Privacy Policy

1. Who We Are

EggieNet is a product of Tangible Robots Inc. ("EggieNet," "we," "us," or "our"). EggieNet operates the EggieNet Platform, a data collection management system used to coordinate, upload, manage, and annotate egocentric video footage captured for the purpose of training artificial intelligence models.

This Privacy Policy explains how we collect, use, store, share, and license personal information and video data gathered through the EggieNet Platform and associated data collection activities.

Legal Entity: Tangible Robots Inc.

Mailing Address: 835 E San Carlos Ave, Suite 100, San Carlos, CA 94070, United States

Email: [email protected]

2. Data We Collect

A. Account & Identity Data

When you create an account on EggieNet, we collect:

• Full name
• Email address
• Encrypted password (hashed; we cannot read it)
• Phone number (optional — only if you enable SMS two-factor authentication)
• Organization affiliation
• Date and time you consented to this Privacy Policy
• Login history and activity logs

B. Egocentric Video Footage

This video footage may incidentally capture:

• Faces of the data collector and bystanders
• Hands and body movements of the data collector
• Physical environments (indoor and outdoor spaces)
• Objects, tools, and items in the environment
• Text visible in the environment (signs, labels, screens)

C. Metadata

• Video file name, size, duration, and format
• Upload timestamps
• Camera type and recording settings (where available)
• Session annotations and labels
• Equipment assignment records

D. Platform Usage Data

• IP address at login and upload
• Browser and device type
• Pages visited within the platform
• Actions taken (uploads, annotations, downloads)

E. Information We Automatically Collect

This information includes:

• IP address: Your Internet Protocol address, collected each time you log in or interact with the platform
• User agent / Browser information: The type and version of web browser you use (e.g., Chrome 120, Safari 17)
• Device type: Whether you access the platform from a desktop computer, mobile phone, or tablet
• Operating system: The OS running on your device (e.g., Windows 11, macOS, Android, iOS)
• Approximate geographic location: City-level and country-level location derived from your IP address using GeoIP lookup services. We do not use GPS or precise location tracking.

This data is stored in our analytics system and is visible to platform administrators in aggregated form. Individual session records (including your IP address and location data) are retained for security auditing purposes. This data is used solely for platform improvement, security monitoring, and generating usage analytics — it is never sold or shared with third parties for marketing purposes.

3. SMS & Mobile Data Privacy

3.1 Phone Number Collection & Use

If you choose to enable SMS-based two-factor authentication (2FA), we collect your mobile phone number solely for the purpose of sending one-time verification codes when you sign in to your account. Specifically:

• Purpose: Your phone number is used exclusively to send one-time 2FA verification codes via SMS to secure your account login
• Storage: Your phone number is stored securely in our database and is associated with your account
• Third-party service: SMS messages are delivered through Firebase (Google), a trusted communications platform. Your phone number is shared with Firebase solely for the purpose of delivering verification codes
• No marketing: We will never use your phone number to send marketing messages, promotional content, or any communication other than security verification codes
• Opt-out: You can disable SMS 2FA at any time through your profile settings, which will delete your phone number from our records. You may also reply STOP to any SMS message to immediately opt out

3.2 Mobile Information Sharing Prohibition

3.3 SMS Message Flow & Opt-In

Users opt in to receive SMS messages through the following flow:

• Step 1 — Account registration: During registration at eggienet.com/register, users may optionally provide a mobile phone number. The registration form displays consent disclosures including message frequency, data rates, and links to this Privacy Policy, our Terms of Service, and our SMS Messaging Policy
• Step 2 — Enable SMS 2FA: After signing in, users navigate to their profile settings and explicitly enable SMS two-factor authentication. This action constitutes the opt-in. SMS messages are only sent after the user explicitly enables SMS 2FA
• Step 3 — Verification codes sent: When the user signs in, an automated SMS containing a one-time 6-digit verification code is sent to their phone number

3.4 SMS Terms of Service

• Message content: You will receive automated SMS messages containing one-time 6-digit verification codes for account login security only
• Message frequency: 1–3 messages per login session
• Message and data rates may apply depending on your mobile carrier and plan
• Opt-out: Reply STOP to any message to stop receiving SMS messages, or disable SMS 2FA in your profile settings. You will receive a confirmation and no further messages will be sent
• Help: Reply HELP to any message for assistance, or contact [email protected]
• No condition of purchase: SMS consent is not a condition of purchase or use of any EggieNet service. You may use an authenticator app (TOTP) as an alternative at any time
• Carriers: Carriers are not liable for delayed or undelivered messages

For the full SMS consent disclosure, see our SMS Messaging Consent & Policy page. For questions, contact [email protected].

