This Privacy Policy ("Policy") is issued by Mentat Digital Solutions LLC ("Company," "we," "us," or "our"), operator of the Tether mobile application, website, and all related services (collectively, the "Services"). It describes in detail how we collect, use, disclose, store, and protect personal information when you access or use Tether.

By downloading, installing, registering for, or using Tether, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree, please do not use the Services.

This Policy applies to:

● All registered account holders, including fathers, sons, and father figures or mentors

● Parents or legal guardians who create or manage profiles on behalf of minors

● Visitors to our website at https://www.tetherapp.com

● Anyone who contacts us for support or information

This Policy does not apply to third-party websites, applications, or services that may be linked from within Tether. We encourage you to review the privacy policies of any third-party services you access through our app.

Mentat Digital Solutions LLC is a limited liability company organized under the laws of the State of Wyoming, United States. Tether is our consumer-facing mobile application designed to help fathers, sons, and father figures build, strengthen, and repair meaningful family relationships.

Legal Entity

Mentat Digital Solutions LLC

Registered Address

30 N Gould St Ste R, Sheridan,   WY 82801, United States

General Inquiries

support@tether-app.com

Privacy Requests

support@tether-app.com

User Support

support@tether-app.com

Website

https://www.tetherapp.com

Privacy Policy URL

https://www.tetherapp.com/privacy

Terms & Conditions URL

https://www.tetherapp.com/terms

For all privacy-related questions, requests to exercise your rights, or concerns about this Policy, please contact us at privacy@tetherapp.com. We will respond to all verifiable requests within 30 days of receipt.

We collect several categories of information when you use Tether. The specific information we collect depends on which features you use, which role you select (Father, Son, or Father Figure/Mentor), and the choices you make within the app.

When you create an account, set up profiles, or use features of Tether, you may provide us with the following:

● Full name and preferred display name

● Email address and password (passwords are stored in hashed form and never in plain text)

● Date of birth (used to determine age-appropriate features and compliance with applicable law)

● Profile photo or avatar (optional)

● Role selection: Father, Son, or Father Figure/Mentor

● Phone number (used for SMS communications if you opt in to text message notifications)

● Son's name, date of birth, and age

● Relationship type (biological son, stepson, adopted son, mentee, etc.)

● Parent or guardian email address (required for sons under 13 to send COPPA-required parental notices)

● Family cultural background or preferences (optional, used to personalize activity recommendations)

● Communication goals and relationship stage (optional, used by the AI recommendation engine)

● Journal entries and written reflections created in My Journey, Safe Space, or Coaching modules

● Voice recordings submitted as voice notes or voice journal entries

● Photos and videos uploaded to My Journey timelines

● Messages sent through the in-app Direct Chat feature

● Responses submitted through Guided Conversations or AI Chat

● Content shared through the Safe Space feature, including emotionally sensitive personal disclosures

● Conflict Resolution submissions, responses, and resolution agreements

● Activity completion notes and associated reflections

● Community posts, comments, and forum contributions

● Mood check-ins and emotion tags applied to entries

● Feedback, survey responses, and support requests submitted to us

● Subscription tier selection (free or premium)

● In-app purchase records

Note: All payment transactions are processed directly by the Apple App Store or Google Play Store. We do not collect or store your credit card numbers, bank account details, or other financial payment information. We receive only transaction confirmation and subscription status from the relevant platform.

When you access or use Tether, certain information is collected automatically through our technical systems and third-party service providers:

● Device type, model, and manufacturer

● Operating system type and version (iOS or Android)

● Unique device identifiers (including IDFV on iOS; we do not use IDFA/advertising identifiers)

● Mobile network carrier and connection type (Wi-Fi, cellular)

● App version number

● Time zone and language settings

● Features accessed and actions taken within the app (e.g., activities completed, conversations initiated)

● Session duration and frequency of use

● Screens and sections viewed

● Button taps, navigation paths, and interaction patterns

● Push notification open rates and interaction data

● In-app search queries

● Time and date stamps of all significant in-app events

● Crash reports and error logs

● App performance metrics (load times, latency)

● Bug reports and technical diagnostics

This technical data is collected automatically through Google Firebase and is used exclusively for maintaining and improving the security and performance of the Services.

