Version 2.0.0 | Effective: February 27, 2026
INFINITUM — PRIVACY POLICY
Version 2.0.0 | Effective: February 27, 2026
Your privacy matters. This policy is a complete, honest account of how we handle your data.
1. INFORMATION WE COLLECT
Account Data:
• Full name, email address, encrypted password
• Account creation date, last login, plan type
Profile & Twin Data (voluntarily provided):
• Occupation, location, family information
• Personality traits, values, goals, speaking style
• Profile photos and avatar images
Biometric Data:
• Voice recordings and synthesized voiceprints
• Video recordings and facial imagery
• AI-generated voice clone models
Memory & Content Data:
• Text memories, transcriptions, summaries
• Audio files and video files you record
• AI twin conversation history
Technical & Usage Data:
• IP address (collected at registration and login)
• Device type, operating system, app version
• User agent strings
• Session duration, feature usage patterns
• Crash reports and error logs
Legal Records:
• Terms acceptance with timestamp, IP, and device info
2. HOW WE USE YOUR DATA
• To create and operate your account
• To train, operate, and evolve your AI digital twin
• To transcribe recordings (OpenAI Whisper)
• To synthesize your cloned voice (ElevenLabs)
• To generate talking avatar videos (D-ID)
• To store media files (Cloudinary)
• To improve the Service and develop new features
• To communicate with you about your account
• To prevent fraud, abuse, and illegal activity
• To comply with legal obligations
• To enforce our Terms of Service
3. THIRD-PARTY PROCESSORS
We share your data with the following service providers solely to operate the Service:
• OpenAI (openai.com) — AI processing, transcription, twin intelligence. Data subject to OpenAI Privacy Policy.
• ElevenLabs (elevenlabs.io) — Voice cloning and synthesis. Data subject to ElevenLabs Privacy Policy.
• D-ID (d-id.com) — Talking avatar video generation. Data subject to D-ID Privacy Policy.
• Cloudinary (cloudinary.com) — Media storage and delivery. Data subject to Cloudinary Privacy Policy.
• Railway (railway.app) — Cloud hosting and database infrastructure. Data subject to Railway Privacy Policy.
We are not responsible for how these providers handle your data. We recommend reviewing their privacy policies.
4. DATA WE DO NOT SHARE
• We do NOT sell your personal data — ever
• We do NOT share your data with advertisers
• We do NOT share your data with data brokers
• We do NOT use your data for targeted advertising
5. LEGAL DISCLOSURES
We may disclose your data when required by:
• Valid court order, subpoena, or legal process
• Government or law enforcement requests
• To prevent imminent harm to you or others
• To protect Infinitum's legal rights and property
6. DATA SECURITY
We implement industry-standard security including:
• TLS/HTTPS encryption in transit
• bcrypt password hashing
• JWT authentication with expiration
• Database access controls
• Regular security monitoring
HOWEVER: No system is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
7. DATA RETENTION
• Active account: data retained while account is active
• Deleted account: personal data deleted within 30 days
• Legal acceptance records: retained 7 years for compliance
• Backups: may persist 90 days after deletion
• Law enforcement holds: retained as long as legally required
8. BIOMETRIC DATA — SPECIAL NOTICE
Biometric data (voice prints, facial data) is particularly sensitive. We process it only as necessary to provide the Service. Under Illinois BIPA, Texas CUBI, and similar biometric privacy laws, we obtain your explicit consent before processing. You may request deletion of biometric data by contacting infinitum@proton.me.
9. YOUR RIGHTS
Depending on your location, you may have the right to:
• Access: obtain a copy of your personal data
• Correction: correct inaccurate data
• Deletion: delete your account and associated data ("right to be forgotten")
• Portability: receive your data in machine-readable format
• Restriction: limit how we process your data
• Objection: object to certain processing activities
• Withdraw consent at any time
To exercise your rights: infinitum@proton.me (response within 30 days)
10. GDPR — EUROPEAN USERS
Legal basis for processing: (a) explicit consent, (b) contract performance, (c) legitimate interests.
You have rights to lodge complaints with your local Data Protection Authority.
EU/UK representative: contact infinitum@proton.me
11. CCPA — CALIFORNIA RESIDENTS
California residents have rights under CCPA:
• Right to know what personal information we collect
• Right to delete personal information
• Right to opt out of sale (we do not sell data)
• Right to non-discrimination for exercising rights
To submit a CCPA request: infinitum@proton.me
12. COPPA — CHILDREN'S PRIVACY
We do not knowingly collect data from persons under 18. If we discover a user is under 18, we will immediately delete all their data. To report a minor's account: infinitum@proton.me
13. ILLINOIS BIPA COMPLIANCE
For Illinois residents: we collect biometric identifiers (voiceprints) as part of the Service. We have a written policy for retention and destruction. Biometric data is not sold or shared for profit. You may request deletion at any time.
14. INTERNATIONAL DATA TRANSFERS
Your data is processed in the United States. By using the Service, you consent to transfer of your data to the US, which may have different privacy protections than your country.
15. COOKIES & TRACKING
The app uses authentication tokens stored locally on your device. We do not use third-party advertising cookies.
16. CHANGES TO PRIVACY POLICY
We will notify you of material changes via the app or email. Continued use after changes constitutes acceptance.
17. CONTACT
Privacy Officer: infinitum@proton.me
Infinitum LLC — Naples, Florida, United States