Privacy Policy

• "Services" means the software and platforms provided by the Company, including:
• Navigo Series: Consumer applications (Navigo by Amigo, Navigo Link, Nav IQ).
• Mobigo: Mobile Device Management (MDM) solution for enterprise and government use.
• Gomap: API-based mapping and geospatial data services.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. (Note: For Mobigo users, your organization/employer is the Data Controller).
• "Personal Data" means any information relating to an identified or identifiable natural person.

CatchLog EM is an enterprise video and audio monitoring service for fishing and deck activities on approved vessels, with AI assisting human review. This policy covers account holders and operators as well as captains, crew, visitors and others who may be recorded, even if they do not use the app. Other product-specific provisions apply only to the named products.

We collect the following types of data depending on the Service you use:

Identity Data

Name, email address (from sign-in or direct input), and phone number.

Technical and Device Data

• Unique device identifiers (deviceId/UUID, IMEI, Android ID), platform (iOS/Android), device model, and app version, depending on the service and device permissions.
• Technical identifiers used for device synchronization.

Geographic/GPS Data

Real-time location data (latitude and longitude) and location history, depending on the service and permissions.

API Log Data (Gomap)

Request headers, timestamps, and usage patterns.

CatchLog EM video, audio and operational data

CatchLog EM data includes video and audio recordings; recording times; vessel and camera details; AI detections and associated metadata; location information; device identifiers; app and model versions; camera and recording configuration; device health, connection, upload and recording status; and operational and troubleshooting reports. Video and audio may identify people, their voices and their activities.

CatchLog EM uploads and stores video and audio in cloud infrastructure for authorized recording, review, inspection disclosure and AI training purposes. It is not a local-storage-only or no-upload service. Device files, cloud recordings, training copies and backups are separate copies subject to section 8.

• Direct Interactions: When you register or use features.
• Automated Technologies: Technical data generated by devices and operational service APIs.
• Third Parties: We may receive information from relevant service providers, depending on the service used.

CatchLog EM sources

CatchLog EM receives recordings from connected external CCTV cameras and video designated by operators, and information generated by iPads, devices and operational services. Audio is part of the relevant source recording; permission to use the iPad camera for registration QR scanning does not itself authorize filming or audio recording of people.

• To display position (Navigo): Using location information for the relevant service features.
• To ensure System Security (Gomap): Monitoring API usage and preventing abuse.
• To facilitate Workforce Management (Mobigo): Allowing Administrators to monitor device status and location for operational efficiency.
• To comply with legal obligations.

CatchLog EM processing purposes and basis

CatchLog EM purposes are: recording and storing video and audio; reviewing footage and AI detections; supporting inspections; providing information to authorized inspectors or relevant government agencies within the permitted inspection or task; remote configuration, device-status checks and model deployment; and troubleshooting and service operation.

A separate CatchLog EM purpose is training, evaluating and improving AI models using customer footage for the quality of the service as a whole, including use for other customers. It is not limited to operating a single customer’s model. The actual legal basis and scope of permissions must be established under applicable law for recording, cloud storage, disclosure and training. Planned supply and employment contract clauses or acceptance of this policy alone do not establish those rights.

Location (Foreground and Background)

• Navigo: Used to display position.
• Mobigo: Collected based on Administrator settings for workforce tracking, potentially even when the app is closed.

CatchLog EM permissions

CatchLog EM uses location for vessel and recording context, local-network access to connect to CCTV cameras, and the iPad camera to scan registration or connection QR codes. File or storage access supports operator-selected video and local recordings or exports. These uses do not mean the iPad camera is the external CCTV source.

CatchLog EM is operated using international infrastructure; our business policy does not restrict storage or processing to a single country. This policy does not waive applicable cross-border transfer requirements.

The actual processing countries, hosting and other service providers, and required transfer safeguards must be verified and recorded in the applicable service documentation and privacy disclosures before the relevant transfer. They are not represented here as already confirmed. We do not claim that any particular transfer agreement or safeguard has already been implemented.

We retain technical data and metadata only for as long as necessary to fulfill the purposes of security verification and auditing.

• Mobigo Data: Retention is determined by your Administrator (Employer), subject to applicable law.

CatchLog EM recordings, training material and backups

For CatchLog EM, original video and audio, training material using the same recordings, and backups are retained for a maximum of one year from the original collection date. This limit applies to local service-managed copies and cloud copies, including training copies and backups. It is not a guarantee or obligation to keep material for a full year; it may be deleted earlier when its purpose is fulfilled, under operational policy or following a lawful deletion request. Copying or selecting a recording for training does not restart its retention period.

