Privacy Policy

The controller responsible for your personal data is Diego Uribe Villalobos (individual), creator and operator of Sysstem, with an address for notices at Avenida de las Flores 17, Lomas Country Club, C.P. 52779, Huixquilucan, Estado de México, Mexico.

For anything related to your personal data and the exercise of your rights, contact us at support@sysstem.ai.

Sysstem is a gamified personal-development platform. To operate, we process the following categories of personal data.

Identification and account data: email address and password (stored encrypted, never in plaintext); Google and Apple sign-in identifiers (including Apple “Hide My Email”); and date of birth, requested at sign-up and used only to confirm you meet the minimum age of 18 (age assurance), never for marketing or profiling (see §10).

Profile data: bio, mantra, hobbies, bucket list; profile photo, banner, and up to 6 profile photos; public handle (@username) and visibility settings.

Sensitive data (LFPDPPP Art. 8). The following categories are sensitive personal data; their processing requires your express consent, which we request separately: health and emotional-wellbeing data (mood entries, introspective logs, and conversations with Syss, which may reveal your mental and emotional state); physical-health data from wearables (heart rate, sleep, heart-rate variability (HRV), steps, workouts), obtained via Apple Health (HealthKit) and Android Health Connect, only with your explicit, revocable consent; financial data (debts: balance, interest and credit limit; gross and net income, tax rate, payday, and derived metrics such as debt-to-income ratio and credit utilization); voice data (audio you record for transcription, see §5); and location data (approximate or precise position for the map features / Map Missions), optional and off by default.

Identity verification data (optional). Only if you choose to verify your identity, our specialized provider Didit processes your official ID and a selfie with a liveness check (biometric data) to confirm who you are and your age. We do not receive or store your ID or your image: we keep only the verification result and a reference to the session at Didit. If you do not verify, no biometric data is processed.

Syss's memory. From your conversations and logs, Syss keeps a summary of what it knows about you — your interests, your context, and your emotional state — to accompany you better. It is a profile used only to personalize your experience, and it travels as context to the AI providers (§4). You can ask us to show it to you or delete it by writing to support@sysstem.ai, and it is deleted with your account.

Profile visibility. By default your profile is public: other users can see it (for example, your @username, bio, and profile photos). Your attributes are private and your progress is visible only to your connections. You can change this in your profile's privacy settings.

Usage and activity data within Sysstem: goals, milestones, missions, achievements, and attributes (derived from your activity); content you create and share (Paths, goals, rituals, missions, ratings, and public comments in the creator economy); and your social graph (friends, groups/guilds, mission invitations).

Technical data: IP address, device identifier, timestamps, usage events, session counts, crash logs, and push notification tokens.

Primary purposes (necessary to provide the service): creating and managing your account and profile; personalizing your experience by generating missions, analyzing your logs, tracking your progress, and accompanying you through Syss (our AI assistant, see §4); operating the social features and creator economy you enable; sending you transactional communications (email verification, password reset, service and security notices); verifying that you meet the minimum age of 18 (age assurance) and keeping minors out of the service; measuring the app's use and performance (usage analytics and crash reports) to maintain and improve it; and ensuring security, preventing fraud and abuse, and complying with legal obligations.

Secondary purposes (optional): sending marketing communications and product news. It is not necessary for the service; we will only do it if you give us your consent, and you can withdraw it at any time (see §7).

If you do not want us to process your data for the secondary purposes, you can tell us in the app or by writing to support@sysstem.ai. Your refusal will not be grounds to deny you the service.

For features such as chatting with Syss, generating missions, and analyzing your logs, we send relevant, minimized portions of your content to AI providers to generate your response. What each provider then does with that content depends on its own terms, described below.

Who receives it depends on where you are; we determine it from your device's time zone. (a) In the European Union, the EEA, the United Kingdom, and Switzerland: DeepSeek models hosted outside China, through OpenRouter, a company based in the United States, which sends them to providers that neither keep your content nor train on it (today DeepInfra and Fireworks, based in the United States). Your content is not sent to DeepSeek or to China. (b) Everywhere else, including Mexico: DeepSeek, through its direct API, a company based in the People's Republic of China. (c) In both cases, Anthropic, a company based in the United States, as the fallback provider when the primary one is unavailable. (d) Only outside the EU, the EEA, the United Kingdom, and Switzerland: TypeSafe, a company based in the United States, which does not generate responses and only helps choose which parts of your content are sent (see below). We use no other routes or AI providers for this content.

