Skip to content

Data Types and Purpose-Based Isolation

Download PDF

SATI divides data into four types and applies a different confidence level and handling principle to each.

TypeDefinitionExamplesDefault Principle
Zero-partyInformation the user voluntarily provides with knowledge of the specific service purposeDate and time of birth, birthplace, gender, interests, preferencesExplicit purpose-specific consent; editable by the user
First-partyInformation observed through direct interaction with SATI servicesFeature usage, content choices, reward history, ad responsesMinimal collection, retention limits, access control
InferredAttributes computed by the system by combining declared and behavioral dataInterest categories, preference shifts, recommendation fitLabeled as inferred, with confidence level and right to dispute
SensitiveInformation requiring a high level of protection, such as health, mental care and crisis signalsCounseling conversations, emotional state, risk signalsIsolated from advertising; separate consent; enhanced access control

Inferred data is never treated as equivalent to fact. Credentials include the sourceClass, assuranceLevel, issuedAt and expiresAt fields to express the difference between declared, observed and inferred data and the passage of time. Low-confidence inferences are never used as the sole basis for ad eligibility or high-risk AI actions.

Data is isolated by purpose across five stores:

VaultKey DataAdvertising Use
Core Service VaultDate and time of birth, birthplace, gender, interests, preferencesProhibited without separate consent
Personalization VaultPreferences, feedback and long-term personalization contextOnly general-interest credentials, on a limited basis
Wellness VaultMeditation, wellness and mental care dataProhibited in principle
Advertising Credential StoreNon-identifying credentials proving ad eligibilityPermitted
Compliance VaultKYC/KYB, sanctions and fraud screening resultsProhibited