Legal

Privacy Policy

Last updated: April 23, 2026

Effective date: April 23, 2026

Introduction

Devello Inc ("Devello," "we," "us," or "our") operates the following products and services (collectively, the "Services"):

  • Devello Studios (devellostudios.com) — digital creative studio and product home
  • Sygil — iOS thinking tool offering four lenses on any question (App Store)
  • Osmo AI — iOS voice-first personal AI assistant (App Store)
  • Sivra (also marketed as Research Engine; sivra.app) — recursive research platform available on iOS (App Store) and on the web
  • Devello Inc (develloinc.com) — the legal entity, including its interiors and software consulting practice

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Services. By using the Services, you consent to the practices described herein. This policy supplements, and does not replace, any additional privacy notice presented within a specific product or through Apple's App Privacy disclosures on the App Store.

1. Information We Collect

1.1 Information You Provide

  • Account information: name, email, and profile photo when you sign up or sign in. We support Google OAuth and Sign in with Apple. When you use Sign in with Apple with a Hide My Email alias, we receive only the private relay address and never your underlying email.
  • Payment information: subscription and purchase details processed by Apple In-App Purchase (for iOS apps) or Stripe (for web purchases). We do not receive or store full credit card numbers. Apple shares with us the subscription status and transaction identifiers necessary to provision your entitlement.
  • User content: prompts, questions, files, URLs, documents, images, voice recordings, and research sources you submit to the Services for processing.
  • Communications: messages you send to support, feedback forms, and investor correspondence.

1.2 Information Collected Automatically

  • Device information: device model, OS version (e.g., iOS 17+), language, time zone, and screen characteristics.
  • Usage data: features used, session length, in-app navigation, and anonymized error reports.
  • Log data: IP address, timestamps, referring URLs, and server logs for security and debugging.
  • Cookies and similar technologies: session cookies and preference cookies on our web properties. We do not use cross-site tracking cookies.

1.3 Apple-Specific Data Practices

  • App Tracking Transparency (ATT): Our iOS apps do not track you across apps or websites owned by other companies. We do not present an ATT prompt because we do not engage in tracking as defined by Apple.
  • Apple Privacy Nutrition Label: Our App Store listings accurately reflect the data categories listed in this policy. Data linked to you is limited to what is strictly needed to operate your account and subscription.
  • iCloud and on-device storage: Where feasible, Sygil and Osmo store preferences and content on-device. Sygil's Kids Mode stores no data off-device.
  • Device identifiers: We rely on Apple's DeviceCheck / App Attest and anonymous install identifiers for fraud prevention and receipt validation. We do not collect the IDFA.

1.4 Information from Third-Party Services

If you sign in via Google or Apple, we receive basic profile information authorized by those services. If you connect optional integrations (for example, Google Calendar or Gmail inside Osmo), we receive only the scopes you explicitly approve and use them only to perform the in-app action you request.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Services
  • Process AI requests (image generation, voice transcription, research synthesis) and return results
  • Authenticate your account and protect against fraud, abuse, and unauthorized use
  • Process subscriptions and purchases through Apple In-App Purchase or Stripe and provide receipts
  • Communicate product updates, important service notices, and respond to support inquiries
  • Improve our Services through aggregated, non-identifying usage analysis
  • Comply with legal obligations and enforce our Terms of Service

3. Third-Party Service Providers (Subprocessors)

We use trusted providers to operate the Services. These providers process your data solely on our behalf under written data-processing terms. Current subprocessors include:

  • Apple Inc. — App Store distribution, In-App Purchase, Sign in with Apple, push notifications
  • Anthropic PBC — large-language-model inference (Claude) for Sygil, Osmo, and Sivra
  • Google LLC — Gemini AI inference, Google OAuth, Google Calendar / Gmail integrations (only if you explicitly connect them)
  • Replicate, Inc. — hosted ML models for image generation and relighting
  • Supabase, Inc. — managed PostgreSQL database and authentication infrastructure
  • Stripe, Inc. — payment processing for web purchases
  • Vercel Inc. — web hosting and edge delivery

Apple, Anthropic, Google, and Stripe will each process your data under their own privacy policies in addition to ours. AI model providers do not use your prompts or outputs to train their models without your explicit consent.

4. Sharing and Disclosure

We do not sell your personal information. We share information only:

  • with the subprocessors listed in Section 3
  • to comply with a lawful request, court order, or applicable regulation
  • to protect the rights, property, or safety of Devello, our users, or the public
  • in connection with a merger, acquisition, or sale of assets (you will be notified of any change in ownership)

5. Data Retention

We retain account data for as long as your account is active. When you delete your account, we remove or irreversibly anonymize personal information within 30 days, except where we are legally required to retain it (for example, tax records for transactions).

You can request account deletion from within the app settings or by emailing sales@develloinc.com. Sygil and Osmo also comply with Apple's in-app account-deletion requirement.

6. Security

We protect your information using industry-standard safeguards including TLS 1.2+ in transit, encryption at rest for sensitive fields, principle-of-least-privilege access controls, and regular review of our subprocessors. No online service is perfectly secure — please use a strong, unique password and notify us immediately if you suspect unauthorized access.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — request a copy of your personal data
  • Correction — correct inaccurate or incomplete data
  • Deletion — request deletion of your personal data
  • Portability — receive your data in a portable format
  • Restriction — limit processing of your data
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — revoke previously granted consent

To exercise any of these rights, contact us at sales@develloinc.com. We will respond within 30 days.

8. Children's Privacy

Devello Studios is not intended for children under 13 on its web platform. We do not knowingly collect personal information from children under 13 through devellostudios.com.

Sygil's Kids Mode, designed for ages 8–12, complies with the U.S. Children's Online Privacy Protection Act (COPPA) and Apple's Kids Category guidelines. When Kids Mode is active: no personal information is collected; all content remains on-device; there are no ads, no third-party trackers, and no outbound links; and parental guidance is recommended.

If you believe we have inadvertently collected personal information from a child under 13, contact sales@develloinc.com and we will delete it promptly.

9. International Data Transfers

Our Services are hosted in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our subprocessors operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for international transfers.

10. California Privacy Rights (CCPA / CPRA)

California residents have the right to:

  • Know what personal information is collected and used
  • Request deletion of personal information
  • Correct inaccurate personal information
  • Opt out of sale or sharing of personal information — we do not sell or share personal information as defined by CCPA
  • Limit use of sensitive personal information
  • Non-discrimination for exercising privacy rights

11. EU / UK Rights (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights set out in Section 7 under the GDPR and UK GDPR. Our legal bases include: performance of contract (to provide the Services), legitimate interest (security, debugging), consent (optional integrations), and compliance with legal obligation.

12. Cookies and Analytics

Our web properties use essential cookies for authentication and preferences, and limited first-party analytics (via Vercel Analytics) to understand usage patterns. We do not use cross-site advertising trackers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in-product or by email where we have your address on file, and the "Last updated" date at the top of this page will reflect the change. Continued use of the Services after an update constitutes acceptance.

14. Contact Us

Questions, requests, or complaints about this Privacy Policy or our data practices:

  • Email: sales@develloinc.com
  • Privacy inquiries: sales@develloinc.com
  • Mailing address: Devello Inc, New York, NY, USA
  • Website: devellostudios.com