Back to Home
法律事務中心
最後更新於: July 11, 2026
IPIP-300 - Privacy Policy
This Privacy Policy explains how Omu Labs Limited (“we”, “our”, or “us”) handles information when you access or use IPIP-300, a personality self-assessment app based on the public-domain IPIP-NEO-300 inventory. Core assessment features do not require an account, and your item-by-item answers are stored locally on your device.
A. Introduction
Welcome to IPIP-300. This Privacy Policy explains how Omu Labs Limited (“we”, “our”, or “us”) handles, safeguards, and limits information when you access or use the IPIP-300 mobile application, website, and related services (collectively, the “Service”). By using IPIP-300, you acknowledge the practices described in this Privacy Policy.
Welcome to IPIP-300. This Privacy Policy explains how Omu Labs Limited (“we”, “our”, or “us”) handles, safeguards, and limits information when you access or use the IPIP-300 mobile application, website, and related services (collectively, the “Service”). By using IPIP-300, you acknowledge the practices described in this Privacy Policy.
B. Core Assessment Features Do Not Require an Account
You can take the full 300-item assessment, track your progress, receive offline-calculated scores, and view your report without creating an account, signing in, or providing your name or email address. An account is only needed to use the optional AI Insights feature or the optional cloud backup of your score results.
You can take the full 300-item assessment, track your progress, receive offline-calculated scores, and view your report without creating an account, signing in, or providing your name or email address. An account is only needed to use the optional AI Insights feature or the optional cloud backup of your score results.
C. Your Assessment Answers and Progress Stay on Your Device
Your individual item responses, session progress, streaks, and current-item position are stored locally on your device using on-device storage. This data is not uploaded to our servers by default, is not linked to an account unless you enable backup, and cannot be viewed, recovered, or transferred by us. Deleting the App may delete this local data.
Your individual item responses, session progress, streaks, and current-item position are stored locally on your device using on-device storage. This data is not uploaded to our servers by default, is not linked to an account unless you enable backup, and cannot be viewed, recovered, or transferred by us. Deleting the App may delete this local data.
D. Account Information (If You Choose to Sign In)
If you create an account to use AI Insights or cloud backup, we (through our authentication provider, Supabase) collect and store basic account information, such as your email address or the identifier provided by Apple Sign-In or Google Sign-In. This information is used only to authenticate you and to associate optional backed-up score data or AI conversation history with your account.
If you create an account to use AI Insights or cloud backup, we (through our authentication provider, Supabase) collect and store basic account information, such as your email address or the identifier provided by Apple Sign-In or Google Sign-In. This information is used only to authenticate you and to associate optional backed-up score data or AI conversation history with your account.
E. Optional Demographic Information for Norm-Based Scoring
The App may ask for optional, skippable demographic information — such as an age range or biological sex — to compute percentile-based, norm-referenced score buckets using published third-party normative tables. If provided, this information is stored locally on your device and is included in your score snapshot only if you separately enable cloud backup.
The App may ask for optional, skippable demographic information — such as an age range or biological sex — to compute percentile-based, norm-referenced score buckets using published third-party normative tables. If provided, this information is stored locally on your device and is included in your score snapshot only if you separately enable cloud backup.
F. AI Insights Feature
When you use the optional AI Insights feature, we send only your calculated domain and facet scores together with the topic or question you select to our backend, which forwards this information to a third-party AI provider (OpenAI) to generate a response. We do not send your item-by-item answers, name, or account credentials to the AI provider. Your AI conversation history is stored locally on your device.
When you use the optional AI Insights feature, we send only your calculated domain and facet scores together with the topic or question you select to our backend, which forwards this information to a third-party AI provider (OpenAI) to generate a response. We do not send your item-by-item answers, name, or account credentials to the AI provider. Your AI conversation history is stored locally on your device.
G. Optional Cloud Backup of Score Results
If you are signed in and manually enable backup from Settings, we store a snapshot of your domain and facet scores — never your item-by-item answers — in a database table restricted so that only you can access your own records (row-level security). You may disable this feature and request deletion of this backup data at any time from Settings.
If you are signed in and manually enable backup from Settings, we store a snapshot of your domain and facet scores — never your item-by-item answers — in a database table restricted so that only you can access your own records (row-level security). You may disable this feature and request deletion of this backup data at any time from Settings.
H. Infrastructure and Hosting
IPIP-300 relies on third-party infrastructure providers, including Supabase, to operate authentication, the optional backup feature, and the AI Insights feature. Like most internet services, these providers may automatically process basic technical request data, such as IP address, device/browser type, timestamps, app version, and server logs, for security, reliability, debugging, and abuse prevention. We do not use these logs to build advertising profiles.
IPIP-300 relies on third-party infrastructure providers, including Supabase, to operate authentication, the optional backup feature, and the AI Insights feature. Like most internet services, these providers may automatically process basic technical request data, such as IP address, device/browser type, timestamps, app version, and server logs, for security, reliability, debugging, and abuse prevention. We do not use these logs to build advertising profiles.
I. Analytics and Advertising
IPIP-300 does not sell personal information to advertisers. IPIP-300 does not display third-party advertisements and does not use third-party advertising SDKs. If we later add analytics or advertising features, we will update this Privacy Policy as required.
IPIP-300 does not sell personal information to advertisers. IPIP-300 does not display third-party advertisements and does not use third-party advertising SDKs. If we later add analytics or advertising features, we will update this Privacy Policy as required.
