IncognitoVerse Privacy Policy

Effective Date: 11/28/2025

At Incog Labs LLC, a limited liability company, and its affiliates (collectively, “Incog,” “IncognitoVerse,” “we,” “us,” or “our”), we value your privacy and are committed to being clear and transparent about how we handle your personal information.

This Privacy Policy explains how we collect, use, and disclose information about you when you:

• Use the IncognitoVerse mobile app (including TestFlight or other pre-release versions);
• Visit our websites, including incog.io and any related pages;
• Interact with us in other ways related to the Service (defined below).

Together, we refer to these as the “Service.”

This Privacy Policy does not apply to information we process purely for our own business operations outside of the Service, or to third-party services that you may use in connection with the Service (such as your app store account, your email provider, or your brokerage accounts).

By using the Service, you agree that we may collect, use, and disclose your information as described in this Privacy Policy.

1. Who We Are and What This Policy Covers

Incog Labs LLC (and any successor or affiliated entities) is the company behind IncognitoVerse, a content and community platform focused on discipline, fitness, finances, lifestyle, and personal growth.

This Privacy Policy covers:

• What personal information we collect;
• How we use it;
• How we share it;
• How we protect it;
• Your choices and rights; and
• How to contact us with questions or requests.

If you do not agree with this Privacy Policy, you should not use the Service.

2. Age Requirement and Children’s Privacy

The Service is intended for adults only.

• You must be at least 18 years old to use the Service.
• We do not knowingly collect personal information from children under 13.
• If we learn that a child under 13 has provided us with personal information, we will take reasonable steps to delete it as soon as possible.

If you believe a child has provided personal information to us in violation of this Policy, please contact us at support@incog.io.

3. Personal Information We Collect

We ask that you do not include unnecessary sensitive information in your inputs or content (for example, detailed financial account numbers, medical records, or government IDs). However, we cannot fully control what you choose to provide.

Below are the main categories of information we may collect, how we collect them, and examples of what they include.

3.1 Account Information

When you create or use an account on the Service, we may collect:

• Name or display name;
• Email address;
• Password (if you sign up with email/password);
• Basic profile information (such as username, avatar, bio, or similar, if you choose to provide it).

How we collect it:
Directly from you when you register or update your account.

3.2 Third-Party Login Information

If you choose to sign in using a third-party provider (such as Google), that provider may share certain information with us, which may include:

• Your name or display name;
• Email address;
• Basic profile info;
• Authentication tokens necessary to log you in.

How we collect it:
From the third-party provider, based on the permissions you grant when you connect your account.

We do not control the privacy practices of these providers. Their use of your information is governed by their own privacy policies.

3.3 Subscription and Payment Information

If you purchase a subscription or other paid feature, payment processing is handled by third-party services such as:

• App stores (e.g., Apple App Store, Google Play Store); and/or
• Payment processors (e.g., Stripe or similar) and subscription infrastructure (e.g., RevenueCat).

We may receive limited information about your transactions, such as:

• Subscription tier (e.g., Free, Visionary, Founder, Phantom);
• Whether your subscription is active or expired;
• Non-sensitive transaction metadata (e.g., purchase date, billing period, country or region).

We do not receive or store full payment card numbers or your full app store billing profile.

How we collect it:
From app stores, payment processors, or subscription infrastructure providers.

3.4 Usage and Technical Information

When you use the Service, we may automatically collect certain information about how you access and interact with it, such as:

• Device information (e.g., device type, OS version, app version);
• IP address and general location (e.g., city/region-level, not precise GPS, unless you explicitly grant it);
• Log data (e.g., dates and times of access, pages or screens viewed, features used);
• Interaction data (e.g., which posts or content you view, like, save, or complete);
• Performance, crash, and diagnostic data.

How we collect it:

• Automatically through the app and website;
• Through analytics and crash-reporting tools.

We use this data to operate, secure, and improve the Service.

3.5 Content You Provide (“User Content”)

You may provide content to the Service, such as:

• Comments, posts, or other community interactions;
• Responses to programs, challenges, or routines;
• Profile-related content (bio, avatar, etc.);
• In the future, prompts or messages submitted to AI-related features.

How we collect it:
Directly from you when you create, upload, or share content.

User Content may include personal information if you choose to include it. Please be mindful of what you share.

3.6 Communication Information

If you contact us (for example, via email or contact forms), we may collect:

• Your name;
• Email address;
• The contents of your message and any attachments;
• Metadata associated with your message.

How we collect it:
Directly from you when you communicate with us.

3.7 Approximate Location Information

We may infer general location information from sources such as:

• Your IP address; or
• Information provided by your device or app stores (e.g., country or region).

We do not require precise GPS location for the Service. If we ever request precise location access, it will be subject to your device permissions and clearly indicated.

How we collect it:
Automatically through your device, IP address, or platform metadata.

3.8 Information from Cookies and Similar Technologies (Website)

On our website(s), we may use:

• Cookies;
• Local storage;
• Other similar technologies.

These may help us:

• Recognize your browser or device;
• Remember your preferences;
• Analyze traffic and usage patterns;
• Improve performance and security.

You can control certain cookie settings through your browser, but disabling cookies may impact some site features.

3.9 Information We Do Not Intentionally Collect

We do not intentionally request or require:

• Bank account numbers;
• Full payment card numbers;
• Brokerage account logins or portfolios;
• Government IDs;
• Medical records or highly sensitive health data.

Please do not submit this type of information through the Service. If you do, we will treat it according to this Privacy Policy but may not be able to fully protect or segregate it the way specialized financial or medical systems do.

4. How We Use Personal Information

We use the information we collect for the following purposes:

4.1 To Provide and Maintain the Service

• Creating and managing your account;
• Providing app features and content;
• Operating subscription tiers and access controls;
• Processing basic subscription status and eligibility;
• Ensuring the Service functions as intended on your device.

