Privacy Policy

This Privacy Policy describes how Boothtime LLC (“Boothtime,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the ThetaForge application, website, and related services (collectively, the “Service”). By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information We Collect

a. Information you provide

• Account information: name, email address, password (hashed), and basic profile details you choose to provide.
• Subscription and payment information: processed by app store operators (Apple, Google) or our payment processor. We do not store full payment card numbers on our servers.
• Affirmation and session content: the affirmations, prompts, intentions, goals, tones, and session preferences you author, edit, save, or submit to AI generation features.
• Support communications: messages you send to us via email or in-app support.

b. Information collected automatically

• Device and usage data: device type, operating system, app version, language, time zone, crash reports, and aggregate usage events (e.g., sessions started, soundbed chosen, feature usage).
• Log data: IP address, request timestamps, and basic diagnostic data necessary to operate and secure the Service.
• Cookies and similar technologies (website only): for essential functionality and aggregated analytics.

c. Information we do not intentionally collect

We do not knowingly collect biometric data, voice recordings, location data beyond coarse country/region, or special-category health information beyond what you voluntarily include in your own affirmations or prompts. We do not knowingly collect information from anyone under 18.

2. How We Use Information

We use the information described above to:

• provide, personalize, and improve the Service, including generating, saving, and replaying your sessions;
• operate AI-assisted features, including by transmitting necessary prompts and content to large language model and moderation providers (see Section 4);
• screen content for safety using automated moderation, including the OpenAI Moderation API, to detect and prevent self-harm, abuse, and other prohibited content;
• maintain account security, prevent fraud, and enforce our Terms;
• respond to support requests;
• send service-related communications (e.g., billing, security, policy updates);
• understand how the Service is used, in aggregated and de-identified form, to improve product quality; and
• comply with legal obligations.

We do not sell your personal information. We do not use your personal affirmations, prompts, or session content to train any third-party AI model, and we do not authorize third-party providers to do so.

3. Legal Bases (EEA / UK Users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract (to deliver the Service to you), legitimate interests (to secure, debug, and improve the Service), consent (where required, e.g., for certain analytics), and compliance with legal obligations.

4. AI Processing and Content Moderation

The Premium AI Edition relies on third-party large language model providers (currently including OpenAI) to generate, shape, and personalize affirmations and session structure. When you use these features:

• The prompts and content you submit, together with limited contextual metadata necessary to produce a useful response, are transmitted to the model provider over an encrypted connection.
• Content submitted to and generated by these features may also be sent to automated moderation systems, including the OpenAI Moderation API, to detect categories such as self-harm, suicide, sexual content involving minors, violence, harassment, and hate. This is done to protect users and maintain a safe Service.
• We use these providers under terms that prohibit them from using your content to train their models.
• Moderation outcomes (e.g., a content block) may be logged for safety, abuse prevention, and product-quality purposes.

You can avoid sending content to AI providers by not using AI-generated features. Core, non-AI features of the Service do not require transmission of your content to AI providers, though basic operational data (account, subscription, logs) is still processed.

5. How We Share Information

We share information only as described below:

• Service providers: hosting, storage, analytics, crash reporting, customer support, email delivery, payment processing, and AI/moderation providers, each acting on our instructions and under appropriate confidentiality and data-protection commitments.
• App store operators: Apple and Google receive purchase and subscription data necessary to process your transactions.
• Legal and safety: we may disclose information if required by law, legal process, or to protect the rights, safety, or property of users, the public, or Boothtime, including to respond to imminent risk of harm.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with notice to you where required.

We do not sell personal information and do not share it for cross-context behavioral advertising.

6. Data Retention

We retain account and session content for as long as your account is active, plus a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal content at any time by contacting us (see Section 12). Some information (e.g., transaction records, abuse-prevention logs) may be retained for longer where required by law or for legitimate safety reasons.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit, access controls, and provider vetting. No system, however, is perfectly secure, and we cannot guarantee the security of your information.

8. Your Rights and Choices

Depending on where you live, you may have rights to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information;
• object to or restrict certain processing;
• port your information to another service;
• withdraw consent where processing is based on consent; and
• lodge a complaint with your local data protection authority.

You may exercise these rights by contacting us at the address in Section 12. We will respond within the timeframes required by applicable law. For your protection, we may need to verify your identity before fulfilling certain requests.

California residents:the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights regarding your personal information, including the right to know, the right to delete, the right to correct, and the right to limit certain uses of sensitive personal information. We do not sell or “share” personal information as those terms are defined under the CCPA.

9. Children

The Service is intended for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International Transfers

We and our service providers may process personal information in the United States and in other countries that may not provide the same level of data protection as your home country. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers of personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Effective” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact

Boothtime LLC
Send a message: contact form
Web: paulboothbrand.com