TinkAI – Privacy Policy
Complete Document Including Anonymous Analytics Provisions
Effective Date: February 23, 2026
Last Updated: May 27, 2026
Replaces previous version dated December 22, 2025
This Privacy Policy describes the policies of TinkAI, Roma, Italy 00199, email: system@tinkai.ai on
the collection, use and disclosure of your information when you use our website
(https://www.tinkai.ai) and platform (the “Service”). By accessing or using the Service, you are
consenting to the collection, use and disclosure of your information in accordance with this Privacy
Policy. If you do not consent, please do not access or use the Service.
We may modify this Privacy Policy at any time without prior notice and will post the revised Privacy
Policy on the Service. The revised Policy will be effective 180 days from when posted and your
continued access or use after such time will constitute acceptance. We recommend that you
periodically review this page.

1.How We Collect Your Information
We collect and receive information about you in the following ways:

• When you fill up the registration form or otherwise submit personal information
• When you interact with the website and the TinkAI platform
• Through automatic collection of anonymous interaction metrics during platform use (see Section 5)
• From public sources

2.How We Use Your Information
We will use the information that we collect about you for the following purposes:

• Creating and managing your user account
• Customer feedback collection
• Platform support and administration
• Collecting anonymous interaction analytics to validate and improve the cognitive orchestration system (see Section 5)
• Producing aggregated research reports based on anonymous data

If we want to use your information for any other purpose, we will ask for your consent and will use your information only on receiving your consent and then only for the purpose(s) for which you grant consent, unless we are required to do otherwise by law.

3. How We Share Your Information
We will not transfer your personal information to any third party without seeking your consent,
except in the following limited circumstances:

• AI Service Providers: Your conversations are shared with AI service providers (Google/OpenAI) solely to generate responses. These providers process data according to their own privacy policies.
• Data Processing: We may engage third parties to process data on our behalf, requiring them to use personal information only for the transferred purpose and not retain it longer than necessary.

We may also disclose your personal information: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates third-party rights. If the Service or our company is merged or acquired, your information will be one of the assets transferred to the new owner.

4. Privacy Warning
Do not enter sensitive, personal, or confidential information in your conversations. TinkAI is in early development stage (beta). While we implement reasonable security measures, the platform should not be used for transmitting information you would not want shared with third-party AI service providers.

5. Anonymous Interaction Analytics
TinkAI collects anonymous interaction metrics to validate and improve its cognitive orchestration
system. This section describes in detail what is collected, what is not collected, and how the data is
used.
5.1 What We Collect
For each session, TinkAI automatically records the following anonymous metrics:

• Session metadata: anonymous session identifier (non-reversible cryptographic hash), start time, end time, duration, language detected
• Interaction patterns: total number of exchanges, sequence of cognitive modes activated (Exploration, Challenge, Fast, Learning)
• Engagement metrics: number of challenges activated, number of times the user reformulated or contested after a challenge (pushback count), whether a Decision Brief was generated
• System events: whether frustration detection was triggered, session limit status

5.2 What We Do NOT Collect
The following data is never recorded, stored, or transmitted as part of the analytics system:

• The text of user messages
• The text of TinkAI responses
• The content, topic, or subject matter of decisions discussed- Personal identifiers (name, email, IP address) linked to interaction data
• Any information that could identify a specific user from the collected metrics
• For the browser extension, see Section 11

5.3 Anonymization Method
User identity in the analytics dataset is anonymized through an irreversible cryptographic hash
(SHA-256 with fixed salt). This allows us to count sessions per anonymous user over time (to
measure return rate and usage patterns) without being able to identify who the user is. The hash
cannot be reversed to recover the original user identifier.

5.4 Purpose of Analytics Collection
The anonymous metrics are collected exclusively for:- Validating whether cognitive orchestration measurably supports human reasoning and
decision quality- Producing open research reports containing only aggregated, anonymous statistics- Supporting applications to research programs and grants (e.g., Mozilla Foundation)- Improving the TinkAI system based on aggregated usage patterns

5.5 Validation Phase
TinkAI may periodically conduct focused validation phases during which anonymous analytics are
actively collected to produce open research reports. Users will be informed when a validation phase
is active. Reports produced from validation phases will contain only aggregate statistics (averages,
distributions, trends). No individual session data will be published in any form that could identify a
user.

5.6 Analytics Data Retention
The anonymous interaction dataset will be retained for research purposes for as long as it remains
useful for validating and improving the system. Because the data is anonymous and cannot be
linked to individual users, it does not constitute personal data under most applicable privacy
regulations.

5.7 Opt-Out
If you do not wish your interactions to generate anonymous metrics, you may contact us at
system@tinkai.ai to request exclusion. Your access to TinkAI will not be affected. Note that because
existing data is anonymous, we cannot identify or delete previously collected metrics associated
with your account.

