Privacy Policy

• Full name – provided at registration
• Email address – required to create and maintain your account
• Profile picture – optionally provided by you
• Unique device identifier (UDID) – used for authentication and session management

• The full text of your messages and AI persona responses across all sessions
• Derived memory data – contextual profiles built from past conversations by Source's proprietary memory architecture, used to personalise your future sessions

Conversation transcripts and derived memory data are retained for the lifetime of your account. For details on how and why, see Section 7 (Data Retention).

• Session length, return frequency, and content engagement signals
• Features accessed, screens visited, and session timestamps
• All behavioural data is linked to your account identity

• IP address, used to determine approximate geographic location (country or region level)
• Device model, operating system version, and app version
• Crash reports and diagnostic data, collected via Firebase SDK
• App analytics, collected via Firebase Analytics

• Ratings, reactions, and written comments you provide on AI responses

If you choose to interact with Source using your voice, audio is processed entirely on your device using on-device speech recognition. Raw audio is never transmitted to Source servers or any third party. Only the resulting text transcript is sent to our systems. No audio recordings are retained.

Source operates on a subscription model. All payment processing is handled by Apple In-App Purchase or Google Play Billing. Source does not collect, store, or have access to your payment card details.

All conversations on Source are with AI constructs. You are not speaking with a human being, a living spiritual teacher, or the actual consciousness or spirit of any historical individual. Source's personas are AI systems trained on the publicly available teachings, writings, and documented philosophy of historical spiritual figures. They are not channels to, representations of, or communications from, any living or deceased person.

In compliance with New York law (effective November 2025), Source will periodically remind users during interactions that they are engaging with an AI system.

In compliance with California AB 3030 (effective January 2025), Source discloses that communications generated within the app are produced by artificial intelligence.

AI-generated responses may not always be accurate, complete, or appropriate for your specific circumstances. Source's personas offer spiritual and contemplative guidance rooted in their respective traditions; they do not provide personalised professional advice. For matters of health, law, finance, or personal safety, please consult a qualified professional.

Source uses a proprietary persistent memory architecture that retains contextual information from your previous conversations. This allows Source to personalise your experience over time – recalling earlier context much as an experienced teacher would. When you return to Source, the AI you interact with will have memory of your prior sessions.

You have the right to reset your memory profile at any time from within the app without deleting your account. Memory data is deleted within 30 days of account deletion.

Source works in formal partnership with organisations connected to the lineages and estates of the spiritual masters whose teachings inform our personas. We obtain documented authorisation covering the use of each master's name, publicly available teachings, and identity as the basis for an AI construct, prior to making any such persona available in the app.

• Source personas ARE AI systems inspired by the documented teachings and philosophy of historical spiritual figures
• Source personas are NOT channels to, direct representations of, or communications from, any living or deceased individual
• Source does NOT claim that any persona constitutes contact with, or communication from, any spiritual master, living or deceased
• Source personas are educational and contemplative tools, not representations of any actual person

Source's authorisation process is designed to comply with applicable right of publicity laws, including New York's posthumous right of publicity law (enacted December 2025) and California AB 1836. We obtain written authorisation from relevant lineage organisations or estates prior to launch of each persona. If you believe a persona infringes applicable right of publicity law, please contact us at animesh@sourcemaverick.ai.

• A wellness and personal development platform
• A tool for spiritual guidance, contemplative reflection, and self-exploration rooted in ancient traditions
• A supplement to – not a replacement for – professional mental health care, medical treatment, or crisis intervention

• Source is NOT a licensed mental health service, therapy, counselling, or psychiatric platform
• Source is NOT a medical device and does not diagnose, treat, cure, or prevent any medical or psychological condition
• Source is NOT a crisis intervention or emergency service
• Source is NOT a substitute for professional psychological, psychiatric, or medical care
• Source is NOT covered by HIPAA. Source is not a healthcare provider. Conversations with Source do not carry HIPAA protection
• Source conversations are NOT legally privileged. Unlike sessions with a licensed therapist, your conversations with Source could be subject to lawful legal process

Source does not monitor conversations in real time and cannot provide emergency intervention. If you are experiencing a mental health crisis, thoughts of self-harm, or any emergency, please contact:

• Emergency services: 911 (USA), 112 (EU), 112 (India)
• 988 Suicide and Crisis Lifeline (USA): Call or text 988
• Crisis Text Line (USA): Text HOME to 741741
• iCall (India): +91-9152987821
• Samaritans (UK): 116 123

Under CCPA/CPRA, the categories of personal information we collect include: identifiers (name, email, device ID, IP address); internet or other network activity (usage data, session data, crash logs); audio information (voice input, processed on-device only, not retained); inferences drawn from personal information (derived memory and contextual profiles); and commercial information (subscription status).

Source does not sell your personal information. Source does not share your personal information with third parties for cross-context behavioural advertising. You therefore have no opt-out to exercise for sale or sharing – we do not engage in these practices. We will update this section if our practices change.

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to limited legal exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: Not applicable – we do not sell or share personal information
• Right of Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your California rights, contact us at animesh@sourcemaverick.ai or use the in-app account management tools. We will respond within 45 days (extendable by an additional 45 days with notice where reasonably necessary).

Super Real Inc. is the data controller for personal data processed through Source. Our contact details are in Section 2.

Source is operated from the United States. If you are located in the EEA, your personal data will be transferred to and processed in the United States. We implement appropriate safeguards for such transfers, including Standard Contractual Clauses (SCCs) as approved by the European Commission, where applicable. For transfers to Anthropic and Google Firebase, we rely on the data processing agreements and transfer mechanisms established by those providers.

In addition to the rights in Section 9, EU users have the right to:

• Object to processing based on legitimate interests
• Restriction of processing in certain circumstances
• Lodge a complaint with your national data protection authority (DPA)

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware, and will notify affected users without undue delay where required.

Given our current scale, we have assessed that a formal DPO appointment is not yet required under GDPR. We will appoint a DPO when our processing activities require it. Privacy enquiries can be directed to animesh@sourcemaverick.ai

Under India's Digital Personal Data Protection Act (DPDP Act), 2023, we process your personal data on the basis of your free, specific, informed, unconditional, and unambiguous consent, given at the time of registration. You may withdraw consent at any time by deleting your account. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

In compliance with the DPDP Act, we have designated a Grievance Officer for Indian users:

• Name: Animesh Anand
• Email: animesh@sourcemaverick.ai
• Response time: We will acknowledge grievances within 48 hours and resolve them within 30 days

• Right to access information about your personal data we hold
• Right to correction and erasure of inaccurate or incomplete data
• Right to grievance redressal through our Grievance Officer
• Right to nominate another person to exercise your rights in the event of your death or incapacity

We are monitoring guidance from the Indian government regarding data localisation requirements under the DPDP Act. We will update this section and our data handling practices as regulatory requirements are clarified and come into force.

Your personal data may be transferred to and processed in the United States, where our servers and service providers (including Anthropic and Google Firebase) are located. We will comply with applicable requirements under the DPDP Act regarding cross-border data transfers, including any restrictions notified by the Central Government.