4. How We Collect Data

Data is collected through the following means:

• Organized collection sessions: EggieNet coordinates data collection activities where participants record video according to specific instructions
• Equipment loan program: EggieNet may provide cameras and recording equipment to participants for data collection activities
• Account registration: Information provided when creating an account on the platform

All participants in data collection activities are made aware of the recording and provide explicit consent prior to participation.

5. Why We Collect This Data

We collect egocentric video data for the following purposes:

• AI model training: The primary purpose is to build large-scale datasets used to train, fine-tune, and evaluate artificial intelligence and machine learning models, particularly models relating to computer vision, activity recognition, and embodied AI
• Dataset creation and curation: Organizing, annotating, and labeling video footage to create structured training datasets
• Research and development: Internal and collaborative AI research

6. Sharing of Data CCPA

Who We Share Data With

• AI/ML companies: Technology companies building AI models who license our datasets for training purposes
• Academic institutions: Universities and research labs conducting AI research
• Cloud infrastructure providers: Secure cloud storage and transmission
• Platform service providers: Email delivery services for transactional emails

What We Do NOT Do

• We do not sell or share (as defined by the CPRA) your personal information or identifiable data for cross-context behavioral advertising. We license anonymized, de-identified datasets that contain no personally identifiable information
• We do not sell your name, email, phone number, or account credentials
• We do not share data with advertisers
• We do not share data with law enforcement without a valid legal order
• We do not share raw, unprocessed footage — only anonymized datasets
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties

7. Anonymization & Privacy Protections

What We Blur or Remove

All video footage undergoes processing to:

• Faces: All faces appearing in video footage are automatically detected and blurred using computer vision technology
• Names on items: Any visible text on objects (name badges, personalized items, branded clothing with names) is blurred
• Phone and screen content: All visible phone screens, computer monitors, tablets, and other displays are blurred to prevent exposure of private messages, contacts, or sensitive information
• Written names: Any visible written names on documents, whiteboards, signs, or other surfaces are blurred
• Vehicle license plates: License plates appearing in footage are blurred

Audio Processing

We do not collect audio. All audio is automatically deleted before any footage is processed or shared. No audio content is ever retained in processed datasets. Private conversations, voices, and ambient audio are permanently removed upon upload.

Limitations

While we apply best-effort automated and manual anonymization processes, no technology is 100% perfect. We continuously improve our anonymization pipeline. If you discover identifiable information in any dataset, please contact us immediately at [email protected].

8. Your Rights CCPA

You have the following rights regarding your personal data:

Right to Access

You may request a copy of all personal data we hold about you by emailing [email protected].

Right to Deletion (Right to Erasure)

You may request deletion of your account and personal information at any time. You can delete your account directly from your account settings in the EggieNet platform, or by emailing [email protected].

Note: Deletion removes your name, email, and account credentials. Anonymized video footage that has already been processed and included in shared datasets cannot be retroactively removed from those datasets, as it no longer contains any identifying information linking it to you.

Right to Withdraw Consent

You may withdraw your consent at any time by deleting your account or contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Right to Rectification

You may update your account information (name, email) through your profile settings at any time.

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you. You may also update your account information directly through your profile settings.

Right to Opposition

You have the right to oppose the processing of your personal data for specific purposes, particularly secondary purposes such as dataset licensing. To exercise this right, contact us at [email protected] with subject "Data Processing Opposition."

Right to Data Portability

You may request an export of your account data in a machine-readable format by contacting [email protected].