6. Data Retention (General)
This platform is in early development stage. All functionalities are currently in beta testing and may
not work as expected. Data (including conversations and account information) may be deleted
without notice during updates or maintenance. New features and integrations are constantly being
added. Expect changes and improvements.

7. Your Rights
Depending on the law that applies, you may have a right to access and rectify or erase your
personal data or receive a copy of your personal data, restrict or object to the active processing of
your data, ask us to share (port) your personal information to another entity, withdraw any consent
you provided to us to process your data, a right to lodge a complaint with a statutory authority and
such other rights as may be relevant under applicable laws.
To exercise these rights, you can write to us at system@tinkai.ai. We will respond to your request in
accordance with applicable law. Note that if you do not allow us to collect or process the required
personal information or withdraw consent, you may not be able to access or use the services for
which your information was sought.

8. Cookies
Like most online services, our website uses both first-party and third-party cookies. First-party
cookies are primarily necessary for the website to function properly and do not collect any
personally identifiable data. Third-party cookies help us understand how the website performs, track
how you interact with it, and keep our services secure.

Cookie Policy

You can modify your cookie settings anytime by clicking the Consent Preferences button on the
website, or by adjusting your browser settings.

9. Security
The security of your information is important to us and we will use reasonable security measures to
prevent the loss, misuse or unauthorized alteration of your information under our control. However,
given the inherent risks, we cannot guarantee absolute security and consequently, we cannot
ensure or warrant the security of any information you transmit to us and you do so at your own risk.

10. Consent
By continuing to use TinkAI, you acknowledge and accept the terms described in this Privacy Policy,
including the collection of anonymous interaction metrics as described in Section 5. This consent
can be withdrawn at any time by contacting system@tinkai.ai.

TinkAI Mirror Browser Extension — Privacy Disclosure

Effective Date: May 27,2026

This section describes how the TinkAI Mirror browser extension (“the Extension”) handles your information. It supplements the TinkAI Privacy Policy. Where this section and the general Policy differ, this section governs for the Extension.

11.1 What the Extension Does

The Extension adds a button to supported AI chat websites (such as claude.ai and chatgpt.com). When you click it, the Extension reads the conversation you choose to analyze and produces a “second view” — a formative review of how you used the AI in that conversation. It is an AI-literacy tool. It is not a psychological diagnosis, behavioral scoring, emotion recognition, grading, or evaluation of you as a person.

11.2 What the Extension Reads

The Extension reads conversation text only when you actively trigger it, by selecting text and clicking the Mirror button. It does not read pages you do not submit, does not monitor your browsing, and does not run in the background collecting data. It accesses the conversation only at the moment you request a review.

11.3 What Is Sent to TinkAI

When you request a review, the conversation text you select is transmitted to TinkAI’s server to generate the report. The conversation may have taken place on a third-party AI service; only the text you choose to submit is sent.

11.4 What Is Stored — and What Is Not

• The conversation text is NOT stored. It is processed to generate your report and then discarded. TinkAI does not retain the content of your conversations.
• What is stored is only the derived result of the analysis: the AI-use patterns and risk categories identified, plus a timestamp. This stored result does not contain your conversation text.
• The stored result is linked to an anonymous identifier (see 11.5). Its only purpose is to let the Extension show you how your AI-use patterns change over time.

11.5 The Anonymous Identifier

The anonymous identifier is a random value created locally by the Extension on your device when you install it. It is not your name, email, IP address, or any personal information, and TinkAI cannot use it to identify you. It is sent with each review request so that your reports can be grouped over time into a personal pattern history. If you remove and reinstall the Extension, a new identifier is generated and the previous pattern history is no longer associated with you.

11.6 Third-Party Processing

To generate the report, TinkAI uses Google Vertex AI as its analysis provider. The submitted conversation text is processed by Google for this purpose, transiently, in accordance with Google’s terms. No other third party receives your conversation.

11.7 Data Retention and Deletion

Derived pattern data is retained to provide the longitudinal pattern view. Because it is anonymous and carries no personal identifier, it is not linked to your identity. You can stop all data collection at any time by removing the Extension; once it is removed, no further data is sent. For any question about this data or its deletion, contact system@tinkai.ai.

11.8 What the Extension Does NOT Do

The Extension does not sell or share your data for advertising, does not track your browsing across sites, does not collect personal identifiers, and does not store the content of your conversations.

11.9 Permissions

The Extension requests access to supported AI chat sites, to display the Mirror button, and to tinkai.ai, to send conversations for analysis and receive the report. It uses these permissions only for the functions described above.

11.10 Contact

For any question about the Extension’s handling of your data write email at: system@tinkai.ai — TinkAI, Roma, Italy.
Website: https://www.tinkai.ai