Privacy policy

Embodied, Inc. Privacy Policy


Updated:  December 20, 2023

Embodied, Inc. (Embodied) cares about your privacy and wants you to be fully informed of the information we collect and how we use it to offer our products and services, including Moxie, our interactive smart assistive robot. Along with our companion eCommerce and corporate website moxierobot.com (eCommerce Site), Moxie Robot Application (Moxie Robot App), Embodied’s Global Robotics Laboratory (G.R.L.) children’s website www.globalroboticslab.com (the “G.R.L. site”), and Embodied’s proprietary Artificial Intelligence (AI) SocialX® platform, Moxie was designed with the help of child development experts to support the emotional and social development of children ages 5 - 10. Corporate information about Embodied, our online store, more information about Moxie and our AI, are available at moxierobot.com. Parents and purchasers must be 18 or older to shop online or register through the Moxie Robot App.

Embodied is committed to compliance with the Children’s Online Privacy Protection Act (COPPA) and is working with PRIVO®, a COPPA Safe Harbor organization, to obtain verifiable parental consent for their child to use Moxie. Moxie is fully COPPA (Child Online Privacy Protection Act) Safe Harbor certified. COPPA’s purpose is to provide parents control in protecting their children’s privacy online and our certification means that parents can feel safe knowing that Embodied abides by leading data integrity and security procedures.

EMBODIED is a member of the PRIVO Kids Privacy Assured COPPA Safe Harbor Certification Program (“the Program”). The Program certification applies to the digital properties listed on the validation page that is viewable by clicking on the PRIVO Seal. PRIVO is an independent, third-party organization committed to safeguarding children's personal information collected online. The PRIVO COPPA certification Seal posted on this page indicates Embodied has established COPPA compliant privacy practices and has agreed to submit to PRIVO’s oversight and consumer dispute resolution process. If you have questions or concerns about our privacy practices, please contact us at 855 945-3411 or privacy@embodied.com. If you have further concerns after you have contacted us, you can contact PRIVO directly at privacy@privo.com.


Our Children’s Privacy Statement may be found at moxierobot.com/pages/childrens-privacy-policy.

Protecting your privacy and the security of the data entrusted to us are at the heart of how we develop our products, services and platform. We also want you to know how to exercise your right to access, correct or delete the information you entrust to us. During setup and registration of the Moxie Robot App and Moxie, you will be asked to provide full verifiable parental consent (VPC) to Embodied’s data collection practices, which are described herein. During setup parents will receive a unique recovery key. Embodied will be offering registration of more than one child for Moxie.  A parent or guardian will only be asked to provide VPC once although the parent or guardian may register multiple children using the Moxie Robot App.  A parent or guardian should not sign up or register children who are not part of their family or whom they do not have parental rights over.  This is because a parent or guardian cannot provide verifiable parental consent for Embodied’s data collection practices for children of which they are not a parent or guardian.  The recovery key is utilized to assist in recovering data if lost for any reason. In addition, the recovery key is also used in generating the encryption key. The recovery key is only accessible by you; Embodied does not have access to this. Accordingly, if you lose the recovery key, Embodied cannot recover your data.

You can opt-out of parental consent to Embodied’s data collection practices at any time although this may mean that some of the Embodied Services will not be operational. If you opt-out of the data collection practices, Moxie will become non-operational because Moxie's operation relies on audio and video data processing.

Note to Pioneer Mentor Program Participants: Participants in our pre-launch Pioneer Mentor Program are subject to specific privacy practices while using Moxie during our beta test period outlined in the Pioneer Mentor Program Informed Consent Agreement (“Program Agreement”). The Participants will have provided verifiable parental consent to participate in the Program by executing that Program Agreement. Please refer to the Program Agreement for details.

Note to Library Lending Program Participants: Participants in our Library Lending Program will be subject to additional privacy practices while using Moxie during our trial with the Library.  Please see Section 3(H) below which outlines additional privacy practices that Embodied has in place for the Library Lending Program. 

TABLE OF CONTENTS

  1. SECURITY
  2. YOUR PRIVACY RIGHTS
    1. California Privacy Rights
  3. WHAT INFORMATION DO WE COLLECT DURING SETUP OF THE MOXIE MOXIE ROBOT APP AND MOXIE?
    1. When Do the Moxie Robot App and Moxie Collect Data?
    2. What Information Does the Moxie Robot App Collect and Why Does the Moxie Robot App Collect It?
    3. What Information Does Moxie Collect and Why Does Moxie Collect It?
    4. Recovering Data and Troubleshooting
    5. The Moxie Robot App and Moxie Share Information with The Following Third Parties
    6. Mobile App Store
    7. Retention Timeframes
    8. Library Program
  4. WHAT INFORMATION DO WE COLLECT WHEN A PARENT PURCHASES MOXIE?
    1. What Information Do We Collect at Our eCommerce Site?
      1. Cookies and Technology – The eCommerce Site utilizes the following cookies.
    2. When Do We Collect Information at Our eCommerce Site?
    3. Why Do We Collect Information at Our eCommerce Site?
    4. What Personal Information is Shared at Our eCommerce Site?
    5. Choices and Controls of Personal Information on eCommerce Site
    6. Purchasing Moxie on Amazon's Embodied Website - What Information Does Embodied Receive If Moxie Purchased Via Amazon
  5. WHAT INFORMATION DO WE COLLECT AT G.R.L. SITE?
    1. Personal Information the G.R.L. Site Collects
    2. When Does the G.R.L. Site Collect Personal Information?
    3. Why Does the G.R.L. Site Collect Information?
  6. CERTIFICATIONS
  7. CONTACT US WITH YOUR QUESTIONS

 

  1. SECURITY
  2. The Embodied Products were developed with security in mind.

    Where possible, data collected by Moxie is processed and stored locally. Embodied takes steps to protect and secure data that cannot be limited to on-device processing during transmission and in the cloud through encryption and other measures. We take steps to securely send and store data, and only work with business partners and cloud service providers who provide assurances that they will do the same.

