Privacy Policy

Introduction

ekkOS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (encrypted)
• Account creation date

Memory and Pattern Data

To provide our core service, we store:

• Conversation data you choose to save (via the capture mechanism)
• Patterns you crystallize
• Memory embeddings for semantic search
• Pattern application history and success metrics
• Reflex API validation results

Usage Information

We automatically collect:

• API usage metrics (number of calls, endpoints used)
• Service performance data
• Error logs and crash reports
• IP addresses for security purposes
• Browser type and device information

How We Use Your Information

We use the collected information to:

• Provide and maintain the ekkOS memory service
• Process your memory queries and pattern searches
• Improve pattern learning algorithms
• Send service-related notifications
• Respond to your support requests
• Monitor and analyze usage trends
• Detect and prevent fraud and abuse
• Comply with legal obligations

Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS 1.3
• Passwords are hashed using bcrypt with high cost factors
• API keys are hashed and never stored in plain text
• Database access is restricted and logged
• Regular security audits and penetration testing
• Automated backup systems with encryption

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

Data Retention

We retain your data according to the following policies:

• Free Tier: 30-day retention for episodic memory, permanent for crystallized patterns
• Pro Tier: ekkOS_Forever_Memory™ - unlimited retention
• Deleted Accounts: Data deleted within 30 days, except where required by law
• Logs: Retained for 90 days for security and debugging purposes

Data Sharing and Disclosure

We do NOT sell your personal information. We may share data only in these circumstances:

• Service Providers: Third-party services that help us operate (e.g., hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets
• Consent: When you explicitly agree to sharing

All third-party service providers are contractually obligated to protect your data.

Collective Memory and Privacy

Our Collective Memory feature (Layer 6) allows anonymous pattern sharing:

• All personally identifiable information is removed
• Patterns are aggregated and anonymized
• You can opt out of collective learning in your settings
• Contributions to collective memory are voluntary

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in machine-readable format
• Objection: Opt out of certain data processing
• Withdraw Consent: Revoke previously granted permissions

To exercise these rights, contact us at privacy@ekkos.dev

Cookies and Tracking

We use minimal cookies for essential functionality:

• Authentication: Session cookies to keep you logged in
• Preferences: Local storage for your settings
• Analytics: Anonymous usage statistics (opt-out available)

We do not use third-party advertising cookies or tracking pixels.

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

International Data Transfers

Your data may be transferred to and stored in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including standard contractual clauses approved by regulatory authorities.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: