Privacy Policy

Pennyworth Technologies, Inc. d/b/a Backlit ("Backlit", "we" or "us") is committed to the privacy of our customers, website visitors, and users of our products and services. This privacy policy ("Privacy Policy") discloses what information is gathered about visitors to our website ("Website"), users of our artificial intelligence platform, and mobile application (collectively the "Services").

This Privacy Policy explains how we collect, use, store, protect and disclose or share your Personal Information in connection with your use of the Services.

WE MAY MODIFY THIS PRIVACY POLICY AT ANY TIME, SO CHECK BACK REGULARLY FOR UPDATES. ALL CHANGES WILL BE EFFECTIVE IMMEDIATELY UPON POSTING TO THE SERVICES. WE WILL ATTEMPT TO NOTIFY YOU OF ANY MATERIAL CHANGES VIA THE SERVICES OR BY OTHER METHODS.

1. What Is Personal Information?

For purposes of this Privacy Policy, "Personal Information" or "Personal Data" means information that alone or in combination identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information does not include publicly available information or aggregated information that does not include personal identifiers.

2. Categories of Personal Information We Collect

We collect certain categories of Personal Information. The categories and a description of the types of data collected in each category are as follows:

Category	Personal Information Collected
Identifiers	Name, unique personal identifier, online identifier, Internet Protocol address, email address, and account information including your login information.
Demographic Information	Age, race, sex, gender identity or expression, national origin, citizenship, religion or creed, marital status, pregnancy or childbirth (and related medical conditions), medical conditions, physical or mental disability, and genetic information.
Commercial Information	Records of Services you purchased or received, or considered, other purchasing history and invoices.
Employment and Education Information	We may collect information relating to your education and employment history when using our Services.
Imprecise Geolocation Data	Imprecise location information, like the city, state and ZIP code associated with your IP address.
Inferences Drawn from Other Information	Personal preferences, personal characteristics, and behavior, predispositions, and attitudes.
Internet Activity	Browsing history, device information, and information about your interaction with our Services.
Sensitive Personal Information	We may collect certain sensitive information such as driver's license, passport information, or health information in connection with use of our Services.

3. Sources of Personal Information

We obtain the categories of Personal Information listed above from the following categories of sources:

Directly from you. For example, when you create an account or use our Services.

Other users. Your contacts may share your Personal Information with us as part of a referral or promotion program.

Service Providers and Third-Party Partners. Our service providers may collect your Personal Information on our behalf to provide services to us. A few ways in which our service providers may collect your Personal Information:

We may receive Personal Information about you from third parties that provide services to us through or in connection with the performance of our Services, including our web hosting providers.

We may receive Personal Information related to your use of our Services from third party analytics providers and marketing partners.

4. How We Use Personal Information

The primary purposes for which we use Personal Information are:

Providing the Services

• Account Management: Creating, maintaining, and servicing online accounts.
• Service Delivery: Providing and improving our Services.

Business Purposes

We may use Personal Information for business purposes, including but not limited to:

• Information Sharing: Supplying information about our Services in a confidential manner as needed for providing the Services.
• Analytics: Conducting usage and performance analyses of the Services.
• Research and Development: Creating new services and enhancing our current Services.
• Feedback: Administering surveys and collecting user input.
• Statistical Analysis: Performing demographic and other statistical evaluations.
• Marketing Analytics: Assessing our marketing and advertising efforts.
• Fraud Prevention: Detecting, preventing, and addressing fraudulent activity, including on our website.
• Legal Compliance: Pursuing other business purposes permitted under applicable law.
• Contractual Obligations: Carrying out our obligations and enforcing our rights under contracts, including those between you and Backlit.

Customer Service and Customer Communications

We may use Personal Information for the following purposes:

• Responding to your requests for information about Backlit and our Services.
• Providing customer support and technical assistance to help you access and use the Services.
• Notifying you of changes to our privacy policy and terms of use.
• Communicating with you about updates, new features, or changes to the Services.
• Carrying out purposes you authorize or instruct us to perform with respect to your Personal Information.

