UK Privacy Notice

Last updated 23 October 2026 (version 2026-10-23-en-gb).

This notice explains how Perdure, a service operated by Brox AI, Inc. ("Brox", "Perdure", "we", "us"), handles the personal data of members in the United Kingdom under the UK GDPR and the Data Protection Act 2018. It supplements our global Privacy Policy; where the two differ for UK members, this notice prevails.

The short version, in plain language:

• Your conversations build a digital twin, a model of how you think.
• Research clients only ever see anonymised, aggregated insights. Never your name, voice, face, or anything that identifies you.
• We never sell your identity, and we never share what you tell us for marketing, advertising, or targeting purposes.
• Data from your account, profile or conversations that identifies you never goes to anyone outside Perdure and Brox AI except the service providers who process it for us under contract, such as the AI services that run your conversations (Section 4a); research clients and everyone else only ever see the anonymised version. (Website analytics and our optional ad-measurement pixel are separate, smaller things, explained in Section 11.)
• You can read everything we hold about you, correct it, and delete your twin (all of it) whenever you want.

1. Who we are (controller)

Brox AI, Inc., 1734 Granville Avenue, Unit 2, Los Angeles, California 90025, USA (a Delaware corporation) is the controller of your personal data. Data-protection contact: privacy@perdure.ai. We are in the process of appointing a UK representative under Article 27 UK GDPR; until that appointment is in place, please contact us directly at privacy@perdure.ai.

Perdure is open to people aged 18 or over in the United States, United Kingdom, Germany, Turkey, and Japan.

2. Personal data we collect

You provide: your name, email address, date of birth (to confirm you are 18 or over), country and location details (to confirm you are in a supported country), profile and demographic information used to match you to studies (including, if you choose to share them, your postcode and your ethnic background — see Section 5a), your reward email address for payouts, identity or location verification information where we ask for it (including a short "hello video", see Section 5; and, at sign-up, a mobile phone number confirmed by a text-message code, see Section 5b), and the content of your research conversations: voice recordings, transcripts, and text responses.

We generate: AI-derived profiles built from your conversations (your digital twin), including inferred attributes such as personality dimensions, values, decision style, and opinions.

We collect automatically: usage data, device information, your IP address, and the approximate location (country/region) derived from it, which we use to prevent fraud (for example to confirm you are in a supported country and to detect VPN/proxy use or duplicate accounts). Our website analytics (Plausible) are cookieless and do not track you across sites.

3. What we use it for, and our lawful basis

Invitations to paid studies are matched to the profile you give us (age group, location, interests and so on), and we verify that your profile is accurate; inaccurate profiles are not eligible for payment.

4. Who we share it with

• Research clients receive anonymised, aggregated insights only, reported across groups, never individuals. They never receive your name, contact details, raw recordings, or anything reasonably capable of identifying you.
• Brox AI, which operates Perdure, provides infrastructure and research technology and processes data under the protections in this notice.
• Service providers (sub-processors) process data on our behalf under contract, across these categories: cloud hosting and database, AI voice, text and video processing (see Section 4a), email delivery, payout processing, push notifications, fraud/IP checks, SMS verification codes and phone-number checks, and content delivery. Our public sub-processor list names each provider; a copy is also available from privacy@perdure.ai.
• Legal and safety: we may disclose information where required by law or to protect the rights, safety, or property of you, us, or others.

We do not sell your personal data, and we never share your account, profile or conversation data with anyone for marketing, advertising, or targeting purposes of any kind. Data from your account, profile or conversations that identifies you never goes to anyone outside Perdure and Brox AI except our contracted service providers, including the AI services in Section 4a, which process it solely on our behalf and under our instructions, never for their own purposes: research clients and every other third party only ever receive anonymised, aggregated insights. Separately, our website can run an optional, consent-based Meta ad-measurement pixel that concerns website visits only; it is described in Section 11 and never involves your account, profile or conversation data.

