Fates Institute

Legal

PRIVACY POLICY

__

Effective Date: July 1, 2026

This Privacy Policy explains how Fates Institute MMC (“Fates,” “we,” “us,” or “our”) handles information when you use Medula (the “Service”).

Sessions with Medula are private. You do not need to create an account, and we do not ask for your name, email address, or phone number in order to use the Service. We also do not receive your Apple Account identity, payment card information, or other billing identity information in connection with Apple in-app purchases.

To operate without user accounts, the Service uses Apple’s Identifier for Vendor (“IDFV”), assigned to the Service on your device, so that we can maintain session state, determine session entitlement status, and associate session records and related service and session data with the same device context over time.

Contact

If you have any questions regarding this Privacy Policy, please contact us at counsel@fates.institute.

User Privacy

To operate the Service, we collect a limited set of information:

  • IDFV – Apple’s Identifier for Vendor, which we use so the Service can function without requiring a user account.
  • Service and session data – this includes limited technical and operational data needed to run the Service, such as session state, request status, connectivity events, and failure or error events.
  • Entitlement information – we store limited information needed to determine whether a free or paid session is available, active, expired, or ended.
  • Messages and responses – this includes the messages you submit under Apple’s IDFV and the responses generated by the Service.
  • Support communications – if you contact us, we receive the information you include in your message.

Apple billing identity is not linked to session records:

Apple processes in-app purchases for the Service. We may store limited entitlement and session-token information needed to provide access to free or paid sessions, but we do not receive your Apple Account identity, payment card information, or other billing identity information associated with your Apple purchase.

We use information only as reasonably necessary to:

  • Provide, operate, and maintain the Service;
  • Generate responses to your messages;
  • Maintain session state and associate sessions with your device through Apple’s IDFV;
  • Detect, prevent, and address technical issues, misuse, fraud, abuse, and security incidents;
  • Enforce our Terms and comply with legal obligations; and
  • Improve, develop, test, and maintain the Service, including debugging, quality assurance, safety work, performance optimization, and feature development.

How we share information:

We do not sell users’ personal information, and we do not share users’ information with third parties for advertising or profiling purposes.

Information is shared only where needed to operate, protect, and support the Service:

  • Service providers – we may use selected providers that support infrastructure, hosting, storage, security, analytics, and other technical operations. This includes providers that process the messages you submit so the Service can return responses. These providers may process information on our behalf only as needed to provide their services to us and are expected to provide protections consistent with this Privacy Policy. We configure supported provider controls so that your data is not used by third-party AI providers for their own general model training and is retained or otherwise processed by them only as needed for service operation, security, abuse prevention, and compliance with legal obligations.
  • Legal and protection purposes – we may disclose information where required by law, regulation, legal process, or governmental request, or where reasonably necessary to enforce our Terms, investigate misuse, or protect rights, safety, security, or the Service.

Storage and retention:

For user privacy purposes, if you choose to exit a session through the Service, its session records are no longer recoverable within the Service experience under the Service’s operational rules.

If the app is closed, force-closed, unloaded by the operating system, or crashes during an active session, the Service may restore access to the session when the app is reopened, subject to the remaining session time, token availability, connectivity, and the Service’s operational rules.

If the session period expires, further message exchange may no longer be available, but an already-open or restored session and its session records may remain visible in the app until you exit the session or the Service otherwise removes access under its operational rules.

Session records and related service and session data may remain stored on our servers under Apple’s IDFV so that, among other things, we can identify and delete the relevant records if you submit a valid deletion request. We may retain information only for as long as reasonably necessary to operate, secure, maintain, improve, develop, and support the Service, enforce our Terms, and comply with legal obligations, unless a different period is required or permitted by law. We may also retain limited logs and records where reasonably necessary for security, fraud prevention, troubleshooting, enforcement, or legal compliance.

