PRIVACY NOTICE

Last updated March 25, 2026

This Privacy Notice for Symbia Co. (“Company, "we," "us," “our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our Services (defined in our Terms of Use).

Contact us. You can contact us by phone at 1-510-816-5286, email at contact@pomie.com or by mail to 95 Third Street, San Francisco, CA 94103, United States.

What information do we collect?

Personal information you disclose to us

In Short: We collect personal information you provide and data the Services generate automatically.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

names

email addresses

usernames

passwords

demographic information

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

information revealing race, ethnic origin

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

Information collected automatically

Usage Data. We collect information about you and your device as you use the Service. the following information if you choose to provide us with access or permission:

Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's camera, microphone, storage, and other features. If you wish to change our access or permissions, you may do so in your device's settings.

Push Notifications. We may request to send you push notifications regarding your account or certain features of the application (s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.

This information is primarily needed to maintain the security and operation of our application (s), for troubleshooting, and for our internal analytics and reporting purposes.

Google API

Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Security

We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

How we process your information

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process the personal information for the following purposes listed below. We may also process your information for other purposes only with your prior explicit consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.

To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.

To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.

To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.

To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.

Process, review, and license uploaded content. To verify Contributions, ensure they meet content standards, and license approved content to AI companies, technology platforms, and research organizations solely for the purpose of creating, training, fine-tuning, testing, and improving AI models.

Facilitate payments and payouts. To process baseline payments and additional earnings through a payment processor

Enforce agreements and prevent fraud. To detect and prevent unauthorized or infringing uploads, fraudulent activity, or violations of our Content Submission & Payment Agreement.

Maintain legal compliance. To comply with tax, accounting, and regulatory obligations.

Provide account services and updates. To send administrative information, policy updates, and service-related notifications to users.
Train and improve Symbia’s AI models. To use approved uploaded content and other personal information, for creating, training, fine-tuning, testing, and improving Symbia Co.’s AI models.

License content to AI companies and labs. To share approved user-submitted content and other personal information, with AI companies, AI laboratories, and research organizations for the creation, training, fine-tuning, testing, launch, operation and/or commercialization of their own models and output. To allow third-party company models to learn, adapt, and perform tasks autonomously as a result of training processes that ingest and compute your content (alone or together with third-party data), even where elements of that training content are permanently retained in the models.

You consent to our collection, use, and storage of your Biometric Data for the Services and any other purpose you specifically consent to. In circumstances where we retain Biometric Data, we will permanently destroy an individual’s Biometric Data once the purpose for such collection has been satisfied.

Disclosures of personal information

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

Third-Party Service Providers. We may share your data, including Biometric Data, with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with unless we have instructed them to do it. They will also not share with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain period we instruct.

The categories of third parties we may share personal information with are as follows:

AI Platforms

Cloud Computing Services

Data Storage Service Providers

Payment Processors

Performance Monitoring Tools

User Account Registration & Authentication Services

Website Hosting Service Providers

Communication & Collaboration Tools

Testing Tools

We also may need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

Licensees. When we disclose or license content or usage data to third parties for use in connection with their AI models and related tools, we do not transfer your name, email address, account credentials, or payment information. We may transfer demographic information (such as age range, gender, education level, and general geographic region) along with content, and we generalize this information before public dataset releases. Recipients may create models or generate output that imitates or resembles a person's voice, style (including musical style), likeness, mannerisms, or other identifiable creative or personal characteristics.

How to Opt Out

We believe in giving you the power to decide how your data is used. To opt out, you can:

Contact us using the contact information provided. If you opt out of certain AI uses, we will apply your choice going forward where reasonably practicable, but your opt‑out will not require us or our service providers to delete or retrain models that already used your information prior to our processing of your opt‑out, to the extent permitted by applicable law.

Retention

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). Embodiments of information processed prior to deletion may persist after your personal information is deleted or erased.

Minors

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we share or sell such personal information. If we learn we have collected personal information from a minor, we will deactivate any applicable account and promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18 or the equivalent age as specified by law in your jurisdiction, please contact us at contact@pomie.com.

How to control your privacy

In General

As a user of the Services, you have rights and choices about your personal information. We want you to be in control of your information, so we want to remind you of the following options and tools available to you:

Account controls: You can update the personal information in your Account through the settings made available on the services. Any updated information will be reflected in our records and throughout the services promptly. You can also delete your account.
Marketing opt-outs: you may opt-out of marketing communications by following the unsubscribe instructions in the communication you receive. We may continue to send you communications regarding the Services, such as notices about administrative updates, transaction reports, and changes to the Services, this Policy or the Terms.

