, we automatically treat it as a request to opt out for that browser, and for your account if you are signed in.
• When you opt out, we stop loading the Meta Pixel and stop sending your events through the Conversions API. We also stop loading our product analytics (PostHog) in that browser, and for your account if you are signed in.

6.5 You can also adjust your ad preferences directly with Meta at https://www.facebook.com/adpreferences.

---

7. Cookies and Similar Technologies

Most browsers let you block or delete cookies. Blocking strictly necessary cookies will prevent you from signing in.

---

8. How Long We Keep Information

---

9. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS), encryption of calendar links and access tokens at rest, encrypted backups, access controls limited to personnel who need access, and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by law.

---

10. Your Rights and Choices

10.1 Rights available to everyone

Regardless of where you live, you can:

• Access and download your data in Settings → Account → Download my data (a ZIP file with a machine-readable JSON copy of your records and any files you uploaded; the download link works for 24 hours);
• Correct your birth details and profile in Settings;
• Delete individual tasks, notes, and Decision Briefs, or delete your entire account in Settings → Account;
• Manage emails in Settings → Email or with the unsubscribe link in any product or marketing email;
• Disconnect a calendar in Settings → Calendar;
• Opt out of sharing for targeted advertising (Section 6).

10.2 Additional rights under U.S. state privacy laws

If you live in California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you may have some or all of the following rights, subject to exceptions:

• Right to know / access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it;
• Right to delete personal information we have collected from you;
• Right to correct inaccurate personal information;
• Right to data portability;
• Right to opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions producing legal or similarly significant effects (we do not engage in such profiling);
• Right to limit the use of sensitive personal information (we do not use sensitive personal information for purposes that require this right);
• Right to non-discrimination for exercising your rights. We will not deny you the Service, charge you a different price, or provide a different quality of service because you exercised your privacy rights.

10.3 How to exercise your rights

• Use the self-service tools in Settings; or
• Email privacy@tutelox.com with the subject line "Privacy Request."

We will verify your request by confirming control of the email address associated with your account. You may use an authorized agent; we will require proof that the agent is authorized and may require you to verify your identity directly. We will respond within the time required by law (generally 45 days, which may be extended once where permitted).

10.4 Appeals

If we decline your request, you may appeal by replying to our decision or emailing privacy@tutelox.com with the subject line "Privacy Appeal" within 60 days. We will respond within the time required by law. If you are not satisfied with our response to your appeal, you may contact your state Attorney General.

---

11. Notice at Collection (California and other states)

The table below summarizes, for the 12 months before the "Last updated" date, the categories of personal information we collect, and whether we disclose them.

We do not sell personal information and have no actual knowledge of selling or sharing the personal information of consumers under 16.

---

12. Children's Privacy

The Service is intended only for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact privacy@tutelox.com and we will delete it.

---

13. International Users

The Service is operated in the United States and is intended for users in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

---

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. If we make material changes, we will notify you by email and/or through the Service before the changes take effect, and where required by law, we will ask for your consent.

---

15. Contact Us

Helpm AI Inc.
Attn: Privacy
9878 W Belleview Ave
Denver, CO 80123
US
Email: privacy@tutelox.com