Marketing Purposes

We may use your Personal Information to advertise and market our Services. This may include:

• Promotions and Offers: Notifying you via email of special promotions, discounts, and exclusive opportunities available through Backlit.
• Events and Programs: Informing you about upcoming events, programs, or initiatives related to our Services.
• Service Updates: Sharing information with you about new features, enhancements, or changes to our Services.
• Personalized Content: Delivering marketing communications tailored to your interests and engagement with our Services.
• Multi-Channel Communications: Contacting you via e-mail, in-app notifications, push alerts, or other permitted means.
• Marketing on External Platforms: Reaching you with information about our Services on third-party platforms based on your interests and engagement with the Services.
• Campaign Effectiveness: Measuring and analyzing the success of our marketing and advertising campaigns to improve future communications.

App Providers. By downloading any of the Apps from an App Distributor, such as the Apple App Store or Google Play Store, please note that the App Distributor and its agents may be able to identify you as a user of our Services.

AI-Powered Services. We use artificial intelligence systems to deliver certain features of the Services. These AI-generated outputs are provided for informational purposes only and do not constitute professional advice.

Legal and Regulatory Compliance

We may use Personal Information to cooperate with law enforcement and for other legal purposes, including:

• Compliance with laws and regulations: Meeting applicable legal, regulatory, and reporting requirements.
• Contractual obligations: Fulfilling and enforcing obligations arising from contracts we have entered into, including agreements with you.
• Legal defense: Protecting our legal or business interests, defending, and responding to legal actions, claims, or disputes.

These uses and disclosures are intended to ensure that Backlit operates in compliance with applicable laws, safeguards public interests, and protects its rights and the rights of its users.

5. To Whom We Disclose Your Information

To provide our Services, we may disclose Personal Information with certain third parties business partners and service providers. The third parties that we may disclose Personal Information with include:

Service Providers. We may share Personal Information with service providers. For example, we may share Personal Information with vendors to help us host and provide our Services; improve the content and functionality of the Services; perform data analysis and statistical analysis; troubleshoot problems with the Services; provide email services; provide data processing; and support or provide the security of the Services.

Parties to Business Transactions. In the event of an anticipated or actual merger or acquisition, bankruptcy or other sale of all or a portion of our assets, we may transfer or allow third parties to use information owned or controlled by us, including Personal Information. We reserve the right, in connection with these types of transactions, to transfer, share, assign, or sell your Personal Information and other information we have collected to third parties or to authorize such third parties to use any such information including for due diligence as part of any of the transactions described in this paragraph. Any Personal Information you submit or that is collected after this type of transfer may be subject to a new privacy policy adopted by the successor entity.

Government and Law Enforcement. We may share your Personal Information with individuals or private parties where necessary to enforce and comply with the law, to protect our property or legal rights, for the safety of the public or any person, to prevent harm, to protect the security and integrity of the Services and any equipment used to make the Services available.

Professional Advisors. We may share Personal Information with our professional advisors, such as our attorneys, accountants, financial advisors, and business advisors, in their capacity as advisors to us.

Payment and Billing Processors. In addition to the service providers above, we share Personal Information with payment processing and billing service providers. We currently use Stripe. Please see Stripe's Privacy Policy for information on how they manage your Personal Data.

Other. We may share Personal Information with third parties and/or service providers when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).

6. Blogs and Forums

Our Website may, from time to time, offer publicly accessible blogs or community forums where you can submit ideas, photographs, writings, music, video, audio recordings, computer graphics, pictures, data, information about your location, questions, comments, suggestions, or other content ("User Generated Content"), including Personal Information. You should be aware that any User Generated Content you provide in these areas may be read, collected, and used by others who access them. Please note that we do not control who will have access to the User Generated Content that you choose to make public and cannot ensure that parties who have access to such publicly available information will respect your privacy or keep it secure.

7. Website Analytics, Cookies and Tracking Technology

We use analytics services and marketing cookies in addition to imprecise location features that are connected to your use of the Services. We use cookies, web beacons, pixel tags, and other technologies (collectively "Cookies") on our Services to automatically collect information used to improve the Services and to measure the effectiveness of our marketing efforts. A cookie is a small text file that our Services save onto your computer or device when you use the Website.

A cookie can either be a "session" cookie or a "persistent" cookie. Session cookies exist only for so long as you are visiting the Website and are typically deleted when you exit your web browser. Each time you visit a Website that has implemented a persistent cookie, the persistent cookie is renewed, and that cookie will remain active until its predetermined expiration date.