Privacy requests:

Because the Service is built without user accounts, privacy requests must include Apple’s IDFV or other information that reasonably helps us locate the relevant records.

If you wish to make a privacy request, including a request for deletion of eligible session records, please use the Contact button located under the “ⓘ” button on the app landing page. That contact flow includes Apple’s IDFV, which is needed to help us locate the relevant records.

We will review requests in accordance with applicable law, our technical capabilities, and our legal and operational obligations. In some cases, we may be unable to locate, separate, or delete records without sufficient identifying information, and we may retain limited information where reasonably necessary for security, fraud prevention, troubleshooting, enforcement, or legal compliance.

Children

The Service is intended for users who are at least 13 years old and is not directed to children under 13. If you believe that a child under 13 has used the Service, please contact us at counsel@fates.institute so we can review the request and take appropriate action.

Security

We take appropriate administrative, technical, and organizational measures designed to protect information and reduce the risk of unauthorized access, loss, misuse, alteration, or disclosure.

International Processing

If you use the Service from the UK, the EEA, or another region with data-transfer rules, your information may be processed in countries other than your country of residence.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version becomes effective when posted, unless a later date is stated.

TERMS OF SERVICE

__

Effective Date: July 1, 2026

These Terms of Service (“Terms”) govern your access to and use of Medula (the “Service”). The Service is operated by Fates Institute MMC (“Fates,” “we,” “us,” or “our”).

By tapping “Continue” or otherwise using the Service, you agree to these Terms. Your use of the Service is also subject to our Privacy Policy and any additional rules, notices, or policies made available through the Service.

Contact

If you have any questions regarding these Terms, please contact us at counsel@fates.institute.

Nature of the Service

The Service returns responses dynamically based on user input and its underlying operation. Responses may vary between sessions and may not be unique.

The information presented through the Service is provided for reflective, interpretive, and informational purposes only. The Service is not a medical, psychological, psychiatric, diagnostic, therapeutic, legal, financial, tax, investment, immigration, or emergency service.

Eligibility

The Service is intended for users who are at least 13 years old. You may not use the Service if you are under 13.

If the law in your country or region requires you to be older than 13 to use the Service or to consent to these Terms, you may use the Service only if you meet that higher age requirement.

If you are under the age of majority where you live, you may use the Service only with permission from a parent or legal guardian. By using the Service, you represent that you meet these age and permission requirements.

Access to the Service may also be affected by App Store age ratings, parental controls, and download restrictions set by Apple or by a parent or guardian.

No Professional Advice; No High-stakes Reliance

You must not rely on the Service for emergencies, crises, or high-stakes decisions, including decisions involving health or safety, self-harm or suicide, violence or criminal activity, medication, pregnancy, mental-health crises, legal rights or obligations, litigation, immigration status, or financial decisions, or for any matter where errors, delays, or inappropriate content could cause harm, loss, injury, or liability.

If you are in danger, experiencing an emergency, or may harm yourself or others, do not rely on the Service. Contact local emergency services or an appropriately qualified professional immediately.

Accuracy and Output Disclaimer

Responses may be incomplete, incorrect, misleading, outdated, delayed, offensive, biased, inconsistent, or unsuitable for your circumstances.

You must not treat any response as a sole source of truth or as a substitute for your own independent judgment or for professional advice. You are solely responsible for evaluating any response before relying on it, sharing it, or acting on it.

Privacy and Message Processing

Your use of the Service is subject to our Privacy Policy.

To allow the Service to return a response, messages and responses may be processed by service providers on our behalf, as described in the Privacy Policy.

Session Access, Purchases, and Refunds

Access to certain features of the Service requires payment through Apple in-app purchase.

Starting a free session or completing a purchase creates one session token in Medula, subject to these Terms and any applicable Apple terms and policies.

A session token may be created and marked active before message exchange begins. The time-limited message-exchange period begins when Medula sends the first message in that session.

