Privacy Policy

Who we are

Cardinal OS is operated by GraviQ Studios, an independent studio in India. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), GraviQ Studios is the Data Fiduciary for the personal data you provide. You can reach us any time at graviqstudios@gmail.com.

What we collect

Account details from your Google sign-in: your name and email address.

The content you create inside Cardinal: habits, tasks, projects, goals, journal entries, body metrics, focus sessions and similar.

Your study content: subjects, chapters, topics, study tasks, practice answers and scores, and any notes or documents you upload (which we convert into a searchable form so the AI can answer from them).

Your Constellations activity: the servers you create or join, the messages you post in their channels, and the study stats you publish to them.

If you join a voice or video room, your camera, microphone and screen-share streams are carried in real time to the other people in that room. We do not record or store them.

Basic, non-identifying usage and device information that helps us keep the product reliable.

If you connect Google Calendar, Notion or Spotify, only the data that feature needs, accessed only while connected.

How we use your data

To run Cardinal: to calculate your Life Score, power its AI features, and show you your own information.

To support and improve the service, and to keep it secure.

We do not sell your personal data, and we do not use your content to train any AI model.

Who can access your data

Cardinal is a cloud service, not an end-to-end encrypted vault. Your data is protected from other users by row-level security, and from the public by authentication, but it is not hidden from us.

Only you, and authorised members of the GraviQ Studios team acting to operate, support or secure the service, can access your data. We access individual accounts only when necessary, for example to resolve a support request you raise.

We may disclose data if required by law, or to protect the rights, safety and security of our users and the service.

Constellations: what other people can see

Most of Cardinal is private to you. Constellations are the deliberate exception: they are shared spaces, so some of your information becomes visible to the other members of a server you join.

Members of a server you are in can see your display name, anything you post in its channels, whether you are currently online, and the study stats you publish: your readiness score, your day streak, your recent study minutes and your current goal.

A server is either private (joinable only with its invite code) or public. Public servers are listed in Discover, where any signed-in Cardinal user can see the server's name, description, icon and member count, and can join without an invite. Once they join, they can see the information above about you, even though you do not know them.

Please treat a Constellation as a public place and do not post anything there you would not want its members to have. You can leave a server at any time, and if you own a server you can make it private or delete it.

Voice and video rooms

Voice channels let you talk with the other members of a server in real time, using LiveKit as our real-time media provider.

Your camera and microphone stay off until you choose to join a room and your browser asks your permission. You can mute, turn your camera off, or leave at any time.

While you are in a room, your audio, video and any screen you share are relayed live to the other people in that room. We do not record, store or listen to them, and they are not used for AI or analytics.

We cannot control what other people in a room do. Anyone present can see and hear you, and could capture it using tools outside Cardinal. Only join rooms with people you are comfortable with, and only share a screen you are happy for them to see.

AI processing

To deliver a feature (such as your daily briefing, weekly and monthly reviews, asking your own notes, or the study assistant drafting a plan), the minimum content necessary is processed by our AI providers, Google (Gemini) and Anthropic (Claude), solely to return your result.

For the study assistant, that can include the subject, chapters and uploaded notes relevant to your question. Nothing is applied to your plan until you review and confirm it.

We count how many AI tokens your account uses each day so we can apply fair-use limits. That is a count, not a copy of what you asked.

This content is not used by us or by those providers to train their models.

Connected apps

Connecting an app is always your choice, and we request only the access the feature needs: Google Calendar (to sync your events), Notion (to import the pages you choose) and Spotify (to see your playlists for focus sessions).

Access tokens are encrypted before they are stored, and you can disconnect at any time from Settings, which revokes our access immediately.

Processors we rely on

We use a small number of trusted service providers to run Cardinal: Supabase (database, authentication and storage), Vercel (application hosting), Google Gemini and Anthropic Claude (AI features), LiveKit (real-time voice and video) and Brevo (email). Each processes data only as needed to provide their service to us.

Where your data is stored

Your data is stored with Supabase and is encrypted in transit. Some of the processors above operate outside India; by using Cardinal you consent to your data being processed in those locations under appropriate safeguards.

Retention

Constellation channel messages are kept for 90 days. Voice and video are never recorded, so there is nothing to retain once a room ends.

Everything else is kept until you delete it or close your account, after which it is removed within a reasonable period save where the law requires us to retain it. Note that messages you posted in a shared server stay visible to that server for the 90-day window.

Your rights

Under the DPDP Act you can access, correct, and erase your personal data, withdraw consent, and nominate another person to exercise your rights. You can export or delete your data from within the app or by contacting us.

If you have a grievance, contact our Grievance Officer: P. S. Satchith, GraviQ Studios, at graviqstudios@gmail.com. We aim to respond within the timelines required by law.

Children

Cardinal OS is intended for people aged 16 and over. We do not knowingly collect data from children below that age.

Cookies

We use only the essential cookies needed to keep you signed in and the service working. We do not use third-party advertising or tracking cookies.

Changes

We will post any updates to this policy on this page and refresh the date above. Material changes will be highlighted in the app.