4a. Third-party AI services

Your conversations are run and analysed by three AI service providers. This section sets out who they are, what each one receives, how that data is collected, everything it is used for, and how it is protected. The app shows you the same information, on a screen headed "How your conversations are processed", before anything is sent.

What is sent:

• Your voice, while you speak in a voice conversation, and everything you type in a conversation or a chat
• The transcripts of your conversations and your answers to pulses
• Your first name and the profile details you have given us, such as your country and your About you answers, with a summary of your earlier conversations, so a conversation can follow on from the last
• Your hello video, which is checked automatically before a person reviews it (Section 5)

If you use them, it also includes the questions you ask in the app, your Picks ratings and taste-quiz answers, the answers you choose to bring over from Brox Panel, and the messages you send our support team.

How it is collected. In the app: through your microphone while you speak in a voice conversation or answer a pulse by voice; from what you type in a conversation, a chat, a pulse or a question; from the profile details you give us when you sign up and in About you; through your camera when you record your hello video; and from your earlier conversations, which we summarise so the next one can follow on.

Who receives it, and every use:

• ElevenLabs, Inc. runs each voice and text conversation, including pulse questions you answer by voice: it turns your speech into text, writes the interviewer's replies and speaks them, and produces the transcript. It receives your voice, what you type in a conversation or chat, and your first name, profile details and the summary of your earlier conversations, so the interviewer can follow on from the last conversation.
• Anthropic, PBC provides the Claude AI models that guide each conversation and that read your transcripts and pulse answers to produce your insights, your profile and digital twin, and the summary of your earlier conversations. The same models suggest the topics and pulses offered to you, answer the questions you ask in the app, build your Picks recommendations, check that answers are genuine (to prevent fraud and to match members to paid studies), and help our team read and answer support messages. It receives your transcripts and pulse answers, your first name, profile details and the summary of your earlier conversations, and, if you use those features, your questions, Picks ratings, taste-quiz answers, Brox Panel answers and support messages.
• Meta Platforms, Inc. provides the AI model that checks your hello video: that it shows a real, live person answering the prompt, that what you say fits the country you told us you live in, and that it is not spam or explicit (Section 5). It receives your hello video and the country you told us you live in. Nothing from your account is used by Meta for advertising.

How it is protected. Each provider acts only on Brox AI, Inc.'s instructions, as our processor under a data processing agreement (Article 28 UK GDPR), may use your data only to provide these services to us, and must give it the same or equal protection as this notice does. Your data is never sold. All three are based in the United States; Section 6 explains how transfers from the UK are protected.

We ask first. Before you can use the app, it shows you that screen and asks for your permission. Until you press "I agree", the app opens no conversation, chat or pulse, and our servers refuse every request from the app that would send anything of yours to these providers. If you would rather not agree, you can sign out.

Withdrawing. You can withdraw this permission at any time, with effect for the future, by writing to privacy@perdure.ai. Without it you cannot take part in conversations. You can also delete your digital twin and your data at any time (Section 10).

The full list. Our sub-processor list names every service provider we use, these three included, with what each one does and the data it processes.

5. Your digital twin, hello video, and automated processing

Your digital twin is a model of how you think, decide and behave, grounded in behavioural science and decision science (Big Five and similar frameworks). This constitutes profiling under the UK GDPR. Its contents are visible to you in the app, it is never shared in identifiable form with any research client, and the insights it gives you are private to you. You can correct anything it has wrong and delete it entirely at any time, in your account settings or via privacy@perdure.ai. Study-eligibility matching is human-reviewed, and you can object to it. The one decision we may make solely by automated means is the automatic decline of a hello video described below; you can ask for a person to review it, give your point of view and contest it, by emailing support@perdure.ai (Article 22 UK GDPR).

Before you start your first paid activity, we ask you once for a short "hello video" (around 30 seconds) in which you say your name, age, and the city and country you live in. We use it to confirm that a real, live person is taking part, to sense-check what you have told us about your age and location, and to stop one person from running several accounts.

