User Privacy Policy for theMultiplicity.ai

Effective Date: Jul 29, 2025

Last Modified: August 14, 2025 (the "Modification Date")

This privacy policy is located at https://themultiplicity.ai/policies/privacy.

Multiplicity AI ("Multiplicity", "we", "us") — also known as theMultiplicity.ai, theMultiplicity, theMulti.ai, theMulti, and Multiplicity — a service of Encultured AI, PBC ("Encultured"), is a Public Benefit Corporation. You may recognize us via the following logos:

Data privacy is a core value of our business model. This Privacy Policy and our Terms of Use (https://themultiplicity.ai/policies/terms) apply to our handling of "Personal Information" received from users of Multiplicity ("Multiplicity"), via Multiplicity's primary domain https://themultiplicity.ai/ and subdomains, and via other correspondence with users in reference to the service. Terms not otherwise defined in this Privacy Policy are defined in our Terms of Use.

Notice At Collection

We collect several types of information from and about Multiplicity users.

Information We Collect About You

The categories of Personal Information we may collect from you are and have collected in the past 12 months from the Modification Date are:

1. Identifiers, such as your name, postal address, e-mail address, signature, telephone number, and other similar identifiers.
2. Protected Classification Characteristics, such as your age, race, color, ancestry, national origin, citizenship, religion, creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, reproductive health decision-making, military and veteran status, or genetic information.
3. Commercial Information, such as your consumer history or tendencies.
4. Biometric and health information, such sleep, health, exercise data, insurance policy numbers, medical information, and health insurance information, which could identify you.
5. Internet or other electronic network activity, such as browsing or search history or your interaction with a website, application, or advertisement.
6. Geolocation data, such as your physical location or movements.
7. Professional or employment related information, such as your current or past job history or performance evaluations.
8. Inferences drawn from other Personal Information, such as your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitude.
9. Sensitive Personal Information, such as your genetic data, information about your health, sex life, sexual orientation, information contained in medical records that you upload or have disclosed to Multiplicity, and the communications between you and Multiplicity’s artificial intelligence tools.

Statement on Selling or Sharing Personal Information

Encultured does not Sell or Share your Personal Information, as defined in our Terms of Use.

Statement on Sensitive Personal Information

Multiplicity and Encultured do not use or disclose Sensitive Personal Information for purposes other than the following:

1. To perform the services you expect from Multiplicity. For example, Multiplicity’s artificial intelligence tool uses information you provide in order to research the answers to questions you ask.
2. To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information.
3. To resist malicious, deceptive, fraudulent, or illegal actions directed at Multiplicity or Encultured and to prosecute those responsible for those actions.
4. To ensure the physical safety of natural persons.
5. For short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with Multiplicity and other Encultured products, provided that the Personal Information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside your current interaction with Multiplicity and Encultured.
6. To perform services on behalf of Multiplicity and Encultured.
7. To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by us. 
8. To collect or process Sensitive Personal Information where the collection or processing is not for the purpose of inferring characteristics about you.

Sources of Collection

We collect your Personal Information from:

1. You. As a Multiplicity user, you may choose to provide us with personal information of any kind related to your experience with using our services. We may also automatically collect information from you, such as through the use of cookies (as detailed below).
2. Other Encultured services, such as NotADoctor.AI or BayesMed.com.
3. Third Parties. We also connect with and use third-party services such as subprocessors, like Google, large language models, to collect information pertinent to your health and our services to you.

Purpose

Our purposes for collecting or disclosing your Personal Information are:

1. To assist you in achieving your goals in interacting with artificial intelligence,
2. To inform you of updates about our services, and
3. To send you marketing emails, as described below.

This includes learning generalizable insights from your Personal Information that enable us to better serve these purposes.

Disclosure

We disclose your Personal Information:

1. To our vendors and service providers: We disclose Personal Information to companies that provide services to us, such as providers that host or operate our websites or apps, analyze data, or provide customer service, data storage, marketing, analytics, security, or fraud prevention. As an example, if we make a Google spreadsheet with your Personal Information in it, we are thereby providing your Personal Information to Google.
2. To affiliates: We may disclose your Personal Information to current or future parents, subsidiaries, affiliates, and other companies under common control or ownership with Multiplicity or Encultured.
3. In connection with legal matters: We may disclose your Personal Information when we believe disclosure is appropriate due to a subpoena or similar investigative demand, a court order, or other request from a law enforcement or government agency; or as otherwise required by law.
4. For the protection of Multiplicity, Encultured and others: We may disclose your Personal Information when we believe disclosure is appropriate in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of our company, our employees, our users, our organizers, or others; and to enforce our contracts.
5. In connection with corporate transactions: We may disclose your Personal Information as part of, or to take steps in anticipation of, a sale of all or a portion of our business, a divestiture, merger, consolidation, asset sale, bankruptcy, or other significant corporate event. We may use and disclose De-Identified Information, including information aggregated across individuals in a manner achieving de-identification, for any purpose.

Data Retention

We keep your information until after we determine it is no longer necessary for the purposes described in this Privacy Policy and we are not legally required to retain it for longer.

International Data Transfer

Our headquarters, cloud servers, and on-premises hardware are all located in the United States. When we disclose your Personal Information as described above, the recipients could be in the United States or another country. They might be in a location where privacy laws don’t require as much protection as the laws of the country where you live.

We or entities to whom we disclose your Personal Information may become legally required to provide it to the governments, courts or law enforcement or regulatory agencies of any of the countries where we or they operate. However, this Privacy Policy applies to Multiplicity's operations worldwide. We will take appropriate measures to comply with rules relating to transfers of personal data to countries outside the source country. Where appropriate, these measures include signing Standard Contractual Clauses in accordance with EEA and UK data protection laws to govern the transfers of certain data. For more information about these transfer mechanisms, please contact us at contact@themultiplicity.ai with questions.

Children Under 18

Multiplicity websites and services are not intended for use by persons under the age of 18, because we do not wish to collect information from children and are not seeking children as customers. If you are under 18 years of age, you are not authorized to use our websites or services. If you are a parent or legal guardian and think your child under 18 (or a different age threshold where applicable) has given us Personal Information, please contact us at contact@themultiplicity.ai to notify us so that we can delete it.

As Multiplicity platform users are intended to be eighteen (18) years or older and Multiplicity does not Sell or Share Personal Information, Multiplicity does not have actual knowledge that it Sells or Shares the Personal Information of consumers under sixteen (16) years of age.

Rights Regarding Your Information

Depending on your place of residence, you may have certain legal rights regarding your Personal Information. For example, you may have the right to:

• View your Personal Information and see how it is being processed
• Correct or Update your Personal Information
• Delete your Personal Information from our systems
• Transfer your Personal Information to a third party (right to data portability).
• Object to how we process your Personal Data.
• Restrict how we process your Personal Data, or withdraw your consent as to the use of your information (we rely on your consent as the legal basis for processing at any time)
• Lodge a complaint with your local data protection authority.

Themulti.ai allows your exercise some of these rights through your account on our web app. If you are unable to exercise your rights through your account, you may exercise the rights described in this Privacy Policy by either:

1. Emailing your request to us at contact@themultiplicity.ai with a subject line starting with "Privacy Request:", or

2. Mailing your request to us at:

Privacy Requests for Encultured
PO Box 9128
Berkeley, CA 94709

After we receive your request, we will take steps to verify that the request is coming from and authorized by you. We may request e-mail verification or request information from you to verify your identity. In general, we will try to comply with your request, and we will notify you of our decision within forty-five (45) days of receiving your request. In certain circumstances, we can extend that deadline by another forty-five (45) days. We will notify you through your Multiplicity account, or if you do not have one, by mail or e-mail.

An authorized agent can make a request on your behalf, if the agent includes a statement or documentation demonstrating the agent’s ability to act on your behalf.

If you wish to appeal our decision, please email us at contact@themultiplicity.ai with a subject line starting with "Privacy Appeal". We will notify you of our decision within sixty (60) days of receiving your appeal with a written explanation of our decision.

In some circumstances, we may determine that the best way for us to comply with your privacy request(s) will be to delete your account and/or your information from our systems. In that case, we take no responsibility for any inconveniences you face as a result of the deletion.

Marketing Communications

You can unsubscribe from Multiplicity marketing emails by clicking the unsubscribe link in a marketing email or contacting us at contact@themultiplicity.ai with a subject line starting with "Unsubscribe".

Cookies and Other Similar Technologies

You may be able to set your browser to refuse certain types of cookies, or to alert you when certain types of cookies are being used. Some browsers offer similar settings for HTML5 local storage and other technologies too. However, if you block or otherwise reject all cookies, local storage, JavaScript or other technologies, certain websites may not function as expected.

We may use Google Analytics on our websites. You can limit Google’s collection of data through Google Analytics by visiting websites only with a browser on which you have installed the Google Analytics opt-out plugin available at https://tools.google.com/dlpage/gaoptout.

We may also use other third-party advertising and marketing services, such as Facebook, X.com (formerly Twitter), or Instagram.

Updates and Changes to our Non-Client User Privacy Policy

Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Policy.

Contacting Us

If you have any further questions or comments not addressed above regarding our privacy policy and practices, or to submit a request or complaint not covered above, please email us at contact@themultiplicity.ai.