    Embodied segregates certain personal information and other information about users or the device into separate databases, which are secured and encrypted. When you set up an account in the Moxie Robot App, a recovery key is automatically assigned to you. This key is unique to you and not accessible to Embodied. You will need your recovery key to access your data if you change devices through which you pair Moxie, or need a new Moxie.

    Embodied strives to protect the information provided to and/or collected by us when you use the Embodied Services through commercially reasonable administrative, technical, and organizational safeguards. While Embodied works hard to protect your information, no security method is 100% secure. Thus, Embodied cannot guarantee that the security methods and/or precautions we take are failure proof.

    We recommend that you learn about and use security tools, habits, and practices to protect the online security of you and your family members, such as protecting your recovery key from others and having a backup copy of the recovery key in a safe and secure location. Embodied will never ask you for the recovery key, and the recovery key should only be used by the account holder.

  3. YOUR PRIVACY RIGHTS

  4. If you are a resident of California or a resident of Nevada, you have certain privacy rights as described in this section.

    A. California Privacy Rights

    If you reside in California, we are required to provide additional information to you about how we use and disclose your information. You may also have additional rights with regard to how we use your information. We have included this California-specific information below.

    Uses and Disclosure of Your Information - Consistent with Sections 3, 4 and 5 of this Privacy Policy, we collect certain categories and specific pieces of information about individuals that are considered "personal information" in California. As detailed below, we may collect this personal information from you and other third parties. We may collect, share and disclose personal information for the business and commercial purposes described below.

    Do Not Sell: Subject to certain exceptions, California residents have the right to opt out of the "sale" of their personal information. We do not sell personal information of children or information collected from our Moxie Robot App to third parties for their advertising or marketing purposes. We do not monetize the information you provide; however, we work with third party advertisers on our eCommerce site to provide relevant advertising, which may be considered a “sale.” Please review our Cookie Policy below for information on third parties we work with. To exercise your Do Not Sell rights, please contact Embodied at (855) 945-3411 or support@embodied.com. Only the eCommerce Site includes marketing and remarketing cookies. The Moxie Robot App, the Moxie and the G.R.L. Site do not utilize these cookies. To opt out of sharing your information and receiving personalized ads at our e-Commerce site through our third party advertising partners, you may contact them directly or use the opt-out tools available from the Digital Advertising Alliance at https://optout.aboutads.info/?c=2&lang=EN or the Network Advertising Initiative at https://optout.networkadvertising.org/?c=1. Opt-outs are browser and device-specific. If you decide to opt out, ads may still be delivered, but they might be less relevant to you and your interests. Whatever decision you make, you can change it at any time.

    Deletion, Access and Information Requests - Subject to certain exceptions, as a California resident, you have the right to: (i) request deletion of your personal information; (ii) obtain access to your personal information; and (iii) receive information about the categories of personal information about you that we have "sold" (as that term is defined under California law) to "third parties" (as that term is defined under California law) and also that we have disclosed for a "business purpose" (as that term is defined under California law). This Privacy Policy describes the categories of information we collect.

    Deletion Requests: If you would like us to delete your personal information, please contact customer support at support@embodied.com for more information on how you can exercise these rights. You will need to provide us certain information, including your email address, so that we may verify your request and communicate with you regarding your request. If you have a Moxie robot but lost your recovery key or access to the Moxie Robot App, we are unable to fulfill requests to delete all Moxie data because of the steps we have taken to minimize our ability to link to personal information in our system.

    Access Requests: If you would like to access your personal information, please contact customer support at support@embodied.com for more information on how you can exercise these rights. You will need to provide us with certain information, including your email address, so that we may verify your request and communicate with you regarding your request. If you have a Moxie robot but lost your recovery key or access to the Moxie Robot App, we are unable to fulfill requests to access all Moxie data because of the steps we have taken to minimize our ability to link to personal information in our system.

    You may also contact Embodied at (855 945-3411) for assistance in exercising any of the California rights described above.

    Should you wish to request the exercise of these rights as detailed above, we will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon this request.

    California Shine the Light - Under California Civil Code § 1798.83, as a California resident, you may opt out of companies disclosing personal information to third parties for their direct marketing purposes. Embodied does not disclose personal information to third parties for their direct marketing purposes.

    Nevada Privacy Rights - Subject to certain exceptions, under Nevada Revised Statutes 603A, Nevada residents may opt out of the “sale” of personal information covered under the statute. Embodied does not sell personal information that is covered by this statute.

    Do Not Track - At this time, we do not take steps to respond to do not track signals available on some browsers. You can manage your cookie preferences using your own browser settings to accept or block some or all cookies or receive notice so you can consent to cookies. If you block all cookies, some features of the Embodied Services may be unavailable to you.


  5. WHAT INFORMATION DO WE COLLECT DURING SETUP OF THE MOXIE ROBOT APP AND MOXIE?

  6. No child can begin interacting with Moxie until a parent has provided verifiable parental consent for their child or children to use Moxie. Moxie is equipped with a camera, microphones and other sensors to interact with your child. Moxie captures video and audio of your child. The sensors are utilized to identify if and where other objects or persons may be located in a room or other interactions, such as if a child is touching or hugging Moxie. Embodied utilizes our proprietary AI platform (SocialX®) to analyze data, to provide and improve our services, and to develop new content, features, services and products. Embodied has implemented strong measures to secure personal data to offer your child the benefits of Moxie. Where possible, data is processed and stored locally on the Moxie device to avoid sending personally identifiable information into the cloud. Embodied takes steps to protect and secure data that cannot be limited to on-device processing during transmission and in the cloud through encryption and other measures.

    As described in detail below, to use Moxie, parents must set up a Moxie Robot App account and provide certain information, like the parent’s name and email address, and a child’s first and last name and birthdate. Once you set up the account, parents may click the Grant Consent button to visit our partner, PRIVO, to complete the parental verification process and start using Moxie. Until a parent provides verifiable parental consent through the PRIVO process, the account will not be active and your child or children will not be able to engage with Moxie. For each additional child profile added to the Moxie Robot App after initial setup, the child’s first and last name and birthdate will also need to be provided.

