Privacy Policy

Effective date: October 28, 2026   Version: 2.0   Replaces: the policy last updated May 25, 2026.

Summary in plain words

1. Who we are

The apps are published by Future @I LLC, a California limited liability company. Contact: privacy@futureati.app for privacy requests, legal@futureati.app for legal matters, support@futureati.app for help with an app.

"FM" is the name of the server we run for these apps (fm.futureati.app). It receives only the data listed in this policy.

2. Apps covered

Apps not listed (for example GuardianNest and Aegis, which are not yet on Google Play) are not covered until a section for them is added. This table describes the versions we checked on 2026-10-27. A later version may change what is collected; the app section is updated before that version is released. Version history: 2.0, October 28, 2026 (all six apps in one policy; server data and retention periods listed). Earlier: May 25, 2026.

3. What our server (FM) receives and keeps

This is what FM holds, checked against the live server on 2026-10-27. Which apps send which items is in the app sections.

Cloudflare: our server sits behind Cloudflare. Cloudflare sees the IP address and the traffic metadata of every request and delivers it to us over an encrypted connection. We do not store IP addresses in the study-room tables.

The server holds no health records, no immigration documents and no financial records from any app listed above (we checked the server database on 2026-10-27).

4. Legal bases (EU and UK users)

We use the data above to provide the app you installed (contract), to keep it secure and working and to prevent abuse (legitimate interests), to comply with the law, and for ads and, where an app asks, for any optional feature (consent, which you can withdraw in the app or in Android settings). We have not appointed a representative or data protection officer in the EU or UK. EU and UK users can use the rights in section 8 by writing to privacy@futureati.app.

5. Who we share data with

• Cloudflare, Inc.: network and security provider for our server and website.
• Google: Google Play (downloads, subscriptions and billing; Google handles your payment card, we never see it), and Google AdMob in apps that show ads (section 11).
• Hugging Face: when you choose to download an AI model, your phone connects to Hugging Face directly. It sees your IP address and standard request data. We send it nothing.
• Google (email): mail you send to our addresses is received by Cloudflare Email Routing and forwarded to our mailbox at Google (Gmail), and our replies go out through Google's mail servers.
• Stripe, Inc.: if you pay on our website instead of in Google Play, Stripe processes the payment and handles your card; we never see it. None of the apps in this policy uses Stripe inside the app.
• Legal and safety: authorities when required by law or valid legal process, and to protect people from harm. If the company is sold or merged, data may transfer to the new owner under this policy.

We do not sell your personal information for money. Showing ads through AdMob involves giving Google an advertising identifier, which some state laws call "sharing" for advertising; section 11 explains how to opt out. To opt out of ads personalization, use the Android setting named there.

6. Keeping and deleting data

The retention periods are in the table in section 3. On your phone, an app keeps your content until you delete it, delete the app, or use the app's delete option (listed per app). Deleting inside an app does not always delete the technical record on our server; the app sections say where that is the case. To ask for deletion of server records, contact us (section 8). Records are not linked to your name, so we may need your installation ID or device details to find them.

7. Security

• All traffic between the apps and FM uses HTTPS (TLS 1.3 at Cloudflare).
• On the server, study-room names and messages are encrypted with AES-256-GCM, and passwords are stored only as salted hashes. Other server records (section 3) are not encrypted field by field.
• On your phone, protection depends on the app: OpsFlow AI and Future Health AI (from version 1.1.1) encrypt their database file themselves (SQLCipher). The other apps keep their data in Android's private app storage, protected by your phone's lock screen and device encryption. We do not claim the apps or the server are impossible to breach.
• If a breach affecting you happens, we will tell you and the authorities as the law requires.

8. Your rights and how to use them

Everyone: you can ask what we hold about your installation or account, ask us to correct or delete it, and ask us to stop using it. California (CCPA/CPRA) and other US states: the rights to know, delete, correct, opt out of sale or sharing for advertising, limit use of sensitive information, and not be treated worse for using these rights. Washington, Nevada and other states with consumer-health-data laws: the same access and deletion rights for health data; Future Health AI keeps health records on the phone only (section A). EU/UK: access, rectification, erasure, restriction, portability, objection, withdrawing consent, and a complaint to your data protection authority.

