Regional Privacy Notice

This notice supplements the Privacy Policy for the United States, Canada, Australia, Singapore, Japan and Mexico. A section applies where that law protects the relevant person and processing; storefront, nationality or App language alone does not decide this. It does not activate a feature or a market. Omission of another jurisdiction from this notice does not remove rights or obligations under other applicable laws.

The controller remains DOLLAR JUDGE INC dba Headii, 522 W RIVERSIDE AVE STE N, SPOKANE, WA 99201-0581, UNITED STATES. Contact privacy@headii.com. Our designated Privacy Officer / Data Protection Officer receives Canadian, Québec and Singapore privacy requests through this address. That designation is not a claim that the person is an EU or UK representative or an independently appointed GDPR data protection officer.

Read this notice together with Privacy Policy Sections 3–6 for categories, sources, purposes and recipients; Section 7 for sensitive information and AI choices; Section 9 for retention; and Sections 11–13 for requests, deletion and people without accounts. The Service Provider List identifies the providers, roles and processing locations for the applicable service. A regional rule prevails for the matter it covers. None of these notices is consent merely because you read or acknowledge it.

The same retention limits continue to apply across these regions. In particular, ordinary use of original transcription audio ends seven days after receipt and of transcripts within 90 days of generation, followed by automated infrastructure deletion. App feedback, AI-content reports, attachments and submitted diagnostics have the 12-month maximum described in Section 9, with its limited lawful exceptions. These are not promises that every supplier log, recovery copy, local file and email copy is erased simultaneously.

Information necessary for an account, authentication, a requested online action or a legal obligation may be needed to deliver that particular service or response. Optional information or consent is not required for an unrelated function. Refusing microphone, camera or location access can prevent the action that actually needs it, not justify a new use of other information. Information about another person can come from the account holder's content; a contract with that account holder is not consent or a contract with the other person.

The U.S. State Privacy Notice contains applicable state collection disclosures, access, correction, deletion, portability, appeal and opt-out information. It does not claim that a statutory threshold is met simply because this notice is available.

The separate Consumer Health Data Privacy Policy applies to processing covered by Washington or Nevada consumer-health laws. It must be separately accessible as required; this regional section is not a replacement for its required prominent link or for a collection or sharing consent. Ordinary content may incidentally contain sensitive information even when no dedicated health feature is enabled.

We use and disclose personal information for the identified purposes with meaningful consent where required, or within a specific legal permission that applies to the circumstances. Sensitive or unexpected processing requires the stronger form of consent where applicable. Consent is not a condition for an unrelated service, and you may withdraw it subject to lawful restrictions and reasonable notice after we explain relevant consequences.

You may ask about the existence, use and disclosure of your information, obtain access and request correction. Where PIPEDA governs the request, we respond within 30 calendar days, with only a legally permitted extension and the required notice. Applicable provincial time limits control where the relevant provincial law applies. A request for deletion or withdrawal may be made through the same contact, subject to lawful retention requirements; this notice does not present every jurisdiction as having an identical statutory erasure right.

Information may be handled outside Canada, including by Headii in the United States and by the service providers identified in the applicable list. It can be subject to lawful access by authorities in those locations. We remain responsible for information transferred to a provider for processing on our behalf and use appropriate contractual and other protection; notice of foreign processing does not waive that responsibility.

Contact the Privacy Officer at privacy@headii.com for requests or complaints. We investigate and communicate the outcome and the appropriate escalation route. You may contact the Office of the Privacy Commissioner of Canada or the competent provincial authority, including Alberta OIPC, British Columbia OIPC or Québec's Commission d'accès à l'information, as applicable.

Québec particulars. The Privacy Officer at privacy@headii.com is the public contact for the person in charge of the protection of personal information. Consent requests are clear, free, informed, specific and separate where required; consent for sensitive information must be express. A location, identification or profiling technology subject to Québec's specific notice and activation rules is explained before use and enabled only as those rules permit. A permission for one purpose is not blanket activation of another.

