TinkAI – Privacy Policy
Complete Document Including Anonymous Analytics Provisions
Effective Date: February 23, 2026
Last Updated: June 19, 2026
Replaces previous version dated December 22, 2025
This Privacy Policy describes the policies of TinkAI, Roma, Italy 00199, email: system@tinkai.ai on
the collection, use and disclosure of your information when you use our website
(https://www.tinkai.ai) and platform (the “Service”). By accessing or using the Service, you are
consenting to the collection, use and disclosure of your information in accordance with this Privacy
Policy. If you do not consent, please do not access or use the Service.
We may modify this Privacy Policy at any time without prior notice and will post the revised Privacy
Policy on the Service. The revised Policy will be effective 180 days from when posted and your
continued access or use after such time will constitute acceptance. We recommend that you
periodically review this page.

1.How We Collect Your Information
We collect and receive information about you in the following ways:

• When you fill up the registration form or otherwise submit personal information
• When you interact with the website and the TinkAI platform
• Through automatic collection of anonymous interaction metrics during platform use (see Section 5)
• From public sources

2.How We Use Your Information
We will use the information that we collect about you for the following purposes:

• Creating and managing your user account
• Customer feedback collection
• Platform support and administration
• Collecting anonymous interaction analytics to validate and improve the cognitive orchestration system (see Section 5)
• Producing aggregated research reports based on anonymous data

If we want to use your information for any other purpose, we will ask for your consent and will use your information only on receiving your consent and then only for the purpose(s) for which you grant consent, unless we are required to do otherwise by law.

3. How We Share Your Information
We will not transfer your personal information to any third party without seeking your consent,
except in the following limited circumstances:

• AI Service Providers: Your conversations are shared with AI service providers (Google/OpenAI) solely to generate responses. These providers process data according to their own privacy policies.
• Data Processing: We may engage third parties to process data on our behalf, requiring them to use personal information only for the transferred purpose and not retain it longer than necessary.

We may also disclose your personal information: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates third-party rights. If the Service or our company is merged or acquired, your information will be one of the assets transferred to the new owner.

4. Privacy Warning
Do not enter sensitive, personal, or confidential information in your conversations. TinkAI is in early development stage (beta). While we implement reasonable security measures, the platform should not be used for transmitting information you would not want shared with third-party AI service providers.

5. Anonymous Interaction Analytics
TinkAI collects anonymous interaction metrics to validate and improve its cognitive orchestration
system. This section describes in detail what is collected, what is not collected, and how the data is
used.
5.1 What We Collect
For each session, TinkAI automatically records the following anonymous metrics:

• Session metadata: anonymous session identifier (non-reversible cryptographic hash), start time, end time, duration, language detected
• Interaction patterns: total number of exchanges, sequence of cognitive modes activated (Exploration, Challenge, Fast, Learning)
• Engagement metrics: number of challenges activated, number of times the user reformulated or contested after a challenge (pushback count), whether a Decision Brief was generated
• System events: whether frustration detection was triggered, session limit status

5.2 What We Do NOT Collect
The following data is never recorded, stored, or transmitted as part of the analytics system:

• The text of user messages
• The text of TinkAI responses
• The content, topic, or subject matter of decisions discussed- Personal identifiers (name, email, IP address) linked to interaction data
• Any information that could identify a specific user from the collected metrics
• For the browser extension, see Section 11
• This policy covers the TinkAI platform. The TinkAI Mirror browser extension is governed by its own separate Privacy Policy at tinkai.ai/tinkai-mirror-extension-privacy.

5.3 Anonymization Method
User identity in the analytics dataset is anonymized through an irreversible cryptographic hash
(SHA-256 with fixed salt). This allows us to count sessions per anonymous user over time (to
measure return rate and usage patterns) without being able to identify who the user is. The hash
cannot be reversed to recover the original user identifier.

5.4 Purpose of Analytics Collection
The anonymous metrics are collected exclusively for:- Validating whether cognitive orchestration measurably supports human reasoning and
decision quality- Producing open research reports containing only aggregated, anonymous statistics- Supporting applications to research programs and grants (e.g., Mozilla Foundation)- Improving the TinkAI system based on aggregated usage patterns

5.5 Validation Phase
TinkAI may periodically conduct focused validation phases during which anonymous analytics are
actively collected to produce open research reports. Users will be informed when a validation phase
is active. Reports produced from validation phases will contain only aggregate statistics (averages,
distributions, trends). No individual session data will be published in any form that could identify a
user.

5.6 Analytics Data Retention
The anonymous interaction dataset will be retained for research purposes for as long as it remains
useful for validating and improving the system. Because the data is anonymous and cannot be
linked to individual users, it does not constitute personal data under most applicable privacy
regulations.

5.7 Opt-Out
If you do not wish your interactions to generate anonymous metrics, you may contact us at
system@tinkai.ai to request exclusion. Your access to TinkAI will not be affected. Note that because
existing data is anonymous, we cannot identify or delete previously collected metrics associated
with your account.