    PRIVO is a leading privacy solutions expert as well as an FTC-approved COPPA Safe Harbor with an identity and consent management platform. All information collected for verification is stored securely and not used for any other purpose. For more information on PRIVO please see here: https://www.privo.com/platform-privacy-policy. Please note: the information PRIVO uses to conduct the parental verification process is not shared with Embodied.

    The Moxie Robot App allows parents to set focus on developmental goals for their child or children, including cognitive, social, and emotional developmental goals, and to track their child’s or children’s progress with Moxie. This Moxie Robot App account data is securely stored separately from other data.

    We describe below when the Moxie Robot App and Moxie collect data and what data is collected.

    A. When Does The Moxie Robot App And Moxie Collect Data?

    We collect information from you in the following circumstances: 1) when you share it voluntarily; and 2) when we collect it automatically via Moxie’s microphones, sensors and/or cameras.

    The Moxie Robot App and Moxie do not utilize cookies or similar technologies to automatically collect data, but data is automatically collected through the microphones, sensors, and/or cameras.

    The Moxie Robot App collects personal information from you when you establish your account. The personal information collected is detailed below in the section entitled “What Information Does the Moxie Robot App Collect and Why Does the Moxie Robot App Collect It”

    Below is an overview of the data Moxie collects while in different operational states:

    • Powering on (when manually turning Moxie on using the power switch on its base): When Moxie is turned on using the power switch on its base, it will take some time for Moxie to start up and get ready. Several loading icons will appear on the screen, and then Moxie will enter Dream Bubbles mode where Moxie’s screen is purple showing, Moxie’s eyes are closed, and dream bubbles are moving across Moxie’s screen. 
    • Dream Bubbles mode (screen is purple showing Moxie’s eyes closed, and dream bubbles are moving across Moxie’s screen): When Moxie is in Dream Bubbles mode, Moxie uses internal offline speech recognition to analyze the Audio Data to look for wakeup commands (e.g. “Hello Moxie” or “Moxie, Please Wake Up”). If the internal speech recognition system detects a potential wakeup command but with low confidence, the detected wakeup command speech is transmitted in encrypted form to Google’s Automatic Speech Recognition (ASR) server for additional analysis and confirmation that a wakeup command was used. The Audio Data is not stored. Moxie will not collect and use Video Data during Dream Bubbles mode. When Moxie hears the commands “Hello Moxie” or “Moxie, Please Wake Up”, its eyes will open and it will then be in operational mode.
    • Operational mode (Moxie’s eyes are open): In operational mode, Moxie collects Audio Data and Video Data utilizing its camera, microphones, and sensors. Moxie is equipped with mechanisms for parents and children to know when it is on. In operational mode, if the LED bar is blue, Moxie is listening for input. If the LED bar is pulsing blue, Moxie is processing the input it received. If the LED bar is pulsing pink, Moxie is speaking. The data collection practices during operational mode are discussed below in the Section entitled “What Data Does Moxie Collect and Why Does Moxie Collect It.” After a child finishes interacting with Moxie and says “Moxie, Please Go to Sleep”, Moxie will go into standby mode. 
    • Standby mode (Moxie’s LED bar is lavender but the screen is off): In standby mode, the LED bar will be lavender, but the screen will be off. 
      • If Touch Wake is enabled by the user in the Moxie Robot App, touching Moxie’s tummy and/or back while in standby mode will immediately wake Moxie up into operational mode and audio and video collection will activate as outlined in the Operational mode section above.
      • If Touch Wake is disabled in the Moxie Robot App (which is the default setting), Moxie will come out of standby mode based on the Audio Wake Sensitivity settings in the Moxie Robot App:
        • If Audio Wake Sensitivity is disabled by the user in the Moxie Robot App, Moxie will not be listening for audio input while in standby mode, and Moxie will only transition to Dream Bubbles mode by touching Moxie’s chest or back or picking Moxie up.
        • If Audio Wake Sensitivity is enabled and set to Low by the user in the Moxie Robot App, Moxie will be listening for Voice Activity Signals (detecting whether a sound signal contains speech) to determine when to transition into Dream Bubbles mode, and will transition to Dream Bubbles mode if someone is speaking loudly within an approximate 40 degree cone in front of Moxie. Voice Activity Signals from the microphones in standby mode are neither recorded nor transmitted to the Google ASR services, and the collected Audio Data is not stored.
        • If Audio Wake Sensitivity is enabled and set to High by the user in the Moxie Robot App, Moxie will be listening for Voice Activity Signals to determine when to transition into Dream Bubbles mode, and will transition to Dream Bubbles mode if someone is speaking at any volume within an approximate 90 degree cone in front of Moxie. Voice activity signals from the microphones in standby mode are neither recorded nor transmitted to the Google ASR services, and the collected Audio Data is not stored.
    • Powered off (the switch under Moxie’s base is switched to the Off position): Moxie does not collect any data while powered off. 
    B. What Information Does the Moxie Robot App Collect and Why Does the Moxie Robot App Collect It

    Moxie is designed to put parents in control of your child’s experience and use. No child can begin interacting with Moxie until a parent has provided verifiable parental consent for their child or children to use Moxie. The Moxie Robot App collects information from you to serve your needs, communicate with you, manage our content, allow you to track your child’s progress in meeting developmental goals you set, and improve Embodied Services and products. The Moxie Robot App may collect the following information from you:


    Login information for accessing your account

    Personal contact information to allow Embodied to contact you, including your name and email address.

    Child’s first and last name, preferred name, and birthdate for each child profile added or registered.

    Child developmental goal information that you choose to input to the Moxie Robot App.  User’s (child’s) topics of interest, nickname or preferred name, user’s activity preferences, user’s learning focus, and user’s interaction style and accessibility (if verifiable parental consent has been obtained for the child).  

