1. Who We Are

Ahead Solutions GmbH
Auguststraße 26, 10117 Berlin, Germany
Email: hi@ahead-app.com
Website: https://www.ahead-app.com
Commercial Register: AG Charlottenburg, HRB 219170 B

We operate the Ahead mobile app (iOS and Android) and website, providing AI-powered emotional intelligence training to users globally. This Privacy Policy applies to all users of our services, regardless of location.

By using our app and services, you confirm that you have read and understood this Privacy Policy and our Terms of Service.

2. Data Protection Contact

For all privacy-related inquiries, requests, or complaints:
Email: hi@ahead-app.com
Mail: Ahead Solutions GmbH, Auguststraße 26, 10117 Berlin, Germany

We respond to all requests within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI). In the UK, this is the Information Commissioner's Office (ICO). In Australia, the Office of the Australian Information Commissioner (OAIC). In Canada, the Office of the Privacy Commissioner of Canada (OPC).

3. Your Rights

All Users

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Withdraw consent at any time (without affecting the lawfulness of prior processing)

EU and UK Users (GDPR / UK GDPR)

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / right to be forgotten (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interest (Art. 21 GDPR)
• Right not to be subject to automated decision-making with legal effects (Art. 22 GDPR)
• Right to lodge a complaint with a supervisory authority

US Users (CCPA/CPRA and State Laws)

• Right to know what personal information is collected, used, disclosed, and sold/shared
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising your privacy rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

Canadian Users (PIPEDA and Provincial Laws)

• Right to access your personal information
• Right to request correction of inaccurate information
• Right to withdraw consent (subject to legal or contractual restrictions)

Australian Users (Privacy Act 1988)

• Right to access and correct your personal information
• Right to complain about privacy breaches to the OAIC (https://www.oaic.gov.au/)

4. Data We Collect

The following table summarizes the categories of personal data we collect:

We do not collect biometric data, government-issued identifiers, or financial account numbers beyond what is necessary for payment processing (handled by Stripe).

5. How We Use Your Data

• Provide and personalize our services: deliver AI-powered emotional intelligence training, personalized content, and coaching recommendations.
• Process transactions: manage subscriptions, payments, and billing.
• Improve our product: analyze usage patterns to improve features, fix bugs, and develop new content.
• Communicate with you: send transactional emails (purchase confirmations, renewal reminders, cancellation confirmations), and, with your consent, marketing communications.
• Ensure security and prevent fraud: detect unauthorized access, abuse, or violations of our Terms.
• Comply with legal obligations: respond to lawful requests from authorities and comply with applicable law.
• Conduct research: analyze aggregated, anonymized data to advance emotional intelligence science (no individual identification).

6. Legal Bases for Processing (EU/UK Users)

• Contract performance (Art. 6(1)(b) GDPR): Processing necessary to provide you with the Ahead service, including account management, content delivery, and subscription processing.
• Consent (Art. 6(1)(a) GDPR): Processing of emotional input data by AI services (Anthropic, Google Gemini) for personalized content. Marketing communications. Cookies for advertising purposes. You may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): Product analytics (Mixpanel, Firebase), fraud prevention, and service improvement. Our legitimate interest is to improve and secure our service; we have conducted a balancing assessment to ensure this does not override your rights.
• Legal obligation (Art. 6(1)(c) GDPR): Retention of financial records as required by German tax law (Abgabenordnung).

7. AI Services and Automated Processing

We use artificial intelligence to generate personalized emotional insights, classify emotional patterns, and recommend training content.

AI Providers
• Anthropic Claude (processing region: US)
• Google Gemini / Vertex AI (processing region: US)

What AI Processes
• Text inputs you provide during exercises, reflections, and coaching conversations
• Your emotional response data from app activities
• Onboarding psychometric questionnaire responses

What AI Does NOT Do
• AI does not make automated decisions with legal or similarly significant effects on you (Art. 22 GDPR).
• AI is not used for pricing decisions, credit decisions, or employment decisions.
• AI is not used to deny or limit access to services based on emotional data.

Legal Basis for AI Processing
For EU/UK users: We process emotional input data through AI on the basis of your explicit consent (Art. 6(1)(a) and, where applicable, Art. 9(2)(a) GDPR). You are asked to consent to AI processing during onboarding. You may withdraw this consent at any time by contacting hi@ahead-app.com, though this will limit the personalization features available to you.

For US users (CCPA/CPRA): Emotional data may constitute "sensitive personal information" under CPRA. You have the right to limit the use of sensitive personal information. AI-derived inferences are disclosed in this policy and are not used for discriminatory purposes.

Data Protection Impact Assessment
We have conducted a Data Protection Impact Assessment (DPIA) pursuant to Art. 35 GDPR for our AI processing activities, evaluating the risks to your rights and freedoms and implementing appropriate safeguards including encryption, data minimization, retention limits, and contractual protections with our AI providers.