Privacy Policy

Foremetric is built on a data-minimizing architecture. Behavioral signals are collected and processed on your device, and only encrypted, aggregated vectors are transmitted. The cryptographic trust model is phased, and each phase is disclosed below.

1. What we process

Only aggregated, anonymized behavioral vectors leave your device. Raw data is never transmitted. The cryptographic trust model evolves across phases:

Phase 1 (Trusted Operator): Your vectors are encrypted on the server side, and the DataKey is held by ForeMetric in AWS KMS. We provide on-chain content-hash tamper-evidence to ensure data integrity, but we technically have the ability to decrypt vectors in the staging environment. This is explicitly disclosed to users.

Phase 2 (Hardware-Attested): The DataKey is released only inside AMD SEV-SNP (Phase 2, Q1 2027) confidential VM memory. Not even ForeMetric (the founder or host operator) can access the decrypted vectors.

We do not collect personal information without your explicit consent. Any identifiers that could link data back to you are stripped before transmission.

2. Processing model

On-device: all inference, classification, and feature extraction happens locally on your phone inside ARM TrustZone / Apple Secure Enclave (Phase 2 native app). Raw signals never leave the device in plaintext.

Server-side (Phase 1): vectors are encrypted at rest and in transit; DataKeys are held by ForeMetric in AWS KMS with disclosed trusted-operator custody. This is an explicit, disclosed trade-off to allow rapid iteration during the alpha/beta phase.

Server-side (Phase 2): AMD SEV-SNP + COCOON TDX (Phase 2, Q1 2027) attested enclaves hold the DataKeys; ForeMetric cannot access decrypted vectors even as the host operator.

3. GDPR crypto-shredding and the right to be forgotten

You have the right to be forgotten. By initiating account deletion, the burn_keys() smart contract function is executed. This zeroes out your encrypted DataKey wrappers on the TON blockchain within a design target of 5 seconds (subject to production validation). Once the DataKey is destroyed, all your stored behavioral vectors across S3, TON Storage, and COCOON (Phase 2, Q1 2027) become mathematically irrecoverable noise — permanently and verifiably. Article 17 GDPR workflows are supported.

4. Anonymized vectors

For analytics and model training, Foremetric uses only de-identified behavioral vectors. These vectors contain no names, emails, phone numbers, or persistent device identifiers. They cannot be reverse-engineered to reveal individual behavior patterns.

5. GDPR compliance

For users in the European Economic Area, Foremetric processes data in accordance with the General Data Protection Regulation (GDPR). Raw data remains on your device and only anonymized, encrypted vectors are transmitted, keeping our processing scope minimal. You retain ownership of your behavioral data at all times.

You have the right to access, rectify, erase, restrict processing, and object to processing of your personal data. To exercise these rights, contact us via the contact page.

6. Your rights

You can stop contributing signals at any time by uninstalling the application. To erase stored vectors, initiate account deletion so that crypto-shredding (section 3) is executed.

7. Contact

Questions about this policy? Reach the team via the contact page.