DeepSeek (China), outside the EU, the EEA, the United Kingdom, and Switzerland — important notice. Your content, including sensitive data (mood; health, including your wearable data — heart rate, sleep, heart rate variability, steps, and workouts; finances; and conversations with Syss), is transferred to DeepSeek. We do not have a data processing agreement or contractual clauses with DeepSeek, which is subject to Chinese law, and China has no adequacy decision for data protection. DeepSeek's developer terms are governed by Chinese law, set no retention period, and do not exclude using the content to train its models. You should therefore assume that DeepSeek may retain the content we send and use it to train and improve its models, and that we cannot ask it to delete that content.

Anthropic (United States). Anthropic processes the content we send under its commercial terms, which include a data processing agreement and a commitment not to use content from its API to train its models.

OpenRouter (United States), in the EU, the EEA, the United Kingdom, and Switzerland. Every request is configured to use only providers outside China that do not keep your content and do not use it to train models. OpenRouter does not store request content. We are formalizing a data processing agreement with OpenRouter.

TypeSafe (United States), outside the EU, the EEA, the United Kingdom, and Switzerland. In your chat with Syss, in the missions you ask for in your own words, and in the goals you create, we use Jev, a model by TypeSafe AI, Inc., to decide which parts of your content each response needs, so that only what is relevant reaches the main provider. Jev does not generate text: it receives your request and short excerpts of your context (for example, the title and opening of a note, the name of a ritual, or a summary of your logs), after they go through the same automatic personal-data filter we use with the other providers, and it answers which ones are relevant. According to its privacy policy, TypeSafe hosts its services in the United States, does not train or fine-tune models on that content, and keeps it for as long as reasonably necessary to provide its service. If Jev does not respond, the response is generated anyway, without that selection. In the EU, the EEA, the United Kingdom, and Switzerland we do not send your content to TypeSafe.

Your consent and your control. These transfers are an international transfer of your data, including sensitive data. That is why we ask for your express consent, separately and inside the app (the "How Syss uses your data" screen), before sending your content to any AI provider; without it, we do not send it, and you can use Sysstem's essential features without AI personalization. You can withdraw your consent at any time from the app. The only exception: content you publish for other people (missions, photos, comments) is reviewed with automated tools, including AI, to moderate it and meet legal obligations, even if you have not given this consent. We never sell your personal data or share it for advertising, and we never use your health data for marketing.

How Syss works, in plain language. Syss is an assistant built on AI models. So it can understand and help you, we send the provider your messages and the necessary context (first name, amounts, emotional context), minimizing what is not needed; that provider processes it under the conditions described above. If we change providers or routes in the future, we will notify you under §13. Syss's replies and missions are AI-generated and may be inaccurate or incomplete; Syss does not provide professional medical, psychological, legal, or financial advice: use your own judgment and consult a professional when you need to.

When you use voice input, your audio is sent to Speechmatics (United Kingdom) solely to transcribe it to text. The audio is discarded after transcription; we keep only the text as part of your log. This processing requires your explicit, versioned consent, revocable at any time in the app.

In addition to the AI providers (§4) and the voice provider (§5), we use these services to operate Sysstem, which process your data only as needed for each function:

Amazon Web Services (AWS): app hosting, storage of your photos and files, and automated review of the images you publish to moderate them. MongoDB Atlas: database. Google Firebase: usage analytics, crash reports (with an identifier of your device), and push notification delivery. Resend: email delivery. MapTiler and Mapbox: maps; they receive your IP address and the map area you view. Didit: identity verification, only if you choose to verify (§2). Apple and Google: sign-in with your Apple or Google account and billing for purchases, under their own policies.

Most of these providers are based outside Mexico, mainly in the United States, so processing your data with them involves an international transfer. By accepting this Notice you consent to these transfers, which are necessary to provide the service.

Per-user encryption: your sensitive data (bio, chats with Syss, logs, finances, moods) is encrypted with a unique per-user key before it is stored. That key is protected by a master key managed in AWS.

Encryption in transit: connections between the app and our servers are encrypted (TLS).

Cryptographic erasure: when you delete your account we destroy your unique key, which makes the data encrypted with it unrecoverable, including in backups. The rest of your data is deleted as described in §8, and from backups as they are renewed.

We limit sign-in attempts and restrict who can access data. No system is infallible: if a security breach significantly affects your rights, we will notify you by email without delay, explaining what happened, which data was affected, and what you can do.