Legal Basis for Processing

We process your personal data based on:

• Consent: You provide explicit consent when creating your account and accepting this Privacy Policy
• Contractual necessity: Processing necessary to perform the services described in our Terms of Service
• Legitimate interests: Platform security, fraud prevention, and service improvement

How to Exercise Your Rights

Email [email protected] with your request. Response timelines vary by jurisdiction:

• United States (CCPA/CPRA): Within 45 days (extendable by 45 days with notice)
• Mexico (LFPDPPP): Within 20 business days (extendable by 20 business days)
• Colombia (Ley 1581): Within 10 business days for queries, 15 business days for complaints (extendable by 5 and 8 business days respectively)

9. United States — State Privacy Rights CCPA/CPRA

9.1 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) grants you specific rights:

Right to Know

You have the right to know what categories of personal information we collect, the purposes for collection, the categories of third parties we share with, and whether we sell or share your information. This Privacy Policy fulfills that disclosure.

Categories of Personal Information Collected

• Identifiers: Name, email, phone number, IP address
• Internet or network activity: Login history, page views, session data
• Sensory data: Visual information — video footage (no audio)
• Professional/employment information: Organization affiliation
• Geolocation data: Approximate city-level location derived from IP address

Sensitive Personal Information

We collect the following categories of sensitive personal information: approximate geolocation data (city-level, derived from IP address). We use this sensitive personal information only for purposes authorized under the CPRA (security monitoring and platform improvement). You may request that we limit the use of your sensitive personal information by emailing [email protected] with subject "Limit Sensitive Data Use."

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Do Not Sell or Share My Personal Information

We do not sell or share (as defined by the CPRA) your personal information for cross-context behavioral advertising. We license anonymized, de-identified datasets that contain no personally identifiable information. If you have any questions regarding data sharing, contact [email protected] with subject "Do Not Sell My Data".

Right to Non-Discrimination

We will not deny services, charge different prices, or provide a different quality of service because you exercised your privacy rights.

Financial Incentives

If you participate in compensated data collection activities (including mileage reimbursement), these are offered in exchange for the data collection services you provide and are not conditioned on your waiver of privacy rights. You may opt out of any compensated program at any time without affecting your privacy rights.

9.2 Other U.S. State Residents

If you reside in a state with a comprehensive consumer privacy law (including but not limited to Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Delaware, Iowa, Indiana, Tennessee, Montana, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, Kentucky, or Rhode Island), you may have additional rights under your state's law, including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of targeted advertising and profiling.

Right to Appeal

If we decline to take action on your privacy request, you may appeal our decision by emailing [email protected] with subject "Privacy Appeal." We will respond to your appeal within 60 days. If your appeal is denied, you may contact your state's attorney general.

Opt-Out Preference Signals

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a valid opt-out request under applicable state law.

10. Aviso de Privacidad — Residentes de México

Identidad del Responsable del Tratamiento

Tangible Robots Inc., sociedad constituida bajo las leyes de los Estados Unidos, operando bajo la marca comercial "EggieNet," con domicilio en 835 E San Carlos Ave, Suite 100, San Carlos, CA 94070, Estados Unidos, es el Responsable del Tratamiento de sus datos personales.

Contacto: [email protected]

Datos Personales Recabados

EggieNet recaba las siguientes categorías de datos personales:

• Datos de identificación: Nombre completo, correo electrónico, número de teléfono (opcional)
• Datos de uso de la plataforma: Dirección IP, tipo de navegador, ubicación aproximada (nivel ciudad)
• Datos laborales: Afiliación organizacional

Datos Personales Sensibles

Finalidades del Tratamiento

Finalidades primarias (necesarias para el servicio):

• Gestión de su cuenta y autenticación
• Coordinación de actividades de recolección de datos
• Procesamiento y anonimización del material de video
• Seguridad de la plataforma y prevención de fraude

Finalidades secundarias:

• Creación y licenciamiento de datasets anonimizados para entrenamiento de modelos de inteligencia artificial
• Investigación y desarrollo en IA en colaboración con instituciones académicas
• Análisis de uso y mejora de la plataforma

Si usted no desea que sus datos personales sean tratados para las finalidades secundarias, puede enviar un correo a [email protected] con el asunto "Oposición a Finalidades Secundarias."

Transferencias de Datos Personales

Sus datos personales serán transferidos a:

• Amazon Web Services (almacenamiento en la nube, región us-east-1, Estados Unidos)
• Empresas de inteligencia artificial (para licenciamiento de datasets anonimizados) ubicadas en Estados Unidos
• Instituciones académicas (para investigación en IA) ubicadas en Estados Unidos y otros países
• Firebase (Google) (envío de SMS de verificación, Estados Unidos)
• Proveedores de correo electrónico (Estados Unidos)

Al aceptar este Aviso de Privacidad, usted consiente expresamente estas transferencias internacionales de datos.

