ExpertAgent Privacy Policy

Operator and scope

ExpertAgent is operated by Umber Lab Limited ("Umber Lab", "we", "our", or "us"). This Privacy Policy applies to the ExpertAgent iOS application, related account deletion resources, and associated support and backend services made available in connection with the app.

Categories of data we process

We may process account and profile information, including email address, user ID, username, bio, and display name where provided through Sign in with Apple.

We may process expert content you create, including roles, experience details, expertise tags, tone selections, special instructions, generated prompts, folder organization, and publish status.

We may process community-related information, including public experts you publish, likes, saves, reports you submit, and your public profile visibility to other users.

We may process subscription and transaction-related status information supplied through the Apple App Store and RevenueCat. We do not receive or store full payment card numbers.

We may process app interaction, diagnostic, and technical information, including product analytics events, crash logs, performance diagnostics, and similar telemetry generated through integrated or planned third-party services.

We may process onboarding preferences you select during first launch (such as working area and use-case selections), which are stored on your device and may be included in analytics when those services are active.

Sources of data

We receive information directly from you when you create an account, sign in, complete onboarding, build or publish experts, interact with community features, manage subscriptions, request support, or delete your account.

We also receive information automatically from the app, your device, Apple authentication and billing services, Supabase services, RevenueCat, OpenRouter (via our server-side functions), and analytics or diagnostics providers we integrate now or in the future.

Purposes of processing

We process data as reasonably necessary to provide, operate, secure, maintain, personalize, and improve ExpertAgent. This includes account creation and authentication, cloud sync, AI-assisted prompt generation, community features, content moderation, subscription management, product analytics, diagnostics, fraud prevention, abuse prevention, dispute handling, legal compliance, and execution of account-deletion workflows.

Third-party services

Supabase is used for authentication, database, and backend function operations. OpenRouter is used for server-side prompt generation and automated content moderation. RevenueCat is used for subscription management, entitlement validation, and purchase restoration. Apple provides Sign in with Apple and App Store billing.

We may integrate PostHog for product analytics and Sentry for crash and error reporting. When active, these services may process usage events, device and app metadata, crash logs, and related diagnostic information to help us understand how the app is used and to identify technical issues.

Community features and moderation

When you publish an expert to the community, your username and expert content become visible to other ExpertAgent users. Other users may like, save, or copy your published experts.

Users may report content they believe violates community guidelines. Reports are stored to support moderation and abuse prevention.

We use automated moderation, including server-side review through OpenRouter, to help identify content that may violate our guidelines before or after publication. We may remove content or restrict accounts where we reasonably believe guidelines have been violated.

AI processing

To generate expert prompts and perform content moderation, we send the information you provide in the Expert Builder (such as role, experience, tags, tone, and instructions) to our backend functions, which may forward relevant text to OpenRouter for processing. Generated outputs are stored in your account when you save them.

Data storage and security

Account and community data is stored in Supabase (PostgreSQL). Experts are cached locally on your device with SwiftData for offline access. Authentication tokens are stored in the iOS Keychain. Certain profile and preference data may also be stored locally using UserDefaults.

Data transmitted between the app and our backend is intended to be transmitted over encrypted network connections. No security safeguard can guarantee absolute security, and all networked services involve some degree of residual risk.

Data sharing and sale statement

We do not sell your personal data. Public experts you publish are visible to other ExpertAgent users as part of the community feature.

We disclose data to third-party service providers only to the extent reasonably necessary to operate, secure, maintain, analyze, improve, bill for, or lawfully administer the app and related services.

Retention

Account-linked data may be retained for so long as the relevant account remains active and such retention remains reasonably necessary for service delivery, support, analytics, diagnostics, subscription management, fraud prevention, or legitimate business and compliance purposes.

When you delete your account from within the app, we delete your profile and associated expert content from our backend systems. Certain limited records (such as abuse reports or billing-related metadata) may be retained where reasonably required for security, fraud prevention, abuse investigation, billing reconciliation, dispute handling, legal compliance, or enforcement of our terms.

Information stored locally on your device may remain until you clear app data or uninstall the app.

Account and data deletion

You can delete your account and associated data from Settings → Delete Account inside the signed-in app. The web account-deletion page at https://umberlab.com/expertagent/account-delete provides instructions and support contact information for users who cannot access the app.

Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. You may exercise these rights by using in-app account deletion, contacting us at privacy@umberlab.com, or writing to support@umberlab.com.

If you are in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you may have rights to know the categories of personal information collected, the purposes of use, and whether personal information is sold or shared. We do not sell personal information. You may request access to or deletion of personal information by contacting privacy@umberlab.com.

International processing

Because the app relies on third-party platforms and service providers, information may be processed in jurisdictions other than your country of residence, subject to the infrastructure, services, and operational arrangements used by those providers and by Umber Lab Limited.

Children's privacy

ExpertAgent is rated 4+ and is not directed at children under 13. If we become aware that personal data has been submitted in violation of this limitation, we may take reasonable steps to delete or restrict the affected account or information.

Policy updates

We may update this Privacy Policy from time to time to reflect operational, legal, technical, or product changes. Material changes will be reflected on this page and, when appropriate, in the app.

Contact

Privacy questions may be directed to privacy@umberlab.com or support@umberlab.com.