Privacy
NeuralShield is built around a simple idea: your behavioral signals are yours. This page explains the principles that govern how the app collects, protects, and shares your data.
Last updated: [add effective date before publishing]
[bracketed] items — legal entity, jurisdiction, data-protection contact, retention periods, and processor list — must be completed and reviewed by qualified counsel. Nothing here should be treated as a final legal agreement until that review is done.What NeuralShield collects
The app derives features from three behavioral streams: the rhythm and timing of your voice, the timing between your keystrokes (never the content of what you type), and your resting pulse read passively from the device camera during video calls. It builds a personal baseline from these patterns.
- Voice: timing, pauses, and pitch variation — not recordings of what you say.
- Typing: intervals between keypresses — not the words or characters themselves.
- Pulse: heart-rate variability features — not stored images or video.
How it is protected
Raw signals are encrypted on your device before anything is transmitted. NeuralShield is designed so that the analysis works from minimized, derived features rather than raw audio, keystrokes, or imagery.
Your control
Nothing is shared with family members, clinicians, or anyone else without your explicit consent. That consent is granular and revocable at any time — you choose who sees what, and when, and you can withdraw access without losing your own history.
Data minimization
Data minimization, the right to erasure, and purpose limitation are intended as architectural constraints rather than after-the-fact policies. NeuralShield aims to hold the least data necessary to build and maintain your baseline.
What NeuralShield does not do
- It is not a medical device and does not diagnose any condition.
- It does not store recordings of your voice, your keystrokes, or camera video.
- It does not sell your data or share it for advertising.
Contact
Questions about your data or this policy can be directed to [add data-protection contact address]. The legal entity responsible for processing is [add registered legal entity and jurisdiction].