Deleting a device file or uninstalling the app does not delete cloud copies, training copies or backups. Submit cloud deletion or return requests through the vessel operator or [email protected]. Requests are checked for identity, authority, inspection needs and applicable legal requirements. Customer-controlled exports and copies already lawfully supplied to inspectors or agencies are managed by their respective holders under the applicable law and agreements; AI Digital cannot promise deletion from those systems.

Retention periods for AI detection metadata and operational logs, and the technical method and timing of backup deletion within the one-year maximum for recordings, remain to be finalized and documented before the relevant processing. This policy does not present an unverified automatic deletion mechanism as operational.

Deleting original recordings or training material is different from handling a model already trained on them. Source deletion does not automatically remove their influence from model weights. Whether a trained model needs restriction, retraining or another measure must be assessed separately for applicable rights, law and the actual training process; we do not promise automatic unlearning.

Subject to applicable law, individuals may request access, correction or deletion and exercise other applicable data rights.

• Note for Mobigo Users: Please contact your Administrator (Employer) directly to exercise your rights, as they are the Data Controller.

CatchLog EM operators and recorded individuals

CatchLog EM operators and recorded individuals, including crew and visitors, may contact the vessel operator or [email protected]. Describe the request and, where known, vessel and recording date or time so the relevant material can be located; do not send unnecessary sensitive information. We may request proportionate information to verify identity and authority, coordinate with the relevant controller, and explain the outcome or any restriction. Access or deletion may be limited by applicable law, inspection obligations, valid contractual requirements or the rights of others; a contract cannot remove mandatory legal rights.

A. Role of Data Controller (For Mobigo Users)

If you are using Mobigo on a device provided or managed by your employer or organization ("Administrator"):

• The Administrator is the Data Controller: Your organization determines specifically how your Personal Data and Location Data are processed.
• Company as Data Processor: We process your data solely on behalf of and under the instructions of your Administrator.
• Visibility: Your Administrator may have the ability to view your real-time location, location history, installed applications, and device status. They may also perform remote actions (e.g., Remote Lock, Remote Wipe) on your device.

B. API Data Collection (For Gomap Users)

We collect technical logs from API requests to ensure the security and stability of our map infrastructure. This data is aggregated to monitor traffic and is not used to identify individual end-users of your application unless required by law.

Video and audio are uploaded to and stored in the cloud. Human review is supported by AI; results can be wrong or incomplete. Recordings may be provided to authorized inspectors and relevant agencies within the legal or contractual basis described in section 10. Customer footage is also used for training, evaluation and improvement of models for the whole service, subject to section 5.

Remote configuration, device-status checks, troubleshooting and model deployment process device, configuration and operational data. Recordings, training copies and backups share a maximum retention period of one year from original collection, with earlier deletion possible and no reset on copying. The service is not a promise of uninterrupted recording or one-year availability. See sections 7–10 for international transfers, deletion, individual rights and the actual authority required.

Participants, inspection disclosure and planned agreements

For CatchLog EM, ATI pays for the current project; that status does not itself grant access to all recordings. Vessel owners and operating companies purchase and use the product and handle onboard operation, notices and required contractual arrangements with recorded people. Captains and crew are operators and may also be recorded.

AI Digital supplies the app and package, reviews recordings, provides authorized third parties with information and trains models on customer footage to improve the whole service. Because AI Digital also determines purposes for its own service-improvement training, it is not described as always acting only as a processor under customer instructions. Controller and processor responsibilities must be determined for each actual processing activity in the applicable agreements and under law.

Authorized inspectors and relevant government agencies may receive the full video and audio and related information needed for the relevant inspection or task on the basis of applicable regulations or a valid existing agreement between the vessel operating company and inspectors or similar parties. Additional approval for each disclosure is not obtained where that basis permits it; this does not allow unrestricted disclosure.

Supply and employment agreements are planned to expressly cover filming, audio recording, cloud storage, inspection disclosure and AI training. We do not state that these notices or contracts have already been completed. Actual agreements, notices, permissions and applicable law must be checked before the relevant processing.

CatchLog EM device-management API requests use HTTPS and device-token authentication; administration access is authenticated. These are specific controls, not a claim that every recording path is encrypted. Local CCTV connections using Real Time Streaming Protocol (RTSP) are not assumed to be encrypted; protection depends on the camera, network and configuration. We do not claim end-to-end encryption of all video, universal access auditing, or security measures that have not been verified.

We may update this policy to reflect changes in our services. We publish the revised policy and update the effective date at the top of this page. Any additional notice required by applicable law will also be provided.

PT Amigo Inovasi Digital — Email: [email protected]