How: email privacy@futureati.app and include your installation ID (if your app shows one; if not, tell us the app, your phone model and about when you installed it) or the email of your account. We answer within 45 days (30 days for EU/UK requests). We may ask you to prove who you are before acting on a request.

9. Children

The apps are not for children under 13. We do not knowingly collect data from children under 13 and will delete it if we learn we have. Future Health AI has parent and guardian profiles for children, handled entirely on the phone (section A). GigApp is for adults (18 and older). BrainForge is for ages 13 and up. OpsFlow AI and GoopNet are for ages 13 and up. VisaKapatid is for adults (18 and older), because it handles immigration case information.

10. Where data is processed

Our server is in the United States, and so are Cloudflare's and Google's processing locations that serve it, as well as processing elsewhere. If you use the apps outside the United States, your data is transferred to the United States. The data protection rules of the United States may give you less protection than those of your own country. The records we receive are limited to those in section 3.

11. Advertising

Apps with a free tier show ads from Google AdMob. Google receives your advertising ID, IP address, device and OS information, and how you interact with the ad. You can reset your advertising ID, or opt out of ads personalization, in Android Settings > Google > Ads. Paid tiers remove ads. Which kind of ads each app requests is in the app section. In these versions: BrainForge shows Google's consent prompt; Future Health AI and VisaKapatid request non-personalized ads only; GigApp, OpsFlow AI and GoopNet show ads without a consent prompt, so their ads may be personalized.

12. AI features

AI answers are generated by models that run on your phone. The AI can be wrong. It does not give medical, legal, tax or immigration advice. If you tap Report on an AI answer in an app that has that button, the question and answer you report are sent to us (section 3).

13. Changes

We will post changes on this page with a new date and a version history. If a change materially affects what an app collects, we will say so on this page before it takes effect and, where the app can show a message, in the app.

A. Future Health AI (version 1.1.2)

Source: the Future Health AI team's verified policy (futureati.app/policy, version 1.1.2, updated October 31, 2026), which stays online as the full notice for this app.

• Health data: health records, medications, vitals, profile and emergency contacts stay on your phone and are never sent to our servers. No account or sign-in.
• Sent to FM (version 1.1.2): when the app starts it registers with FM: a random installation ID the app created, app version and build, platform, OS version, device model. FM answers with an install ID and a token, which the app keeps in encrypted storage on the phone and sends with later requests. While the app is open it sends an app-started event, a heartbeat every 5 minutes (every 10 minutes in the background) and the name of each screen you open. Crash reports (error type, a short message and part of the stack trace) are sent. Once a day, over Wi-Fi, the app sends a diagnostic summary (counts of app performance and screen opens). The switch for it (Profile > Diagnostic Data, on by default) turns off only this daily summary: the start, heartbeat and screen-name events described here are still sent. Also: support messages you choose to send, and the time and size of a backup you create (not its content). No name, email or health data.
• Android device ID and AI question count: the Android device ID and the daily AI question count (the free-use device record, section 3) are sent only when you use the AI assistant, which is not available in this version. Version 1.1.0 sent the device ID at every start; 1.1.1 and later do not.
• Ads and purchases: Google AdMob banner on the Home screen, non-personalized ads requested, no consent prompt yet for EU/UK users. Paid features, when offered, use Google Play Billing; in this version paid plans are not yet open. The app owner can give a person an access code that turns off ads for a set time; the code is checked on the phone and is not sent to us or anyone else (the app keeps the code number, its length, the day entered, the end date and the time the app was last opened).
• Storage: from version 1.1.1 the on-device database is encrypted by the app (SQLCipher, AES-256) on top of Android private storage and your phone's encryption; an older database is converted once at update and the old file is removed only after every record is checked. Backup files made by the app are encrypted; exports to Downloads are plain text. In-app backups are deleted on uninstall.
• Deleting: Profile > Delete my data erases everything on the phone. It does not delete the technical records on FM (section 3), which expire as listed or on request.
• AI assistant: in this version the AI assistant is not available yet ("Coming Soon"). The app downloads no AI model and does not contact Hugging Face until the AI is released.
• Health disclaimer: the AI is informational only, not a diagnosis, not for emergencies. In an emergency call 911 (or your local emergency number).