● Approximate location derived from IP address (used for localized activity recommendations and compliance determinations)

We do not collect precise GPS location data unless you explicitly grant permission for a specific feature that requires it. You can revoke location permissions at any time through your device settings. Revoking location access will not affect core app functionality.

The following categories of information are classified as sensitive personal information under applicable privacy laws. We collect and process this information only to the extent necessary to provide the Services you request, with your consent where required, and subject to the protections described in this Policy.

● Emotional and psychological wellness data — including mood check-ins, emotion tags, sentiment-analyzed journal entries, and tone assessments generated by our AI features

● Personal communications of a private and sensitive nature — including Safe Space entries, Conflict Resolution submissions, and Direct Chat messages between family members

● Information about minors — including son profiles for users under 18, with specific heightened protections for children under 13 as described in Section 5

● Voice and audio recordings — submitted as voice notes or voice journal entries, which may contain personally sensitive disclosures

● Family relationship dynamics — including information about conflict, emotional distance, reconciliation efforts, and family history shared through app features

We do not collect biometric identifiers, precise geolocation, financial account numbers, government-issued ID numbers, racial or ethnic origin, or religious beliefs. We do not use any sensitive personal information to infer additional characteristics about you beyond what is necessary to provide the relevant feature.

You have the right to limit our use of your sensitive personal information. See Section 9 for instructions on exercising this right.

We may receive limited information from the following third-party sources:

● Apple Sign In or Google Sign In: If you authenticate using these services, we receive your name and email address as provided by the respective platform. We do not receive your Apple or Google password.

● Google Firebase Authentication: Provides secure authentication tokens and session management.

● Firebase Analytics: Provides aggregated, anonymized usage statistics and app performance data.

We do not purchase or receive personal information from data brokers, marketing partners, social media platforms, or advertising networks. We do not use advertising networks or serve third-party ads within Tether.

We use the information we collect for the specific, legitimate purposes described below. We do not use your information for any purpose that is incompatible with these stated purposes without providing notice and, where required, obtaining your consent.

● Creating and authenticating your account and any son profiles you manage

● Enabling core features including My Journey, Activities, Guided Conversations, Direct Chat, Safe Space, Conflict Resolution, Coaching & Guidance, and Community

● Delivering content, prompts, activities, and recommendations tailored to your relationship stage and user role

● Processing and displaying User Content within the app as directed by you

● Enabling connected family members to share content, messages, and experiences as permitted by each user's privacy settings

● Storing and syncing your data across devices when you are signed in

Tether incorporates artificial intelligence and natural language processing to deliver the following capabilities:

● Guided Conversations — AI analyzes your selected tone and relationship context to generate personalized conversation prompts

● AI Chat — AI assists you in drafting messages, processing emotions, and preparing for difficult conversations

● Sentiment Analysis — AI evaluates the emotional tone of journal entries and messages to offer constructive reframing suggestions and detect patterns over time

● Safe Space Tone Reflection — AI assesses the emotional weight of a Safe Space entry before you choose to share it, and offers optional reframing

● AI Recommendation Engine — AI synthesizes your relationship stage, activity history, sentiment trends, and usage patterns to surface personalized recommendations for activities, prompts, coaching modules, and community content

● Conflict Resolution Guidance — AI assists in structuring mediation steps, offering perspective-taking prompts, and suggesting constructive next steps

When you use these features, relevant portions of your input are processed through OpenAI's API as described in Section 4.2. We configure our OpenAI integration in accordance with OpenAI's data usage policies for API customers, including opting out of using your data to train OpenAI's models.