J. AI and Automated Content Features
The AI Insights feature uses a third-party AI provider to generate reflective, non-diagnostic responses based solely on your scores and chosen prompt. We do not permit this provider to use the data submitted through the Service to train their general-purpose models, consistent with the provider’s applicable API terms.
The AI Insights feature uses a third-party AI provider to generate reflective, non-diagnostic responses based solely on your scores and chosen prompt. We do not permit this provider to use the data submitted through the Service to train their general-purpose models, consistent with the provider’s applicable API terms.
K. Third-Party Services and Sub-Processors
We use third-party service providers to operate IPIP-300, including backend/database hosting, authentication, and AI processing. These providers currently include Supabase and OpenAI. These providers process data only as needed to support the Service and are contractually restricted in how they may use it.
We use third-party service providers to operate IPIP-300, including backend/database hosting, authentication, and AI processing. These providers currently include Supabase and OpenAI. These providers process data only as needed to support the Service and are contractually restricted in how they may use it.
L. Data Storage and Security
We use reasonable technical and organizational measures designed to protect the Service, including encrypted connections using HTTPS/TLS and access controls for backend systems. However, no electronic transmission or storage method is completely secure, and we cannot guarantee absolute security.
We use reasonable technical and organizational measures designed to protect the Service, including encrypted connections using HTTPS/TLS and access controls for backend systems. However, no electronic transmission or storage method is completely secure, and we cannot guarantee absolute security.
M. Data Retention
Locally stored answers, progress, and scores remain on your device until you delete them, restart the assessment, or uninstall the App. If you enable cloud backup, the backed-up score snapshot and any account information are retained until you delete your account or request deletion. Technical server logs and AI conversation records associated with your account, if any, may be retained for a limited period for security, reliability, and support purposes.
Locally stored answers, progress, and scores remain on your device until you delete them, restart the assessment, or uninstall the App. If you enable cloud backup, the backed-up score snapshot and any account information are retained until you delete your account or request deletion. Technical server logs and AI conversation records associated with your account, if any, may be retained for a limited period for security, reliability, and support purposes.
N. Not a Health or Diagnostic Data Tool
IPIP-300 is a self-reflection app based on a public-domain personality inventory. It is not a medical or mental-health screening tool, and we do not treat information you provide as protected health information. Scores and AI-generated insights are not a diagnosis and should not be treated as health information about you.
IPIP-300 is a self-reflection app based on a public-domain personality inventory. It is not a medical or mental-health screening tool, and we do not treat information you provide as protected health information. Scores and AI-generated insights are not a diagnosis and should not be treated as health information about you.
O. Children’s Privacy
IPIP-300 is intended for general audiences and does not knowingly collect personal information from children under 13. Because core features do not require an account or personal information, we do not knowingly create child user profiles. If we become aware that personal information from a child has been collected, we will take reasonable steps to delete it.
IPIP-300 is intended for general audiences and does not knowingly collect personal information from children under 13. Because core features do not require an account or personal information, we do not knowingly create child user profiles. If we become aware that personal information from a child has been collected, we will take reasonable steps to delete it.
P. International Data Transfers
Your account information, backed-up scores, or technical request data may be processed, transferred, or stored in jurisdictions outside your country of residence where our infrastructure or AI providers operate. We implement reasonable safeguards for such transfers where required by applicable law.
Your account information, backed-up scores, or technical request data may be processed, transferred, or stored in jurisdictions outside your country of residence where our infrastructure or AI providers operate. We implement reasonable safeguards for such transfers where required by applicable law.
Q. Your Rights
Depending on your jurisdiction, you may have rights relating to personal information, including rights to access, correct, delete, restrict, object to processing, or request portability. For data stored only locally on your device, you can exercise most of these rights directly within the App (for example, via “Delete All Data” or “Restart Assessment” in Settings). For account-linked data, please contact us using the details below.
Depending on your jurisdiction, you may have rights relating to personal information, including rights to access, correct, delete, restrict, object to processing, or request portability. For data stored only locally on your device, you can exercise most of these rights directly within the App (for example, via “Delete All Data” or “Restart Assessment” in Settings). For account-linked data, please contact us using the details below.
R. Apple App Store Privacy Disclosure
If you download IPIP-300 through the Apple App Store, Apple may process information in accordance with Apple’s own terms and privacy policy. We are responsible for the privacy practices of IPIP-300 itself, while Apple is responsible for its own App Store, device, payment, and platform services.
If you download IPIP-300 through the Apple App Store, Apple may process information in accordance with Apple’s own terms and privacy policy. We are responsible for the privacy practices of IPIP-300 itself, while Apple is responsible for its own App Store, device, payment, and platform services.
S. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the App, legal obligations, operational practices, AI or hosting providers, or platform functionality. Updated versions will be posted within the Service together with a revised “Last Updated” date. Continued use of the Service following updates constitutes acceptance of the revised Privacy Policy.
We may update this Privacy Policy from time to time to reflect changes in the App, legal obligations, operational practices, AI or hosting providers, or platform functionality. Updated versions will be posted within the Service together with a revised “Last Updated” date. Continued use of the Service following updates constitutes acceptance of the revised Privacy Policy.
T. Contact Us
For questions, requests, or concerns regarding this Privacy Policy, please contact:
Omu Labs Limited
Hong Kong
email@omulabs.co
For questions, requests, or concerns regarding this Privacy Policy, please contact:
Omu Labs Limited
Hong Kong
email@omulabs.co