B. GigApp (version 2.1.1)

• Your records: income, expenses, mileage with odometer readings, shifts, receipt photos, goals and AI chats are stored in an unencrypted SQLite database in the app's private storage. Receipt text recognition and AI run on your phone. Passwords for the in-app sign-in are stored as bcrypt hashes on the phone; sign-in tokens use Android's encrypted storage.
• Location: GPS (precise) is used only for automatic mileage tracking, after you tap Auto-Track and grant permission, with a notification showing while it runs. Background location is optional and asked separately. Location is stored on your phone.
• Microphone and camera: microphone for voice questions (processed on the phone), camera or gallery to add receipts.
• Sign-in: you can use a name only, or an email and password. With email sign-in the app sends your email and password to our server at sign-in, over HTTPS (the account record is in section 3).
• What the app tries to send to FM (read from the code): sign-in, update check, check-in, diagnostic events and crash reports (error reports have an opt-out in Settings), and, in the code, your income, expense, mileage and shift records and AI chat history for sync and backup, and your AI questions for a knowledge lookup. FM holds no GigApp installs or records. These sync, backup and lookup features do not work today: our server does not accept those requests and holds none of your GigApp records (checked 2026-10-29). Before any of them is switched on we will update this policy to say what is sent, how it is encrypted and how long we keep it.
• Exports: backups and Schedule C PDF/CSV exports are written to your Downloads folder, readable by other apps with storage access.
• Ads and purchases: AdMob ads on the free tier (interstitial on about half of app starts), Google Play Billing subscriptions (monthly and yearly MAX). No consent prompt, ads may be personalized.
• Deleting: Profile > Delete account removes your data on the phone after you enter your password. The app also asks our server to delete a server-side account; that request does not succeed today, and the server holds no GigApp records. Technical records can be deleted on request (section 8).
• Not tax advice: mileage and tax figures are estimates; see a tax professional.

C. OpsFlow AI (version 2.4.4)

• Your content: tasks, communications, invoices, documents, workflows, schedule, timesheets and chats are stored on your phone in a database encrypted with SQLCipher (key kept in the Android Keystore). Your first and last name are stored on the phone. AI runs on the phone. You can export or import an encrypted .futureai file; nothing is uploaded.
• Sent to FM: at first launch the app registers: app version, build, platform, OS version, device model, a device summary (manufacturer, model, SDK number). The app also sends your Android ID with that request; FM ignores it and does not store it (the server stopped storing it on 2026-10-27 and we removed the one earlier record). Then: check-in (version, build), a configuration check, diagnostic counters every five minutes only if something was slow (with device model and Android version), and crash reports (the error message and the first 2,000 characters of the stack trace). If you tap Report on an AI answer, the question, answer, category and note are sent.
• Turning diagnostics off: Settings > Privacy has a switch that turns off anonymous diagnostics and crash reports. The registration at first start is still sent.
• Not used: no sign-in, location, camera, microphone, contacts. The app asks only for notification permission.
• Ads and purchases: AdMob banner, interstitial and rewarded ads on the free tier (ad content rated PG), no consent prompt. MAX subscription (monthly or yearly) through Google Play Billing.
• Deleting: Settings > Delete My Data erases everything on the phone. It does not delete the records on FM; they expire as listed in section 3.