● Sending push notifications for activity reminders, relationship insights, content recommendations, and feature updates (you control these through your device notification settings)

● Sending SMS text messages for account verification, security alerts, and service notifications (only if you have opted in to SMS communications)

● Responding to your support requests, feedback, and inquiries

● Sending transactional emails related to your account, subscription, and privacy rights

● Notifying you of material changes to this Policy or our Terms & Conditions with at least 14 days advance notice

● Detecting, preventing, and investigating fraud, abuse, unauthorized access, and security incidents

● Moderating Community content for compliance with our Community Guidelines

● Using automated tools and human review to identify content that violates our Terms or that poses safety risks

● Enforcing our Terms & Conditions and other applicable policies

● Complying with lawful requests from law enforcement and government authorities

● Protecting the rights, safety, and property of Tether, our users, and the public

● Analyzing aggregated, de-identified usage data to understand how features are used and where improvements can be made

● Conducting internal research on relationship patterns and feature effectiveness, using anonymized data only

● Testing new features, designs, and improvements through A/B testing using behavioral data

● Measuring the effectiveness of onboarding flows and user engagement

We do not use identifiable personal information or emotional content from your journal entries, Safe Space disclosures, or Direct Chat messages for product research or improvement without your explicit consent.

● Meeting our obligations under COPPA, the Texas Data Privacy and Security Act, the California Consumer Privacy Act (CCPA/CPRA), and other applicable laws

● Maintaining records required for tax, accounting, and regulatory compliance

● Responding to legal process, court orders, subpoenas, or government requests

● Asserting, establishing, or defending legal claims

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We share information only in the specific, limited circumstances described below.

Certain features of Tether involve intentional, user-directed sharing between users who have established a connection within the app (e.g., a father and son who have linked their accounts). The following sharing occurs only when you explicitly choose to share:

● Direct Chat messages are visible to the connected family member you are messaging

● Guided Conversation prompts you choose to send are delivered to the connected family member

● Safe Space entries are shared only when you affirmatively select "Share with [name]" — entries you mark as private remain private

● Conflict Resolution submissions are shared with the connected family member as part of the structured mediation flow, which both parties must opt into

● My Journey memories are shared only when you choose to share them; private entries remain private

Each user retains individual control over what is and is not shared. We do not share your content with connected family members without your affirmative action to do so.

We share information with trusted third-party companies that provide essential technical services on our behalf. These parties act as data processors under written agreements that prohibit them from using your information for any purpose other than providing services to us:

Service Provider

Purpose

OpenAI (OpenAI, LLC)

Powers AI-assisted features:   Guided Conversations, AI Chat, Sentiment Analysis, Safe Space tone   reflection, Conflict Resolution guidance, and the AI Recommendation Engine.   Data sent to OpenAI is processed under OpenAI's API data usage policy for   business customers, which does not permit use of API inputs to train OpenAI's   models.

Google Firebase

Provides backend   infrastructure including user authentication, real-time database, cloud   storage (photos, voice notes, videos), push notification delivery (Firebase   Cloud Messaging), and app analytics. Firebase is a Google Cloud product and   is governed by Google's Cloud Data Processing Addendum.

Apple App Store / Google Play   Store

Processes all in-app   subscription payments and purchases. We receive only transaction confirmation   and subscription status — we do not receive your payment card information.

Cloud Hosting Infrastructure

Secure server infrastructure   for storing app data. All data is encrypted at rest and in transit.

We conduct due diligence on all service providers and require written data processing agreements before sharing any personal information with them. We do not permit service providers to sell, share, or use your information beyond the scope of services they provide to us.

We may disclose your information when we have a good-faith belief that disclosure is necessary to:

● Comply with a subpoena, court order, warrant, or other valid legal process

● Enforce our Terms & Conditions or protect our legal rights

● Investigate, prevent, or respond to fraud, security incidents, or safety threats

● Protect the rights, safety, or property of Tether, our users, or the public

● Respond to an emergency involving risk of serious bodily harm

Where legally permissible, we will attempt to notify affected users of legal process before complying with it.

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. In any such event:

● We will provide at least 30 days' prior notice to affected users via email or in-app notification

● Any acquirer will be bound by this Privacy Policy with respect to personal information collected prior to the transfer

● If the acquirer's privacy practices differ materially from this Policy, we will provide you the opportunity to delete your account before the transfer is effective

We may share your information for purposes not described in this Policy when we have obtained your explicit, informed consent. You may withdraw that consent at any time by contacting privacy@tetherapp.com.

This section describes how Tether complies with the Children's Online Privacy Protection Act (COPPA) as amended by the FTC's 2025 final rule amendments, which require full compliance as of April 22, 2026. If you are a parent or guardian, please read this section carefully.