You have the right to Access, Rectify, Cancel, and Object (ARCO rights) to the processing of your personal data, to withdraw your consent, and to limit the use or disclosure of your data (by turning off AI, wearables, voice, or location in the app, or by writing to us). You can also ask us by email for a copy of your data in a commonly used format.

Access and rectification: in the app, in your profile; or by requesting it at support@sysstem.ai. Cancellation (deletion): in Settings → Account → Delete Account, with immediate crypto-shredding and a deferred purge within 30 days (see §8); also by email. Objection and withdrawal: for secondary purposes and for consent-based processing (health, voice, wearables, location, AI).

How to exercise them: send your request to support@sysstem.ai with your name, the right you wish to exercise, and the information needed to verify your identity. We will reply within 20 days of receiving your request and, if it applies, carry it out within the following 15 days (LFPDPPP Art. 31).

If you believe your right to data protection has been violated, you can go to the Secretaría Anticorrupción y Buen Gobierno (Mexico's Ministry of Anti-Corruption and Good Governance), the authority that oversees compliance with the LFPDPPP.

When you delete your account: we carry out the cryptographic erasure described in §6; we delete the memory Syss has built about you; and we complete the purge within 30 days. Content already sent to AI providers remains subject to their own terms: Anthropic retains it for a limited period under its data processing agreement; DeepSeek may have retained it under its terms and offers no way to request its deletion; TypeSafe keeps it for as long as reasonably necessary to provide its service (see §4).

What we may retain: information strictly necessary to comply with legal or tax obligations, and anonymized data that no longer identifies you.

Exceptions to deletion under a legal obligation. In two specific cases, certain data is not erased by your request while a legal obligation is in force, on the basis of the legal-obligation exception under LFPDPPP: (a) if content you upload appears to involve the sexual exploitation of a minor, we are legally required to preserve it and the related account data and to report it to the competent authorities; this data is retained for at least one year, or longer if an authority requests, and is not erased while that obligation is in force; (b) if you verified your identity or age, the reference to your verification session at our specialized provider may be retained for a limited period, for safety and to comply with legal obligations, even after you delete your account.

You can also request deletion without installing the app, from our public data-deletion page.

We keep your data while your account is active and for the period needed to fulfill the purposes described. Some content deletes itself: messages, after 90 days. Comments on missions and goals, with their photos, are kept while your account exists or until you delete them; if you delete a comment that has an open report, we keep it hidden until the report is resolved and then delete it. After your account is deleted, we apply §8. Data we keep for legal or tax obligations is kept only for the period the law requires.

Sysstem is intended exclusively for people aged 18 and over, given that it processes sensitive health and financial data. We do not knowingly collect data from minors. If we detect an account belonging to a person under 18, we will delete it. A version of Sysstem for younger audiences, with its own protection framework, may be offered separately in the future.

We ask for your date of birth at sign-up as a neutral age check and do not create accounts for anyone under 18. Our legal basis for this limited processing is compliance with our legal and app-store obligations and our legitimate interest in keeping minors out of an app that handles sensitive data; we use the date of birth only for age assurance, never for marketing. Once set, your date of birth cannot be changed to make you older without identity verification.

In the app we use essential technical storage on your device (for example, to keep you signed in and remember your language). The website uses no cookies or local storage; see our Cookie Policy for details.

In addition to this Notice, the General Data Protection Regulation (GDPR) or your country's equivalent law applies to you. We identify your region from your device's time zone.

Legal bases: performance of the contract, to provide the service; your explicit consent, for sensitive data (health, mood, wearables, voice, location), for AI processing, and for usage analytics and marketing communications; our legitimate interest, for security and fraud and abuse prevention; and compliance with legal obligations.

Artificial intelligence: your content is not sent to DeepSeek, to China, or to TypeSafe. We use DeepSeek models hosted outside China through OpenRouter, with Anthropic as the fallback (§4).

International transfers: our providers (§4 and §5.1) are mainly in the United States. Depending on the provider, transfers rely on the European Commission's standard contractual clauses or on the EU-U.S. Data Privacy Framework.

Your rights: access, rectification, erasure, restriction of processing, portability, objection, and withdrawing your consent at any time, without affecting processing carried out before withdrawal. We will reply within one month at most. Write to support@sysstem.ai.

You can lodge a complaint with the data protection authority of your country.

We may update this Notice. We will notify you of relevant changes by email and through an in-app notice at least 30 days before they apply. The "last updated" date will always be visible.

For any questions about this Policy or about how we process your data: support@sysstem.ai.