    Event information such as birthdays of family members or appointments.

    Embodied also collects information about the device you’re using to access the Moxie Robot App, like your device ID and IP address. We also collect anonymized information about page views in the Moxie Robot App and about pages in the Moxie Robot App that malfunction or crash. This information helps us analyze usage and update and improve our services.

    The Moxie Robot App does not utilize cookies. The online app stores from where the Moxie Robot App may be downloaded may collect the number of times the Moxie Robot App is downloaded and application usage.

    The cloud server utilizes Google Firebase to generate Moxie Robot App usage analytics for Embodied regarding the parent’s use of the parent app, including minutes the Moxie Robot App is being utilized, which menu screens parents utilize and/or other Moxie Robot App usage statistics. The Moxie Robot App usage analytics are aggregated for all parents utilizing the Moxie Robot App. The Moxie Robot App usage analytics are encrypted and stored in the cloud server. You can read more about how Google uses your personal information here: https://policies.google.com/privacy

    The cloud server utilizes Crashlytics to store an anonymized number of page views and page crashes or malfunctions in the Moxie Robot App and to report on that data to Embodied.

    The Moxie Robot App may receive or collect an identity verification indicator from PRIVO to verify your identity and that you are a parent or guardian. We do not collect or receive any of the information you provide to PRIVO to verify your identity.

    We may also collect authentication information (for example, to verify that you are an authorized purchaser) from our eCommerce vendor, Shopify to confirm your purchase.

    Using the Moxie Robot App, parents may access their child’s or children’s personal information, update their or their child’s or children’s personal information, or change and update goals for their child or children. Please note this may be done differently for each child. Parents may activate or deactivate notifications received from Moxie regarding Moxie’s status or new missions available for your child or children. The Moxie Robot App may receive the following information from Moxie about your child or children once an account is established and Moxie is paired with the Moxie Robot App: Activity Data (such as books read, calculated reading comprehension, calculated vocabulary level, amount of time spent interacting or reading, badges or trophies received, activity patterns) and Insight Data (data generated through the AI engine that provides insights on your child’s developmental progress). This data is encrypted and stored on Moxie as well as the cloud server and may be accessed by the Moxie Robot App.  The Activity Data and the Insight Data may be different for each child who is registered with the Moxie Robot App. 

    Parents will need a recovery key to recover data in case Moxie is replaced and the data needs to be reloaded.

    The recovery key is stored in the device running the Moxie Robot App (e.g., the device’s flash drive or hard drive). Information on how to save the recovery key is provided in the Moxie Robot App when the recovery key is assigned. When Moxie is paired with the Moxie Robot App, an Analytics User ID (AUID) is automatically assigned by the robot and is the vehicle by which the Moxie Robot App is able to retrieve information about the child’s progress with Moxie. If additional child profiles are added to the Moxie Robot App, each new child will be automatically assigned their own unique Analytics User ID (AUID). The AUID or AUIDs are not known to Embodied. Moxie shares the AUID with the parent app for each registered child through a channel encrypted with the recovery key (also not accessible by Embodied) when paired with the Moxie Robot App to allow Moxie to interact with your child or children in a way that is not identifiable to Embodied. That is why a parent must either be using the Moxie Robot App or have the recovery key to request access to or deletion of each child’s personal information; without it, Embodied is unable to identify which data, such as Audio Transcript Data, Primary User Images, and Facial Expression Datapoints, relates to a specific individual or Moxie. Within the Moxie Robot App we have added a feature that allows the parent to click on a button to share the AUID so Embodied can assist in troubleshooting. Please see Recovering Data and Troubleshooting.

    Please note: if you change devices or email accounts, you must have the recovery key to access prior data.

    A parent may also revoke consent in the Moxie Robot App to allow Embodied to collect their child’s or children’s data through Moxie but this will render Moxie inoperable. If a parent revokes consent in the App, the consent revocation will apply to all child users under the parent’s Moxie Robot App account. 

    A parent may deactivate the parent account in the Moxie Robot App. When you delete or deactivate the parent account, you and your child’s or children’s personal information is deleted. The aggregated, anonymized data collected when Moxie is operational is not deleted.


    C. What Information Does Moxie Collect and Why Does Moxie Collect It

    Moxie may collect the following information from your child or children when interacting with the robot.

    Data will be automatically recorded by Moxie in the form of video files and audio files and is linked to the AUID. Anyone in range of the video or audio recording capabilities of Moxie may be recorded, including the child interacting with Moxie, members of your family or others in the home at the time the robot is recording.

    Audio Data and Audio Transcript Data - The recorded Audio Data is encrypted and sent to our cloud service provider, Google Cloud speech-To-Text (STT), who automatically transcribes the audio files to create audio transcription files and deletes the audio recording after creating the audio transcription file. This file is the Audio Transcript Data. The Audio Transcript Data is securely transmitted to Moxie and used to interact with the user, and then transmitted through Moxie to a separate cloud storage area. In certain circumstances, e.g., like when specific questions are asked to Moxie about subjects not able to be handled by the natural language processing on the Embodied Cloud Servers, some audio transcript data may be communicated to our third-party cloud natural language processing (NLP) provider, OpenAI.  The third-party NLP provider may provide responsive Transcript Data that is utilized (after filtering by Embodied) to respond to the child.  The audio transcript data communicated to our third-party NLP provider does not include the AUID so the third-party NLP provider cannot link the received Audio Transcript Data to any particular user.  The third-party NLP provider does not store the received Audio Transcript Data. Our cloud storage service provider does not have access to the Audio Transcript Data; only Embodied has access. The Audio Transcript Data are used by Embodied to understand the content of the recorded Audio Data, respond to the child, and improve the AI. The Audio Transcript Data will remain on a secure and encrypted server after data collection has been completed. The Audio Transcript Data may be stored for 18 months. Embodied has access to the Audio Transcript Data, but cannot link them to any particular user, account or device. Parents must either be using the Moxie Robot App with access to the AUID or have the Recovery Key to access or delete the Audio Transcript Data associated with their child; the Audio Data is deleted when the transcripts are made.  The Audio Transcription Data generation process described above applies to each child registered to interact with Moxie. 

    Video Data- The recorded Video Data will be automatically processed locally on the Moxie device to create facial expression datapoints. The recorded Video Data does not leave Moxie, is utilized to create the Facial Expression Datapoints, and is deleted after the Facial Expression Datapoints have been created. The recorded Video Data is not transmitted from Moxie.  This is true for the recorded Video Data of each registered child user.   

    Facial Expression Datapoints - The Facial Expression Datapoints allow Embodied to determine facial expressions of the child and/or analyze the emotion of the child in order to enhance the interaction between Moxie and child. The Facial Expression Data points will be transmitted to the cloud storage service provider and are encrypted during transmission and storage. The Facial Expression Datapoints are only accessible to Embodied and are not accessible by the cloud service provider. The Facial Expression Datapoints may be stored for 18 months. Embodied has access to the information, but cannot link it to any particular user, account or device. Parents must either be using the Moxie Robot App or have the Recovery Key to view or access data associated with their child.  The Facial Expression Datapoints generation process described above applies to each registered child user. 

    Primary User Images - The camera on Moxie will initially capture images of the primary user (your child) during their interaction with Moxie. If a parent adds an additional child user profile in the Moxie Robot App and switches to have that child be the active user with Moxie, that child will become the primary user while their profile is actively paired to Moxie. Each child user added in the app will have their own personal journey with Moxie, and will therefore be considered the primary user whenever their profile is actively paired to Moxie in the Moxie Robot App.

    Moxie will generate Primary User Image Datapoints from the Primary User Image(s) for each of the registered children.  The Primary User Image is then deleted from Moxie.  The Primary User Image Datapoints are utilized by Moxie to verify that Moxie is speaking to the primary user during conversation interactions, and to respond appropriately to the primary user. Please note: During interaction with Moxie, images of other individuals may be captured if they are within the field of view of the camera. Moxie may process these images to determine if this individual is the Primary User, and may ask “who are you,” or “are you my mentor” to confirm. 

    If another user asks Moxie to remember them, that user’s image will be captured.  Moxie will create the other user’s image datapoints and discard the other user’s image.  Audio transcripts will be generated from any conversation the other user has with Moxie.  The other user’s image datapoints and audio transcripts will be stored in the primary user’s account because Moxie is setup for the primary user.  

    The Primary User Image Datapoints will be encrypted and securely transmitted to the cloud storage service provider. Embodied has access to the Primary User Image Datapoints, but cannot link it to any particular user, account or device. Parents must have the Recovery Key to view or access data associated with their child or children. Moxie may communicate with the other individuals, but is designed to call only the primary child user by name. This comparison is performed within Moxie and there is no communication with the cloud storage service provider. Primary User Datapoints are deleted if an account is inactive for 36 months. 

    Parents must either be using the Moxie Robot App or have the Recovery Key to view or access data associated with their child or children. Embodied does not have access to the information as it is encrypted using the Recovery Key, but Embodied can link it to the user or device and can therefore delete Primary User Image Datapoints if requested by a parent.

    Activity Data - Moxie collects certain Activity Data, such as how long children are using Moxie, if children read a book with the robot, how many missions the children have completed with Moxie, badges and trophies earned, and other information to help parent’s track a child’s general activities and progress. The Activity Data is generally summary information about the child’s activities. Data on children’s interactions with Moxie and activities and progress are encrypted and stored with the cloud service provider, but in a separate database from the Audio Transcript Data, Facial Expression Datapoints, Moxie Interaction Data, Insight Data, and other personal information. The Activity Data on a particular child’s interactions and progress is accessible through the Moxie Robot App or with the recovery key and linked to the robot ID accessibly by Embodied.  Each registered child will have their own separate Activity Data. 

    Moxie Interaction Data - Moxie Interaction Data is data associated with the child’s interactions with Moxie, such as the Audio Transcript Data (collected through Moxie’s microphones), Facial Expression Datapoints (collected through Moxie’s camera), whether and where other objects or persons may be located in a room (collected through Moxie’s camera), responses communicated to Moxie, and/or what Moxie facial animations are utilized. In addition, touch sensors are utilized to determine if a child is touching or hugging Moxie. The Moxie Interaction Data is collected and processed on Moxie and is utilized to enhance the child’s interaction with Moxie and is associated with the AUID. The Moxie Interaction Data is then encrypted and transmitted to the cloud service provider and stored in the same account as the anonymized Insight Data, Audio Transcript Data, and Facial Expression Datapoints. The Moxie Interaction Data is stored for three months with precise timestamps, and for eighteen months with relative timestamps. Parents can request to access or delete Moxie Interaction Data using the Moxie Robot App or with the recovery key. Each registered child will have their own separate Moxie Interaction Data.  

    Insight Data – Insight Data is data derived from the Embodied proprietary AI engine that analyzes how the child is doing in achieving missions and goals and progress towards achieving those goals, such as improvements in language skills, how long the child was engaged with the robot, number of words read per minute. Insight Data is just that: it is data derived from the Moxie Interaction Data, Facial Expression Datapoints, Audio Transcript Data and other data to provide an analytical assessment of the child’s or children’s progress. Activity Data and Insight Data are available to parents while using the Moxie Robot App or with the recovery key.  Each registered child will have their own separate Insight Data.    

    Moxie Sensor and Telemetry Data – Embodied collects computer sensor and telemetry data from Moxie to troubleshoot problems and improve hardware and software operations. This data is associated with the robot ID but stored separately from other data for three months.

    Moxie utilizes the user’s preference nickname or preferred name to enhance verbal communications with the user.  Moxie may generate prompts including a user’s nickname or preferred name in order for Moxie’s conversation response to include the user’s nickname or preferred name.  The generated prompt may be sent to Embodied’s cloud servers or to a third-party cloud NLP provider (e.g., OpenAI), which generate Moxie’s conversation response.  Moxie’s generated prompt does not include the child’s AUID.  Moxie’s prompt and the Moxie’s conversation response are not stored in the Embodied servers or third-party servers.  The use of the nickname or preferred name will increase the personalization of the user’s communication with Moxie.     

    The user’s preference parameters may also be utilized to assist in setting up a recommended activity schedule for the user.  In these cases, an activity scheduler module may utilize the user’s preference parameters to generate a user schedule request prompt and may communicate the user schedule request prompt to Embodied’s cloud servers and/or third-party NLP cloud servers (e.g., OpenAI).  A recommender module may receive a recommended activity or mission list in response from the Embodied cloud servers and/or third-party NLP cloud servers.  The user schedule request prompt does not include the user or child’s AUID.  The user schedule request prompt and the recommended activity or mission list will not be stored on the Embodied cloud servers and/or third-party NLP cloud servers.  The utilization of the preference parameters by the activity scheduler module is designed to recommend activities and missions that are in line with what the user may like to engage in with Moxie.  This is designed to increase engagement time and focus during the user’s interaction with Moxie. 


    D. Recovering Data and Troubleshooting

    Moxie is a complex product that has been designed with privacy and security in mind. Embodied needs access to certain information to provide services, allow children to interact with Moxie, help children engage in activities and work towards achieving goals, and deploy the AI to provide insights to the parent. Embodied has built the Moxie Robot App to allow parents to see their child’s activities and progress. Embodied’s data management procedures are designed to restrict Embodied’s access to most data associated with an identifiable child, but we also want to assist parents in troubleshooting issues or answering questions. That is why we have created a process that allows a parent elect to share the AUID(s) with customer service.

    As a reminder, the AUID is an encrypted ID created on Moxie and sent during initial pairing with Moxie and the Moxie Robot App. If additional child profiles are added to the Moxie Robot App, each new child will be automatically assigned their own unique Analytics User ID (AUID). The AUIDs are linked to the recovery key, but both are unknown to Embodied. Embodied will never ask a parent for the recovery key or analytical user ID, but if a customer reports a problem, Embodied will ask the customer for permission to “add a share my AUID” button on the help page of the Moxie Robot App. Having a mechanism to allow Embodied to access the AUID(s) in the Moxie Robot App allows Embodied to work with the parent to troubleshoot problems, or respond to requests to access or delete information. When the customer receives the “share my AUID” button, and affirmatively clicks on the button, Embodied personnel can access the Moxie Interaction Data, Facial Expression Datapoints, Audio Transcript Data, and Insight Data associated with all AUIDs under the customer’s Moxie Robot app account to assist the customer with the request. Access is limited to the help session and this data is otherwise not visible to Embodied in a way that is linked to a particular child.


    E. The Moxie Robot App and Moxie Share Information with The Following Third Parties

    The Moxie Robot App utilizes Privacy Vaults Online (“PRIVO”) to verify your identity and also to confirm that you have provided verifiable parental consent pursuant to COPPA. To do that you must share certain information with PRIVO. You may learn more about PRIVO’s privacy policy at https://www.privo.com/privo-privacy-policy. Embodied does not receive the information you provided to PRIVO for identity verification but is notified that you have provided verifiable parental consent.

    Moxie shares voice data with Google to 1) perform speech recognition of your child’s voice and 2) as our cloud-based storage provider. You can read more about how Google uses your personal information here: https://policies.google.com/privacy.

    Embodied shares some Audio Transcript Data with our third-party natural language processor (NLP), OpenAI.  You can read more about how OpenAI uses your personal information here: https://openai.com/privacy/

    The Moxie Robot App and Moxie do not allow links to social networks.

    The Moxie Robot App and Moxie do not share personal information with third parties for marketing purposes.

    Finally, we may share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to otherwise protect our rights, the rights of parents and children using Moxie or other third parties.

    F. Mobile App Stores

    You may be required to register with and/or log onto a third-party mobile app store before you can download the Embodied Moxie Robot App. When downloading the Moxie Robot App, the app store provider may also collect certain device and app-related information. Embodied does not control the privacy policies or requirements of the app stores. Therefore, you should review the terms of use and privacy policies of the app stores before downloading and then using the Moxie Robot App and check your device settings for control options.


    G. Retention Timeframes

    Below is a chart with Embodied’s Data Retention Timeframes for the Different Categories of Data Collected by Moxie.  

    Type of Data

    Retention Period

    Raw Audio Data 

    Deleted After Speech-to-Text Conversion

    Raw Video Data

    Deleted after the Facial Expression Datapoints have been created.

    Audio Transcript Data

    Stored for 18 months

    Facial Expression Datapoints

    Stored for 18 months

    Primary User Image Datapoints

    Stored for life of account unless account is inactive for 36 months

    Activity Data

    Activity Data is stored for 36 months

    Moxie Interaction Data

    Stored for 3 months with precise timestamps, and for 18 months with relative timestamps.

    Insight Data

    Stored for 36 months

    Moxie Sensor and Telemetry Data

    Stored for 3 months

     

    H. Library Program

     

