Privacy Policy

Last updated: October 18, 2026  |  Effective: October 18, 2026

Introduction

Netrium Technologies ("Netrium," "we," "our," or "us") operates Boardroom: AI Advisors ("Boardroom" or the "App"), a mobile application in which a board of AI personas discusses a topic you bring, live in a 3D boardroom, and then gives you minutes: a resolution, a vote, action items and the points the board disagreed on.

This Privacy Policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to the App and to the related pages on netriumtechnologies.com. It does not apply to any third-party website or service that we link to.

For the purposes of the EU and UK General Data Protection Regulation ("GDPR"), Netrium Technologies is the data controller of the personal data described in this policy.

1. Information We Collect

We collect only what the App needs in order to work. Every category is listed below, including data that is generated about you rather than provided by you.

1.1 Account and authentication data

• Email address — used to create your account and sign you in. If you use Sign in with Apple and choose to hide your email, we receive an Apple relay address instead of your real one.
• Password, if you sign up with email — handled by our authentication provider, which stores it only in hashed form. We never see or store your password in plain text.
• Sign in with Apple or Google — if you choose one, that provider confirms your identity to us and gives us a stable account identifier, your email address and, the first time you sign in with Apple, the name you choose to share. We do not receive your Apple or Google password.
• Apple sign-in token — if you sign in with Apple, we keep a token Apple issues so that, when you delete your account, we can revoke Boardroom's access to your Apple ID as Apple requires.
• Display name — the name you give the App so the board can address you.
• Account ID, authentication tokens and session identifiers — used to keep you signed in.

1.2 Meeting content

• Topics you bring to the board, and the case file the board prepares from them, including any answers or corrections you give.
• What you type or say during a meeting, and the board members' replies.
• Your board — the board members cast for your questions, the ones you mark as favourites or exclude, and which members you seated or muted in each meeting.
• People from your life — if you add someone you know to your board (for example "your sister"), the relationship and any description you write about them, which the App uses to let a board member speak from that person's point of view. See section 5.
• Meeting settings — the meeting style (Debate, Brainstorm or Decide), and when the meeting started and ended.
• Minutes — the resolution, each member's vote and reason, key points, action items, takeaways (such as a draft message or the numbers discussed), and what would change the board's mind.
• Memories — short notes the board keeps from your meetings (for example a goal you stated, an option you ruled out, or a member's last position) so that it can pick up where you left off when you continue a topic or meet the same board member again.
• Saved exchanges — passages of a meeting you choose to save.
• Feedback — whether you found a meeting worthwhile, and if you report a board member's message, the message concerned and any reason you add.

Your topics can be personal. People bring relationship, career, health and money questions to the board. We do not ask for this kind of information and do not use it for anything other than running your meetings, but whatever you choose to say is stored as part of the meeting.

Meetings you leave open. If a meeting is left open (for example because the App was closed or your phone switched off), or was left without minutes in an earlier version of the App, we close it and prepare its minutes from what was already said, so it appears in your past meetings.

1.3 Voice

Your voice: when you hold the microphone button, the App uses the speech recognition service built into iOS to turn your speech into text. Depending on your device and settings, that service may transmit audio to Apple for processing, subject to Apple's own privacy policy. This happens at the operating system level and is outside our control. We receive only the resulting text; we never receive or store a recording of your voice. We do not create a voiceprint or use your voice to identify you.

The board's voices: board members speak using synthetic voices that OpenAI generates from the text of their replies. That audio is generated on request and is not stored by us.

1.4 Purchases and plan

• Your plan (Free or Pro), subscription status, renewal and expiry dates, whether you are in a free trial, and your voice top-up balance.
• Purchase records — the product bought, the App Store transaction identifier, and the date, received from Apple through our subscription provider, RevenueCat. We never receive your card number or other payment details; Apple handles payment.

1.5 Usage records

To apply your plan's limits and to understand our costs, we record per meeting how many lines the board spoke, how long they took to say, how many seconds of the board's voice actually played, and how much AI processing the meeting used. These records are tied to your account and are not used for advertising.

1.6 Notifications

If you allow notifications, we store a push token for your device, an installation identifier, your notification settings (which kinds you want, your time zone, preferred day and hour, and quiet hours), when you last opened the App, and a record of the notifications we scheduled, sent and you opened. See section 6.

1.7 Data stored on your device

The App stores on your device your sign-in session, unsent question drafts, a copy of a meeting's delivered conversation until its minutes are safely saved to our servers, and small settings such as whether you have seen the welcome screens or been asked about check-ins. Signing out ends your session on the device; deleting your account also removes any queued meeting data.

1.8 Technical and log data

• IP address, request timestamps, and standard server logs, recorded by our hosting provider when the App communicates with our backend. These are used for security, abuse prevention, and debugging.
• Approximate location inferred from IP address (country or region level). We do not collect GPS or precise location.