4.2 To Improve and Develop the Service

• Analyzing usage, engagement, and performance;
• Fixing bugs, crashes, and technical issues;
• Improving user experience, navigation, and design;
• Evaluating and developing new features, including possible future AI-powered features.

We may use aggregated or de-identified information for analytics and research purposes.

4.3 To Communicate with You

• Responding to your questions, support requests, or feedback;
• Sending important service-related notifications (e.g., changes to this Privacy Policy, security alerts, or critical app notices);
• Sending limited, non-spammy messages related to your account or subscription.

We will not sell your email address or use your information for random third-party marketing campaigns.

4.4 To Maintain Security and Prevent Misuse

• Monitoring for fraud, abuse, or suspicious activity;
• Protecting the integrity and security of the Service, accounts, and data;
• Enforcing our Terms of Service and other policies.

4.5 To Comply with Legal Obligations

• Responding to lawful requests from authorities where required;
• Complying with applicable laws and regulations;
• Protecting our rights, property, and users where legally appropriate.

5. How We Share Personal Information

We do not sell your personal information as a standalone product. We may share your information with:

5.1 Service Providers

Third-party companies that help us operate the Service, for example:

• Cloud hosting providers;
• Analytics and crash-reporting tools;
• Payment and subscription infrastructure (e.g., Stripe, RevenueCat, app stores);
• Email and communication tools;
• Security and anti-abuse services.

We share only the information reasonably necessary for them to perform services on our behalf, and we expect them to handle it in a way that is consistent with this Policy and applicable law.

5.2 Legal and Safety Reasons

We may disclose information if we believe in good faith that doing so is reasonably necessary to:

• Comply with a law, regulation, or legal process (e.g., a court order or subpoena);
• Protect the rights, property, or safety of Incog, our users, or others;
• Detect, prevent, or respond to fraud, security issues, or technical problems.

5.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, your information may be transferred as part of that transaction. Where required by law, we will use reasonable efforts to notify you of such a transfer.

5.4 With Your Consent or Direction

We may share information with third parties when you explicitly ask or authorize us to do so.

6. International Transfers

The Service is operated from the United States and may be accessed globally. If you are located outside the United States, your information may be transferred to and processed in the United States or other countries, which may have different data protection laws than those in your country.

Where required by law, we will take steps to ensure that appropriate safeguards are in place to protect your information when it is transferred internationally.

7. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide and maintain the Service;
• Support your account and subscriptions;
• Fulfill the purposes described in this Privacy Policy;
• Comply with legal, tax, accounting, or reporting obligations;
• Resolve disputes and enforce our agreements.

The specific retention period may vary depending on the type of data and applicable legal requirements. When we no longer need personal information, we will take steps to delete or de-identify it, unless we are required by law to keep it longer.

If you request that we delete your account, we will take reasonable steps to delete or de-identify your personal information, subject to any legal or operational requirements to retain certain data.

8. Security

We use reasonable technical and organizational measures designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction.

However:

• No system is 100% secure;
• We cannot guarantee absolute security of information transmitted or stored in connection with the Service.

You are responsible for:

• Keeping your device secure;
• Protecting your account credentials;
• Logging out of shared devices.

If you believe your account or information may have been compromised, contact us at support@incog.io.

9. Your Choices and Rights

Depending on where you live and subject to applicable law, you may have some or all of the following rights:

• Access: Request a copy of the personal information we hold about you;
• Correction: Request that we correct inaccurate or incomplete information;
• Deletion: Request that we delete certain information, subject to legal exceptions;
• Restriction: Request that we limit how we process certain information;
• Objection: Object to certain types of processing, such as direct marketing (if we ever use it);
• Portability: Request that we provide a copy of certain information in a structured, commonly-used format.

We may need to verify your identity before responding to certain requests.

To exercise these rights (where available), you can contact us at support@incog.io and include:

• Your name;
• The email associated with your account (if applicable);
• A clear description of your request.

We will respond within a reasonable time and in accordance with applicable law. Some information may be exempt from such requests if we must retain it for legal, security, or operational reasons.

10. Third-Party Services and Links

The Service may contain links to or integrate with third-party services, such as:

• App stores;
• Social platforms;
• Payment providers;
• External websites or content.

These third parties have their own privacy policies, and we are not responsible for their practices. You should review their policies before providing them with your information.

11. Financial Content vs. Financial Data

The Service may include Financial Content (for example, discussion of stock picks, trading strategies, or market opinions). This relates to the information and content we present, not to your financial accounts.

• We do not require you to connect or disclose your brokerage or bank account information to use the Service.
• We do not request or store your brokerage credentials or full payment card data.
• If you choose to talk about your finances in User Content (e.g., in comments or notes), that is personal information you voluntarily share.

As described in the Terms of Service:

• Financial Content is not individualized investment, tax, or legal advice;
• You are responsible for your own financial decisions and should consult qualified professionals.

This Privacy Policy governs how we handle your information; it does not change the disclaimers contained in the Terms of Service.

12. “Do Not Track” and Similar Signals

Some browsers allow you to send a “Do Not Track” (DNT) signal. At this time, there is no widely accepted standard for how to respond to DNT signals, and the Service does not currently respond to these signals. We may revisit this as standards evolve.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the “Effective Date” at the top of this page; and
• Where required by law, we may provide additional notice (for example, in-app or by email).

Your continued use of the Service after the updated Privacy Policy takes effect means that you accept the changes. If you do not agree with the updated Policy, you should stop using the Service.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your information, you can contact us at:

Email: support@incog.io
Subject line: “IncognitoVerse – Privacy”

You can also contact us for account or data-related requests at the same address.