    1. The individual who borrows Moxie from the Library (“Library”) will be referred to as the Borrower.  The Borrower will be required to provide verifiable parental consent via PRIVO.  The remaining sections of Embodied’s Privacy Policy also applies to the Borrower’s use of Moxie.  The additional privacy practices for Borrowers are identified immediately in this Section 3G.
    2. When the Borrower returns Moxie to the Library, the Borrower should unpair Moxie.  The steps for unpairing Moxie are provided to Borrower in a handout provided by the Library when Moxie is borrowed.  Please refer to this handout.  Briefly, the procedure is to: 1) While connected to WiFi at home, turn Moxie on via the power switch; 2) Open the Moxie Robot app and select the Moxie tab; 3) Scroll to the bottom of the Moxie tab and select the Unpair button; 4) In the app pop-up, confirm you would like to unpair with the restore factory settings option; 5) Verify the unpairing has completed by viewing the QR code on the display of Moxie; and 6) Turn Moxie off.  
    3. Embodied will retain the Borrower’s Primary User Image Datapoints, Activity Data, and Insight Data for a period of 18 months in case the Borrower borrows the unit from the Library at another time in the future and/or purchases a new Moxie.  Embodied will retain the Borrower’s Moxie Sensor and Telemetry Data and Moxie Interaction Data for three months.  Embodied will also keep the Borrower’s account active.  The Borrower can then utilize the Recovery Key to access their account and restore the above-identified data to the newly borrowed Moxie or the newly purchased Moxie.  
    4. Please note that because the Borrower has unpaired Moxie, there is no chance a New Borrower will ever be able to access, even accidentally, the prior Borrower’s personal data.  Embodied will also be verifying with the Library that the Moxie has been successfully unpaired in order to provide additional protection. 
  7. WHAT INFORMATION DO WE COLLECT WHEN A PARENT PURCHASES MOXIE?

  8. Parents may purchase Moxie by visiting our eCommerce Site. We work with a third-party eCommerce vendor, Shopify, to handle transactions. We do not receive or process your credit card details.

    A. What Information Do We Collect at Our eCommerce Site?

    The eCommerce Site collects login information, personal contact information, and shipping information.

    Our eCommerce Site partner collects contact information, billing information, shipping information. We obtain billing address, payment method and other information, but do not receive credit card information from our eCommerce Site partner.

    1. Cookies and Technology – The eCommerce Site utilizes the following cookies.

    Operationally Necessary Cookies – We may use technologies that are necessary to the operation of our eCommerce Site. This includes technologies that allow you to access our eCommerce Site; that are required to identify irregular site behavior, prevent fraudulent activity and improve security; or that allow you to make use of functions such as shopping carts, saved search or similar functions.

    Performance Related Cookies – We may use technologies to assess the performance of our e-commerce Site, including as part of our analytic practice to help us understand how our visitors use our eCommerce Site, determine if you have interacted with our messaging, determine whether you have viewed an item or link, or to improve our website content, applications, services or tools.

    Functional Cookies – We may use Technologies that allow us to offer you enhanced functionality when accessing or using eCommerce Site. This may include identifying you when you sign into our eCommerce Site or keeping track of your specified preferences, interests or past items viewed so that we may enhance the presentation of content on our eCommerce Site.

    Advertising or Targeting Cookies - We may use first-party or third-party cookies and web beacons to deliver content, including ads relevant to your interests, on our eCommerce Site or on third party sites. This includes using technologies to understand the usefulness to you of the advertisements and content that has been delivered to you, such as whether you have clicked on an advertisement or searched for our products, services or company.

    B. When Do We Collect Information at Our eCommerce Site?

    We collect information from you at our eCommerce Site in the following circumstances: 1) when you share it voluntarily; 2) to fulfill a transaction; and 3) automatically utilizing Cookies or similar technology.

    When a customer places an order for Moxie, you can share personal contact information, login information, billing information and shipping information about you when you purchase Moxie or register for your account. We may also collect authentication information (for example, to verify that you are an authorized purchaser) from our eCommerce vendor, Shopify, but never get your credit card details.

    When a customer places an order for Moxie, we collect order information associated with the transaction. Customers may register for an account on the eCommerce site when they place an order for Moxie and will enter user id / password information (“login information”). When registered customers place future orders for robots / accessories, they can identify themselves with this login information.


    When you visit our eCommerce Site, we automatically collect information utilizing cookies or other tracking technologies, including device information, IP address, and web site pages visited, to allow you to access or interact with the e-Commerce Site, when you use or visit them.

    When you visit our eCommerce Site, you may be offered the opportunity to sign up for SMS updates at your mobile telephone number by providing Embodied with your mobile telephone number (“SMS Program”). By providing Embodied with your mobile telephone number, you are authorizing Embodied to contact you via SMS updates at your mobile telephone number. Your mobile telephone number will be utilized to allow Embodied to provide you news updates and alerts on pre-order availability. You will also be able to opt-out of SMS updates. Embodied respects your privacy and will only use the mobile telephone number to transmit your messages, and respond to you if necessary. This includes, but is not limited to, sharing information with our platform provider and phone companies who assist us in the delivery of SMS messages.

    We will not sell, rent, loan, trade, lease or transfer for profit any phone number collected through this SMS Program to any third party. Embodied does reserve the right to disclose the information to satisfy any law, regulation or government request, to avoid liability, or to protect our rights or property. When you supply Embodied with your mobile telephone number, you agree not to use a false or misleading name or a name that you are not authorized to use. If Embodied believes, in our sole discretion, that any such information is untrue, inaccurate, or incomplete, or you have opted into the SMS Program under false pretenses or for an ulterior purpose, Embodied may refuse you access to this SMS Program and pursue appropriate legal remedies. If you area resident of California, California Civil Code Section 1798.83 permits users for this program to request information regarding our disclosure of this information. To make such a request, please contact us at the following address or email: Embodied, Inc., 385 E. Colorado Blvd., Suite 110, Pasadena, CA 91101or support@embodied.com

    C. Why Do We Collect Information at Our eCommerce Site?

    We collect information from you to serve your needs and fulfill your request and to operate efficiently. We collect information to fulfill and complete a transaction, to confirm your order and to provide you with updates about your order or pre-order.

    We collect information to understand our visitors to the eCommerce Site.

    D. What Personal Information is Shared at Our eCommerce Site?

    We share your personal information with third-party partners who help us to provide the eCommerce Site, who manage your purchase transactions and process and fulfill your orders and requests. We do not receive, process or store your credit card information. Embodied utilizes Shopify to power our online store and receive your billing information. You can read more about how Shopify uses your Personal information here: https://www.shopify.com/legal/privacy.