2. How We Use Your Information

• To run your meetings — cast your board, prepare the case file, generate each board member's replies and voice, and respond to what you type or say.
• To produce minutes — write the resolution, votes, key points, takeaways and action items when a meeting ends.
• To remember context — recall relevant memories and earlier minutes when you continue a topic or meet a board member again.
• To provide your plan — confirm purchases, apply plan limits and voice minutes, and restore purchases.
• To send notifications you have allowed — reminders you set, and check-ins and invitations if you turn them on.
• To improve the App — for example, measuring whether check-ins help people come back, by comparing people who receive them with a small group chosen at random who do not. This uses our own records only, never your meeting content.
• To keep the service safe — screen messages for harmful content, pause a meeting and show crisis resources when someone may be at risk, review reported messages, and prevent fraud, abuse and unauthorised access.
• To maintain your account — authenticate you, keep you signed in, and store your meeting history.
• To support you — respond when you contact us.
• To comply with law — meet legal obligations, keep required financial records, and respond to lawful requests.

We do not use your meetings, messages or minutes to train our own AI models, and OpenAI does not use content sent through its API to train its models. We do not use your content for advertising or for marketing profiling.

3. Legal Bases for Processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6 GDPR:

Where we rely on legitimate interests, we have assessed that our interest in operating the service does not override your rights and freedoms. You may object to this processing — see Your Privacy Rights. Where we rely on consent, you can withdraw it at any time; this does not affect processing carried out before you withdrew it.

4. Who We Share Data With

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We disclose data only to the service providers below, each of which processes it on our instructions under its agreement with us.

Notifications never contain your topic or anything you said: only a short line, sometimes signed with a board member's first name, and an identifier that lets the App open the right screen. OpenAI does not use content sent through its API to train its models, and may retain it for up to 30 days to monitor for abuse before deleting it. Apple, Google and RevenueCat also handle data under their own privacy policies for the services they provide to you directly, such as your Apple ID or Google account. If we add or change a provider, we will update this list.

We may also disclose personal data (a) to comply with law, legal process, or an enforceable governmental request; (b) to enforce our Terms of Service or investigate potential violations; (c) to protect the rights, property, or safety of Netrium, our users, or the public; or (d) to a successor entity in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy.

When you use the App's share button to send minutes, a takeaway or a saved exchange to someone, you decide who receives it, and what they do with it is outside our control.

5. AI Processing and Safety Screening

Every board member is an AI persona, including a board member you create to represent someone you know. Their replies, votes and minutes are produced by a language model. They can be wrong, inconsistent or inappropriate, and they are not the views of any real person or professional advice. A board member speaking "as" someone in your life is a simulation built from what you told the App; it is not that person and does not know what they actually think.

Every message you send and every reply the board generates is screened automatically for harmful content. If the screening detects that someone may be at risk of self-harm or in crisis, the App pauses the meeting and shows crisis resources such as 988 in the United States. This screening is used only to keep the conversation safe. We do not use it, or anything else in your meetings, to make any decision that produces a legal or similarly significant effect on you. If you are in the EEA or UK and wish to contest an automated outcome, contact us at support@netriumtechnologies.com.

Please do not enter information you would not want processed by our AI provider — for example government identification numbers, financial account details, passwords, another person's confidential information, or sensitive details about someone else that they have not agreed to share.

6. Notifications

Notifications are optional. iOS asks your permission before the App can send any, and you can change it at any time in your iPhone's Settings or in the App under Settings > Notifications.

• Reminders are sent only for meetings you ask to be reminded about, at the time you choose.
• Check-ins and invitations from your board are sent only if you turn them on. They may include a welcome after you sign up, a nudge when you have not used the App for a while, a prompt to finish a meeting that ended without a decision, and an occasional idea for a new question. They are based on your activity in the App (for example when you last opened it and whether a meeting reached a decision), are limited to at most two a week, are never sent during your quiet hours or within a day of you using the App, and stop if you do not come back.

To learn whether check-ins are useful, a small group of people chosen at random who turn them on do not receive them, and we compare how often each group returns. You can turn check-ins off at any time, which also removes you from this comparison.

7. Security

We apply the following technical and organisational measures:

• Encryption in transit using TLS for all communication between the App, our backend, and our providers.
• Encryption at rest for stored data, applied by our hosting provider.
• Row-level security in our database, so records are readable only by the account that owns them, enforced at the database layer rather than only in application code. Sign-in tokens from Apple are readable only by our servers.
• No secret credentials in the App. The App ships only with public keys that carry no privileged access; all privileged operations, including calls to our AI provider, run server-side.
• Access controls limiting which Netrium personnel can access production data, granted on a need-to-know basis.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you use the App at your own risk. Keep your device and your password secure, and tell us promptly if you believe your account has been compromised.