Exercising rights: If any of the local privacy laws listed below apply to you, see Requesting information to exercise your rights. These rights are provided only to human account holders, and are not available to employers or other legal entities, except as required by law.

Disallowing Location Data Collection: When you access certain Services, like some of our apps, through a mobile device, you may consent to share your precise (GPS level) geolocation with us so we can customize your experience and the content you receive. You may change your location sharing settings at the browser or device level at any time.]

Personalized ads: In addition to any choices the services offer you, there are several ways to exercise choice regarding technologies that are similar to cookies, such as browser storage and plugins (for example, HTML5, IndexedDB, and WebSQL). For example, many popular browsers provide the ability to clear browser storage, typically in the settings or preferences area. See your browser's help function or support area to learn more. For more about targeted advertising, go to the DAA Webchoices Browser Check or the NAI Opt Out of Interest-Based Advertising page. You can download the AppChoices app to opt out in mobile apps.

Location of Personal Data

The Personal Data we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or service providers process data. Currently, we primarily use data centers in the United States. The storage location(s) are chosen to operate efficiently and improve performance. We take steps designed to ensure that Personal Data is processed and protected as described in this policy wherever the data is located.

We receive Personal Data from the European Economic Area (EEA), United Kingdom (UK), and Switzerland on U.S. hardware, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use legal mechanisms, including contracts, to help ensure your rights and protections.

Information about local privacy laws

The Services operate from the United States, but this Policy applies worldwide. Our practices generally do not differ based on your location, but your rights and choices depend in part on the law where you live.

If any of these local privacy laws apply to you, that section overrides any contrary descriptions elsewhere in the Policy as they relate to you. If you have questions about your rights under other data privacy laws, please contact us.

Requesting information

Submitting requests

To exercise any rights described in this Policy, please contact us or use our Opt-Out Request Form (when available). Your request must:

provide sufficient information to identify you and the law that applies to you, such as your name, e-mail address, home or work address, or other information we maintain.

not include social security numbers, driver’s license numbers, third-party account numbers, credit or debit card numbers, or health information. Verifying requests We verify requests by attempting to match information in the request to information we maintain. We may require you to confirm your identity by authenticating via your account or other access method.

If your request is unclear or we are unable to authenticate your identity, we may ask for more information, in accordance with the law that applies to you.

If you are an authorized agent submitting a request on a user’s behalf (where permitted), we may require proof of the user’s written authorization before processing the request.

If we cannot verify the identity of the data subject in the request, we may deny it, in full or in part.

Responses to requests

We will respond to your request as quickly as we can, taking into account the nature of your request and the volume of pending requests. The content of our response will vary with the nature of your request, but we will always respond in accordance with any deadlines or requirements specified by the laws that apply to you.

At times, we may be unable to provide responsive personal information, such as when disclosure would create a substantial, articulable and unreasonable risk to the security of the information, user accounts, or the security of our systems or networks. We do not disclose account passwords or any other non-personal information that enables access to an account.

We reserve the right to retain an archive of any deleted information, to the extent permitted by law. We may also retain deidentified or aggregate data derived from personal information.

Appealing decisions

Residents of jurisdictions that provide for an appeal mechanism may appeal a decision we have made regarding their requests by contacting us.

Information for Users in Certain U.S. States

Exercising your rights: If you are a resident of California, Colorado, Connecticut, Utah, Virginia or another state with a similar data-privacy law, you may have additional rights that you (or, in certain states, an authorized agent acting on your behalf) can exercise by contacting us, including the right to:

Access and/or receive a copy of certain personal information about the categories and specific pieces of personal information we have collected and disclosed for a business purpose in the last 12 months

Access and/or receive a copy of certain personal information we hold about you

Correct your personal information

Delete certain personal information we hold about you

Receive information about the financial incentives that we offer to you, if any

Opt out of the processing of your personal information using AI or for purposes of profiling to reach decisions that produce legal or similarly significant effects, if applicable

You also have the right to not be discriminated against for exercising your rights. You may also have the right to opt out of “sales” of your information and “sharing/processing of your information for targeted advertising.” Certain information may be exempt from the requests above under applicable law. For example, we need to retain certain information in order to provide our services to you. We also need to take reasonable steps to verify your identity before responding to a request.

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.

Additional Information for Users in California

In addition to the rights described above, consumers residing in California are afforded the right to certain additional information with respect to their personal information under laws like the California Consumer Privacy Act (“CCPA”). If you are a California resident, this section applies to you.

