Privacy Policy — Desktop

This Privacy Policy applies specifically to the GIGI Squad desktop application (macOS and Windows). It covers all data collected, used, and stored by the desktop app in addition to the data practices common to all GIGI platforms.

GIGI Squad includes features not available in the mobile app — specifically, a remote desktop capability (GIGIdesk) that allows a caregiver to view and control an elder's computer. This policy explains how that feature works and what data it involves.

GIGI is developed and operated by Softaims, based in the United States. "We", "us", or "our" refers to Softaims. "You" or "user" refers to any person who uses the application.

GIGIdesk is a custom build of the open-source RustDesk remote desktop tool, bundled inside GIGI Squad. Here is exactly how it works and what data flows where:

Each permission is requested with an explanation at the time it is needed. You can revoke permissions from System Preferences (macOS) or Windows Settings at any time. Revoking Screen Recording or Accessibility will disable the remote desktop feature. Revoking Camera or Microphone will disable video calls.

• Create and manage your account and profile
• Authenticate your identity and maintain your session securely
• Connect caregivers and elders through the pairing system
• Initiate, route, and complete video calls
• Route remote desktop connections between caregiver and elder
• Display your name and profile picture to your paired partner
• Show your online or offline presence status to your paired caregiver
• Deliver real-time call alerts and notifications
• Send transactional emails (OTP codes, password reset)
• Store and display call and session history to both participants
• Detect, investigate, and prevent unauthorized access and security incidents
• Enforce our Terms of Service
• Diagnose technical problems and fix bugs
• Improve app performance and develop new features
• Respond to support requests
• Comply with applicable laws and legal obligations

We do not use your information for advertising, behavioral profiling, or targeted marketing. We do not sell your personal information to any third party.

If you are in the EEA or United Kingdom, we process your data under these legal bases:

We do not sell, rent, or trade your personal information. We share it only in these limited cases:

We do not share your information with advertising networks, data brokers, or analytics companies.

When a video call is active:

• Video and audio are transmitted in real time through our self-hosted Jitsi Meet server
• A short-lived JWT authenticates both participants and expires when the call ends
• We do not record, monitor, or store audio or video content
• Call metadata (participants, duration, status) is logged as described in Section 1
• Either participant can end the call at any time

• A caregiver cannot reach an elder without an active pairing the elder participated in establishing
• A remote session can only be started by the caregiver after the elder's machine has the GIGI app running and GIGIdesk set up
• Elders can end any remote session at any time from within GIGI Squad or by force-quitting GIGIdesk
• Elders can unpair at any time, immediately revoking all caregiver access including remote sessions
• Elders can delete their account from app settings at any time

To report unauthorized access or misuse of the remote desktop feature, contact us immediately at privacy@softaims.com. We may suspend or terminate accounts found to be misusing remote access.

• All data in transit is encrypted using HTTPS/TLS
• Passwords are hashed with bcrypt and never stored or transmitted in plain text
• JWT tokens are short-lived (15 minutes), stored in OS-level secure storage, and cleared on logout
• The GIGIdesk password is stored only in the local GIGIdesk config file on the elder's machine — it is never transmitted to our servers
• Database access uses authenticated, pooled connections with restricted permissions
• Employee access to user data is limited to what is necessary to operate the service
• Windows Firewall rules added by GIGI Squad allow only outbound connections from GIGIdesk — no new inbound rules are created that expose the machine to the internet

If you believe your account or remote session has been compromised, contact us immediately at privacy@softaims.com.

• Access — Request a copy of your personal information
• Correction — Update your name and profile picture in app settings
• Deletion — Delete your account from app settings; data purged within 90 days
• Portability — Request a machine-readable export by emailing privacy@softaims.com
• Withdraw Consent — Revoke permissions from System Preferences (macOS) or Windows Settings at any time
• Object to Processing — Contact us to object to certain uses of your data
• Lodge a Complaint — File a complaint with your local data protection authority

Contact privacy@softaims.com. We respond within 30 days.

If you are a California resident:

• Right to Know — What personal information is collected, used, shared, or sold
• Right to Delete — Request deletion of your personal information
• Right to Correct — Request correction of inaccurate information
• Right to Opt Out of Sale or Sharing — We do not sell or share personal information for advertising
• Right to Limit Sensitive Data Use — Request that we limit use to what is necessary to provide the service
• Right to Non-Discrimination — We will not discriminate for exercising these rights

GIGI Squad is not intended for children under 13. We do not knowingly collect data from children. If you believe a minor has registered, contact us at privacy@softaims.com.

Softaims is based in the United States. If you access GIGI from outside the US, your data may be processed in the US where data protection laws may differ. For transfers from the EEA or UK, we rely on Standard Contractual Clauses where required.

When we make material changes, we will:

• Notify you via in-app alert or email at least 14 days before changes take effect
• Update the "Last updated" date at the top of this policy
• For significant changes, ask you to review and acknowledge the updated policy

Continued use of GIGI Squad after changes take effect means you accept the updated policy.

For privacy questions, data requests, account deletion, or security concerns: