Privacy Notice

This Privacy Notice explains how ATTEX AB processes data when you participate in our mobile panel used to measure media exposure and attention behaviour on mobile devices.

Data Controller ATTEX AB

Contact: info@attexdata.ai

Postal address: ATTEX AB Kvarnvägen 53 182 39 Danderyd Sweden

We process data in order to:

• —measure media exposure and attention behaviour across mobile devices and environments;
• —use AI models to find ads and understand the context they appear in (see “AI and machine learning”);
• —operate and improve ATTEX Data’s panel-based measurement product;
• —administer your membership and rewards, such as gift cards and bonuses for new members, and send you emails about your participation, for example when measurement has stopped or a reward is on its way;
• —if you applied to the Swedish panel and gave us your mobile number, contact you to invite you to a survey about how installing the app went;
• —check that accounts and rewards are genuine, for example so that duplicate or test accounts do not receive rewards;
• —validate performance across devices, operating systems, cohorts, and markets;
• —generate anonymised derived datasets, aggregated insights, analytics, benchmarking, and reporting outputs;
• —support research, product development, and commercial analytics based on anonymised and aggregated outputs; and
• —publish aggregated findings that never identify an individual, each figure based on at least 10 panel members.

We do not intend to sell raw participant-level data.

We collect data from the apps, browsers and environments you use, with the focus on media and advertising measurement. We block sensitive apps such as banking, health and dating apps from measurement, but the blocklist is not complete and does not cover websites, so sensitive information can still be collected.

Depending on how you use those supported apps and browsers, we may collect:

• —device model and operating system version;
• —technical device metadata;
• —timestamps and session-related identifiers;
• —app package names;
• —browser URLs;
• —search queries;
• —visible interface text captured from app or browser contexts, including text you type, for example in searches and AI chat apps;
• —gaze / attention measurements from the front camera, which is used now and then while you use your phone with measurement switched on — camera images are processed on the phone only and are never stored or transmitted;
• —your mobile number, if you applied to the Swedish panel and chose to give it;
• —information about your participation: your email address, the campaign or link you applied through, the days on which we received measurement data from the app, and the rewards you have earned and been sent; and
• —a panel ID linked to your participation record.

We do not collect screenshots or screen recordings.

Because the measurement technology reads app and browser context on your screen, some visible on-screen content may be collected as part of the measurement process.

This may sometimes include:

• —usernames;
• —social media posts or comments;
• —search terms;
• —URLs;
• —text visible in supported apps or browser pages; and
• —content relating to third parties.

We do not intentionally collect sensitive or third-party data, but such information may appear incidentally depending on what is visible on your screen. Such information about people who are not panel members is processed on the basis of our legitimate interest in measuring advertising; if you think your information appears on a panel member’s screen, you can object or ask about it at info@attexdata.ai.

Our legal basis for this processing is your consent. Where sensitive information may appear incidentally in collected content, we rely on your explicit consent where required.

To administer your membership and rewards, including emails about your participation, we rely on our agreement with you under the panel terms.

To check that accounts and rewards are genuine, we rely on our legitimate interest in giving rewards only to real members.

Giving your mobile number is optional. We use it only to invite you to the survey about the installation, and we rely on your consent. We keep the number for as long as you are a member of the panel. You can withdraw your consent at any time by emailing info@attexdata.ai, and we then delete the number.

Participation is voluntary, and you can pause or withdraw at any time.

We keep raw and intermediate panel data for a maximum of 12 months for operational, quality assurance, validation, and analysis purposes.

Within this 12-month period, we ensure that raw and intermediate datasets are either:

• —deleted; or
• —transformed into anonymised derived data that no longer contains personal data and cannot be linked back to you or other individuals by any reasonably likely means.

Where data has been transformed into genuinely anonymised derived data, it may be retained for a longer period for purposes such as benchmarking, analytics, reporting, research, product development, and commercial insight generation.

We use service providers to support our operations, including hosting, communications, chat support, operational systems, consent management, panel administration, and technical services.

Relevant systems and providers may include:

• —AWS;
• —AI service providers;
• —Salesforce;
• —Firebase;
• —Customer.io;
• —GoGift (delivery of gift cards);
• —Crisp (chat support on attexpanel.com);
• —Alchemer;
• —panel providers; and
• —relevant technical SDK providers.

We do not intend to share raw participant-level datasets with customers.

Customers, external partners and the public may receive only:

• —anonymised derived data;
• —anonymised outputs;
• —aggregated datasets;
• —statistical outputs; and
• —reporting-level insights.

We use AI models to read the screen text the app collects, to find the ads and understand the context they appear in, for example the topic of the page or conversation around an ad and whether the ad matches it. The models are run by AI service providers on our behalf, under a data processing agreement, and may not use the text to train their own models. Sensitive topics, such as health, religion or politics, are never categorised, and the results are used only in aggregated statistics.

Your raw or participant-level data will not be shared with customers for AI or machine learning model training.

Customers may use ATTEX Data data for AI / machine learning training only where the relevant dataset has been transformed into genuinely anonymised derived data that is free from personal data.

We use EU-based hosting infrastructure, including AWS services in Ireland and Stockholm.

Some service providers, including AI and email providers, may process data outside the EU/EEA, for example in the United States. We then rely on the EU–US Data Privacy Framework or the EU standard contractual clauses; you can ask us for a copy at info@attexdata.ai.

You can:

• —choose whether to participate;
• —pause measurement; and
• —withdraw your consent and leave the panel at any time, without affecting processing before you withdrew.

Because raw data is processed using a panel ID, we also support privacy-related requests to the extent we can link your request to your panel participation record, for example deletion requests.

Under GDPR, you may also have rights of access, rectification, erasure, restriction, objection, and the right to lodge a complaint with a supervisory authority.

We use technical and organisational safeguards designed to protect data, including encrypted transmission, protected storage environments, restricted access to raw data, and restricted access to systems that contain identity-linkage information.

We may update this Privacy Notice if our processing changes. If we make material changes, we will inform participants as required.

ATTEX AB Contact: info@attexdata.ai

If you write to us in the chat on attexpanel.com, we process your messages, the name or email address you give us, and technical details about your browser and the page you wrote from, so that we can answer you. The chat is provided by Crisp, which keeps the conversation on servers in the EU on our behalf. Nothing is loaded from Crisp, and nothing is sent to it, until you open the chat yourself. We keep chat conversations for a maximum of 12 months.

Please do not send sensitive information in the chat, for example about health, faith or political views, and never send passwords. To recognise you as a panelist we only need the email address you joined with.

Postal address: ATTEX AB Kvarnvägen 53 182 39 Danderyd Sweden