Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, date of birth, and other registration details.
• Profile Information: Demographic data including gender, household composition, income range, education level, employment status, and general geographic location.
• Survey Responses: Answers you provide to market research surveys offered through the App.
• AI Conversation Data: Content and metadata from interactions with our AI-powered follow-up conversation features, including engagement patterns and response length.

1.2 Facebook Login

If you choose to sign in using Facebook Login, we receive the following information from Meta:

• Public profile information (name, profile picture)
• Email address (if provided to Facebook)

This information is used solely for:

• Account creation and authentication
• Fraud prevention and account security
• Providing the Service

1.3 Information Collected Automatically

• Device Information: Device type, operating system, device identifiers, and mobile network information.
• Usage Data: App usage activity, features accessed, survey completion patterns, timestamps, and session duration.
• Location Data: Approximate geographic location derived from IP address. We do not collect precise GPS location data.
• Log Data: IP address, error logs, access times, and diagnostic data.

1.4 Information from Third Parties

We may receive limited information from third-party service providers, including:

• Tremendous (reward fulfillment confirmations)
• Fraud prevention and verification services to protect the integrity of the Service

1.5 Third-Party SDKs and Services

The App uses third-party SDKs strictly for essential operational purposes, such as analytics, fraud detection, crash reporting, authentication, and reward fulfillment.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and prevent duplicate or fraudulent accounts
• Match users with relevant surveys and research opportunities
• Process reward redemptions
• Aggregate and analyze responses for market research insights
• Improve Service quality, data integrity, fraud detection, and research analytics
• Communicate service-related notices and survey invitations
• Comply with legal obligations and enforce our Terms

3. AI Processing and Transparency

Vivarium uses artificial intelligence (AI) technologies to support core Service functions, including:

• Survey quality validation and response consistency checks
• Fraud detection and account integrity monitoring
• AI-powered follow-up conversations using large language model (LLM) technology
• Categorization and analysis of open-ended responses for research insights

AI processing is used to enhance Service quality, research accuracy, and user experience. All processing is conducted in accordance with this Privacy Policy and applicable laws.

4. How We Share Your Information

4.1 Market Research Clients

Survey results are shared with research clients only in aggregated and anonymized form. Personally identifiable information is never shared with clients.

4.2 Service Providers

We share limited information with trusted third-party providers who support Service operations (e.g., hosting, analytics, fraud prevention, reward fulfillment). These providers are contractually required to safeguard data.

4.3 Legal and Business Requirements

We may disclose information as required to comply with law, legal process, enforce agreements, protect rights and safety, or in connection with a business transaction such as a merger or acquisition.

4.4 With Your Consent

We may share information for other purposes when you explicitly consent.

4.5 De-Identified and Aggregated Data

Data that has been de-identified or aggregated such that it cannot reasonably identify an individual is not considered personal data and may be used without restriction for research, benchmarking, and product development.

5. Data Retention

We retain personal information for as long as your account is active and for seven (7) years following account deletion or termination. This retention supports:

• Longitudinal research integrity
• Fraud prevention and auditability
• Dispute resolution
• Legal, tax, and accounting compliance

Survey data may be retained indefinitely in anonymized and aggregated form for historical and longitudinal research purposes.

6. Data Security

We employ reasonable technical and organizational safeguards, including encryption, access controls, and security monitoring. However, no system can be guaranteed to be 100% secure.

7. Your Rights and Choices

7.1 Access and Portability

You may request access to your personal information and receive a copy in a portable format.

7.2 Correction

You may update profile information in-app or request corrections.

7.3 Data Deletion

You may request deletion of your personal data by:

• In-App: Navigate to Settings > Account > Delete My Data
• Email: legal@vivariumdata.com

Please include the email associated with your account and the subject line "Data Deletion Request." Requests are processed within 30 days. Aggregated and anonymized data may be retained.

7.4 Facebook Data Deletion

If you signed up using Facebook Login, you may also request deletion of your data through Facebook's settings. When you disconnect Vivarium Rewards from your Facebook account or submit a deletion request through Facebook, we will delete or anonymize your Facebook-sourced data within 30 days. You can also use the methods in Section 7.3 above.

8. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

To exercise these rights, contact legal@vivariumdata.com.

9. Colorado Privacy Rights (CPA)

Colorado residents have the right to:

• Access, correct, and delete personal data
• Obtain a portable copy of personal data
• Opt out of targeted advertising and sale of personal data (we do not engage in these practices)

To exercise these rights, contact legal@vivariumdata.com.

10. Do Not Track Signals

The App does not respond to browser "Do Not Track" signals.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

12. Changes to This Privacy Policy

We may update this policy periodically. Material changes will be communicated in advance where required. The date at the top of this policy indicates when it was last updated.

13. Contact Us

14. Additional Information

14.1 International Users

The Service is operated in the United States and is intended for use by U.S. residents only. Data is processed and stored in the United States.

14.2 Third-Party Links

We are not responsible for third-party privacy practices.

14.3 Redemption Partner

Rewards are fulfilled via Tremendous, subject to their privacy practices.

14.4 Meta Platform Terms

Our use of information received from Facebook Login complies with Meta's Platform Terms and Developer Policies. For more information about how Meta handles your data, visit: https://www.facebook.com/privacy/policy