Tether uses a mixed-audience age structure:

● Direct account holders must be at least 13 years of age

● Users between 13 and 17 must have verifiable parental or guardian consent to register

● Children under the age of 13 may not create their own accounts under any circumstances

● A parent or guardian who holds an active Tether account may create a Parent-Managed Profile on behalf of a child under 13, subject to the requirements in Section 5.2

When a father or guardian creates a son profile for a child under 13, the following COPPA-compliant process applies:

During profile creation, you will enter your son's date of birth. If the system determines the son is under 13, the standard profile creation flow is interrupted and the COPPA consent flow begins automatically.

We will send a Direct Notice to the parent or guardian's registered email address. This notice contains, as required by 16 C.F.R. § 312.4:

● A description of all personal information we collect from the child's profile

● How we use that information

● Whether and to whom we disclose it (identifying OpenAI and Firebase by category)

● A statement that we do not condition the child's use of the Service on the collection of more information than is reasonably necessary

● Instructions for how the parent can review, correct, or delete the child's information

● Instructions for how the parent can revoke consent

We obtain verifiable parental consent using the Email-Plus method approved under 16 C.F.R. § 312.5. The process is:

● Parent receives the Direct Notice email described above

● Parent clicks a unique, time-limited verification link in the email to confirm consent

● We send a second confirmatory email to the parent acknowledging that consent has been received and the profile is now active

● The child profile remains inactive and no personal information is collected or processed until this two-step process is complete

Consent is logged with a timestamp, the parent's email address, and the specific data practices consented to. This log is maintained for a minimum of three years as required by law.

As required by the 2025 COPPA amendments, we obtain separate verifiable parental consent before disclosing a child's personal information to third parties (including OpenAI) for purposes that are not integral to the core Service. For AI features that process child-profile-adjacent data, this separate consent is presented at the time of parental profile activation.

For a Parent-Managed Profile (child under 13), we collect only the minimum information necessary:

● Son's name and date of birth (required to create the profile)

● Activities completed by the father on behalf of or with the son

● Memories (photos, notes) added to the son's timeline by the parent

● No direct collection of voice recordings, written journals, or chat messages from the child under 13 is permitted

Children under 13 do not have independent access to create journal entries, send chat messages, or participate in Community features. All data associated with a Parent-Managed Profile is entered and controlled by the parent.

At any time, the parent or guardian of a child under 13 has the right to:

● Review all personal information we have collected about their child by contacting privacy@tetherapp.com

● Request correction of inaccurate information about their child

● Request deletion of their child's profile and all associated data

● Revoke consent for ongoing data collection by contacting privacy@tetherapp.com or deleting the son profile from within the app

Upon revocation of consent, we will cease collection of any new information associated with the child's profile and will delete existing information within 14 days, except where retention is required by law.

We do not knowingly collect personal information from children under 13 except through Parent-Managed Profiles with verified parental consent. If we learn or have reason to believe that we have inadvertently collected personal information from a child under 13 without parental consent, we will:

● Immediately cease collection of any further information from that user

● Delete all collected information within 14 days

● Notify the parent or guardian if contact information is available

If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us immediately at privacy@tetherapp.com.

Users between 13 and 17 years of age may register for their own Tether accounts with verifiable parental or guardian consent. Parental consent for this age group is obtained via the Email-Plus method described above. Minors ages 13–17 have access to age-appropriate features of the app, with the following limitations:

● Community posting features may be restricted or moderated more strictly for users under 18

● AI Chat conversations involving content that may be inappropriate for minors are filtered

● Marketing communications are not sent to users who identify as under 18

Tether may send push notifications to your mobile device for the following purposes:

● Activity reminders — prompts to complete a scheduled or suggested bonding activity

● Relationship check-ins — periodic gentle nudges to engage with the app when usage has lapsed

● New messages — alerts when a connected family member has sent you a Direct Chat message or shared a Safe Space entry

● AI Recommendations — personalized suggestions for content, activities, or prompts based on your usage

● Coaching reminders — alerts when a new module or lesson is available

● Community notifications — alerts for replies or activity in Community threads you follow

● Security and account alerts — important notifications about your account status

Push notifications are delivered via Google Firebase Cloud Messaging (Android) and Apple Push Notification Service (iOS). Your device push token is shared with Firebase solely for the purpose of delivering notifications.

