Dyad

Privacy Policy

Last updated: [DATE]

1. Overview

This Privacy Policy describes how [COMPANY NAME] (“we”, “us”, or “our”) collects, uses, and shares information when you use Dyad (“the Service”), a dashboard that pairs human vitals with AI agent telemetry. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Information you provide

  • Account information. Name, email address, and password when you create an account.
  • Profile and preferences. Display name, preferences, and settings you configure in the Service.
  • Support communications. Information you send us when contacting support or providing feedback.

Information you connect or sync

  • Health and activity data. Data from sources you choose to connect (for example, wearable devices or health platforms), such as heart rate, sleep, activity, or other vitals.
  • Agent telemetry. Data relating to your AI agent that you connect or configure, such as activity logs, status, or performance metrics.

Information collected automatically

  • Usage data. Pages viewed, features used, and interactions with the Service.
  • Device and log data. IP address, browser type, device identifiers, operating system, and server logs.
  • Cookies and similar technologies. Small files used to keep you signed in, remember preferences, and understand usage. See Section 7.

3. How We Use Information

We use the information we collect to:

  • Operate, maintain, and provide the Service, including displaying scores, gauges, and cross-analysis views;
  • Create and manage your account and authenticate you;
  • Improve the Service, develop new features, and fix problems;
  • Monitor usage, detect fraud, and keep the Service secure;
  • Communicate with you about the Service, including service updates, security notices, and (with your consent) marketing;
  • Comply with legal obligations and enforce our Terms of Service.

We do not use your health or vitals data for advertising, and we do not sell your personal information.

4. Legal Bases for Processing (EEA/UK)

If you are located in the EEA or UK, we process your personal data on the following legal bases: performance of a contract (to provide the Service you signed up for); legitimate interests (to secure and improve the Service, provided these are not overridden by your rights); consent (for optional cookies and marketing communications, where required); and legal obligation (where processing is required by law).

5. How We Share Information

We share information only in these circumstances:

  • Service providers. Vendors that host our infrastructure, process payments, or help us operate the Service (for example, cloud hosting and authentication providers), bound by contract to process data only on our instructions.
  • Integrations you enable. If you connect third-party services (devices, health platforms, or AI agents), data flows between the Service and those services as you direct.
  • Legal requirements. Where required by law, legal process, or to protect the rights, property, or safety of us, our users, or the public.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, with notice to you where required by law.

We do not sell personal information, and we do not share health data for third-party advertising.

6. Data Retention

We keep personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within [RETENTION PERIOD, e.g. 30/90 days], except where we must retain it for legal, security, or legitimate business purposes (such as tax records or fraud prevention), in which case it is retained only for that purpose.

7. Cookies and Tracking

We use cookies and similar technologies for essential functions (sign-in sessions, security) and, with your consent, for analytics. You can control cookies through your browser settings; blocking essential cookies may prevent parts of the Service from working.

8. Your Rights and Choices

Depending on your location, you may have some or all of the following rights over your personal information:

  • Access a copy of the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your account and personal information;
  • Export your data in a portable, machine-readable format;
  • Object to or restrict certain processing, or withdraw consent where processing is based on consent;
  • Lodge a complaint with your local data protection authority.

California residents have the right to know what personal information is collected, and the right to delete and correct personal information, as described in the CCPA/CPRA as amended. We do not sell or share personal information as defined by those laws.

To exercise any right, contact us at [CONTACT EMAIL]. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

9. Security

We use industry-standard safeguards to protect your information, including encryption in transit (TLS) and at rest, access controls, and row-level security in our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

10. International Transfers

Your information may be processed in countries other than your own, including the United States, where data protection laws may differ. We rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers of personal data from the EEA, UK, or Switzerland.

11. Children’s Privacy

The Service is not directed to children under 18 (or the age of legal majority in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a minor has provided us personal information, contact us at [CONTACT EMAIL] and we will delete it.

12. Sensitive Data

Health and vitals data is sensitive. We treat it accordingly: it is used only to provide the features you enable, is not used for advertising, and is not sold. You can disconnect a data source or delete synced data at any time from your account settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows the current version. Material changes will be communicated through the Service or by other reasonable means before they take effect.

14. Contact

Questions about this Privacy Policy or our data practices? Contact us at [CONTACT EMAIL].