This Notice supplements our Privacy Policy and is provided under the California Consumer Privacy Act, as amended ("CCPA/CPRA"), for California residents ("consumers").

1. Categories of Personal Information We Collect

Category	Retention Period/ Criteria	Examples	Purpose
Identifiers	For the life of the active account; deleted 14 days post account deletion request.	Name, email address, account ID, IP address	Create and secure your account; provide and personalize the Services
Sensitive personal information	For the life of the active account; chat messages/summaries are purged 14 days post account deletion request.	Health and reproductive information (e.g., last menstrual date, reproductive stage), precise geolocation (if shared), account log-in	Provide personalized wellness support; generate Nimo responses
Internet/usage activity	Up to 24 months for analytics optimization, or mapped to the account lifecycle.	App interactions, device data, timestamps	Operate, secure, and improve the Services
Commercial information	Retained for up to 7 years as required by applicable tax and statutory accounting laws.	Subscription and purchase records	Billing and account management
Audio/visual	For the life of the active account; deleted 14 days post account deletion request.	Content you submit (e.g., a profile photo)	Provide features you use
Inferences	Periodically consolidated and summarized; completely erased 14 days post account deletion request.	Personalized suggestions and emotional-trend summaries	Personalize your experience

We collect this information directly from you, automatically through your use of the Services, and as generated by our systems. These categories of personal information have been collected and processed over the preceding twelve (12) months.

2. How We Use and Disclose It

We use personal information for the purposes above and as described in our Privacy Policy. In the preceding twelve (12) months, we have disclosed the categories of personal information listed in Section 1 for our business operational purposes to the following tracking entities:

OpenAI, to power Nimo (your messages and relevant context are transmitted to OpenAI under its API business terms; OpenAI does not train on this content);
service providers / sub-processors (e.g., cloud hosting on Google Cloud / Firebase), under contract;
others at your direction; and
as required by law or to protect safety.

See our Sub-processor List.

3. Sale and Sharing

We do not sell your personal information for money. However, our use of certain analytics and advertising cookies (for example, Google Analytics and Meta Pixel) may be considered "selling" or "sharing" for cross-context behavioral advertising under the CCPA/CPRA. You can opt out of these through our cookie preferences tool and the "Do Not Sell or Share My Personal Information" link, and by enabling Global Privacy Control in your browser. We do not sell or share sensitive personal information, and we do not knowingly sell or share the personal information of anyone under 16.

4. Sensitive Personal Information

NinthMoon collects and processes Sensitive Personal Information (including reproductive and health data) exclusively to provide the core conversational wellness and tracking services you explicitly request. We do not use your Sensitive Personal Information to infer characteristics about you for purposes other than providing these requested Services, nor do we use it for cross-context behavioral advertising. Because our processing of Sensitive Personal Information is strictly limited to these legally exempted operational purposes under the CCPA/CPRA, NinthMoon is not required to offer a "Limit the Use of My Sensitive Personal Information" link.

5. Your Rights

California residents have the right to: know/access the personal information we collect; delete it (subject to exceptions); correct it; opt out of sale/sharing; limit use of sensitive personal information; data portability; and non-discrimination for exercising these rights. We offer a self-service data export (a readable JSON copy of your data) and self-service account deletion (a 14-day grace period, then comprehensive erasure) in the app. To opt out of any "sale" or "sharing," see our Do Not Sell or Share My Personal Information notice.

6. Exercising Your Rights

Submit a request to legal@ninthmoon.ai or through the app. We will acknowledge within 10 business days and respond within 45 calendar days (extendable as permitted). We may verify your identity. You may use an authorized agent with written permission.

7. Updates

We may update this Notice; changes are posted with a revised effective date.

8. Compliance with California law

Under California Civil Code Section 1798.83, California residents have the right to request once a year whether we share their personal information with third parties for those third parties' direct marketing purposes. NinthMoon does not share personal information with third parties for their direct marketing purposes. If you have questions regarding this practice, please contact us at legal@ninthmoon.ai.

Contact

legal@ninthmoon.ai — NinthMoon AI LLC, 8 The Green, Ste A, Dover, DE 19901

CCPA Consumer Rights