Once that first message from Medula is sent, the session permits message exchange for the time period shown to you in the relevant purchase flow, product description, or session access screen, unless it ends earlier under these Terms or the Service’s operational rules.

Access to a session depends on an available and valid session token. If a session token is expired, ended, unavailable, or otherwise invalid, access to the session may be unavailable.

If you temporarily switch to another app and later return to the Service without terminating the app, the active session continues, subject to the remaining session time and these Terms.

If the app is closed, force-closed, unloaded by the operating system, or crashes during an active session, the Service may reopen from the splash screen and restore access to the session, subject to the remaining session time, token availability, connectivity, and the Service’s operational rules.

If you delete and reinstall the app, locally stored session information may be unavailable, and access to a previous session may not be restored.

During an active session, the chat interface includes a control for exiting the session. If you use that control, the Service may present a confirmation dialog that allows you either to return to the session or to exit it. If you choose to exit the session, the active session ends immediately. For user privacy purposes, its session records are no longer recoverable within the Service experience under the Service’s operational rules.

If the session period expires, further message exchange may no longer be available, but an already-open or restored session and its session records may remain visible in the app until you exit the session or the Service otherwise removes access under its operational rules.

If connectivity is interrupted during an active session, the Service may pause while connectivity is being restored. If connectivity returns before the session ends, you may continue the same session, subject to the remaining session time and these Terms.

Purchases made through Apple may also be subject to Apple’s applicable terms and policies.

Refund requests for App Store purchases must be submitted through Apple’s refund process.

Acceptable Use

You may not use the Service to:

  • Violate applicable law or the rights of others;
  • Generate, seek, or distribute instructions for self-harm, suicide, violence, abuse, exploitation, or other wrongdoing;
  • Impersonate another person or misrepresent affiliation, identity, or authority;
  • Reverse engineer, scrape, probe, extract, exploit, or interfere with the Service or its infrastructure; or
  • Use the Service in any manner that creates risk, harm, or liability for Fates, users, or third parties.

Suspension and Termination

We may suspend, restrict, or terminate access to the Service at any time if you violate these Terms, if your use creates risk or potential liability, if we suspect misuse, fraud, abuse, or unlawful conduct, or if technical, legal, platform, or operational reasons make continued access impracticable.

Intellectual Property

The Service, including its software, design, branding, interfaces, features, and overall service architecture, is owned by or licensed to Fates and is protected by applicable intellectual property and other laws.

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service for its intended personal use.

You may not copy, modify, distribute, sell, lease, sublicense, publicly display, publicly perform, or create derivative works from the Service except as expressly permitted by law or by us in writing.

All rights not expressly granted in these Terms are reserved by Fates.

Disclaimers

To the maximum extent permitted by law, the Service is provided “as is” and “as available,” without warranties of any kind, whether express, implied, statutory, or otherwise.

To the maximum extent permitted by law, we disclaim all warranties, including any implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, availability, security, or that the Service will be uninterrupted or error-free.

Limitation of Liability

To the maximum extent permitted by law, Fates will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, business, goodwill, data, or opportunity, arising out of or relating to the Service or these Terms.

To the maximum extent permitted by law, Fates’s total liability for all claims arising out of or relating to the Service or these Terms will not exceed the amount you paid for the session giving rise to the claim.

Nothing in these Terms excludes or limits any liability that cannot be excluded or limited by law.

Changes to the Service or these Terms

We may modify, suspend, or discontinue any part of the Service at any time.

We may update these Terms from time to time. The updated version becomes effective when posted, unless a later date is stated. Your continued use of the Service after the updated Terms become effective constitutes acceptance of the updated Terms.

Governing Law

These Terms are governed by applicable law, except where mandatory consumer protection laws require otherwise.

These Terms, together with the Privacy Policy and any additional rules, notices, or policies made available through the Service, including Session Rules and Safety Notices, constitute the entire agreement between you and Fates regarding the Service.