Your privacy rights by region

Rights, wherever you live in the US. We honour these for every US user, whether or not your state's law requires it:

• know what we collect;
• get a copy;
• correct;
• delete;
• withdraw consent;
• opt out of sale, sharing and targeted advertising (we do none of these);
• appeal.

State laws. California, Colorado, Connecticut, Virginia and a growing number of other states give residents some or all of these rights. Where your state does:

• we get your opt-in consent before processing sensitive data (face and body data, health-related data, religious belief, gender identity);
• you can ask for a list of the specific third parties we've disclosed your data to;
• you can appeal a decision we make on your request. Email privacy@attyr.app with “Appeal” in the subject. We'll respond within the time your law sets. If we deny your appeal, you can contact your state Attorney General.

California notice at collection

• Categories we collect, all from you, your device or services you connect:
  • identifiers;
  • customer records;
  • protected characteristics (age range or gender, if you give them);
  • commercial information (purchases, credits);
  • biometric information (face and body geometry, only with consent);
  • internet or other electronic activity (in-app usage);
  • geolocation;
  • audio and visual information (photos; voice, which is transcribed and not kept);
  • inferences (style preferences);
  • sensitive personal information: account login, biometric data, health-related measurements, religious belief, gender identity.
• Purposes: as in How we use it.
• Retention: as in How long we keep it.
• We don't sell or share personal information. We have no actual knowledge of selling or sharing data of anyone under 16.
• Sensitive personal information: we use it only for purposes the California regulations permit without offering a right to limit, so we don't offer a “Limit” link.
• We don't offer financial incentives for personal information.

Biometric laws

See the Biometric & Face Data Notice. Illinois, Texas and Colorado set specific consent and destruction rules; our single 12-month destruction window meets the strictest of them.

Washington, Nevada and Connecticut consumer health data

See the Consumer Health Data Privacy Policy.

Nevada

We don't sell covered information.

• Controller: ATTYR, Inc., a Delaware corporation, 244 St Pauls Ave, Jersey City, NJ 07306, USA
• Data Protection Officer: not appointed; the GDPR doesn't require one for ATTYR's processing. Contact privacy@attyr.app.

Legal bases: see How we use it, and our legal bases.

Your rights:

• access;
• rectification;
• erasure;
• restriction;
• data portability;
• objection (including to quality review and to anything based on legitimate interests);
• withdrawal of consent at any time. Withdrawing doesn't affect processing that happened before.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

Complaints: you can complain to your local data protection authority (in the UK, the ICO). We'd like the chance to help first, at privacy@attyr.app.

Transfers: see International transfers.

Where you must provide data: some data is required to provide the service (account details). Everything else is optional, and leaving it out only limits that feature.

• Data fiduciary: ATTYR, Inc., a Delaware corporation, 244 St Pauls Ave, Jersey City, NJ 07306, USA
• Grievance Officer (Digital Personal Data Protection Act, 2023, and Information Technology Rules, 2021, as amended): Srijith Reddy Maramreddy, Founder, privacy@attyr.app.
  • We acknowledge complaints within 24 hours and resolve them within 15 days, or faster where the IT Rules require, such as removal of intimate or impersonating images.
  • Report intimate images at attyr.app/remove-intimate-image or to privacy@attyr.app.
• Your rights:
  • a summary of your personal data and who it has been shared with;
  • correction, completion, updating and erasure;
  • grievance redressal;
  • to nominate someone to exercise your rights if you die or become incapacitated;
  • withdrawing consent is as easy as giving it (in the app, or by email).
• Complaints to the Data Protection Board of India: if we don't resolve your grievance, you can complain to the Board.
• Consent managers: you may give, review or withdraw consent through a Consent Manager registered with the Board, once available.
• Under 18: ATTYR is 18+. In the Trial Room, people under 18 get line and size help only, with no photos.

• Business operator: ATTYR, Inc., a Delaware corporation, 244 St Pauls Ave, Jersey City, NJ 07306, USA
• Representative: Srijith Reddy Maramreddy, Founder
• Purposes of use: as listed in How we use it. We won't use your personal information beyond these purposes without your consent.
• Provision to third parties: we don't provide personal data to third parties except as permitted by the Act on the Protection of Personal Information (APPI), such as with your consent, or when we entrust handling to service providers.
• Foreign entrustees: our service providers (listed here) are mainly in the United States, and some are elsewhere. We rely on their contractual commitments to protect personal data. On request, we'll provide information about those measures and the relevant foreign systems.
• Security control measures:
  • organisational: a person responsible for privacy, and staff rules;
  • human: confidentiality;
  • physical: our providers' data centres;
  • technical: encryption and access control.
• Requests and complaints: disclosure (including of records of third-party provision), correction, suspension of use, or deletion of retained personal data, at privacy@attyr.app. You can also contact Japan's Personal Information Protection Commission.

We apply the rights in the Privacy Policy to everyone. If your local law gives you more, email privacy@attyr.app.