Privacy Policy

Effective date: July 2025. Last updated: July 2026.

InhibiTic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website InhibiTic.com or use our applications and services. By using our services, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

• Email address — when you join our waitlist, create an account in the companion app, or contact us
• Health-related data — when you use the cognitive dashboard, tic tracker, or clinical portal, including tic frequency, urge intensity, stress levels, sleep patterns, cognitive test scores, and medication information
• Brain-activity (EEG) data — when you use the InhibiTic headband or research tools, including EEG recordings, urge-marker timestamps, and stimulation event logs
• Communication data — when you contact us via email or other channels

1.2 Information Collected Automatically

We may collect basic usage data including browser type, device type, pages visited, and time spent on our website. This data is anonymized and used solely to improve our services.

1.3 Automated Processing & Artificial Intelligence

Our products use machine-learning models to process the data you provide:

• The InhibiTic device runs a trained classifier (SVM) on your EEG signals, on-device and in real time, to detect premonitory tic urges and trigger stimulation. Raw EEG is processed locally on the device; no human reviews your brain data unless you explicitly consent (e.g., research participation).
• The Meridian Engine uses machine-learning models (including ICLabel) to detect and remove EEG artifacts during data cleaning.
• These systems assist — they do not make standalone medical decisions, and they do not replace professional medical advice, diagnosis, or treatment.

2. How We Use Your Information

We use your information for the following purposes:

• To provide, maintain, and improve our services
• To send you updates about InhibiTic development, clinical trials, and product availability (only if you opt in)
• To analyze aggregated, anonymized data for research and product development
• To comply with legal obligations and enforce our Terms of Service

3. Data Storage and Security

All personal data is stored on secure servers using industry-standard encryption (AES-256 at rest, TLS in transit). Health-related data from the companion app is stored locally on your device by default and is not uploaded to any cloud server without your explicit consent.

Our website uses Supabase for data storage, which maintains SOC 2 compliance and GDPR compliance certifications.

Our website is hosted on Vercel and loads fonts from Google Fonts; these providers may process connection data (such as IP addresses) when our pages are loaded, as described in their own privacy policies.

4. Data Sharing and Disclosure

We do not sell, rent, or share your personal data with third parties for their marketing purposes. We may share your data only in the following circumstances:

• With your explicit consent — for research participation or clinical collaboration
• Service providers — trusted third parties who assist us in operating our services (e.g., Supabase for database hosting, Vercel for website hosting), bound by confidentiality agreements
• Legal requirements — if required by law, court order, or governmental regulation
• Business transfers — in connection with a merger, acquisition, or sale of company assets, subject to standard confidentiality arrangements

5. Your Data Rights

You have the following rights regarding your data:

• Access — request a copy of all data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data from our systems
• Portability — request your data in a structured, machine-readable format
• Withdrawal of consent — withdraw consent for data processing at any time

To exercise these rights, contact us at inhibitic@gmail.com. We will respond within 30 days.

Deleting your uploads: data you upload or create in our services — including tic logs, cognitive scores, clinical reports, exported session files, and EEG uploads — is deleted on request together with its backups, normally within 30 days. Note that app data stored only on your own device is under your control and is removed by uninstalling the app or clearing its storage.

6. Cookies

Our website uses minimal cookies essential for functionality (e.g., session management, form submissions). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings; however, some features may not function properly.

7. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

8. International Data Transfers

Your data may be stored and processed in countries other than your country of residence, including the United States and European Union. We ensure appropriate safeguards are in place for any such transfers in compliance with applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email (if you have provided one) or through a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at:

Email: inhibitic@gmail.com
Website: https://InhibiTic.com/contact