Privacy Policy

This Privacy Policy explains how Aina Computers Inc. and Aina Computer Private Limited, together with their affiliates, successors, and assigns (collectively, "Project Mirage", "Company", "we", "us", or "our"), collect, use, disclose, and process information.

This Policy applies to information voluntarily provided by you or automatically collected when you access or use:

• our website: https://www.projectmirage.ai

• our hardware product(s), associated applications, and software (including Dune for macOS and the Aina smart ring app)

• and any related services, purchases, or interactions (collectively, the "Platform")

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Definitions

Personal Data

"Personal Data" means any information that relates to an identified or identifiable individual, whether directly or indirectly.

Sensitive Personal Data

"Sensitive Personal Data" refers to categories of Personal Data that require a higher level of protection under applicable law, including but not limited to financial information and health data.

Non-Personal Data

"Non-Personal Data" means information that does not identify an individual, including technical and usage data.

Information

"Information" includes Personal Data, Sensitive Personal Data, and Non-Personal Data.

Third Party

"Third Party" means any individual or entity other than you or the Company.

You represent and warrant that:

• any Information provided by you is provided voluntarily

• you have obtained all necessary consents to share any Third Party information

Information We Collect

1. Website Information (Waitlist & Communications)

When you interact with our website, we may collect:

• Email address

• Any information voluntarily submitted through forms

We use this information to:

• Maintain a waitlist

• Send product updates, announcements, offers, and promotional communications

You may opt out of these communications at any time.

2. Usage Analytics (Product)

We collect non-identifiable usage data to understand how our hardware and software products are used and to improve them.

This may include:

• Feature usage (e.g., button interactions, workflows triggered)

• App performance metrics

• Crash logs and diagnostics

We do not associate this data with a personal identity.

3. Calendar and Email Data (Optional)

If you choose to connect your Google account or another supported provider:

• We may access and store calendar event data (such as event titles, times, and participants) to enable contextual features like reminders, suggestions, and quick meeting actions

• We may use calendar data to help you join meetings efficiently and provide timely notifications

Additionally, if you grant permission:

• We may send emails on your behalf to meeting participants (for example, notifying them that you are running late)

This data is used solely to provide product functionality and improve user experience.

We do not:

• use this data for advertising

• sell this data to third parties

You may revoke access at any time through your account or provider settings.

4. Third-Party Authentication (e.g., Google Sign-In)

If you choose to sign in using a third-party authentication provider such as Google:

• We may receive basic profile information such as your name, email address, and profile picture

• This information is used solely for account creation, authentication, and user identification within the Platform

We do not access or collect:

• your passwords

• your emails, contacts, or calendar data beyond the specific permissions you explicitly grant

Your use of such authentication services is also subject to the privacy policies of the respective third-party providers.

5. System Permissions & Device Access

Our product may request system-level permissions, including:

• Accessibility permissions

• Automation (e.g., AppleScript) permissions

These permissions enable the product to perform actions on your device.

We do not store or log the content of actions performed using these permissions.

We may store permission status (e.g., granted or denied) for functionality and product improvement.

How We Use Information

We use Information to:

• Provide, operate, and maintain the Platform

• Enable contextual and real-time features

• Authenticate users and manage user accounts

• Improve performance, reliability, and usability

• Communicate with users (including product updates and offers, where applicable)

• Conduct user research and collect product feedback to improve our products and services

Payment Processing (Stripe)

We use Stripe, Inc. as our third-party payment processor to handle all purchases made through the Platform. When you make a purchase:

• Your payment is processed directly by Stripe on our behalf.

• We do not collect, store, or have access to your full credit card number, CVV, or banking details.

• We may retain transaction records including purchase amount, date, associated email address, and phone number for order fulfilment, customer support, legal compliance, and to occasionally contact you for product feedback.

• Stripe may collect and process your payment information in accordance with their own Privacy Policy, available at https://stripe.com/privacy.

Your use of Stripe's payment services is subject to Stripe's Terms of Service and Privacy Policy. We encourage you to review those documents before completing a purchase.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website to understand how visitors interact with it and to improve our products.

Essential Cookies

Required for basic website functionality (e.g. session management, security tokens). These cannot be disabled.

Mixpanel Analytics

We use Mixpanel to collect anonymised usage data about how visitors interact with our website and products. This helps us understand feature adoption, navigation patterns, and performance. Mixpanel does not receive your name or email address through this integration.

First-party Cookies

We may set first-party cookies to remember your preferences (e.g. language, waitlist state) across sessions.

Your Choices

You can control cookies through your browser settings. Most browsers allow you to view and delete existing cookies, block future cookies, and be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of the website.

You can opt out of Mixpanel's tracking at any time by visiting: https://mixpanel.com/optout.

Our website does not currently respond to Do Not Track (DNT) browser signals, as there is no industry-standard interpretation of this signal.

Data Sharing

We do not sell, rent, or trade your Personal Data.

We may share Information with third-party service providers (sub-processors) for purposes including analytics, infrastructure, and communications. All sub-processors are contractually obligated to process data only on our instructions and to implement appropriate security measures.

Current sub-processors include:

• Stripe, Inc. (USA) — Payment processing

• Mixpanel, Inc. (USA) — Product analytics and usage tracking

• Anthropic, PBC (USA) — AI inference (Claude API) for Dune and Aina AI features

• Google LLC (USA) — Authentication (Google Sign-In), Calendar and Gmail integration

An up-to-date list of sub-processors is available upon request at team@projectmirage.ai.

