Privacy Policy

1. Who We Are

Fiatos LLC (“Fiatos,” “we,” “us,” or “our”) is a Colorado limited liability company operating an autonomous product studio. We build and operate software products including, among others, Lucid (an adaptive reading product for children) and Dossier (a research and reasoning platform). This Privacy Policy describes how Fiatos collects, uses, discloses, and protects personal information across all Fiatos products and the website at https://fiatos.ai (collectively, the “Services”).

Contact: ben@fiatos.ai · 14335 West Center Drive, Lakewood, CO 80228, USA

2. Scope

This Policy applies to personal information we collect through the Services, including from website visitors, registered account holders, and end users of Fiatos products. Product-specific notices may supplement this Policy where a product collects categories of data not addressed here.

3. Information We Collect

We collect the following categories of personal information:

(a) Account Information. When you register for a Fiatos product, we collect your name, email address, and (where applicable) mobile phone number, password (stored hashed), and billing details processed by our payment processor.

(b) Mobile Phone Number and SMS Data. If you provide your mobile phone number to receive SMS messages (including one-time login codes / “magic links” and account or transactional notifications), we collect your phone number, the timestamps of messages sent and received, message delivery status, and your opt-in/opt-out status. We do not share mobile opt-in information or phone numbers with third parties or affiliates for marketing or promotional purposes.

(c) Children’s Information (Lucid). Lucid is intended for use by children under the supervision of a parent or guardian. Account creation and SMS authentication are performed by the parent or guardian. We collect a child’s first name (or chosen display name), age range, reading level, reading activity, and content preferences only after a parent has created an account and provided verifiable parental consent in accordance with COPPA. We do not knowingly collect a child’s email address, phone number, geolocation, or photographs.

(d) Usage Data. We collect information about how you interact with the Services, including pages visited, features used, query history (for AI/research products), session duration, IP address (used in coarse form for security and abuse detection), browser and device type, and referring URLs.

(e) Cookies and Similar Technologies. We use first-party cookies and similar technologies to keep you signed in, remember preferences, and measure performance. We do not use third-party advertising cookies.

(f) Communications. When you contact us by email or in-app, we retain your message and our response.

4. How We Use Personal Information

We use personal information to:

• Provide, operate, and maintain the Services;
• Authenticate users (including by sending one-time login codes by SMS);
• Send transactional messages (account notifications, security alerts, billing receipts);
• Personalize content (in Lucid, this means adapting reading material to a child’s level — only with parental consent);
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
• Comply with legal obligations and enforce our agreements;
• Communicate product updates that you have not opted out of receiving.

We do not sell personal information. We do not contribute customer content to third-party large language model training corpora.

5. SMS Program Terms

By providing your mobile phone number to Fiatos, you agree to receive transactional SMS messages from us. Message frequency varies by product use. Message and data rates may apply. Reply STOP at any time to opt out. Reply HELP for assistance, or email ben@fiatos.ai. We do not send marketing or promotional SMS, and we do not share your number with third parties for marketing purposes. By opting in, you consent to be contacted at the number provided, including by automated systems. Consent to SMS is not a condition of purchase.

6. How We Share Personal Information

We share personal information only as follows:

• Service providers that operate infrastructure on our behalf (e.g., cloud hosting on Google Cloud Platform, SMS delivery via Twilio, email via Resend, payments via Stripe). These providers are contractually limited to processing data for Fiatos and may not use it for their own purposes.
• Legal compliance when required by subpoena, court order, or other valid legal process, or to protect the rights, property, or safety of Fiatos, our users, or others.
• Business transfers in connection with a merger, acquisition, financing, or sale of assets (subject to confidentiality and continuity of this Policy).
• With your consent for any other disclosure.

7. Children’s Privacy (COPPA)

Lucid is designed for children, but accounts are owned by a parent or guardian. We do not collect personal information from children under 13 without verifiable parental consent. Parents may at any time review the personal information collected from their child, request deletion, and refuse further collection by emailing ben@fiatos.ai. We retain children’s data only as long as the parent’s account is active or as required to provide the Service, and we delete it on request.

Other Fiatos products (e.g., Dossier) are not directed to children and we do not knowingly permit children under 13 to register.

8. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information (subject to limited legal exceptions);
• Port your information in a machine-readable format;
• Opt out of certain processing.

California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising any right. We do not sell personal information and we do not share it for cross-context behavioral advertising. EEA, UK, and Swiss residents have rights under the GDPR/UK GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any right, email ben@fiatos.ai. We will verify your identity before responding and will respond within the timeframe required by applicable law.

9. Data Retention

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. Specifically:

• Account records: retained for the life of the account plus 7 years for tax and audit purposes;
• SMS opt-in records: retained for at least 4 years following last message;
• Children’s data (Lucid): deleted within 30 days of parental request or account closure;
• Backups: rotated on a 90-day cycle.

10. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS 1.2+) and at rest, hashed passwords, role-based access controls, and audit logging. No system is perfectly secure; we will notify affected users and applicable regulators of a security incident as required by law.

11. International Data Transfers

Fiatos operates in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA, UK, and Switzerland.

12. Third-Party Links

The Services may contain links to third-party websites and services. This Policy does not apply to third parties; review their policies independently.

13. Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top reflects the most recent change. Material changes will be communicated through the Services or by email at least 30 days before they take effect.

14. Contact

Questions, requests, and complaints:

Fiatos LLC
14335 West Center Drive
Lakewood, CO 80228, USA
ben@fiatos.ai