• Review by our team. A member of our team can watch your video and decide whether to approve it.
• Automated review. Your video is also analysed by an AI video model provided by Meta Platforms, Inc., acting as our service provider under contract. It checks whether the video shows a real, live person answering the prompt, whether what you say and how you speak are consistent with the country you told us you live in, whether the video looks like spam, and whether it contains explicit content. These results help our team review videos, and a video that passes every check may be approved without a person watching it. If you say in your video that you live in a country other than the one you signed up from, your video may be declined automatically. You can always ask for a person to review a decision about your video by emailing support@perdure.ai.
• Face template (optional, with your separate consent). If you tick the separate, optional box shown before you record, we create a numeric face template from your video and compare it with the face templates of other members, only to detect duplicate accounts. The template is a string of numbers that cannot be turned back into an image of your face. It is created and stored on our own systems, it is never sold, and it is never shared with research clients or anyone else. If the comparison suggests two accounts belong to the same person, the accounts are flagged to our team for review, and payouts may be paused while we look into it. Leaving the box unticked has no effect on your account, the activities you are offered, or your payments. You can withdraw this consent at any time by emailing privacy@perdure.ai, and we will delete your template. We do not currently create face templates for members in the EU or EEA.
• Voice. We do not use your hello video to create a voiceprint or to identify you by your voice.
• Legal basis. Recording and reviewing your video, including the automated review, is based on your consent (Art. 6(1)(a)), which you give before recording. The face template is based on your explicit consent (Art. 9(2)(a) UK GDPR). We give you a separate notice of the purpose and processing at the point of collection (Art. 13). You can decline to record; if you do, we cannot release paid activities or payouts.

5a. Ethnic background and postcode

Ethnic background (optional). We ask about your ethnic background because research is better when it hears from a full mix of people, and so the views of different groups can be understood fairly. Under UK and EU data-protection law this is "special category" information, so we only keep it with your explicit consent, which you give by answering the question and ticking the consent box. Answering is always optional, and you can choose "Prefer not to say". We use it to describe and balance our research samples, to invite people to some studies, and as part of your digital twin. Our clients only ever see it in anonymised or combined form: it is never shown alongside your name or contact details, never shared with advertising platforms, and never sold. Only authorised Perdure and Brox AI staff can see it for an individual member. You can change or remove it at any time in your profile, or withdraw your consent by contacting support, and we stop using it from then on. It is included in any copy of your data you ask us for. (Members in Germany are not asked this question.)

Postcode (optional). We ask for your postcode (your ZIP code in the US) to understand where in the country our members live. The full postcode stays inside Perdure. Anything that leaves it is made less precise first (for example the first three digits of a US ZIP code, the first half of a UK postcode, or your prefecture or province), and it is never shared with advertising platforms.

5b. Phone number verification

What we ask. When you sign up, we may ask for your mobile phone number and send it a one-time code by text message (SMS), which you type in to confirm the number is yours. We ask only at sign-up, never to log in, and not everyone is asked: it depends on how you arrived at Perdure.

Why. To confirm one person, one account (that each account belongs to a real person and nobody holds more than one) and that you live in the country you told us you live in. This is fraud prevention and an eligibility check: we only send a code to a number from the country you signed up from, we may not send one to a number that is virtual or cannot receive texts, and a number already used on another Perdure account cannot be used again.

What we keep. Your number, stored encrypted; its country; its line type (for example, mobile) and the mobile network it belongs to, as reported when we check it; and when you confirmed it. We also keep a one-way, keyed fingerprint of the number, which is how we spot a number that is already on another account. We do not keep the code.

Who sees it. Only authorised Perdure staff, for an individual member and only when they need to (for example, to look into a fraud concern), and every time the full number is shown, that is logged. It is never shown to research clients, never shared with advertising platforms or anyone else, never used for marketing, and never sold. It is included in any copy of your data you ask us for.