You may manage or disable push notifications at any time through your device's notification settings. You may also customize notification preferences within the Tether app settings. Disabling push notifications will not affect your ability to use core features of the app.

Tether sends SMS text messages only when you have affirmatively opted in to receive them. SMS messages are sent for the following purposes:

● Account verification — a one-time code sent to verify your phone number at registration or when requested

● Security alerts — notifications of unusual account activity or login attempts

● COPPA parental consent — text messages sent to parents or guardians as part of the parental consent process for child profiles, where the parent has provided a mobile number

● Optional service notifications — activity reminders or relationship prompts, only if you have separately opted in to marketing SMS

Standard message and data rates may apply. Message frequency varies based on your settings and activity.

To opt out of SMS messages at any time, reply STOP to any Tether text message. You will receive a one-time confirmation message confirming your opt-out. To resume SMS messages, reply START. For help, reply HELP or contact support@tether-app.com.

Opting out of SMS messages will not affect your ability to use Tether. Push notifications and in-app communications will continue unless separately disabled.

SMS messages are sent using a third-party messaging service provider. Your phone number and message content are shared with this provider solely for the purpose of message delivery. Your phone number is never sold or used for advertising.

This section provides transparency about how artificial intelligence features work in Tether, what data is shared with AI providers, and how you can control your participation.

Tether uses the following AI technologies to deliver its core features:

● Large Language Models (LLMs) via OpenAI's API — for generating guided conversation prompts, AI Chat responses, Conflict Resolution guidance, and Safe Space tone reflection

● Natural Language Processing (NLP) — for sentiment analysis of journal entries and messages

● Machine Learning-based Recommendation Systems — for the AI Recommendation Engine that surfaces personalized activities, prompts, and coaching content

● Firebase ML and Analytics — for app performance optimization and aggregate usage analysis

When you use an AI-powered feature, the following types of data may be transmitted to OpenAI's API for processing:

● The text or voice transcript of your journal entry, message draft, or Safe Space entry (only the specific entry you are actively working with in the AI-assisted feature)

● Contextual metadata such as your selected tone, relationship stage, and feature type (e.g., "Guided Conversation, Reflective tone, Father, son age 16") — no names or account identifiers are included in API calls

● The AI-generated response is returned to Tether, displayed to you in the app, and is not retained by OpenAI beyond the API request-response cycle

We do not send your full account profile, contact information, son profiles, payment records, or persistent history to OpenAI. Each API call is contextually bounded to the specific interaction you are engaged in.

We access OpenAI's API under OpenAI's business API terms, which do not permit OpenAI to use inputs submitted through the API to train its models. OpenAI may retain API inputs for a limited period (currently up to 30 days) for abuse monitoring and safety purposes, after which they are deleted. We maintain a Data Processing Addendum with OpenAI governing these terms.

Tether's AI features are designed to support communication and relationship-building. They are not a substitute for professional mental health care, therapy, counseling, or crisis intervention. No AI-generated content in Tether constitutes medical, psychological, or therapeutic advice.

If you or a family member are experiencing a mental health crisis, suicidal ideation, or are in immediate danger, please contact emergency services (911) or the 988 Suicide and Crisis Lifeline (call or text 988).

You may opt out of AI-powered features at any time without losing access to manual features of the app. To opt out:

● Go to Settings > Privacy > AI Features and toggle off AI-assisted features

● Or contact ${PRIVACY_EMAIL} to request that your account be excluded from AI processing

If you opt out, guided conversations will display curated prompts from our static library rather than AI-generated content. The AI Chat, Sentiment Analysis, and AI Recommendation Engine will be disabled for your account.

