GaiaXus Data Privacy Policy

Last Updated: January 2026

1. Who We Are

GaiaXus provides tools and services for collecting, analyzing, and visualizing water quality and related environmental data.
This Privacy Policy explains how we collect, use, store, and share information when you use our apps, devices, and services.

2. Information We Collect

2.1 Personal Information (“Customer Data”)

We collect Personal Information that identifies or can reasonably be linked to an individual user (“Customer Data”), including:

• Email address and account details provided during registration
• Account identifiers and basic profile information

2.2 Location Data

We collect GPS location data to integrate geographic context into water quality measurements. During towing or continuous sampling modes,
location data may be collected continuously to generate spatial maps that overlay water quality parameters with geographic position.

2.3 Application Data

• Device Data: Device ID, app version, hardware version, and similar technical information for troubleshooting and analytics.
• Usage Data: Information about how you interact with the app to improve performance and user experience.
• LAB Results: Lab results and related responses, which may be stored for later review and analysis.
• Calibration Records: When a device was calibrated and what calibration procedure was used.

2.4 Water Quality and Environmental Data

Measurements including (but not limited to) turbidity, salinity, depth, temperature, and other environmental metrics collected via devices and observations.
These measurements may be associated with GPS coordinates, timestamps, and device metadata.

3. How We Use Data

We use the data we collect for the following purposes:

• Service Delivery: To provide core app features, including location-based water quality monitoring and data visualization.
• Personalization: To customize app functionality and views for individual users or accounts.
• Performance Optimization: To enhance app performance, reliability, and troubleshooting.
• Research and Development: To improve calibration algorithms, analytics, and overall product capabilities.
• Compliance: To comply with legal, regulatory, and contractual requirements.

4. Data Ownership and Access

4.1 Customer Ownership

You retain all right, title, and interest in your Customer Data, meaning identifiable information about you or other individual users
(such as names, email addresses, and account identifiers). GaiaXus does not claim ownership of Customer Data.

4.2 License to GaiaXus

You grant GaiaXus a limited, non-exclusive license to host, process, transmit, and display Customer Data solely to:

• Provide and maintain the services
• Secure and support the services
• Improve product functionality in ways consistent with providing the services

4.3 Access to Your Data and Service Discontinuation

You may access and export your Customer Data while your account remains active. If GaiaXus discontinues the service or winds down operations,
we will provide advance notice and a reasonable period (typically 60 days) for you to export your data before it is deleted in accordance with our retention schedule.

5. Derived Data and De-Identified Data

GaiaXus generates and uses “Derived Data” and “De-identified Data” from the information collected through the services.

• Derived Data: Data generated, calculated, aggregated, or inferred by GaiaXus from Customer Data or device activity,
  including environmental measurements, GPS coordinates, timestamps, device metadata, analytics outputs, and aggregated datasets.
• De-identified Data: Data that cannot reasonably be used to identify an individual or Customer.

GaiaXus may use, analyze, share, license, or commercialize Derived Data and De-identified Data, including for research, analytics,
product improvement, and commercial purposes.

GaiaXus will not sell or share Personal Information (such as names, email addresses, or account identifiers) or any data that can reasonably
be linked to an identifiable individual. GaiaXus will not attempt to re-identify De-identified Data, and any third parties receiving such data
are contractually prohibited from attempting re-identification.

6. Sharing of Data

6.1 With Your Direction or Consent

We may share data with third parties when you explicitly authorize it, such as when you export data, connect integrations, or share reports.

6.2 Derived and De-Identified Data

We may share or license Derived Data and De-identified Data with third parties for research, analytics, reporting, or commercial purposes,
provided that such data cannot reasonably be used to identify an individual or Customer.

6.3 Legal and Safety Requirements

We may disclose data when required by law or when we reasonably believe it is necessary to:

• Protect the safety, rights, or property of users or others
• Prevent fraud, abuse, or security incidents
• Comply with legal or regulatory obligations

6.4 No Sale of Personal Information

We do not sell your Personal Information.

7. Data Storage, Security, and Retention

7.1 Storage

Data is stored on secure cloud infrastructure using industry-standard security controls.

7.2 Security Measures

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including:

• Encryption in transit and at rest
• Secure data transmission (HTTPS)
• Role-based access controls
• Employee access restrictions
• Regular security monitoring and updates

7.3 Retention and Deletion

We retain Customer Data while your account is active and as needed to provide the services or comply with legal obligations.
Upon request, we will delete Customer Data within a commercially reasonable time, unless retention is required for legal, regulatory, or enforcement purposes.

8. Security Incidents

If we confirm a security incident involving unauthorized access to Customer Data, we will notify affected customers without undue delay and provide
information about the nature of the incident, the data affected (to the extent known), and steps taken to mitigate the impact.

9. Your Rights

Subject to applicable law, you may have the following rights regarding your Personal Information:

• Access: Request a copy of the Personal Information we hold about you.
• Correction: Request correction of inaccurate or incomplete Personal Information.
• Deletion: Request deletion of Personal Information, subject to legal or contractual obligations.
• Opt-Out: Disable certain data collection features where supported by the app or your device settings.

To exercise these rights, contact us at info@gaiaxus.com.

10. Permissions Required

The app may request the following permissions to function properly:

• Bluetooth: Connect to BLE-enabled sensors and collect water quality data from supported devices.
• Location: Access precise GPS data for mapping and location-specific measurements.
• Storage: Save app-related data and cached content on your device.
• Internet: Sync data with cloud services and enable online features.

You can manage these permissions in your device settings; however, disabling certain permissions may limit app functionality.

11. Compliance with Platform Policies

Our app complies with applicable platform policies, including Google Play Developer Program Policies, related to user data protection, transparency, and security.
Updates to this Privacy Policy may be communicated through the app or by email.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements.
When we make material changes, we will provide notice through the app or by other appropriate means.
Continued use of the services after such changes constitutes acceptance of the updated policy.

13. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

Email: info@gaiaxus.com
Address: 20410 Century Blvd Ste 120, Germantown, MD 20874, USA

By using the GaiaXus services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.