Data Rights

1. Your Data, Your Control

AfterLight is built on the principle that your memories and personal data belong to you. This page explains your specific data rights and how to exercise them.

2. Right of Access (GDPR Article 15)

You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data. In AfterLight, you can:

• Export all your data as a JSON file from the Settings page in the app • This export includes: account information, all memories (titles, descriptions, context, significance), memory groups and relations, materials metadata, consent records, embodiment records, and onboarding state

The export is available instantly through the app. No request to our team is needed.

3. Right to Data Portability (GDPR Article 20)

You have the right to receive your data in a structured, commonly used, and machine-readable format. The JSON export from the Settings page satisfies this requirement. The data is structured and can be processed by other applications.

4. Right to Erasure (GDPR Article 17)

You have the right to have your personal data deleted. In AfterLight:

• Delete individual memories from the Memory Dashboard • Delete individual embodiments from the Embodiments view • Delete individual materials from the chat interface • Delete your entire account from the Settings page — this permanently removes all your data including memories, embeddings, materials, consent records, embodiments, and your user account

Account deletion is immediate and irreversible. All associated data is cascade-deleted from our database and storage.

5. Right to Rectification (GDPR Article 16)

You have the right to correct inaccurate personal data. In AfterLight:

• Edit memories at any time through conversation with Ben — ask Ben to update a memory title, description, or context • Memory edits are processed immediately • Updated memories automatically receive new embeddings

6. Right to Restriction of Processing (GDPR Article 18)

You have the right to request restriction of processing in certain circumstances. If you wish to restrict how we process your data, please contact us at privacy@umbrella-research.org. While your request is being assessed, we will limit processing to storage only.

7. Right to Object (GDPR Article 21)

You have the right to object to processing based on legitimate interest (Article 6(1)(f)). This applies to:

• Abuse prevention and rate limiting (IP-based) • Contact form processing

To exercise this right, contact us at privacy@umbrella-research.org. For processing based on contract performance (your use of the service), the right to object does not apply — you may instead delete your account.

8. Right to Withdraw Consent (GDPR Article 7(3))

Where processing is based on consent, you can withdraw consent at any time:

• Analytics cookies: Change your preferences via the cookie banner (available from any page footer) • Embodiment/animation consent: Delete the consent record or the generated content • Newsletter: Unsubscribe at any time

Withdrawal does not affect the lawfulness of processing before withdrawal.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at the European Data Protection Board website.

10. How to Exercise Your Rights

Most rights can be exercised directly through the AfterLight app:

• Data export: Settings → Export Data • Account deletion: Settings → Delete Account • Memory deletion: Memory Dashboard → Delete • Cookie preferences: Footer → Cookie preferences

For any rights that cannot be exercised through the app, or if you need assistance, contact us at privacy@umbrella-research.org. We will respond within 30 days as required by GDPR.

11. Children

AfterLight is not intended for use by children under 16 years of age. We do not knowingly process personal data of children. If you believe a child has used AfterLight, please contact us so we can delete their data.

12. Contact

Data rights inquiries: privacy@umbrella-research.org