Website Analytics

We use third-party software tools on our Website to learn more about how visitors navigate the Website and view content. These third-party analytics providers provide us with analytical information collected through the Cookies that we use to improve the Website, to make sure it is easy to use, and to develop content that is both interesting and customized. In addition, we use service providers and other third parties to serve you customized email, SMS, and internet-based advertisements. Those ad networks use cookies and other tracking technologies to serve ads based on your prior visits to our Website. These ad networks may place and store cookies on the devices you use to access our Services and collect information, including your browsing behavior, referring websites, and your response to advertisements.

PostHog: We use PostHog to analyze how visitors interact with our Website and to help us improve functionality, performance, and user experience. PostHog collects information such as pages visited, features used, device and browser details, and general usage patterns. PostHog allows us to configure privacy-enhancing settings, including IP address redaction and event-level data minimization, and we have enabled these features where appropriate.

If you wish to limit the data collected through PostHog, you may adjust your browser settings to block cookies or tracking technologies, or use privacy tools that restrict analytics scripts. Doing so will not prevent you from using the Website, although certain features may operate with reduced functionality. For more information on how PostHog processes personal information, please consult PostHog's Privacy policy, PostHog style and its documentation on data handling and analytics practices.

Geolocation Services

An App may utilize location services on your mobile device to collect and use location data, including the real-time geographic location of your device. If you consent to the App's utilization of location services, we may use GPS, Bluetooth, your device's unique identifier, and/or your IP address, along with Wi-Fi and cell tower locations and other technologies to determine your device's geolocation. This location data is utilized to deliver Services requested by you. We do not maintain a history of the location of a device, only where your device is at any given moment. We will collect geolocation data only if you consent, and we will notify you whether the location services will always be running or only when the App is in use. You may choose to disable location services through our App or your mobile-enabled Wi-Fi devices, but if you do so, you will not receive any notifications or services that require geolocation. Most mobile devices provide users with the ability to disable location services. These controls are generally located in the device's settings menu. You can also contact your mobile Services carrier or your device manufacturer for more information on disabling location services.

8. Your Consumer Privacy Choices

Update your Personal Information. You may update your Personal Information by contacting us using the information in the "Contact Us" section below or by contacting us at privacy@backlit.life.

Delete Your Account. If you no longer wish to use the Services or access your account or account information, you may request us to delete your account by contacting us at privacy@backlit.life. This will result in the full, permanent deletion of your account and associated information. We will not be able to recover your account after it has been deleted.

Export Your Data. You have the right to request a copy of your Personal Information in a structured, commonly used, and machine-readable format. This includes:

Data Type	Export Format
Account Information (name, email, preferences)	JSON
Service Usage Data (calendar events, tasks, email summaries)	JSON
AI Interaction History (chat transcripts, AI-generated outputs)	JSON
AI Models (models built using only your data)	Model file

To request a data export, contact us at privacy@backlit.life. We will provide your export within thirty (30) days of receiving your request. Data exports do not include De-Identified or Aggregated Data, as it cannot be attributed to your account.

Update Your Browser Settings. If you wish to limit or opt out of third-party advertising, you can do one or more of the following:

The Options/Settings section of most internet browsers will tell you how to manage cookies and other technologies that may be uploaded to your device, including how to disable such technologies. You can disable our cookies, or all cookies, through your browser settings, but please note that disabling cookies may impact some of the features of our Website and prevent them from operating as intended. You can learn more about cookies, including how to see what cookies have been uploaded to your device and how to manage and delete them, by visiting All About Cookies.

Digital Advertising Preferences

You can change your preferences with respect to certain online ads, and to obtain more information about ad networks and online behavioral advertising, visit the National Advertising Initiative Consumer Opt Out page and the Digital Advertising Alliance's Consumer Choice Tool. Please note that even if you opt out of receiving interest-based advertising, you may still receive advertisements, but they will be more general in nature. In addition, the electronic device you use to visit our Website may offer relevant privacy settings; please see the device settings for details.

Opt Out of Marketing Messages. If you sign up to receive marketing communications and materials, you consent to receive such communications at the location or contact information you provide.

Phone. You may request that we remove you from our telephone marketing list and refrain from sharing your telephone number with third parties by contacting us using the contact information provided below.

Push Notifications. You may elect to receive push notifications from the App. If you wish to no longer receive push notifications, you may adjust your notification settings in your App account.

Email. If you no longer wish to receive email marketing messages from Backlit you should use the "unsubscribe" option that can be found in each marketing email we send or contact us using the information provided below. Within 10 days of receipt of your unsubscribe request, we will remove you from our distribution list unless you resubscribe.

Text. Backlit uses third-party text messaging services to communicate and share information with its subscribers. By subscribing, you have provided us with consent to send you text messages regarding Backlit's Services.

Data Usage Clause: We use the phone number you provided for text message communications to provide important updates and marketing efforts.

Message Frequency: Message frequency may vary depending on the programs, events, activities, and Services provided by Backlit.

Rates: Message and data rates may apply. Your mobile carrier determines these charges, and they are your responsibility.

STOP Instructions: If you wish to stop receiving text messages from Backlit, reply STOP to any text message. You will receive a confirmation message and will no longer receive SMS communications from us. You may also stop text messages by calling us at (938) 222-5548 or emailing us at privacy@backlit.life.

HELP Instructions: For assistance, reply HELP to any message or contact our support team at (938) 222-5548 or email us at privacy@backlit.life.

Carrier liability: Mobile carriers are not liable for delayed or undelivered messages.

Non-Sharing Clause: We respect your privacy and will not intentionally distribute your mobile phone number to any third parties for any purposes without your consent.

Data Protection Clause: We use restricted access controls and secure storage solutions to protect your data from unauthorized access or misuse. We retain your contact data for as long as needed to fulfill the purposes outlined in this policy.

9. De-Identified / Aggregated Data

We may create and utilize De-Identified Data derived from Personal Information for a variety of lawful purposes, and any De-Identified Data is the sole and exclusive property of Backlit Health. "De-Identified Data" is individual-level data derived from Personal Information that is stripped of personal identifiers, such as your name, contact information, or demographic information, but still retaining details about your interactions with the Services.

• Service Improvement: De-Identified Data and Aggregated Data may be used to improve, enhance, and optimize our Services.
• Analysis: We analyze De-Identified Data and Aggregated Data to operate, maintain, manage, and strengthen our Services.
• Data Sharing: We may share De-Identified Data and Aggregated Data with affiliates and service providers for legitimate business purposes.
• Statistical Reporting: We may disclose Aggregated Data to describe our Services to customers, partners, and third parties.

We do not sell De-Identified Data or Aggregated Data to third parties.

10. Data Retention

We retain your Personal Information only for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include: (a) the length of time we have an ongoing relationship with you and provide the Services to you; (b) whether there is a legal obligation to which we are subject; and (c) whether retention is advisable in light of our legal position, such as applicable statutes of limitations, litigation, or regulatory investigations.

The following describes our retention practices for specific categories of Personal Information:

Category	Retention Period
Account Information (name, email, login credentials)	Duration of your account plus 30 days after account deletion, except as required by law.
Service Usage Data (calendar, email, and task data processed by the Services)	Duration of your account. Deleted within 30 days of account deletion.
AI Interaction Data (chat transcripts, AI-generated outputs)	Duration of your account. Deleted within 30 days of account deletion.
Commercial Information (purchase history, invoices)	7 years after the transaction, as required for tax and accounting compliance.
Analytics and Internet Activity Data (browsing behavior, device info)	Up to 24 months from the date of collection.
Geolocation Data	Duration of your account. Deleted within 30 days of account deletion.
De-Identified and Aggregated Data	May be retained indefinitely, as it cannot be used to identify you.

When your Personal Information is no longer necessary for the purposes described above, we will delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

You may request deletion of your account and associated Personal Information at any time by contacting us at privacy@backlit.life. See Section 8 (Your Consumer Privacy Choices) for details.

11. AI Technologies and Data Practices

Backlit uses artificial intelligence (AI) technologies to power core features of our Services, including scheduling assistance, email triage, and task management. This section describes how your data interacts with our AI systems.

AI Service Providers. We use third-party AI services to process and generate responses within the Services. When you interact with AI features, your inputs and relevant context may be transmitted to these providers for processing. We require our AI providers to process data solely on our behalf and in accordance with our instructions.

The following third-party AI providers are currently used in connection with the Services:

Provider	Purpose
Anthropic (Claude)	Natural language processing, conversational AI, and task reasoning
Google Cloud AI	Machine learning infrastructure and AI services
Together AI	Model hosting and inference

This list may be updated as we add or change providers. We will update this Privacy Policy to reflect material changes to our AI service providers.

Model Training. We may use your data to train AI models that power and improve the Services. Models built using only your data are specific to your account and are not shared with other users or third parties. Upon account closure, models built using only your data are available for export and will be deleted in accordance with our data retention practices described in Section 10.

Our third-party AI providers do not retain your data for their own model training purposes.

Conversation Logging. Interactions with AI features may be logged to provide you with conversation history, to diagnose technical issues, and to improve the quality of the Services. Your AI interaction history is deleted upon account closure in accordance with our data retention practices described in Section 10.

Chat Technology. Backlit uses chat services and software code that collect users' interactions with the Website and App in a manner that allows us to monitor and review these interactions for customer service and to improve our Services. These interactions may include users' Personal Information entered into the chat window, webpages visited on our Website, IP address, and geographic location information such as city, state, or geographic area. These interaction replays help us identify and diagnose usability problems, identify areas for improvement, and improve the customer experience when using the Services.

AI-Generated Outputs. AI-generated content is provided for informational purposes only and does not constitute professional advice. Outputs may be incomplete, inaccurate, or outdated. You are solely responsible for evaluating AI-generated outputs before relying on them.

12. International Users

Our Services are operated in the United States and intended for users located in the United States. Like almost every website, our Website can be accessed by an international audience. If you are located outside of the United States, please be aware that information we collect, including Personal Information, will be transferred to, processed, stored and used in the United States. The data protection laws in the United States may differ from those of the country in which you are located, and your Personal Information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. In addition, such data may be stored on servers located outside your resident jurisdiction and in jurisdictions which may have less stringent privacy practices than your own.

13. California's Shine the Light Act

California Civil Code Section 1798.83 permits customers of a company who are California residents to request and obtain from us once a year, free of charge, information about the Personal Information (if any) we disclosed to third parties for the third parties' direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of Personal Information that were shared and the names and addresses of all third parties with which we shared information in the immediately preceding twelve (12) calendar months. If you are a California resident and would like to make such a request, please submit your request in writing to: privacy@backlit.life.

14. Leaving Our Services and/or Linking to Third Parties

We strive to ensure that any information you send us is safe. When you leave our Website and go to another linked website, we are not responsible for the content or availability of the linked website. Please be advised that we do not represent either the third party or you if you enter into a transaction on the third-party website. Further, the privacy and security policies of the linked website may differ from those practiced by us. The inclusion of any link does not imply our endorsement of any other company, its website(s), or its product(s) and/or services(s). We are not responsible for the privacy practices or content of any other website.

15. Social Media and Plug-ins

Our online Services may use social media plug-ins (e.g., the Facebook "Like" button and "Share to Twitter" button) to enable you to easily interact with certain social media websites (e.g., Facebook, Twitter, Instagram) and share information with others. When you visit our online Services, the operators of the available social media plugins can place a cookie on your device, enabling such operators to recognize individuals who have previously visited our online Services. If you are logged into these social media websites while visiting our online Services, the social media plugins allow the relevant social media website to receive information that you have visited our online Services or other information.

The social media plugins also allow the applicable social media website to share information about your activities with our online Services with other users of the social media website. For example, Facebook Social Plugins allow Facebook to show your "Likes" and comments on our online Services to your Facebook friends. Facebook Social Plugins also allow you to see your friends' Facebook activity on our online Services. We do not control any of the content from the social media plugins. We may also interact with you on social media platforms. If you contact us on one of our social media platforms, request Services, or otherwise communicate directly with us on social media, we may contact you to interact with you. For more information about social media advertising and social media plugins from other social media websites, please refer to those website's privacy and data-sharing statements.

16. Children's Privacy

We do not direct or target our Website or Services to anyone under the age of 18. If you are a parent or guardian of someone under the age of 18 and discover that your child has submitted Personal Information to us, please contact us at privacy@backlit.life. We will make reasonable efforts to remove such information from our databases.

17. Contact Information

If you have any questions about the Privacy Policy or how we process Personal Information, please contact us at:

Pennyworth Technologies, Inc. d/b/a Backlit
835 Main Ave., Suite 225
Durango, CO 81301
Email: privacy@backlit.life