1. Introduction
Sembroni Tech Inc. (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Fluence mobile application and related services (collectively, the “Service”).
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
This Privacy Policy applies only to users in the United States. The Service is intended for users located in the United States.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide to us, including:
- Account Information: Name, email address, password, and contact information when you create an account.
- Clinic Information: Clinic name, address, type, and service lines you define within the Service.
- Communications: Information you provide when contacting our support team.
- User Preferences: Settings and preferences you configure within the Service.
- Prohibited Data (HIPAA/PHI): You are strictly prohibited from providing any “Protected Health Information” (PHI) as defined under HIPAA. The Service is a financial intelligence tool, not a medical record or practice management system.
2.2 Financial Information Collected via Plaid
When you connect your financial accounts through our integration with Plaid Inc. (“Plaid”), we receive the following information:
- Account Information: Bank account names, types, balances, and account identifiers (masked account numbers).
- Transaction Data: Transaction history, including dates, amounts, merchant names, and categories.
- Investment Information: For connected investment accounts: holdings, positions, and performance data.
Plaid's collection and use of your information is governed by Plaid's End User Privacy Policy, available at https://plaid.com/legal. We encourage you to review Plaid's privacy practices.
2.3 Payment Information
Subscription payments are processed by Stripe, Inc. (“Stripe”). We do not directly collect, store, or process your complete payment card information. Stripe collects and processes payment information in accordance with their Privacy Policy. We receive only limited information from Stripe, such as the last four digits of your card, card type, and billing address, for record-keeping and support purposes.
2.4 Information Collected Automatically
When you use the Service, we automatically collect certain information, including:
- Device Information: Device type, operating system, unique device identifiers, and mobile network information.
- Usage Data: Features used, pages viewed, time spent in the app, and interaction patterns.
- Log Data: IP address, access times, browser type, and referring URLs.
- Crash Reports: Technical information about errors and crashes to help us improve the Service.
- Sensitive Personal Information: Under certain state laws, your financial account credentials (collected via Plaid) are considered “Sensitive Personal Information.” We process this data only with your affirmative consent and solely to provide the core financial analytics of the Service.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide the Service: To operate, maintain, and deliver the features and functionality of the Service.
- Financial Analysis: To aggregate, categorize, and display your financial data; calculate KPIs; and generate insights.
- AI Features: To power the conversational AI interface and provide responses to your financial queries. We use automated processing and machine learning models to analyze your financial data and generate business KPIs. We do not use your identifiable financial data or clinic-specific inputs to train our global or foundation AI models for use by other customers. Your data is siloed to your specific account for the purpose of generating your unique insights. We reserve the right to modify or substitute AI models used in the Service at any time.
- Account Management: To create and manage your account, process subscriptions, and provide customer support.
- Communications: To send you service-related communications, including account verification, billing notifications, and important updates.
- Security: To detect, prevent, and address fraud, unauthorized access, and other security issues.
- Improvement: To analyze usage patterns and improve the Service's features, functionality, and user experience.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4. AI-Powered Features and Data Processing
Fluence uses artificial-intelligence services to automatically categorize your financial transactions and to power our in-app financial assistant (“Fluence AI”). This section explains, in detail, what data is shared with these services, who processes it, and the protections that apply.
- What We Process with AI: To provide these features, we send the following to our AI provider: transaction details (merchant name, amount, date, and category), connected account names and balances, and your clinic's location (city, state, and ZIP code). We do not send your bank login credentials, full bank account numbers, or government-issued identifiers.
- Who Processes It: This processing is performed by Google's Gemini models running on Google Cloud Vertex AI. Under Google Cloud's terms, data submitted to Vertex AI is not used to train Google's models and is subject to Google Cloud's data-protection commitments, which provide protections equivalent to those described in this Privacy Policy.
- Your Consent: Before any data is shared with these AI services, the app presents a disclosure and obtains your consent during sign-up.
- Data Minimization: We limit the information sent to AI services to what is necessary to provide the feature, and we remove identifiers that are not needed.
