Lattice GDPR & Data Rights

Controller

TinyPrd is the controller for Lattice beta data. Contact us at support email.

Categories of Lattice data

• Account identifiers: Supabase Auth user ID and Sign in with Apple email address when available.
• User content: saved subjects, saved memories, scheduling state, review logs, and cloud AI/review content processed through the Lattice Supabase Edge Function.
• Feedback: beta feedback text submitted from Settings.
• Diagnostics: app version, hosted model, agent mode, API/sync status, request metadata, and sanitized troubleshooting data.

Data excluded from sync

Raw pasted source text and chat transcripts are not synced in v1. Source app bundle IDs, source app names, source URLs/titles, source kind, entrypoint, source hashes, and normalized source hashes are not synced in v1.

Lawful bases

• Contract: to authenticate you and provide Lattice sync, review, feedback, and cloud AI features.
• Legitimate interests: to secure, debug, operate, and improve the beta.
• Consent: where optional communications or future optional processing requires consent.
• Legal obligation: where retention or disclosure is required by law.

Your rights

Subject to applicable law, you can request access, rectification, erasure, restriction, portability, objection to legitimate-interest processing, and withdrawal of consent.

Account deletion

Users can delete their account from Settings. Account deletion removes synced Supabase rows and the Auth user, then clears local memories on the device after the server-side deletion succeeds.

International transfers and subprocessors

Lattice uses providers for authentication, database, hosting, model inference, and operational support. When data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or another valid mechanism.

How to make a request

Email support email with your request. We will verify your identity and respond within the timeframe required by law.