Derechos ARCO

Usted tiene derecho a Acceder a sus datos personales, Rectificarlos, solicitar su Cancelación (bloqueo y posterior supresión), u Oponerse a su tratamiento (derechos ARCO). Para ejercer estos derechos, envíe un correo electrónico a [email protected] con el asunto "Solicitud ARCO" incluyendo:

• Su nombre completo y correo electrónico asociado a su cuenta
• Descripción clara del derecho que desea ejercer
• Documentos que acrediten su identidad (copia de identificación oficial)

Responderemos a su solicitud dentro de 20 días hábiles contados a partir de la fecha de recepción. Este plazo podrá extenderse por 20 días hábiles adicionales cuando el caso lo justifique.

Revocación del Consentimiento

Usted puede revocar su consentimiento para el tratamiento de sus datos personales en cualquier momento enviando un correo a [email protected] con el asunto "Revocación de Consentimiento." La revocación no afectará la licitud del tratamiento realizado antes de la misma. También puede eliminar su cuenta directamente desde la configuración de su perfil.

Limitación del Uso o Divulgación

Usted puede solicitar la limitación del uso o divulgación de sus datos personales enviando un correo a [email protected] con el asunto "Limitación de Uso de Datos."

Autoridad de Protección de Datos

Si considera que su derecho a la protección de datos personales ha sido lesionado, puede interponer una queja ante el INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) en www.inai.org.mx.

Cambios al Aviso de Privacidad

Cualquier modificación a este Aviso de Privacidad será comunicada a través de la plataforma y/o por correo electrónico.

11. Política de Tratamiento de Datos — Residentes de Colombia

Responsable del Tratamiento

Tangible Robots Inc., sociedad constituida bajo las leyes de los Estados Unidos, operando bajo la marca comercial "EggieNet," con domicilio en 835 E San Carlos Ave, Suite 100, San Carlos, CA 94070, Estados Unidos.

Contacto para el ejercicio de derechos:
Correo: [email protected]
Asunto: "Consulta de Datos Colombia" o "Reclamo de Datos Colombia"

Autorización

Al crear una cuenta en la plataforma EggieNet y aceptar esta Política de Privacidad, usted otorga su autorización previa, expresa e informada para el tratamiento de sus datos personales de acuerdo con las finalidades aquí descritas.

Datos Sensibles

Derechos del Titular

De conformidad con la Ley 1581 de 2012, usted tiene derecho a:

• Conocer, actualizar y rectificar sus datos personales
• Solicitar prueba de la autorización otorgada
• Ser informado sobre el uso que se le ha dado a sus datos personales
• Presentar quejas ante la SIC por infracciones a la ley
• Revocar la autorización y/o solicitar la supresión de sus datos personales
• Acceder de forma gratuita a sus datos personales

Consultas

Usted puede presentar consultas sobre sus datos personales. EggieNet responderá dentro de los 10 días hábiles siguientes a la recepción de la consulta. Cuando no sea posible responder dentro de dicho término, se le informará al titular y se responderá dentro de los 5 días hábiles siguientes al vencimiento del primer término.

Reclamos

Usted puede presentar reclamos respecto al tratamiento de sus datos. EggieNet responderá dentro de los 15 días hábiles siguientes a la recepción del reclamo. Cuando no sea posible responder dentro de dicho término, se le informará al titular y se responderá dentro de los 8 días hábiles siguientes al vencimiento del primer término.

Transferencias Internacionales

Sus datos personales serán transferidos a los Estados Unidos para su almacenamiento (Amazon Web Services, región us-east-1) y procesamiento. De acuerdo con la Circular 005 de 2017 de la SIC, los Estados Unidos no se encuentran en la lista de países con nivel adecuado de protección de datos personales. Al aceptar esta política, usted autoriza expresamente la transferencia internacional de sus datos personales a los Estados Unidos y a los terceros identificados en la Sección 6 de esta política.

Sus datos también podrán ser compartidos con empresas de IA/ML e instituciones académicas ubicadas en diversos países para fines de licenciamiento de datasets anonimizados e investigación.

