Introduction
Agentic Secure Inc. ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the RibPunch mobile application and related services (collectively, the "Services").
Please read this Privacy Policy carefully. By using the Services, you consent to the data practices described in this policy.
1. Information We Collect
1.1 Information You Provide
Account Information:
- Email address
- Name (optional)
- Password (encrypted)
- Profile preferences and settings
1.2 Information Collected Automatically
Device Information:
- Device type, model, and manufacturer
- Operating system and version
- Unique device identifiers (anonymized)
- App version
1.3 Sensor and Physiological Data
IMPORTANT: The following data is collected SOLELY for productivity purposes and is NOT health or medical data.
- Heart Rate Data: Heart rate measurements from wearable devices, collected during active monitoring sessions only
- Heart Rate Variability (HRV) Data: HRV metrics (RMSSD, SDNN), collected for pattern detection purposes only
- Motion and Activity Data: Accelerometer readings, gyroscope data, and movement patterns
1.4 Information We Do NOT Collect
- Precise GPS location (unless you explicitly enable location features)
- Audio or voice recordings
- Camera or photo data
- Contacts or address book
- Biometric data for identification purposes
2. How We Use Your Information
We use your information to:
- Enable core alertness detection functionality
- Process and analyze sensor data for productivity patterns
- Deliver haptic notifications
- Improve the Services and develop new functionality
- Provide customer support
THIS DATA IS NOT USED FOR:
- Medical diagnosis or treatment
- Health monitoring or tracking
- Insurance or employment decisions
- Marketing or advertising
- Sale to third parties
3. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We may share information with trusted service providers who assist us in operating the Services:
| Provider Type | Purpose | Data Shared |
|---|---|---|
| Cloud Hosting | Data storage | Encrypted data |
| Analytics | App performance | Anonymized usage |
| Payment Processors | Billing | Transaction data |
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Account Information | Until account deletion + 30 days |
| Physiological Data (raw) | 30 days (free) / 1 year (premium) |
| Aggregated Session Data | 2 years |
| Usage Analytics | 2 years |
5. Data Security
We implement industry-standard security measures:
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Secure key management
- Regular security audits
6. Your Privacy Rights
All users may:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Receive your data in a portable format
- Opt-Out: Opt out of optional data collection
To exercise your rights: privacy@agenticsecure.com
7. Third-Party Services
The App integrates with:
- Apple HealthKit: Heart rate and health data (iOS)
- Google Health Connect: Health data (Android)
- Oura Ring API: Heart rate, HRV, and activity data
- WearOS Health Services: Wearable data (Android)
8. Health Data Disclaimer
THE PHYSIOLOGICAL DATA (HEART RATE, HRV, MOTION DATA) COLLECTED BY THE APP IS NOT "HEALTH INFORMATION" OR "MEDICAL DATA" FOR ANY LEGAL, REGULATORY, OR PRACTICAL PURPOSE.
This data is collected and processed solely as technical sensor readings for productivity pattern detection.
9. Contact Us
Data Controller:
Agentic Secure Inc.
Email: privacy@agenticsecure.com
Support: support@ribpunch.com
Website: https://ribpunch.com