We retain personal information only for as long as is necessary to fulfill the purposes described in this Policy, to provide the Services you use, and to comply with our legal obligations. We apply the following principles:

● We collect the minimum information necessary for each feature

● We do not retain information beyond what is needed for its stated purpose

● We periodically review our data holdings and delete or anonymize information that is no longer needed

● We maintain a written data retention schedule identifying each category of data, its purpose, and its retention period

Data Category

Retention Period

Account and identity   information

Retained while your account is   active, plus 30 days following account deletion to allow for reactivation,   then deleted

User-generated content   (journals, photos, voice notes, memories)

Retained while your account is   active; deleted within 30 days of account deletion

Direct Chat messages

Retained while your account is   active; deleted within 30 days of account deletion

Safe Space entries

Retained while your account is   active; deleted within 30 days of account deletion

AI Chat conversation logs

Retained in Tether for 90 days   to support follow-up features, then deleted. Not retained by OpenAI beyond   their standard API retention window.

Activity completion records

Retained while your account is   active; deleted within 30 days of account deletion

Push notification tokens

Deleted upon account deletion   or device unregistration

SMS opt-in records

Retained for 3 years after   opt-out to demonstrate compliance with TCPA requirements

COPPA parental consent records

Retained for a minimum of 3   years as required by FTC regulations

Aggregate and anonymized   analytics data

May be retained indefinitely   as it cannot be linked to any individual

Security and fraud prevention   logs

Retained for up to 2 years

Legal hold data

Retained for as long as   legally required, then deleted

Backup copies

Purged within 90 days of the   deletion of the primary record

You may request deletion of your Tether account at any time by:

● Going to Settings > Account > Delete Account within the app

● Contacting privacy@tetherapp.com with your deletion request

Upon receiving a verified deletion request, we will:

● Deactivate your account immediately

● Delete your personal information and user-generated content from our active systems within 30 days

● Remove your information from backup systems within 90 days of your deletion request

We will retain certain limited information after deletion where required by law or for legitimate interests including fraud prevention, legal defense, and resolving disputes. Where we retain data for these purposes, we will isolate it from active processing.

Note: Deleting your account will also affect any son profiles managed under your account. Content shared with a connected family member prior to deletion may remain accessible to them until they also delete their account or request removal of specific content.

Depending on your location, you have specific legal rights regarding your personal information. We honor these rights for all users regardless of jurisdiction, to the extent operationally feasible.

● Right to Access — You may request a copy of the personal information we hold about you

● Right to Correct — You may request correction of inaccurate or incomplete information

● Right to Delete — You may request deletion of your personal information, subject to legal retention requirements

● Right to Data Portability — You may request your data in a structured, machine-readable format

● Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

● Right to Opt Out of AI Processing — You may opt out of AI-powered features as described in Section 7.5

● Right to Opt Out of SMS — You may opt out by replying STOP to any text message from us

● Right to Manage Push Notifications — Through your device settings or within the app

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

● Right to Know — The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information)

● Right to Delete — The right to request deletion of your personal information

● Right to Correct — The right to request correction of inaccurate personal information

● Right to Opt Out of Sale or Sharing — We do not sell or share your personal information for cross-context behavioral advertising

● Right to Limit Use of Sensitive Personal Information — You have the right to limit our use of sensitive personal information to what is necessary to provide the Services

● Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA/CPRA rights

● Right Regarding Automated Decision-Making — You have the right to opt out of automated decision-making that produces legal or similarly significant effects

To exercise your California rights, submit a verifiable consumer request to privacy@tetherapp.com or visit https://www.tetherapp.com/privacy-request. We will respond within 45 days and may extend by an additional 45 days with notice.

You may designate an authorized agent to submit requests on your behalf. We will require written proof of authorization and may verify your identity directly.

We do not have a "Do Not Sell or Share My Personal Information" link because we do not sell or share personal information as defined under CCPA/CPRA. If this practice changes, we will update this Policy, add the required link, and notify you in advance.

If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act:

● Right to know whether we process your personal data

● Right to access your personal data

● Right to correct inaccuracies in your personal data

● Right to request deletion of personal data you provided to us

● Right to obtain a copy of your personal data in a portable format

● Right to opt out of processing for targeted advertising, sale of personal data, or profiling for significant decisions (we do not engage in these activities)

To exercise your Texas rights, contact privacy@tetherapp.com. We will respond within 45 days and may extend by an additional 45 days with notice. If we decline your request, you may appeal by emailing privacy@tetherapp.com with the subject line "TDPSA Appeal." We will respond to appeals within 60 days. If your appeal is denied, you may submit a complaint to the Texas Attorney General.