Our SMS provider. The code is sent, and the number is checked (its country, whether it is a mobile line, and its network), by Twilio Inc. (US), acting as our processor under contract. Twilio processes your number only to do this for us.

How long. We keep your number and these details for as long as your account exists, and delete them when your account is erased. After an erasure we keep only the fingerprint, which cannot be turned back into your number, so that a number from an account we have paid cannot be used to open a new one.

Legal basis. Our legitimate interests in preventing fraud and in keeping the panel to real, eligible people (Art. 6(1)(f) UK GDPR). You can decline to give a number, but if we ask for one at sign-up and it is not confirmed, we cannot complete your application.

6. International transfers

We are US-based. Transfers of your data from the UK to the US are protected by recognised safeguards: the UK Extension to the EU-US Data Privacy Framework (where the recipient is certified), the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, as applicable. A copy of the relevant safeguards is available from privacy@perdure.ai.

7. How long we keep it

8. Security

We use industry-standard encryption in transit and at rest, role-based access controls, and regular security reviews. No system is perfectly secure, but we treat your conversations with the care you'd expect for something this personal.

9. Disclaimers

Insights your digital twin provides about you are for personal reflection only. They are not medical, psychological, financial, or legal advice, and are not a diagnosis of anything. If you are struggling, please talk to a qualified professional.

10. Your rights

Under the UK GDPR you have the rights of access, rectification, erasure, restriction, data portability, and objection (including to processing based on legitimate interests), and where processing relies on your consent you can withdraw it at any time with effect for the future. To exercise any of these, email privacy@perdure.ai; we respond within one month. You can also exercise many of them directly in your account settings (download your data, delete your twin, withdraw consent).

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to resolve your concern first, but you can go to the ICO at any time.

11. Cookies and tracking

Our website analytics run on Plausible, which sets no cookies and does no cross-site tracking; it runs on every visit because it stores nothing on your device and identifies nobody. Your language choice is stored in your browser's local storage (no identifier, nothing sent anywhere). If you open one of our campaign pages from a link that carries a sign-up code, the page asks the app for a short-lived sign-up pass and keeps it in that browser tab's session storage so our sign-up buttons can carry it; it is functional only, identifies nobody and is cleared when you close the tab. The app uses strictly necessary cookies for login sessions.

Meta pixel (ad measurement, your choice): our website can load a Meta (Facebook) pixel whose only job is to measure whether the ads we run to recruit new members actually work, and to help Meta show those ads to people more likely to be interested. When it runs, it sets Meta cookies (_fbp, and _fbc after an ad click) and shares your visit with Meta: the pages you view on perdure.ai, your IP address and browser information, which Meta may be able to link to your Facebook or Instagram account if you have one. For UK visitors the pixel is off until you allow it in the banner shown on your first visit (consent, regulation 6 PECR and Article 6(1)(a) UK GDPR); if you decline, nothing from Meta loads. Change your mind whenever you like via Privacy choices in the footer: we stop the pixel and expire its cookies. Your consent choice itself is stored locally in your browser. The pixel concerns website visits only; it never touches your account, profile or conversations. Meta's own processing is described in Meta's Privacy Policy.

Ad-click conversion confirmation: if you reach us from an ad and go on to sign up, we also confirm to the advertising platform (for example Meta), server-to-server, that one signup happened, using only the click identifier the platform itself attached to the ad link. We never send your name, email address, profile, conversations or anything else that identifies you, and nothing is stored on your device for this. It works whether or not you allow the pixel.

12. Children

Perdure is for adults 18 and over. We do not knowingly collect data from anyone under 18; if we discover we have, we delete it.

13. Changes to this notice

When we change this notice we will update the date at the top, and for material changes we will notify members by email at least 30 days before the change takes effect.

14. Contact

Privacy questions and data requests: privacy@perdure.ai Everything else: hello@perdure.ai Postal: Brox AI, Inc., 1734 Granville Avenue, Unit 2, Los Angeles, California 90025, USA