Autoridad de Protección de Datos

Si considera que EggieNet ha vulnerado sus derechos como titular de datos personales, usted tiene derecho a presentar una queja ante la Superintendencia de Industria y Comercio (SIC) en www.sic.gov.co.

Vigencia

Esta política entra en vigencia a partir de su fecha de publicación y permanece vigente mientras EggieNet trate datos personales de titulares colombianos.

12. International Data Transfers

Your data is stored on Amazon Web Services (AWS) servers in the us-east-1 region (Virginia, United States). Data may also be processed by the following service providers located in the United States:

• Amazon Web Services (AWS): Cloud storage and computing — Virginia, USA
• Firebase (Google): SMS delivery for two-factor authentication — USA
• Email service providers: Transactional email delivery — USA

Anonymized datasets may be licensed to AI/ML companies and academic institutions located in various countries. These datasets contain no personally identifiable information.

By using the EggieNet Platform, you consent to the transfer of your personal data to the United States and to any other country where our service providers operate, subject to the protections described in this Privacy Policy.

13. Cookies & Tracking Technologies

The EggieNet Platform uses the following cookies and similar technologies:

• Session cookie (strictly necessary): Maintains your login session while you use the platform. This cookie is deleted when you close your browser or when your session expires.
• Functional cookie (eggy_splash_date): Remembers whether you have seen the platform splash screen to avoid showing it repeatedly. This cookie improves your user experience.
• Language preference (tangible_lang, tangible_lang_manual): Stored in your browser's local storage to remember your language preference (English or Spanish) across visits.
• Geo-location cache (tangible_geo_country): Stored in your browser's local storage to remember your detected country for language auto-detection, avoiding repeated geo-IP lookups.

We do not use advertising cookies, third-party tracking cookies, analytics cookies from Google Analytics or similar services, or any cookies for behavioral advertising or cross-site tracking.

You may disable cookies through your browser settings; however, disabling session cookies will prevent you from logging into the platform.

14. Children's Privacy

The EggieNet Platform is not directed at children under 18. You must be at least 18 years of age to create an account and participate in data collection activities. We do not knowingly collect personal information from children under 18.

Egocentric video footage may incidentally capture minors as bystanders in the environment. All faces (including those of minors) are automatically blurred during our anonymization process before any data is used or shared.

If you believe that a person under 18 has created an account on our platform, please contact [email protected] and we will promptly delete the account and associated data.

15. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of an account deletion request.
• Raw video footage: Retained for up to 24 months after upload, then permanently deleted from our systems.
• Processed/anonymized datasets: Retained indefinitely as they contain no personally identifying information.
• Activity logs: Retained for 12 months for security and compliance purposes.
• Consent records: Retained for 7 years to demonstrate compliance with applicable law.

16. Security

We take the security of your data seriously and implement industry-standard protections including:

• All data transmitted over HTTPS (TLS encryption)
• Passwords hashed using bcrypt (industry-standard one-way hashing)
• Role-based access control — only authorized personnel access data
• Video files stored in encrypted cloud storage
• Regular security audits and vulnerability scanning
• Rate limiting on all authentication endpoints to prevent brute-force attacks

In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable federal, state, and international law (including Mexico's LFPDPPP and Colombia's Ley 1581 de 2012).

17. Contact Us

For any privacy-related questions, requests, or concerns:

• Email: [email protected]
• Mailing Address: Tangible Robots Inc. (d/b/a EggieNet), 835 E San Carlos Ave, Suite 100, San Carlos, CA 94070, United States
• Subject lines to use:
  • "Data Access Request" — to receive a copy of your data
  • "Account Deletion Request" — to delete your account and data
  • "Do Not Sell My Data" — to opt out of data sharing (CCPA/CPRA)
  • "Solicitud ARCO" — to exercise ARCO rights (Mexico)
  • "Consulta de Datos Colombia" — data queries (Colombia)
  • "Reclamo de Datos Colombia" — data complaints (Colombia)
  • "Privacy Appeal" — to appeal a denied request (U.S. state laws)
  • "Privacy Complaint" — for any other privacy concern

Data Protection Authorities

• Mexico: INAI — www.inai.org.mx
• Colombia: Superintendencia de Industria y Comercio (SIC) — www.sic.gov.co
• United States: Your state attorney general's office