Before outsourcing processing or communicating information outside Québec where its law requires it, the required privacy impact assessment and written protection arrangement must be completed. Québec protection is not replaced by an unqualified reference to “GDPR compliance.” Applicable rights include access and correction, a structured commonly used technological copy of eligible computerized information, and cessation of dissemination or de-indexing in the circumstances provided by law. Eligible requests receive a written response within 30 days. If a decision is based exclusively on automated processing, the required notice, explanation, correction and opportunity to make observations to a person able to review it are provided. The French-language notice is available without charge.

We handle Australian personal information as described in the Privacy Policy and this section. Statutory rights under the Privacy Act 1988 and Australian Privacy Principles apply where Headii and the processing fall within their legal scope; this notice does not assert that a turnover exemption applies.

You may request access or correction or complain at privacy@headii.com. We respond within a reasonable period, explain a permitted refusal and the available review route, and address a complaint fairly. Where applicable, you may complain to the Office of the Australian Information Commissioner, normally after giving us an opportunity to respond. You may deal with us without identifying yourself or using a pseudonym where lawful and practicable; verification may be necessary for account-specific access or deletion.

Overseas processing includes Headii's handling in the United States and the actual provider destinations identified in the applicable Service Provider List. For a disclosure covered by APP 8, we take the required reasonable steps and remain subject to applicable accountability rules, unless a specific lawful exception applies. Merely accepting the Terms is not informed consent to waive that accountability. Collection-time information and any required sensitive-information consent are provided for the relevant action.

Any additional transparency duties for significant automated decisions apply according to their commencement and scope; use of an AI answer does not itself establish that Headii makes a significant decision about you. The availability of a future feature does not waive these duties.

Under the Personal Data Protection Act, we collect, use and disclose personal data for notified, reasonable purposes with consent or a specific legal permission. We explain the consequences of declining necessary information. You may withdraw consent on reasonable notice using privacy@headii.com or the applicable control. We then stop the affected processing unless a legal permission or requirement supports its continuation, and explain the relevant effect on the requested service.

You may request access to personal data in our possession or control and information about its use or disclosure during the preceding year, subject to statutory exceptions, and request correction. We respond to access requests as soon as reasonably possible and to correction requests as soon as practicable. If we cannot complete either within 30 days after receipt, we will notify you in writing within those 30 days of when we will respond. We explain any lawful fee or refusal. We do not describe an uncommenced data-portability provision as an existing general statutory right.

We cease retention, or remove the means of association, when the purpose is no longer served and retention is no longer necessary for a legal or business purpose, subject to the Privacy Policy's more specific limits. Transfers outside Singapore must meet the applicable comparable-protection requirements, including legally enforceable obligations where relied on. A general international-transfer sentence is not a substitute.

Our designated Data Protection Officer can be reached at privacy@headii.com for requests, questions and complaints. You may also approach the Personal Data Protection Commission. This contact does not represent that Headii has appointed a Singapore office or that a public DPO registry registration has been completed.

For processing protected by the Act on the Protection of Personal Information, the specified purposes are those in Privacy Policy Section 5, limited by its data, source and service boundaries. We do not change a purpose beyond the permitted related scope without the notice and consent required by law. Acquiring special-care-required personal information requires prior consent or an applicable exception; an account holder's general acceptance does not establish another person's consent.

Domestic outsourcing within a notified purpose is distinguished from disclosure to an independent third party. We supervise entrusted providers as required. A transfer to a foreign third party, including an entrusted provider where the foreign-transfer rules apply, requires an applicable route under Article 28: a qualifying country, an arrangement meeting the prescribed equivalent-protection and continuing-measures conditions, or the required informed prior consent. Where consent is used, the required country, legal-system and recipient-protection information is supplied before consent, including prescribed explanations if particulars cannot be identified. Where equivalent measures are used, we provide the required information about those measures on request and take the required continuing steps; a generic DPA label is not enough.

