INFYNI APEX mobile application (com.INFYNI.BARC)
This Privacy Policy explains how INFYNI ("INFYNI", "we", "us", or "our") collects, uses, stores, shares, and protects your information when you use the INFYNI APEX mobile application and any related devices, including the BARC Tag Bluetooth accessory (collectively, the "Service"). It also explains your rights and the choices you have, including how to request deletion of your data.
By downloading, accessing, or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
The data controller responsible for your personal information is:
If you have any questions about this Privacy Policy or how your data is handled, you can reach us using the contact details in the Contact us section.
We collect the categories of information described below. The specific data collected depends on how you use the Service and which features you enable.
When you create an account or sign in, we collect information through Firebase Authentication, which may include your email address, a securely hashed password, your display name, profile photo (if provided), and identifiers from third-party sign-in providers (for example, Google Sign-In) when you choose to use them.
The Service is designed to work with the BARC Tag Bluetooth device to measure movement and gait-related information. This may include walking/gait metrics, motion and sensor readings, session timestamps, and related measurements. This information is treated as sensitive personal data. It is stored on and synchronized with our cloud backend (Google Firebase) so that you can access your data across sessions and devices.
To connect to the BARC Tag and similar accessories, we process Bluetooth device identifiers, signal information, pairing and connection status, and device configuration data.
On Android, scanning for and connecting to nearby Bluetooth Low Energy (BLE) devices requires location permission. We request location permission for the purpose of Bluetooth scanning. We do not use this permission to track your geographic location for advertising, and we do not build location-history profiles.
We use Firebase Analytics to understand how the Service is used. This includes in-app events, feature usage, session duration, app and device configuration, language, and approximate, non-precise usage statistics.
We use Firebase Crashlytics to detect, diagnose, and fix stability problems. This may include crash logs, stack traces, device state at the time of a crash, OS version, and device model.
If you enable notifications, we use Firebase Cloud Messaging (FCM), which generates a device registration token used to deliver push notifications to your device.
The app may access the Google Advertising ID (AD_ID) as part of Google/Firebase analytics functionality. The Service does not display third-party advertising networks; this identifier is used for analytics and measurement only.
If a feature allows you to upload or store content (for example, files, images, or exported data), that content is stored using Firebase Cloud Storage and/or your device storage.
Certain optional features may use artificial intelligence. When you use such a feature, the content you submit (for example, text prompts) may be transmitted to and processed by third-party AI providers (such as OpenAI) and/or Firebase AI in order to generate a response. Please avoid entering sensitive personal information into AI features unless necessary.
We automatically collect technical information such as device model, operating system version, app version, language and region settings, time zone, and unique device or installation identifiers needed to operate and secure the Service.
We do not sell health or fitness data. We do not use health or fitness data for advertising. We do not share it with third parties except the infrastructure providers strictly necessary to operate the Service (see Third-party services) or where required by law.
Where the EU/UK General Data Protection Regulation or similar laws apply, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the Service and your account | Performance of a contract |
| Processing health/gait data | Your explicit consent |
| Analytics, diagnostics, and improvement | Legitimate interests / consent where required |
| Security and fraud prevention | Legitimate interests |
| Legal compliance | Legal obligation |
We do not sell your personal information. We share information only in the following limited circumstances:
The Service relies on the following third-party services, which may process your data according to their own privacy policies:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Realtime Database, Cloud Storage, Cloud Messaging, Analytics, Crashlytics, Remote Config, App Check, Cloud Functions) | Account, data storage & sync, notifications, analytics, diagnostics, security | firebase.google.com/support/privacy |
| Google (Advertising ID, Play services) | Analytics & measurement identifiers | policies.google.com/privacy |
| OpenAI (optional AI features) | Processing AI prompts to generate responses | openai.com/policies/privacy-policy |
Your information may be stored and processed on servers located outside your country of residence, including in countries that may have data-protection laws different from those in your jurisdiction. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers. By using the Service, you understand that your information may be transferred to the infrastructure of the providers listed above.
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. Our general retention practices are:
| Data category | Retention period |
|---|---|
| Account information | For as long as your account remains active. Deleted within 30 days of an account-deletion request. |
| Health / gait measurement data | Kept while your account is active so you can access your history. Deleted within 30 days of an account- or data-deletion request. |
| Analytics data | Retained in aggregated/limited form for up to 14 months, consistent with Firebase Analytics defaults. |
| Crash / diagnostic logs | Up to 90 days. |
| Inactive accounts | Accounts inactive for an extended period (e.g., 12+ months) may be archived or deleted in accordance with applicable law. |
When data is no longer needed, we delete it or irreversibly anonymize it. Backups containing your data are purged on a rolling schedule.
Once your request is verified, we will delete your personal data from our production systems and instruct our processors to do the same, except where we are required to retain certain information to comply with legal obligations (for example, records we must keep by law). We will confirm completion by email.
Depending on where you live, you may have the right to:
To exercise any of these rights, contact us at preconsciouss@gmail.com. We will respond in accordance with applicable law.
We implement reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest provided by our cloud infrastructure, access controls, and Firebase App Check to help ensure that only legitimate app instances access our backend. No method of transmission or storage is 100% secure, but we work to protect your data and continuously improve our safeguards.
| Permission | Why we use it |
|---|---|
| Bluetooth (scan / connect / advertise) | To discover and connect to the BARC Tag and similar accessories. |
| Location (fine / coarse) | Required by Android to scan for nearby Bluetooth Low Energy devices. |
| Internet & network state | To sync data with our cloud backend and check connectivity. |
| Notifications | To deliver push notifications you have enabled. |
| Storage (read / write) | To save or import files and exported data where applicable. |
You can change or revoke permissions at any time in your device settings. Some features may not function correctly without the required permissions.
The Service is not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice within the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions, requests, or complaints regarding this Privacy Policy or your personal data, contact us at: