Privacy Policy

1. Who We Are

SYM.BOT builds collective intelligence infrastructure and creative applications:

• MeloMotion — AI Creative Studio: style transfer, image generation, video generation (web app)
• MeloTune — emotion-aware music curation (iOS)
• MeloMove — mood-aligned fitness (iOS)
• SYM — open-source mesh infrastructure implementing the Mesh Memory Protocol (Node.js, Swift)

2. MeloMotion — Data We Collect

When you use MeloMotion, we process:

• Images you upload for style transfer, image generation, or video generation
• Generated images and videos (stored temporarily)
• Account identifier (anonymised Apple/Google ID)
• Credit balance and transaction history

Data Retention

• Uploaded images: deleted after processing
• Generated images and videos: stored for 7 days, then auto-deleted
• Account data: retained while account is active

What We Do Not Store

• Your name or email (we only receive anonymised ID)
• Payment details (handled by Stripe)

3. MeloTune & MeloMove — Zero Data Collection

• We collect ZERO data from MeloTune and MeloMove
• ALL emotional learning stays on YOUR device
• NO usage data, analytics, or telemetry
• Subscriptions handled entirely by Apple App Store — we cannot identify individual subscribers

What stays on your device

• Your emotional learning model and cognitive state
• Raw events and interaction traces (L0 data — never leaves the device)
• Music listening history, workout history, and preferences

4. SYM Mesh — Private by Design

Privacy in SYM is not a policy — it is enforced by the protocol architecture. Raw data never leaves the device. Coupling decisions are made on-device, not by a server. What crosses the mesh is gated by per-field evaluation that each node controls autonomously. There is no central point that collects, stores, or analyses mesh traffic.

When MeloTune, MeloMove, or other agents connect to the SYM mesh, data is exchanged peer-to-peer between devices. No data passes through SYM.BOT servers. For mesh connectivity beyond the local network, users deploy their own relay node — any always-on SYM node can serve as a relay.

What crosses the mesh

The Mesh Memory Protocol defines three memory tiers with graduated disclosure:

• L0 Events (raw): Sensor data, interaction traces, raw observations. Never leaves your device.
• L1 Structured (CMBs): Cognitive Memory Blocks — structured observations decomposed into 7 semantic fields. Shared via memory-share frames, gated by SVAF per-field evaluation. Only accepted signals cross the mesh.
• L2 Cognitive (hidden state): CfC neural hidden state vectors. Never cross the wire. As of MMP v0.2.3, hidden states are private to each agent's local CfC. Cognitive coupling propagates only as CMBs at SVAF Layer 4.
• Mood: Valence and arousal values. Exchanged via mood frames.
• Messages: Free-form text messages between nodes.

Coupling is autonomous

Each node independently evaluates incoming signals through SVAF (Symbolic-Vector Attention Fusion) and decides whether to accept, guard, or reject. Your device is never forced to accept a signal from any peer. Coupling decisions are made on-device, not by a server.

Relay transport

For peers not on the same local network, users deploy their own relay node. The relay is dumb transport — it forwards frames without inspecting, storing, or modifying payload content. Any always-on SYM node can serve as a relay. Relay connections use WSS (TLS-encrypted WebSocket). SYM.BOT does not operate a public relay and has no access to relay traffic.

5. How We Use Data

MeloMotion: Your uploaded images are used only to generate the requested output (style transfer, image, or video). We do not use your images or generated content for training AI models.

MeloTune & MeloMove: We do not collect or access any data from these apps. All processing is on-device.

SYM mesh: Mesh data is exchanged peer-to-peer. SYM.BOT does not collect, store, or analyse mesh traffic. The relay forwards frames in transit but does not persist them.

6. Data Sharing

We do NOT share your data with third parties, except:

• Stripe: processes MeloMotion payments
• Cloud infrastructure: processes MeloMotion image/video generation
• SYM mesh peers: your device exchanges cognitive state with other nodes you connect to (peer-to-peer, not via SYM.BOT)
• If legally required by regulators or courts

7. Data Security

MeloMotion: Images and videos stored in encrypted cloud storage with automatic deletion after 7 days. All transmission over HTTPS.

MeloTune & MeloMove: All learning data stored locally on your device, protected by iOS data protection.

SYM mesh: LAN transport uses TCP with E2E encryption (Curve25519 key exchange). Internet relay uses WSS (TLS-encrypted WebSocket — mandatory). IPC transport uses Unix domain sockets (OS-level process isolation). As of MMP v0.2.3, CfC hidden states never cross the wire — only structured CMBs with typed semantic fields are exchanged, gated by SVAF per-field evaluation on each receiving node.

8. Your Rights (GDPR)

You have the right to:

• Access your data
• Request deletion of your data
• Download your MeloMotion generated content (within 7 days)
• Delete your MeloMotion account
• Withdraw from mesh coupling at any time (Section 4)

For MeloTune and MeloMove, there is no data to request — we hold none. Your on-device data is under your control via iOS settings.

Contact: info@sym.bot

9. Third-Party Services

• Stripe: MeloMotion payments
• Apple/Google Sign-In: MeloMotion authentication
• Apple Music / Spotify: MeloTune music integrations
• Apple App Store: iOS subscriptions
• Telegram: SYM mesh bot (@sym_mesh_bot)

Each third-party service has its own privacy policy. We encourage you to review them.

10. Children

• MeloMotion: requires age 13+
• MeloTune: rated 4+ (no data collection)
• MeloMove: rated 9+ (no data collection)

11. Changes

We may update this policy. Material changes will be posted at sym.bot/privacy with an updated effective date.

12. Contact

Privacy questions: info@sym.bot

SYM.BOT, Scotland, United Kingdom.