1. Introduction

At Bai OS, Inc. ("BAI", "we", "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

BAI is an AI-powered personal operating system that integrates reactive assistance and proactive management through messaging channels, centralizing information and tasks to provide clarity and high-impact productivity.

Important: BAI is a tool, not a person. When you interact with BAI, you are interacting with artificial intelligence technology, not with a human being. Although conversations may feel natural and empathetic, all responses are generated by AI models and processed algorithmically. BAI is designed to serve your intelligence, not replace it.

2. Information We Collect

2.1 Information You Provide to Us

Registration data: Name, username, WhatsApp number
User content: Messages, tasks, reminders, notes, and any information you share with BAI
Communications: When you contact us for support or inquiries

2.2 Automatically Collected Information

Usage data: How you interact with the Service, frequency of use, features used
Device data: Device type, operating system, unique identifiers
Location data: Time zone (for reminders), we do not track GPS location

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Process and organize your tasks, reminders, and notes
Send you requested notifications and reminders
Respond to your inquiries and provide support
Analyze usage patterns to improve the experience
Detect and prevent fraud or misuse
Comply with legal obligations

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract performance: To provide the Service you have requested
Consent: When you have given us explicit permission
Legitimate interests: To improve and protect our Service
Legal obligation: When the law requires us to process your data

5. Information Sharing

We do not sell your personal data. We only share information in the following circumstances:

Service providers: Third parties that help us operate the Service (hosting, analytics), under strict confidentiality agreements
Artificial Intelligence Providers: See section 5.1 below
WhatsApp/Meta: Necessary for message delivery (subject to their own policies)
Legal requirements: When required by law, court order, or legal process
Protection of rights: To protect the rights, property, or safety of BAI, our users, or others
Corporate transactions: In case of merger, acquisition, or sale of assets, with prior notice

5.1 Artificial Intelligence Providers

BAI is powered by the world's most advanced AI models, including technology from Google and Anthropic. To provide the AI functionalities of the Service, we share certain information with these third-party artificial intelligence providers ("AI Providers"). These models can make mistakes, and their outputs may contain inaccuracies.

Information shared with AI Providers:

The content of your messages and requests to process them and generate responses
Context necessary to personalize responses (without personal identifiers when possible)

Important considerations:

AI Providers process your data according to their own privacy policies
We have no control over how AI Providers may use data to improve their models
We select providers with robust privacy policies, but we recommend you review their terms directly: OpenAI, Anthropic
Avoid sharing highly sensitive information (medical data, detailed financial data, passwords) through the Service

6. Data Security

We implement technical and organizational security measures to protect your data:

Encryption in transit (TLS/SSL) and at rest
Role-based restricted access
Continuous security monitoring
Regular backups
Periodic vulnerability assessments

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data while your account is active or as needed to provide the Service.

Account data: Until you request deletion
User content: While you maintain your account active
Usage data: Maximum 24 months in aggregate form
Backups: Maximum 90 days after deletion

We may retain certain information longer if required by law or to protect our legitimate interests.

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Deletion: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in structured, readable format
Objection: Object to the processing of your data
Restriction: Request limitation of processing
Withdraw consent: At any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at hey@baios.ai. We will respond within 30 days.

9. International Transfers

Your data may be transferred and processed on servers located outside your country of residence, including the United States. When we transfer data outside the European Economic Area, we implement appropriate safeguards such as Standard Contractual Clauses.

10. Minors

The Service is not directed at minors under 18 years of age. We do not intentionally collect information from minors. If we discover that we have collected data from a minor, we will delete it immediately.

11. Cookies and Similar Technologies

Our website uses essential cookies for basic operation. We do not use advertising tracking cookies.

Essential cookies: Necessary for site operation
Analytics cookies: To understand how the site is used (anonymized)

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:

Notice on our website
Message through the Service
Email (if we have your address)

We recommend reviewing this policy regularly.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your rights:

Email: hey@baios.ai
Company: Bai OS, Inc.
Jurisdiction: Delaware, USA

14. Supervisory Authority

If you are in the European Economic Area and believe we have not adequately handled your personal data, you have the right to file a complaint with your local data protection authority.