Effective Date: 4/15/2025

Last Updated: 4/15/2025

Welcome to ABOVE. Your privacy is central to everything we build. This Privacy Policy explains how Above Technologies  collects, uses, stores, and protects your personal data through our wearable AI device, mobile app, and website.

By using ABOVE, you agree to the terms of this policy. We are fully committed to complying with GDPR, CCPA/CPRA, and other global privacy frameworks.

1. Information We Collect

Personal Data

• Name, email address, and preferences provided during onboarding
• Communication data (e.g., support requests, feedback)
• Consent preferences (e.g., email/SMS opt-in, voice analysis)

Voice & Audio Data

• Audio captured by the ABOVE wearable (with explicit opt-in)
• Transcribed via Deepgram
• Analyzed by OpenAI’s ChatGPT to deliver personalized, context-aware insights

We do not store or analyze your voice without your permission.

Contextual & Analytical Data

• Transcription-derived insights are converted into vector embeddings via Pinecone
• Voice and emotional data are stored securely and treated as sensitive information

Technical & Device Data

• Device type, OS version, and usage logs
• Bluetooth, microphone, calendar, and location access (with consent)
• Country/region of use (captured at registration for regional compliance)

2. How We Use Your Data

We use data to:

• Provide personalized guidance, summaries, and emotional insight
• Train and optimize our AI systems (only with anonymized or user-consented data)
• Sync wearable and app data securely
• Offer contextual features (e.g., memory-based feedback, voice tone reflection)
• Support customer service and technical assistance
• Improve system performance and experience (using aggregated, anonymized data only)

3. User Rights & Controls

We honor all user data rights under GDPR and CCPA, including:

• Right to access: View what data we’ve collected
• Right to correct: Update or fix personal info
• Right to delete: Permanently delete your data or account
• Right to opt out: Disable analytics, voice features, or marketing communications
• Right to portability: Request and download your data
• Right to withdraw consent at any time

You can manage your data and permissions directly in the ABOVE app or email privacy@goabove.ai to submit a Data Subject Access Request (DSAR).

4. Consent Management

• A cookie consent banner is live on our website, allowing users to opt in or out of non-essential cookies
• Voice transcription and analysis only occur after explicit opt-in, with clear in-app explanations
• Email and SMS updates are opt-in only, and users can unsubscribe at any time

5. How Your Data Is Stored and Protected

• All data is encrypted in transit and at rest, including Firebase and mobile databases
• We treat voice and emotional data as highly sensitive and store them in secure environments
• We follow role-based access control, SSL encryption, and regular security audits
• Data retention: We retain user data only while accounts are active. If a user deletes their account, all data is permanently erased immediately

6. Third-Party Services

We work with a select group of trusted third-party services to power and enhance the ABOVE experience. All vendors we work with are fully GDPR and CCPA compliant and only access your data when necessary to perform their specific functions:

• Deepgram is used to transcribe audio captured by your wearable device. It only temporarily processes your audio data during transcription.
• OpenAI (ChatGPT) is used to generate personalized insights from transcribed text. It processes data temporarily and does not retain your transcripts.
• Pinecone stores vectorized representations of your transcription data. It does not store or access the original transcript or personal identifiers.
• Firebase (Google) provides secure user authentication and cloud-based database hosting. It accesses user data only as needed and all data is encrypted in transit and at rest.
• Mixpanel is used to analyze app usage patterns and performance. It collects anonymous data only and can be disabled at any time via in-app settings.

We do not allow these services to use your data for advertising, model training (OpenAI sharing is disabled), or any external purposes beyond the functions listed above.

7. Regional Compliance & Data Residency

To remain compliant with regional laws:

• EU users’ data is stored in European data centers (Firebase + S3 bucket)
• US users’ data is stored in US-based infrastructure
• At registration, we collect region info to ensure your data is routed accordingly
• EU visitors are served GDPR-compliant cookie banners

8. App Permissions (Mobile)

Android

Includes Bluetooth, microphone, calendar, storage, location, foreground/background services, and network access (for syncing and functionality).

iOS

Permissions include microphone, Bluetooth, location, calendar, contacts, notifications, and photos.

All permissions are only activated with consent and are used strictly to enable features you opt into.

9. Changes to This Policy

We may update this policy as our services evolve. If changes are material, we will notify you via email or in-app alerts and update the effective date above.

10. Contact Us

If you have any questions about this policy or how your data is handled, contact us anytime:

📧 team@goabove.ai