8. How Long We Keep Data

Deleting a meeting: open the meeting's minutes and tap Delete. We immediately erase its transcript, minutes, votes, action items, reports and anything the board remembers from it.

Deleting your account: go to Settings and tap Delete account. We immediately erase your account and all of your meetings, minutes, memories, notification settings and usage records from our production systems, revoke Boardroom's access to your Apple ID if you signed in with Apple, and sign you out. Deleting your account does not cancel an App Store subscription — cancel it in your iPhone's Settings > your name > Subscriptions. Apple and RevenueCat keep their own records of past purchases.

In both cases the deletion is permanent and cannot be undone. Copies held in encrypted backups are overwritten on our normal backup rotation, within 30 days of deletion.

9. Your Privacy Rights

Subject to your local law, you have the right to:

• Access the personal data we hold about you, and receive a copy in a portable, machine-readable format.
• Correct inaccurate or incomplete data.
• Delete a meeting, or your account and associated personal data.
• Restrict or object to processing based on our legitimate interests.
• Withdraw consent at any time where we rely on it, for example by turning off check-ins, without affecting processing carried out before withdrawal.
• Not be discriminated against for exercising any of these rights. We will not degrade the service or charge you differently.

How to exercise your rights

You can delete a meeting or your whole account directly in the App, as described in section 8, and manage notifications in Settings. For any other request, or if you cannot use the App, email support@netriumtechnologies.com from the address associated with your account. We will confirm once your request is complete.

We respond to rights requests within 30 days (or 45 days for requests under the CCPA, extendable by a further 45 days where permitted, with notice to you). We may need to verify your identity before acting, which we do by confirming control of the email address on the account. We will not ask you for more personal data than is necessary to verify you.

If someone you added to your board wants information about them removed, they can contact us at the same address, and we will help you delete it.

If you are in the EEA or UK and believe we have not handled your data lawfully, you may lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.

10. California Privacy Rights

This section applies to California residents under the California Consumer Privacy Act as amended by the CPRA.

We have not sold or shared personal information in the preceding 12 months, and we do not do so now. "Sale" and "sharing" carry their CCPA meanings, including sharing for cross-context behavioural advertising. We do not knowingly sell or share the personal information of consumers under 16.

Categories of personal information we have collected in the preceding 12 months:

Sensitive personal information. We do not intentionally collect sensitive personal information as the CPRA defines it. A topic you bring may contain sensitive details, such as information about your health or sex life; we do not seek, use, or disclose that information for any purpose beyond running your meetings and keeping them safe. Because we use sensitive personal information only for purposes permitted under the CCPA regulations, we do not offer a separate "Limit the Use of My Sensitive Personal Information" control — but you may delete any meeting at any time.

Sources of the information above: you, your device, Apple and Google when you sign in with them, Apple and RevenueCat for purchases, and our other service providers. Business purposes for collection are those listed in section 2. Recipients are the service providers listed in section 4.

You may exercise your rights to know, delete, correct, and opt out by emailing support@netriumtechnologies.com. You may use an authorised agent, who must provide written proof of authorisation; we may still ask you to verify your identity directly.

11. International Data Transfers

We are based in the United States, and our providers process data in the United States and other countries. If you use the App from outside the United States, your information will be transferred to and processed in a country whose data protection laws may differ from those of your own.

Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), or another lawful transfer mechanism such as the EU-US Data Privacy Framework where a provider is certified, together with supplementary technical measures including encryption in transit and at rest. You may request a copy of the relevant safeguards by contacting us.

12. Children's Privacy

The App is not directed to children. You must be at least 13 years old to use Boardroom, or older if the age of digital consent in your country is higher, and by using it you confirm that you are. We do not knowingly collect personal data from anyone under 13. If we learn that we have, we will delete it promptly. If you believe a child under 13 has provided us with personal data, contact support@netriumtechnologies.com and we will act on it.

13. Data Breach Notification

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, where GDPR requires. Where the breach is likely to result in a high risk to you, or where applicable state law requires it, we will notify you directly without undue delay, describing what happened, what data was involved, and what steps you can take.

14. Changes to This Privacy Policy

We may update this Privacy Policy as the App evolves. We will change the "Last updated" date above and, for material changes — such as collecting a new category of data, adding a new AI provider, or using your data for a new purpose — we will give you prominent advance notice in the App or by email before the change takes effect. Where the change requires your consent, we will ask for it. Previous versions are available on request.

15. Contact Us

For any question, concern, or request about this policy or your data:

• Privacy enquiries and rights requests: support@netriumtechnologies.com
• General contact: netriumtechnologies.com/contact

Netrium Technologies, data controller for Boardroom: AI Advisors.