Data Retention

We retain Information only for as long as necessary to:

• provide the Platform

• comply with legal obligations

• resolve disputes and enforce agreements

We aim to minimize retention wherever possible.

Children's Privacy

Our Platform is not directed at children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect Personal Data from children.

If you are a parent or guardian and believe that your child has provided us with Personal Data without your consent, please contact us at team@projectmirage.ai. We will take prompt steps to delete such information from our systems.

Your Rights and Choices

Depending on applicable law, you may have the right to:

• access or request deletion of your Personal Data

• withdraw consent for data collection

• opt out of marketing communications

You may exercise these rights by contacting us at team@projectmirage.ai.

European Users — GDPR Rights and Legal Basis

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local laws grant you additional rights with respect to your Personal Data.

Legal Basis for Processing

We process your Personal Data on the following legal bases:

• Contract Performance (Art. 6(1)(b)) — Processing your email and purchase data to fulfil an order; maintaining your account; providing the Platform's core features.

• Legitimate Interests (Art. 6(1)(f)) — Collecting anonymised analytics to improve our products; detecting and preventing fraud or abuse; sending product update communications to existing users.

• Consent (Art. 6(1)(a)) — Sending marketing communications to prospective users; processing optional calendar or email data; setting non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

• Legal Obligation (Art. 6(1)(c)) — Retaining transaction records for tax or accounting obligations; responding to lawful requests from public authorities.

Your Rights Under GDPR

Subject to applicable law, you have the right to:

• Access — obtain a copy of the Personal Data we hold about you.

• Rectification — request correction of inaccurate or incomplete data.

• Erasure ('Right to be Forgotten') — request deletion of your Personal Data where we no longer have a lawful basis to retain it.

• Restriction — request that we restrict processing of your data in certain circumstances.

• Portability — receive your data in a structured, machine-readable format and, where technically feasible, have it transferred to another controller.

• Object — object to processing based on legitimate interests or for direct marketing purposes.

• Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

• Lodge a Complaint — you have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, or your national Data Protection Authority in the EU).

To exercise any of these rights, please contact us at team@projectmirage.ai. We will respond within 30 days. In some cases, we may need to verify your identity before processing your request.

International Data Transfers

We are headquartered in the United States and operate a subsidiary in India. If you are accessing our Platform from the EEA or UK, your Personal Data may be transferred to and processed in the United States and/or India.

Where we transfer Personal Data outside the EEA or UK, we take appropriate safeguards, including relying on the European Commission's Standard Contractual Clauses (SCCs) or other approved transfer mechanisms, to ensure your data receives an equivalent level of protection.

India — Digital Personal Data Protection Act 2023 (DPDP)

This section applies to users in India and supplements our general Privacy Policy to reflect our obligations under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

Data Fiduciary

Aina Computer Private Limited, registered at UrbanVault, 780, 19th Main Rd, Vanganahalli, Sector 4, HSR Layout, Bengaluru, Karnataka 560102, India, acts as the Data Fiduciary for the processing of personal data of users in India.

Purpose of Processing

We process your personal data only for the specific purposes described in this Privacy Policy. We will not use your data for any purpose that is incompatible with the purpose for which it was originally collected without obtaining fresh consent.

Your Rights as a Data Principal

Under the DPDP Act, you have the following rights:

• Right of Access — obtain a summary of your personal data being processed and the processing activities.

• Right of Correction and Erasure — request correction of inaccurate or misleading data, and erasure of personal data that is no longer necessary for the purpose for which it was collected.

• Right of Grievance Redressal — have your grievances addressed in a timely manner.

• Right to Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

Grievance Officer

Any grievances regarding the processing of your personal data may be directed to our Grievance Officer:

Grievance Officer, Aina Computer Private Limited

Email: team@projectmirage.ai

Address: UrbanVault, 780, 19th Main Rd, Vanganahalli, Sector 4, HSR Layout, Bengaluru, Karnataka 560102, India

We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days of receipt.

Cross-Border Data Transfers

Your personal data may be transferred to and processed in the United States, where our parent entity Aina Computers, Inc. is headquartered. Such transfers are made in compliance with applicable law, including any cross-border transfer restrictions that may be notified by the Government of India under the DPDP Act.

Security

We implement reasonable technical and organizational safeguards to protect Information. However, no system can be guaranteed to be completely secure.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within the timeframe required by applicable law — typically within 72 hours of becoming aware of the breach where required.

• Notify affected users without undue delay where the breach is likely to result in a high risk to your personal data or rights, describing the nature of the breach, likely consequences, and measures we have taken or propose to take.

• Maintain an internal record of all personal data breaches, their effects, and remedial actions taken.

If you believe your personal data has been compromised, please contact us immediately at team@projectmirage.ai.

Third-Party Services

The Platform may integrate with or rely on third-party services. Such services are governed by their own privacy policies, and we are not responsible for their practices.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by revising the "Last Updated" date. We will notify you of material changes where required by applicable law.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our grievance office at:

team@projectmirage.ai

Aina Computers, Inc.

16192 Coastal Highway, Lewes, DE, 19958, USA

Aina Computer Private Limited

UrbanVault, 780, 19th Main Rd, Vanganahalli, Sector 4, HSR Layout, Bengaluru, Karnataka 560102, India

Last Updated: 15 May 2026