You may request notification of purpose, disclosure of retained personal data and eligible third-party provision records, correction, addition or deletion, and cessation of use or disclosure where the law provides. Use privacy@headii.com; an authorized representative may also apply. We use proportionate identification and explain an applicable exception or refusal without delay. If a legally permitted fee is charged, we tell you its amount before you decide to proceed.

The operator's name and address appear in Section 1. To request the name of its corporate representative, further information about applicable security-control measures, or details of the request procedure, contact privacy@headii.com. We will respond without undue delay as required by applicable law. We may withhold security details whose disclosure would undermine the protection, as permitted by law. This corporate representative is not an assertion that a Japan-resident representative has been appointed.

Contact that same address about a complaint. You may also seek guidance from the Personal Information Protection Commission. The Japanese notice supplies these particulars in an accessible form; reforms that have been enacted but have not commenced are not used as present permission for processing.

This section and the Privacy Policy form the full notice for processing covered by the Ley Federal de Protección de Datos Personales en Posesión de los Particulares. A Spanish publication copy must be provided for the Mexican service. The responsible entity and address are in Section 1. The privacy-request function is handled through privacy@headii.com.

Data and purposes. We handle the account and authentication details, device and connection information, requested content and results, choices, support and security records identified in Privacy Policy Section 3 for the purposes in Section 5. Sensitive information may be present in submitted content, including health, beliefs, political views or sexual-life information. It is not treated as non-sensitive merely because there is no health feature. Sensitive processing requires express written consent through a permitted signature or authentication mechanism, or a specific legal exception; financial or patrimonial data requires express consent where the law requires it.

Necessary purposes are account and service delivery, requested content processing, security, responding to support or rights requests and compliance with applicable obligations. Separately optional purposes apply only when offered and validly selected under the Privacy Policy. The current App notice does not authorize advertising, marketing audiences, model training of ordinary User Content or routine human quality review. Declining an optional purpose does not prevent an unrelated necessary service. You may limit an optional use or disclosure or revoke consent through privacy@headii.com; we explain any lawful limit or consequence, without retroactively invalidating earlier lawful processing.

Recipients and transfers. Entrusted processors acting within our instructions are distinguished from independent third-party recipients. The Service Provider List states the relevant roles and destinations. A transfer to an independent third party subject to Articles 35–36 requires the applicable consent or a specific statutory exception and the corresponding recipient obligations. Where consent is necessary, we identify the recipient or permitted category, destination and purpose and obtain an affirmative transfer choice before the disclosure; a general notice or Terms acceptance is not treated as that choice. No such independent transfer is authorized merely by adding an unverified candidate provider to a list.

ARCO rights. You may exercise access, rectification, cancellation and opposition by writing to privacy@headii.com. State your name, a contact for our response, the right requested and information reasonably needed to locate the data. Provide proportionate proof of identity or representative authority. For correction, explain the proposed correction and relevant supporting material. You need not describe the specific personal data when that requirement does not apply to an access request.

We communicate the decision within 20 business days after receiving an ARCO request and, if granted, implement it within 15 business days after communicating the response. Either period may be extended once for an equal period where legally justified, with the required explanation. Access can be provided electronically. Cancellation may require restricted blocking before erasure where the law provides; it is not an indefinite ordinary-use permission. We explain a refusal and the applicable complaint route. Exercising these rights is free, apart from a charge that the law specifically permits and that is disclosed in advance.

The competent federal authority for this private-sector law is the Secretaría Anticorrupción y Buen Gobierno, not the former INAI. You may use the protection-of-rights procedure under the applicable law, including where we do not respond; statutory filing periods apply. The current authority's official information is available through Secretaría Anticorrupción y Buen Gobierno.

Notice changes. The dated Privacy Policy, this regional notice and a material-change notice explain updates under Privacy Policy Section 16. A new purpose, sensitive use or transfer requiring a fresh choice does not begin merely because the webpage has changed. At electronic collection, the required concise notice and direct access to the full Spanish notice accompany the collection; they are not replaced by an inaccessible legal link.