To exercise any of the rights described in this section:

● Email: privacy@tetherapp.com with subject line "Privacy Rights Request"

● Include your full name, email address, and a description of the right you wish to exercise

● We will verify your identity before processing your request

● We will respond within 30 days (or 45 days for California requests)

We will not charge a fee for requests submitted in good faith. If requests are manifestly unfounded or excessive, we may charge a reasonable fee or decline to respond.

We implement a comprehensive information security program designed to protect the personal information we collect. Our security measures include:

● Encryption of all data in transit using TLS 1.2 or higher

● Encryption of sensitive data at rest using AES-256 encryption

● Secure password hashing using industry-standard bcrypt or Argon2 algorithms

● Firebase Security Rules to enforce data access controls at the database level

● API key management and rotation practices to prevent unauthorized access

● Automated monitoring for unusual access patterns and potential security incidents

● Regular dependency updates and vulnerability patching

● Access controls limiting employee access to personal data on a need-to-know basis

● Background checks for personnel with access to personal data

● Privacy and security training for all personnel

● Vendor security assessments before onboarding new service providers

● Annual review of our information security program

No method of data transmission over the internet or electronic storage is completely secure. While we implement industry-standard protections, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures. You use the Services at your own risk.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and in accordance with applicable law.

You are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account. Please use a strong, unique password and notify us immediately at support@tether-app.com if you suspect unauthorized access to your account.

Tether is operated from the United States. If you access the Services from outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

By using the Services, users outside the United States consent to the transfer of their personal information to the United States for processing in accordance with this Privacy Policy.

At this time, Tether is not specifically marketed to users in the European Economic Area, the United Kingdom, or Canada. If you are located in those regions, you acknowledge that the United States does not offer the same level of data protection as your home jurisdiction and that you are transferring your information voluntarily.

Tether's mobile application does not use browser cookies. The following tracking-adjacent technologies are used:

We use Firebase Analytics to collect aggregated, anonymized usage data about how users interact with the app. Firebase Analytics uses a randomly generated app instance ID (not linked to your Apple or Google account) to associate events. This data is used solely for internal product improvement and cannot be used to serve advertising.

You may opt out of Firebase Analytics data collection by enabling the "Limit Ad Tracking" setting on your iOS device or the "Opt out of Ads Personalization" setting on Android. You may also request exclusion from Firebase Analytics by contacting privacy@tetherapp.com.

We use Firebase Crashlytics to collect diagnostic data when the app crashes or encounters errors. Crash reports include device type, operating system version, app version, and a stack trace. These reports do not include your personal content. You may opt out of crash reporting through your device settings or by contacting privacy@tetherapp.com.

Our mobile application does not currently respond to Do Not Track (DNT) signals, as no uniform standard for DNT recognition has been finalized for mobile applications. If such a standard is adopted that applies to us, we will update this Policy accordingly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

● We will update the "Last Updated" date at the top of this Policy

● For material changes, we will notify you at least 14 days in advance via in-app notification and email

● For non-material changes (e.g., typographical corrections, clarifications), we will post the updated Policy without advance notice

● Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Policy

We maintain a version archive of prior Privacy Policies, which is available upon request by contacting privacy@tetherapp.com.

We recommend reviewing this Policy periodically. If you disagree with any changes, you should stop using the Services and delete your account.

We take privacy seriously and are committed to responding to your questions, concerns, and rights requests promptly.

Company

Mentat Digital Solutions LLC

Registered Address

30 N Gould St Ste R, Sheridan,   WY 82801, United States

General Legal Inquiries

support@tether-app.com

Privacy Requests and Rights   Exercises

support@tether-app.com

User Support

support@tether-app.com

Website

https://www.tetherapp.com

Privacy Request Portal

https://www.tetherapp.com/privacy-request

Response times: We aim to acknowledge all privacy-related inquiries within 5 business days and to provide a substantive response within 30 days. Complex requests may take longer, in which case we will notify you of the extension and its reason.