Legal

Privacy policy.

Last updated: October 30, 2026

This Privacy Policy explains how Physicl, Inc. (“Physicl AI”, “we”, “us”) collects, uses, shares, protects, retains and deletes personal information when you use the Physicl AI platform available at https://app.physicl.ai (the “Service”). It applies in addition to our Terms and Conditions.

1. Who we are

The Service is operated by Physicl, Inc., a corporation organized under the laws of Delaware, with its principal place of business at One Rockefeller Plaza, Suite 3040, New York, NY 10020, United States. For any privacy question or request, contact us at contact@physicl.ai.

2. Information we collect

2.1 Information from Google Sign-In. You can sign in to the Service with your Google account. Sign-in is handled by our authentication provider, Clerk, Inc. (“Clerk”). When you choose “Sign in with Google”, we request only the following Google OAuth scopes:

  • openid: a unique Google account identifier, used to recognise you when you sign in again
  • email: your Google account email address and whether it is verified
  • profile: your name and profile picture URL, as set in your Google account

We do not request access to your Gmail, Google Drive, Calendar, Contacts or any other Google service, and we cannot read, modify or delete any data in your Google account.

2.2 Information you provide. Content, files and other data you upload to or create in the Service (“Customer Data”), and any information you send us when contacting support.

2.3 Information collected automatically. Technical and log data: IP address, browser type, device information, request timestamps and error logs, used to operate, secure and troubleshoot the Service.

Cookies and analytics: we use cookies that are strictly necessary for sign-in and session management. With your consent, we also use PostHog product analytics to understand how the features of the Service are used. You can withdraw that consent at any time.

3. How we use Google user data

We use the Google user data described in section 2.1 only to:

  • create and maintain your Physicl AI account;
  • authenticate you and keep you signed in;
  • display your name and profile picture inside the Service;
  • send you essential service communications (for example security, account or billing notices) at your email address;
  • if you have consented to analytics, associate your product usage with your account so we can understand and improve the features of the Service you use.

We do not use Google user data for any other purpose.

4. Limited Use of Google user data

Physicl AI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not:

  • use Google user data to serve advertisements, including personalised, retargeted or interest-based advertising;
  • sell Google user data, or transfer it to data brokers, advertising platforms or information resellers;
  • use Google user data to determine creditworthiness or for lending purposes;
  • use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models;
  • allow humans to read Google user data, except (a) with your explicit consent, (b) where necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymised for internal operations.

Google user data is excluded from any licence to Customer Data granted in our Terms and Conditions.

5. How we share information

We do not sell personal information. We share it only with the service providers that help us run the Service, under contracts that restrict their use of the data to providing services to us:

  • Clerk, Inc.: authentication and user account management. Data involved: Google user data (section 2.1), session data.
  • Amazon Web Services, Inc.: cloud hosting and storage (United States). Data involved: all data processed by the Service.
  • PostHog, Inc.: product analytics (only with your consent). Data involved: account identifier, email address, name, usage events.
  • SigNoz, Inc.: application monitoring and error tracking. Data involved: technical and log data (section 2.3).

We may also disclose information if required by law, to protect the rights, safety or property of Physicl AI or our users, or as part of a merger, acquisition or sale of assets, in which case the recipient will be bound by this Privacy Policy.

6. How we protect your data

  • All traffic to and from the Service is encrypted in transit with TLS.
  • Data is stored with encryption at rest in our cloud infrastructure.
  • Access to production systems and personal data is restricted to authorised personnel who need it to operate the Service, protected by single sign-on and multi-factor authentication.
  • We do not store your Google password; authentication is performed by Google and Clerk using the OAuth 2.0 / OpenID Connect protocols.

7. Data retention and deletion

  • Google user data (section 2.1) is kept for as long as your account is active.
  • When you ask us to delete your account, we delete your Google user data and account information within 30 days, except where we must keep limited records to comply with legal obligations.
  • Customer Data is retained and deleted as described in our Terms and Conditions.
  • Technical logs are kept for up to 90 days.

How to delete your data: email contact@physicl.ai from the address associated with your account.

Revoking Google access: you can remove Physicl AI’s access to your Google account at any time at https://myaccount.google.com/permissions. This stops future sign-ins with Google but does not by itself delete data we already hold; to do that, follow the deletion steps above.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing, and to withdraw consent. To exercise these rights, contact contact@physicl.ai. If you are in the European Union or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. Our legal basis for processing Google user data is the performance of our contract with you (providing your account); analytics rely on your consent.

9. International transfers

The Service is hosted in the United States. If you access it from elsewhere, your information will be transferred to and processed in the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards for these transfers.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

11. Changes to this policy

We will update this page when our practices change and revise the “Last updated” date. If we change how we use Google user data, we will notify you by email or in the Service before the change takes effect.

12. Contact

Physicl, Inc.
One Rockefeller Plaza, Suite 3040, New York, NY 10020, United States
contact@physicl.ai