D. BrainForge (version 1.2.10)

• Your content: display name (1 to 30 characters), subject, learning style, daily goal, courses, flashcards, notes, grades and AI chats are stored on your phone in an unencrypted SQLite database in private storage. AI runs on the phone; only the model file is downloaded (from Hugging Face). Data is not included in Android cloud backup.
• Voice Study: uses the microphone. Audio is not stored by BrainForge. Speech-to-text is done by your phone's speech service, which can be provided by Google under its own policy.
• Import from URL: if you import from a web page or YouTube captions, your phone connects to that site.
• Backup: MAX backup creates an encrypted file on your phone (scrypt and AES-256-GCM). Nothing is uploaded. Free exports (CSV or JSON) are plain text and include your name and email fields if you filled them.
• Study Group (MAX, 13+): you confirm you are 13 or older (answering "under 13" locks it on that install). When you create or join a room, the app registers with FM (app name, version, platform), and sends your display name, room code, subject, title, room size and your messages to FM. Everyone in the room sees your display name and a four-character ID, your messages and the time. Names and messages are encrypted on the server and deleted 24 hours after the last message or when the host closes the room. Reports keep a copy of the reported message for 30 days. Blocking a person is stored only on your phone. Messages cannot contain links, email addresses or phone numbers. Do not share personal information in chat. Rooms are not monitored in real time; use Report to tell us about abuse.
• Ads and purchases: AdMob banner, interstitial and rewarded ads on the free tier (ad content rated PG), with Google's consent prompt. MAX monthly or yearly through Google Play Billing, no free trial.
• Deleting: Settings > Delete All Local Data and Data & Privacy erase what is on the phone and also ask our server to delete your Study Group messages and names. If the phone cannot reach our server at that moment, it still erases the phone, and the app asks the server again the next time it is opened with a connection. Anything left on FM expires on its own (above).

E. GoopNet (version 1.1.0)

• Your content: quest progress, keep/sell lists, trackers and field notes (text, tags, coordinates you type, and photos taken with the camera app) are stored on your phone in an unencrypted database and the app's private folder. No account. Not included in cloud backup. Removing the app removes them.
• Game data: the app downloads public Arc Raiders game data from MetaForge (metaforge.app) and a community data source (arcdata.mahcks.com) and a content file from GitHub, and loads map pages from metaforge.app in a web view that runs that site's code. Those sites see your IP address. We send them no personal data.
• Sent to FM: to choose our own cross-promotions the app sends your Android ID, the app name and whether a promotion was shown, tapped or dismissed. The server stores the Android ID only as a keyed hash and keeps these records for 90 days (section 3). The app does not register an installation with FM.
• Ads and purchases: AdMob banner ads (no consent prompt, ads may be personalized). One-time premium purchase through Google Play Billing removes ads.
• Deleting: remove items inside the app, clear app storage, or uninstall. Ask us (section 8) to delete the promotion records.
• GoopNet is an unofficial companion for Arc Raiders. It is not made, endorsed or sponsored by Embark Studios or the game's publisher.

F. VisaKapatid (version 1.1.0)

• Very sensitive data: the app can hold your name, birth data, address, phone, passport number, A-number, last four digits of your SSN, income, employer, family members, photos of documents and case notes. It is stored on your phone in a local database. Only some fields (email, phone, document OCR text, file path) are encrypted individually; the rest, including passport number, is not. The app allows Android auto-backup of its files to your Google account.
• Sign-in: email and password; biometric unlock.
• Not legal advice: VisaKapatid is an organizer and guide. It is not a law firm and does not give immigration legal advice.
• What the app tries to send to FM (from the code): registration and sign-in (email, password, name, role, device info), check-in, diagnostic events, a push token, support tickets, purchase verification, a device fingerprint (hash of Android ID, model and build) for fraud checks, alerts to us that include your email, name and partner's email, partner pairing (6-character code, user IDs and emails), document metadata (type, name, file hash, status), cloud backup of an encrypted export, and optional anonymous experience sharing (off by default). These features do not work today: our server holds no VisaKapatid records (checked 2026-10-29) and does not accept most of those requests. Before any of them is switched on we will update this policy to say what is sent, why, how long we keep it and how to delete it. The app's own policy screen says documents are never uploaded and that no personal information is in analytics; where it differs from this section, this section is the current statement.
• Ads and purchases: AdMob on the free tier, non-personalized ads only, content rated PG. Subscriptions (monthly and yearly MAX) through Google Play Billing. No consent prompt and no age gate.
• Deleting: Account > Delete Account erases data on the phone. The app does not ask our server to delete anything today, and our server holds no VisaKapatid records; the 30-day promise in the app's own text therefore applies to what is on the phone. Technical records can be deleted on request (section 8).

Contact

Future @I LLC, a California limited liability company · Privacy: privacy@futureati.app · Legal: legal@futureati.app