Privacy Notice

Last updated: 9th October 2026

About this notice

Canopy Labs AI Inc is committed to protecting the privacy of your personal information. This privacy notice describes how we collect, use and share personal information about you, including when you use our mobile apps and other online services. Please read it carefully.

If you have any questions about this Privacy Notice, please contact us as described below.

Information about us

We are Canopy Labs AI Inc, the data controller responsible for your personal data. Our registered office is at 300 Brannan Street, San Francisco, CA 94107 and our file number is 3052855.

This privacy notice also applies to the activities of our group company, Canopy Labs AI Ltd, an English company with company registration number 16991041. Information about you may be shared within our group for operational purposes. Canopy Labs AI Ltd also acts as our nominated representative in the UK for the purposes of UK data protection law. Their address is 3rd Floor 1 Ashley Road, Altrincham, Cheshire, United Kingdom, WA14 2DT.

If you have any questions, our contact details are:

• 300 Brannan Street, San Francisco, CA 94107
• support@earnwithaloe.com

Information you provide

If you are an individual, when you audition to provide recordings, or enter into a contract with us to provide recordings (or someone does so on your behalf), we obtain certain personal information about you, such as:

• your name and contact details;
• your gender, where you choose to provide it (you may also select "Prefer not to say");
• details of the contract we have with you (including signed copies of contracts and metadata about your agreement to the contract such as timestamps, device ID and IP address);
• age verification information, such as government-issued identifier and date of birth;
• correspondence with us and details about that correspondence (for example, phone numbers used to call us and the date, time and duration of any calls);
• the audition recording and any other recordings you submit, including a reference photo of your face and environment;
• social media details, such as social media handle and profile information, if you choose to engage with us on social media;
• payment details; which are collected by our third-party payment processor on our behalf; and
• other information you provide in correspondence or interactions with us (for example by email, telephone, post, SMS or via our website or app).

In addition, if you use our mobile apps, you may choose to provide access to your device’s camera and microphone to enable you to engage with the app’s features and functionality, and your device’s speech recognition service to detect your spoken language. During live video sessions conducted through the app, we may use your device operating system’s built-in sensitive content analysis framework (such as Apple's on-device framework) to detect and filter sensitive content (e.g., nudity). This analysis is conducted on your device, and no image or video data is transmitted to our servers for this purpose. We do not access or search your device's photo library, camera roll, or other stored files.

If you are an individual, we need certain information to carry out our contract with you and you must provide this in order to enter into a contract with us (or as required under that contract). If you do not, we may not be able to carry out our contract with you. Mandatory information fields are generally set out when you are entering into the contract, but in particular, you must provide the following information:

• your name and contact details;
• your payment details; and
• information to verify your age.

Automated Data Collection

We, our third-party vendors and our advertising partners may obtain information about you by automated means when you interact with our mobile apps and other online services, such as:

• Device data, such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
• Location data, which may be approximate (for example, as inferred from network data or device settings).
• Communication interaction data such as your interactions with our email, chat or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails enabling us to detect if you have opened or forwarded a message.
• Online activity data, such as pages or screens you viewed, search history, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.

Tracking technologies. Some of the automatic collection described above is facilitated by cookie and similar technologies. For more information, see our Cookie Policy.

Information we receive from third parties

We may also receive information about you from the following sources:

• Our service providers. We work closely with third parties (including, for example, talent agencies, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies) who may provide us with information about you, to be used as set out in this privacy notice.
• Advertising Companies and Social Networks: We may receive certain information about you from advertising companies and social networks with whom we partner to serve you online ads that are tailored to your interests.
• Businesses we have bought. If we have acquired another business, or substantially all of its assets, which originally held your information, we will hold and use the information you provided to them, or which they otherwise held about you, in accordance with this privacy notice. If we are reviewing whether to acquire a business, or substantially all of its assets, which holds your personal data (whether you are a customer or employee of that business or otherwise) we may receive limited personal data about you from that business or professional advisers involved in the transaction, as necessary for our legitimate interests in making decisions about that acquisition. If we do not acquire that business, any information we receive about you will be deleted as soon as practicable following the decision not to acquire.

How we use your information

Common uses of your information. Although in limited circumstances we may use your information because you have specifically consented to it, we generally use your information because (1) we need to perform a contract we have entered into with you; or (2) it is necessary for our legitimate interests.

We use the information we obtain about you to perform our contract with you, including to:

• Provide our services;
• Establish and manage your account and profile;
• Manage the contractual relationship we have with you or take steps prior to entering into a contract with you (for example, deciding whether to pay you for a recording);
• Process transactions and billing inquiries; and
• Provide support.

We also use the information we obtain as necessary for our legitimate interests, including to:

• Evaluate our candidates and monitor our actor engagement process;
• Operate, evaluate, develop, manage and improve our business (including operating, administering, analyzing and improving our products and services; conducting research and developing new products and services; managing and evaluating the effectiveness of our communications; performing troubleshooting, accounting, auditing, billing, and other internal functions);
• Perform analytics (such as market research, data and trend analysis, and anonymization of personal information);
• Train, refine, develop and otherwise create and improve AI models, systems and other technologies;
• Manage inquiries and complaints;
• Send promotions, offers or other marketing communications and measure the effectiveness of our marketing efforts (to the extent required by applicable law we will obtain your consent to send you such communications);
• Engage in interest-based advertising (please refer to our Cookie Policy for more information);
• Protect against, identify and prevent fraud and other criminal activity, claims and other liabilities;
• Increase and maintain the safety and security of our services, and prevent misuse (for example, to keep sessions safe, we run automated analysis on your device during live video sessions, and recording sessions may otherwise be reviewed by our moderation team); and
• Exercise and defend legal rights and claims.

We otherwise may use your information (1) to comply with our legal obligations; (2) as necessary to protect your interests (or someone else's interests) or where it is needed in the public interest (although these circumstances are likely to be rare); or (3) in other ways for which we provide specific notice and, where required by law, obtain consent at or before the time of collection.

You may "opt out" of receiving our marketing communications at any time by contacting us or, for emails, using unsubscribe option. Even if you opt out of our marketing emails, we may still need to contact you for administrative or operational purposes.

Sharing your information

What is shared with another actor when you're paired in a session? When you join a paired recording session, your call partner will see and hear you live for the duration of the session, and their device will see your first name only. We do not give your call partner any way to contact you outside the Earn With Aloe app. We process this disclosure on the basis of performance of our contract with you (the Data Collection Agreement). You can choose not to participate by not joining a session.

Which third-party service providers process your personal information? We share your personal information with third-party service providers (including contractors and designated agents) so that they can carry out their services, including for legal advice, contract administration, data analytics, IT services, and payment processing.

When might we share your personal information with other entities in the group? We may share your personal information with other entities in our group as part of our regular reporting activities on company performance, in the context of a proposed or actual business reorganisation or group restructuring exercise, and for system maintenance support and hosting of data.

What about other third parties? We may share your personal information with other third parties, for example with potential buyers and professional advisers in the context of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of an actual or anticipated merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation).

In addition, we may share your information with third-party advertising companies and social networks for interest-based advertising purposes. Please refer to our Cookie Policy for more information.

We may also need to share your personal information (1) to enforce or carry out our agreements with you; (2) if we are required or permitted to do so by applicable law, regulation, or legal process (such as a court order or subpoena); (3) in response to requests by government officials and agencies, such as law enforcement authorities; (4) to establish, exercise or defend our legal rights; (5) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss, or to protect the rights, property, or safety of us, our customers, or others; (6) in connection with an investigation of suspected or actual fraud, illegal activity, security, or technical issues; or (7) otherwise with your consent.

Where we store your information

Our office headquarters are based in the USA and we also have a group company established in the UK. Where required to perform our contract with you or for our wider business purposes, the information that we hold about you may be transferred to, and stored at, other destinations outside the UK and the EU.

If we transfer data to countries or organisations outside of the UK and the EU which the EU does not consider to have an adequate data protection regime in place, we will ensure that appropriate safeguards (for example, standard contractual clauses or other transfer safeguards approved under applicable data protection law) are put in place where required. You may request a copy of the relevant safeguards by contacting us as described below.

Data security

We have put in place internal security measures designed to protect your personal information against accidental or unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.

How long will we keep your information for?

We will keep your personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we may consider factors such as the length of time we have an ongoing relationship with you and provide services to you; the amount, nature, and sensitivity of the personal information; the purposes for which we process your personal information; whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations; and applicable legal requirements.

Your rights

Under applicable data protection laws, you may have certain rights when it comes to personal information we process about you. Please be aware that these rights are not always absolute and there may be some situations in which you cannot exercise them or they are not relevant. In particular, where you have been paid for services and executed a contract with us for the collection of your face and voice data, this may have an effect on your entitlement to exercise certain rights.

Depending on your jurisdiction of residence, you may have the right to:

• Be informed about how we use your personal information and about your rights. This is why we are providing you with the information in this notice. If you require any further information about how we use your personal information, please let us know.
• Request access to your personal information, which may enable you to receive a copy of the personal information we hold about you and to confirm that we are lawfully processing it.
• Request correction of any incomplete or inaccurate personal information we hold about you.
• Request deletion of your personal information. You also may have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to the processing of your personal information on grounds relating to your particular situation and, in any event, to the processing of your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information under certain circumstances.
• Request the transfer of your personal information in a structured, commonly used and machine-readable format and have it transferred to another party under certain circumstances.
• Withdraw consent to the extent we rely on your consent to process your personal information.
• Lodge a complaint with your relevant data protection supervisory authority. If you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.
  • For users in the EU – the contact information for the data protection regulator in your place of residence can be found here: https://www.edpb.europa.eu/about-edpb/our-members_en
  • For users in the UK – the contact information for the UK data protection regulator is below: Website: https://ico.org.uk/make-a-complaint/

Depending on where you are located, you may also have a right to complain to us if you are not satisfied with our handling of your personal information. You can submit a complaint to us by email to support@earnwithaloe.com. We will reply to your request as soon as we can.

If you want to exercise the rights available to you under applicable law, please contact us as described in this Privacy Notice.

We may need to request specific information from you to help us understand the nature of your request and to confirm your identity. If we request any identification from you for this purpose, it is on the basis that it is necessary to comply with our legal obligations.

In accordance with applicable data protection law, we may charge a reasonable fee if your request is manifestly unfounded or excessive, in particular where requests are repetitive. Alternatively, we may refuse to act on the request in such circumstances.

Other online services and third-party features

For your convenience and information, our online services may provide links to other online services, and may include third-party features such as apps, tools, widgets and plug-ins. These online services and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by us, we are not responsible for these third parties’ information practices.

Children and Teens

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a minor from whom you believe we have collected personal information in a manner prohibited by law, or if information was provided on your behalf when you were under 18, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Changes to this privacy notice

Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by e-mail or otherwise. Please check back frequently to see any updates or changes to our privacy notice.