Privacy Policy

When you contact CodeBody Dynamics, we may receive the information you voluntarily provide, including your name, email address, organization, phone number, and project details.

For Pashi, we process the Sign in with Apple account identifier and profile information you choose to provide, along with group memberships, predictions, votes, comments, reports, blocks, and notification preferences. Pashi may also receive Apple's private relay email address when Apple provides one.

When a Pashi wager is shared in Messages or on the web, we store the wager itself — its question, its two options, and any optional consequence — along with each participant's chosen side, so that everyone taking part sees the same tallies. Participants in a shared wager are identified only by a random key generated on their device. That key is not an account, is not linked to a name, email address, or Apple ID, and is not used to identify anyone across other wagers or services. The no-download wager page uses no analytics, advertising, or cookies; it stores only that random key in the browser so a refresh does not double-count your response. Individual choices are never shown to other participants until the person who started the wager reveals the results.

Shared wagers are deleted automatically 90 days after they are created. Because a wager is tied to a device key rather than an account, deleting your Pashi account does not remove wagers on its own — you can erase every wager your device created, and withdraw your responses to others, from Pashi Settings at any time.

We use submitted information to respond to inquiries, evaluate potential engagements, deliver requested materials such as capability statements, and maintain business records related to communications.

For Pashi, we use information to authenticate users, provide private groups and predictions, calculate results, display wager participation, prevent abuse, respond to reports, and maintain app security. We do not sell personal information or use it for third-party advertising.

Supabase provides authentication, database, and related backend infrastructure for Pashi. Apple provides Sign in with Apple, the Messages extension platform, and app distribution. These providers process information under their own terms and privacy commitments. We do not use advertising identifiers or sell data to advertisers.

We retain account and social content while an account is active and as reasonably necessary for security, legal, and abuse-prevention purposes. We use reasonable administrative and technical safeguards, but no internet service can guarantee absolute security.

The CodeBody Dynamics website may receive standard server data such as browser type, general location, referring pages, and device information for security and performance. Pashi does not use third-party tracking or advertising SDKs.

This website counts its own page views and its own contact and download links, using no third-party analytics, no advertising network, and no cookies. Each visit is tagged with a random identifier held only for the life of the browser tab, so the count cannot be tied to a person, followed between visits, or shared with anyone. The page counter records nothing you type, and no session replay is used.

If you use Nina, the website's AI chat assistant, the messages you type are sent to our AI provider, OpenAI, to generate replies, and are handled under OpenAI's API data terms. CodeBody does not save chat transcripts, and the page counter records only that the chat was opened or used, never its content. Nina cannot book appointments or take contact details in chat, so please do not enter personal or sensitive information there.

Company Mind staff can choose to receive one-time sign-in and password-reset codes by text message. We collect a mobile number only when the staff member types their own number on the account-security screen and taps “Text me a code”, next to this notice: “By tapping ‘Text me a code’ you agree to receive sign-in codes from CodeBody Dynamics by text, one per sign-in. Msg & data rates may apply. Reply HELP for help, STOP to cancel.” A public copy of that screen is at https://www.codebodydynamics.com/sms-consent.

We use a mobile number only to send the codes a staff member requests (one text per sign-in or reset). We never send marketing or promotional texts. Reply STOP to stop receiving texts and HELP for help, or contact fredymelgar@codebodydynamics.com. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Our SMS delivery provider receives the number only to deliver the requested code.

A Company Mind office can connect its own calendar so the office's phone assistant only offers open times and can add the appointments it books. An office administrator connects a Google calendar by choosing “Connect Google Calendar” in Settings and signing in with Google. We request the Google Calendar permission (https://www.googleapis.com/auth/calendar), plus the Google account's email address so the office can see which account is connected.

With that permission, Company Mind reads only free and busy times, never the titles, guests, or notes of existing events. It creates the appointments it books (a title with the client's name and a short note), reads those same appointments back to confirm they were saved, and removes an appointment it created when the booking is cancelled. It does not read, change, or delete events it did not create.

The connection is stored as an encrypted token (AES-256-GCM) in that office's own Company Mind database and is used only to provide this calendar feature for that office. Open times may be passed to our AI service provider during a call so the assistant can offer them; event details are not.

Company Mind's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy). We do not sell Google user data, use it for advertising, or let people read it except with the office's permission, for security, or where the law requires. We do not use Google user data to develop, improve, or train generalized AI or machine learning models.

An office can disconnect at any time with “Disconnect” in Settings → Calendar, which deletes the stored token. Access can also be removed at https://myaccount.google.com/permissions. Appointments already added stay in the office's calendar unless the office deletes them.

Pashi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and remove it where appropriate.

You can edit your Pashi profile, control preferences, block users, report content, sign out, and permanently delete your account from Pashi Settings. Account deletion removes your profile and associated content; groups with other active members may transfer to another member.

We may update this policy as our services change. The effective date shown on this page will be updated when material changes are made.

For privacy questions or data requests, contact contracts@codebodydynamics.com. This page is the public privacy policy for Pashi and CodeBody Dynamics.