    Embodied utilizes Loop Subscriptions to process our recurring payments and Loop Subscriptions receive your billing information.  You can read more about how Loop Subscriptions uses your Personal Information at https://www.loopwork.co/legal/privacy.

    We share your personal information with third-party partners to better understand our visitors to the eCommerce Site.

    The eCommerce Site may use Google Analytics to collect information regarding visitor behavior and visitor demographics on our eCommerce Site and to develop website content. For more information about Google Analytics privacy practices, please visit www.google.com/policies/privacy/partners.

    The eCommerce Site may use Google Fonts to source fonts to be utilized on the eCommerce Site. Google Fonts may share an IP address with Google.  For more information about Google Fonts privacy practices, please visit www.google.com/policies/privacy/partners.

    Embodied may partner with third-party advertising networks to either display advertising on the eCommerce Site or to manage our advertising on other websites. We may and/or our advertising network partners may use cookies and web beacons to collect personal information about your activities on our eCommerce Site to provide you targeted advertising based upon your interests. These partners may be Google Remarketing, Bing Remarketing, TikTok Pixel, Tatari Pixel, NorthBeam Pixel, and/or Facebook Pixel. For information about Google’s privacy practices, please visit www.google.com/policies/privacy/partners. For information about Bing Remarketing’s privacy practices, please visit https://privacy.microsoft.com/en-us. For information about Facebook’s privacy practices, please visit https://www.facebook.com/about/privacy. For information about TikTok's privacy practices, please visit www.tiktok.com/legal/privacy-policy-us. For more information about Tatari's privacy policy, please visit https://www.tatari.tv/privacy-policy. For more information about NorthBeam’s privacy policy, please visit https://www.northbeam.io/privacy-policy.  Please refer to Google, Bing’s TikTok's, and Facebook’s privacy policies to determine how to opt-out of their respective collection or processing of data.

    Social Media Widgets – The eCommerce Site may include social media widgets, such as links to Facebook, Instagram, Twitter, TikTok, YouTube and LinkedIn (the widgets include share buttons, interactive mini-programs). The widgets may collect your IP address, the page you are visiting on the eCommerce Site and may establish a cookie to enable the widget to function properly. This data may be transferred to the third-party social media platform, but any subsequent use of your personal information by the third-party social media platform is governed by the social media platform. Embodied is not responsible for any personal information about you that is collected and stored by third parties.

    If you consent to Embodied being able to contact you via SMS updates at your mobile telephone number, our service provider may utilize your mobile number to contact you to provide you news updates and alerts on preorder.

    E. Choices and Controls of Personal Information on eCommerce Site

    The parent or guardian may change their account information including name, contact information, billing information, shipping information and/or payment information.

    If you consent to Embodied being able to contact you via SMS updates at your mobile telephone number, our service provider may utilize your mobile number to contact you to provide you news updates and alerts on preorder.

    F. Purchasing Moxie on Amazon’s Embodied Website - What Information Does Embodied Receive If Moxie Purchased Via Amazon

    Embodied will be selling MOXIE on Amazon (via a site on Amazon for Embodied – https://www.amazon.com/dp/B0C1M76VR9?ref=myi_title_dp) (“Amazon’s Embodied Site”).  On Amazon’s Embodied Site, Amazon collects your Amazon.com login information, personal contact information, and shipping information.  More specifically, Amazon collects contact information, billing information, and shipping information. Amazon only provides Embodied with your shipping information, the product(s) purchased and your name. 

    For more details on when and why Amazon collects information at Amazon’s Embodied Site, please refer to Amazon’s privacy policy at https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ

    Embodied collects your shipping information, the products you purchased and your name to know where and to whom MOXIE is being delivered. 

    For more information as to what Personal Information is Shared at Amazon’s Embodied Site, please refer to Amazon’s privacy policy at https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ

    For more information on your choices and controls of Personal Information on Amazon’s Embodied Site, please refer to Amazon’s privacy policy at https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ


  9. WHAT INFORMATION DO WE COLLECT AT G.R.L. SITE

  10. The G.R.L. Site allows your child to engage in activities, play self-contained games and to learn about the history and backstory of Moxie.

    A. Personal Information the G.R.L. Site Collects

    You do not need to own a Moxie to visit the G.R.L. Site to explore characters, games and activities. If you do not own a Moxie and your child visits the G.R.L. Site, the G.R.L. Site will not collect personal information about your child.

    If you own a Moxie and visit the G.R.L. Site, the G.R.L. Site utilizes a persistent authentication cookie to connect the G.R.L. Site your child uses with the Moxie robot your child interacts with and to track who has logged onto your account. The information collected includes the IP address, the mobile device ID and operating system. The persistent authentication cookie allows your child to not have to go through the connection process repeatedly.

    Embodied utilizes Google Analytics to collect aggregated and anonymized information about activity on the G.R.L. Site. For example, the information collected may be that ten users have visited page A and ten users have visited page B on a certain day. However, no information is collected regarding who the users are. This information is only utilized by Embodied personnel.

    B. When Does the G.R.L. Site Collect Personal Information

    At the G.R.L. Site, the persistent authentication cookie collects information when a Moxie owner logs into or enters the G.R.L. Site to support the activities and enable reports to parents.

    Google Analytics is utilized as users visit the G.R.L. Site.

    C. Why Does the G.R.L. Site Collect Information

    The G.R.L. Site utilizes a first-party authentication cookie to allow for easier login.

    Google Analytics is utilized to improve the performance and design of the G.R.L. Site.


  11. CERTIFICATIONS

  12. Moxie is fully COPPA (Children’s Online Privacy Protection Act) Safe Harbor certified by PRIVO.


  13. CONTACT US WITH YOUR QUESTIONS

If you have any questions, please don’t hesitate to contact us!

Embodied, Inc.
Attn: Privacy
385 E. Colorado Blvd., Suite 110
Pasadena, CA 91101
privacy@embodied.com

For Frequently Asked Questions about Artificial Intelligence and Moxie, you can view our FAQ here