We do not use your identifiable financial data or clinic-specific inputs to train our own global or foundation AI models for use by other customers, and we do not use AI to make “consequential decisions” (e.g., credit lending or employment). We reserve the right to modify or substitute the AI models used in the Service at any time, subject to equivalent data-protection commitments.
6. Data Storage and Security
6.1 Data Location
Your data is stored on Google Cloud Platform servers located in the United States (us-central1 region). By using the Service, you consent to the storage and processing of your data in the United States.
6.2 Security Measures
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit using TLS/SSL
- Encryption of data at rest
- Multi-Factor Authentication (MFA) for user accounts
- Regular security assessments and monitoring
- Access controls limiting employee access to data on a need-to-know basis
While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. Upon account deletion or termination:
- Permanent Deletion: If you delete your account through the application, data deletion is immediate. If you request deletion through the operations support channel (support@sembroni.tech), it may take up to thirty (30) days to permanently delete all data. Audit and security logs may be retained in accordance with our cloud infrastructure provider's retention policies for security, fraud prevention, and legal compliance purposes.
- Anonymized Data: We may retain anonymized and aggregated data that cannot be used to identify you for analytical and improvement purposes.
- Legal Requirements: We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes or enforcing our agreements.
Data Retention Schedule. To ensure transparency, we adhere to the following retention periods:
- Active Account Data: Retained for the duration of your subscription.
- Deleted Account Data: Permanently deleted within thirty (30) days of your request, except where retention is required by law (e.g., tax or audit records).
- AI Interaction Logs: AI interaction logs follow the same deletion policy as all other user data.
8. Your Rights and Choices
8.1 Access
You may access and update your account information at any time through the Service's settings. If you need assistance, contact us at support@sembroni.tech.
8.2 Right to Correct
You have the right to request that we correct inaccurate personal information. If you believe your financial data is incorrect, please see Section 8 of our Terms and Conditions for the verification and evidence requirements.
We do not use AI to make “consequential decisions” (e.g., credit lending or employment).
If we deny your request to exercise any of the rights above, you have the right to appeal our decision within thirty (30) days by contacting support@sembroni.tech. For the specific verification requirements and procedures for submitting a correction, please see our Terms and Conditions.
8.3 Data Portability
You may request a copy of your personal data in a commonly used, machine-readable format by contacting us at support@sembroni.tech.
8.4 Account Deletion
You may request deletion of your account and personal data by using the account deletion feature in the Service or by contacting us at support@sembroni.tech. Please note that deletion is subject to the 30-day retention period described in Section 6.
8.5 Disconnect Financial Accounts
You may disconnect your linked financial accounts at any time through the Service. Disconnecting an account will stop the syncing of new data; previously synced data will remain in the Service until you delete your account. We will make commercially reasonable efforts to revoke access to your linked financial accounts upon disconnection or account deletion. In rare cases, processing may be delayed due to third-party service availability.
8.6 Communication Preferences
You may opt out of receiving promotional communications from us by following the unsubscribe instructions in those messages. Please note that even if you opt out, we may still send you non-promotional, service-related communications.
9. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- No Sale of Personal Information: We do not sell your personal information as defined under the CCPA.
To exercise your CCPA rights, please contact us at support@sembroni.tech. We will verify your identity before processing your request.
10. Children's Privacy
The Service is not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@sembroni.tech. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information.
11. Third-Party Links and Services
The Service may contain links to third-party websites or services that are not owned or controlled by us. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access.
12. Force Majeure
Neither Party will be liable for any failure or delay in performance (other than for delay in payment of fees) due to causes beyond its reasonable control, including, but not limited to, acts of God, war, riot, embargoes, acts of civil or military authorities, fire, flood, accident, strikes, telecommunications failure, or internet service provider failures. The party experiencing such an event shall notify the other party within a reasonable time, use diligent efforts to resume performance, and the time for performance shall be extended for a period equal to the duration of the event.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on our website and/or within the Service, and by updating the “Effective Date” at the top of this Privacy Policy. Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
We will respond to your inquiry within a reasonable timeframe.