Our collection and use of personal information: Information we collect falls into these CCPA-defined categories of personal information:

identifiers (such as your username and the identifiers you use to sign up, like your email address, social login and/or phone number);

financial data (payment records);

internet or other network information (how you interact with the services);

location information (for example: as inferred from your IP address, or your precise location, if you grant us access to precise location data);

inference data about you (for example, what content you may be interested in); and

other information that identifies or can be reasonably associated with you.

For more information about what we collect and the sources of such collection, please see the “Information we collect & why we use it” section of the Privacy Policy. To the extent we collect or use sensitive personal information as defined by law (such as CCPA), we do so in accordance with applicable legal requirements, and we do not use or disclose it other than for purposes for which there is not a right to limit under CCPA.

Disclosure of personal information: We may disclose and share your personal information with service providers and third parties as described in the “Our disclosures of information to others” section of the Policy. We disclose the categories of personal information mentioned in that section for business or commercial purposes.

We disclose personal information for the following categories of purposes, as defined by CCPA:

» Advertising and Marketing

» Error Management

» Internal Research

» Provide Products or Services

» Quality Assurance

» Security

» Short-Term Transient Use

We retain personal information as described in the “How long we retain your information” section of the Policy.

California’s ‘Shine the Light’ law. Under certain circumstances, Californians can request information about third parties who’ve received contact information and certain other types of personal information (as defined in the Shine the Light law), for their direct marketing purposes. We only share your personal information with third parties for their own direct marketing purposes with your consent and, if you have consented, only until you withdraw your consent. Consensual disclosures for direct marketing are generally exempt from Shine the Light’s disclosure requirement.

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.

Information for Users in the European Union and Switzerland

Data retention and destruction: We retain personal information until we determine it is no longer necessary for (1) the processing purposes justifying its collection or (2) legal compliance purposes.

Exercising your rights: All our users have control over their information and can directly edit or delete information from their account and limit what data we process. Users in the European Union and Switzerland have additional rights that you can exercise by contacting us. Those rights include:

Right of access to your personal data

Right to rectify your personal data if they are incorrect

Right to erase your personal data

Right to limit the processing of your personal data

Right to the portability of your personal data

Right to object to the processing of your personal data

Right to withdraw consent. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.

Information for users in Australia

We comply with the Privacy Act 1988(Cth) including the Australian Privacy Principles. You may contact Persona with questions or to complain about any privacy issues by contacting us. If you believe that we have failed to resolve the privacy complaint satisfactorily you have the option of contacting the OAIC. Contact details of the OAIC may be found here.

Information for users in Brazil

Exercising your rights: All our users have control over their information and can directly edit or delete information from their account and limit what data we process. Users in Brazil have additional rights that you can exercise by contacting us. Those rights include:

Right of access to your personal data

Right to rectify your personal data if it is incorrect

Right to erase your personal data

Right to limit the processing of your personal data

Right to the portability of your personal data

Right to object to the processing of your personal data

Right to withdraw consent. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal

Right to the review of decisions based on the processing of personal data carried out exclusively by automated means

Questions or concerns about your privacy? contact us.

Information for users in Canada

Overview: As described in the “How to control your privacy” section of the Policy, all our users have control over their information and can limit what data we process. In addition to these rights, users residing in Canada are afforded the right to certain additional information with respect to their personal information under the Personal Information and Electronic Documents Act (PIPEDA). If you are a Canadian resident, this section applies to you.

Exercising your rights: Users in Canada have additional rights that you can exercise by contacting us. Those rights include:

Right of access to your personal data

Right to rectify your personal data if they are incorrect

Right to withdraw consent. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal

Right to file a complaint regarding the processing of your personal data with the Office of the Privacy Commissioner of Canada

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.

Information for Users in the Republic of Korea

Overview: As described in the “How to control your privacy" section of the Policy, all our users have control over their information and can limit what data we process. In addition to these rights, users residing in the Republic of Korea are afforded the right to certain additional information with respect to their personal information under the Personal Information Protection Act. If you are a Republic of Korea resident, this section applies to you. Data retention and destruction: We retain personal information until we determine it is no longer needed for the processing purposes for which we collected or retain it or for legal compliance.

Exercising your rights: All our users have control over their information and can directly edit or delete information from their account and limit what data we process. Users in the Republic of Korea have additional rights that you can exercise by contacting us. Those rights include:

Right of access to your personal data

Right to rectify your personal data if they are incorrect

Right to erase your personal data

Right to limit the processing of your personal data

Right to the portability of your personal data

Right to object to the processing of your personal data

Right to withdraw consent. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.