Privacy Policy
This policy explains what Naina (operated by [Company Name], "we", "us") collects, why, and the choices you have. We process personal data in line with India's Digital Personal Data Protection Act, 2023.
What we collect
- Phone number — to create your account and sign you in with a one-time code.
- Conversations — the text, voice notes and photos you send, and Naina's replies, so the chat history and memory work.
- Memory summary — a short summary of important things you've told Naina (people, plans, preferences) used to personalise later chats.
- Name — if you share it in chat.
- Device push token — to deliver notifications and reminders.
- Subscription status — whether your trial or plan is active. Card and UPI details are handled by our payment processor, not stored by us.
How we use it
- To run the app: deliver messages, transcribe voice notes, understand photos and generate replies.
- To remember you between conversations and send check-ins and reminders you ask for.
- To process subscriptions and prevent abuse and fraud.
- To fix bugs and improve reliability. We don't sell your personal data and don't use it for third-party advertising.
Who processes it for us
We use service providers who handle data only to perform their service:
- Google Firebase — phone sign-in and push notifications.
- Supabase — database and file storage for messages, voice notes and photos.
- AI model providers (via OpenRouter, including OpenAI, Anthropic and Google) — to generate replies, transcribe audio and describe photos.
- ElevenLabs — to generate Naina's voice notes.
- Razorpay — to process payments and UPI AutoPay.
- Upstash — queueing and rate limiting.
These providers may process data on servers outside India.
Retention and deletion
We keep your data while your account is active. You can ask us to delete your account and associated conversations, voice notes, photos and memory by emailing support@naina.app; we'll action it within 30 days, except where the law requires us to keep limited records (for example payment records).
Your rights
You may request access to, correction of, or erasure of your personal data, withdraw consent, and nominate someone to act for you, as provided by the DPDP Act. Email us and we'll respond within a reasonable time.
Security
Media is stored privately and served through short-lived signed links. No system is perfectly secure, but we take reasonable safeguards and limit access to what's needed.
Children
Naina is for adults aged 18 and over. We don't knowingly collect data from children; if you believe a child has used the app, contact us and we'll delete the account.
Changes
If we make material changes we'll update the date above and, where appropriate, notify you in the app.
Contact
Questions or grievances: support@naina.app, [Company Name], [Registered address, City, State, India].