Privacy Policy (Tactical Data Protocol)

1. Tactical Telemetry Collection

CenturAI. collects and processes only the operational telemetry required to evaluate human physical readiness, compute supply logistics, and formulate High Command SitReps. Data points include:

• Identity & Credentials: Email address and cryptographic authentication tokens managed via Supabase Auth.
• Biometric Baselines: Weight, height, age, primary athletic directive, weekly sortie commitment targets, and calculated metabolic baselines.
• CFA Constraints: Operator-disclosed physical limitations, musculoskeletal injuries, and dietary allergies or restrictions.
• Logistical Assets: Supply depot pantry and refrigeration inventory counts, consumption velocity, and threshold triggers.
• Sortie Protocols: Workout logs, exercise movements, durations, distances, perceived allostatic exertion, and field notes.

2. Multimodal Optical Telemetry & AI Model Ethics

When utilizing CenturAI. Vision Recon (P01–P10) to scan pantry assets, nutrition facts labels, grocery receipts, dining menus, prepared plates, or biometric displays, your images are transmitted securely to CenturAI. Encrypted Neural Vision Infrastructure for ephemeral feature extraction.

• Zero Commercial AI Training: Your optical captures, biometric data, and personal health logs are NEVER used to train public foundation models, commercial image generators, or advertising recommendation engines.
• Ephemeral Processing: Optical imagery is validated via cryptographic magic-byte verification, inspected in memory, processed for structured JSON telemetry extraction, and not stored indefinitely on public file servers.
• Zero Data Selling: CenturAI. does not sell, broker, or lease operator dossiers, physical telemetry, or dietary records to third-party data brokers, insurers, or marketers.
• Enterprise AI Subprocessors: We engage SOC 2 Type II and ISO 27001-certified enterprise cloud inference providers to process prompts and optical telemetry ephemerally. These providers are bound by strict Data Processing Addendums (DPAs) prohibiting data retention or model training on operator inputs.
• Communications & Delivery Telemetry: Transactional security tokens, magic authentication links, and operational notifications are dispatched from the @centurai.cc domain via Resend. Link and delivery engagement telemetry is monitored securely via links.centurai.cc solely to ensure link validity, mitigate bounce/phishing abuse, and confirm delivery of high-command notices. Inbound communications are routed securely via Resend Inboxes.

3. Cryptographic Storage & Row-Level Security (RLS)

All telemetry persisted within CenturAI. is housed in dedicated PostgreSQL instances fortified with Supabase Row-Level Security (RLS). Every query and database transaction is strictly bounded by the operator’s authenticated session UUID.

This architectural boundary guarantees complete multi-tenant cryptographic isolation: no operator can view, infer, or alter another operator’s biometrics, sortie history, or supply assets. All transit occurs over TLS 1.3 with strict transport security.

4. Operator Rights (GDPR & CCPA Compliance)

Regardless of your geographical theatre, CenturAI. affords all operators military-grade data sovereignty:

• Right to Access & Rectify: You may audit and modify all baseline biometrics, CFA limitations, and supply assets directly through your Dossier interface.
• Right to Data Portability: Operators may request a complete JSON export of their sortie records and biometric history.
• Right to Complete Decommissioning (Erasure): Operators have the right to request full, irreversible purging of their dossier and associated authentication records from our systems.

5. Local Storage & Zero Ad-Tracking Architecture

CenturAI. uses client-side localStorage solely for critical application states (cached profile baselines, offline mitigation state, and onboarding flags).

We deploy ZERO third-party advertising trackers, pixel beacons, or invasive behavior surveillance scripts. The platform is engineered strictly for high-performance execution.