6. Data Retention (General)
This platform is in early development stage. All functionalities are currently in beta testing and may
not work as expected. Data (including conversations and account information) may be deleted
without notice during updates or maintenance. New features and integrations are constantly being
added. Expect changes and improvements.

7. Your Rights
Depending on the law that applies, you may have a right to access and rectify or erase your
personal data or receive a copy of your personal data, restrict or object to the active processing of
your data, ask us to share (port) your personal information to another entity, withdraw any consent
you provided to us to process your data, a right to lodge a complaint with a statutory authority and
such other rights as may be relevant under applicable laws.
To exercise these rights, you can write to us at system@tinkai.ai. We will respond to your request in
accordance with applicable law. Note that if you do not allow us to collect or process the required
personal information or withdraw consent, you may not be able to access or use the services for
which your information was sought.

8. Cookies
Like most online services, our website uses both first-party and third-party cookies. First-party
cookies are primarily necessary for the website to function properly and do not collect any
personally identifiable data. Third-party cookies help us understand how the website performs, track
how you interact with it, and keep our services secure.

Cookie Policy

You can modify your cookie settings anytime by clicking the Consent Preferences button on the
website, or by adjusting your browser settings.

9. Security
The security of your information is important to us and we will use reasonable security measures to
prevent the loss, misuse or unauthorized alteration of your information under our control. However,
given the inherent risks, we cannot guarantee absolute security and consequently, we cannot
ensure or warrant the security of any information you transmit to us and you do so at your own risk.

10. Consent
By continuing to use TinkAI, you acknowledge and accept the terms described in this Privacy Policy,
including the collection of anonymous interaction metrics as described in Section 5. This consent
can be withdrawn at any time by contacting system@tinkai.ai.

TinkAI Mirror Browser Extension — Privacy Disclosure

Effective Date: June 19, 2026

TinkAI Mirror Browser Extension

The TinkAI Mirror browser extension is governed by its own separate, complete Privacy Policy, which describes exactly what the Extension reads, where it is stored, what is sent off the device and when, and how it is deleted. Please refer to it here: https://www.tinkai.ai/tinkai-mirror-extension-privacy

11.2 What the Extension Reads, and When
To produce a complete and accurate review, the Extension reads the conversation on supported AI chat sites in two ways:
Continuous local capture. While you are on a supported AI chat page, the Extension observes the conversation as it unfolds and records the message text locally on your device (in your browser’s local storage). This runs in the background on supported sites so that, when you request a review, the full conversation is available even if parts of it have scrolled out of view. This capture happens only on supported AI chat sites; the Extension does not monitor your general browsing and does not read other websites.
Scroll collection on request. When you click the Mirror button, the Extension may briefly scroll the current conversation from top to bottom in order to load and capture older messages that the site had hidden, so that the review covers the whole conversation.
11.3 Where Captured Text Is Stored
Captured conversation text is stored only on your own device, in your browser’s local storage (`chrome.storage.local`). It is not sent to any server as part of this capture, and it is not shared with anyone. It stays on your computer.
11.4 Automatic Deletion and Your Control
Automatic deletion. Captured conversation text is automatically deleted from your device after 30 days. Older conversations are removed automatically.
Manual deletion. You can delete all captured conversation text from your device at any time using the “Delete my data” link shown in the Mirror panel. Removing the Extension also stops all capture.
11.5 What Is Sent to TinkAI, and When
Nothing is sent to TinkAI while you simply browse or chat. Only when you click the Mirror button is the conversation submitted to TinkAI’s server to generate the report. The conversation may have taken place on a third-party AI service; only the conversation you submit for review is sent, at the moment you request it.
11.6 What TinkAI Stores — and What Is Not Stored
The conversation text is NOT retained by TinkAI’s server. It is processed to generate your report and then discarded. TinkAI does not keep the content of your conversations on its servers.
The conversation text used for the report exists on your device (local capture, see 11.3–11.4) until it is auto-deleted or you delete it.
Any derived result associated with an anonymous identifier (see 11.7) contains the assessment output, not your raw conversation text.
11.7 The Anonymous Identifier
The anonymous identifier is a random value created locally by the Extension on your device when you install it. It is not your name, email, IP address, or any personal information, and TinkAI cannot use it to identify you. If you remove and reinstall the Extension, a new identifier is generated.
11.8 Third-Party Processing
To generate the report, TinkAI uses Google Vertex AI as its analysis provider. The submitted conversation text is processed by Google for this purpose, transiently, in accordance with Google’s terms. No other third party receives your conversation.
11.9 What the Extension Does NOT Do
The Extension does not sell or share your data for advertising, does not track your browsing across sites, does not collect personal identifiers, and does not retain the content of your conversations on its servers.
11.10 Permissions
The Extension requests access to supported AI chat sites (to capture the conversation locally and display the Mirror button), to local storage (to hold captured conversations on your device and your anonymous identifier), and to tinkai.ai (to send a conversation for analysis when you click Mirror and receive the report). It uses these permissions only for the functions described above.
11.11 Contact
For any question about the Extension’s handling of your data write email at: system@tinkai.ai — TinkAI, Roma, Italy. Website: https://www.tinkai.ai