Privacy Policy

1. Who We Are

naata.ai ("we", "us", "our") is a relationship wellness companion app operated by Nivedita & Vishal Lunia. naata.ai is NOT a therapy, counseling, or medical service. It is an AI-powered wellness companion that supports healthy communication between partners.

Contact: thenaata.ai@gmail.com

2. What Personal Data We Collect

We collect only the data necessary to provide our service:

Account Data

• Name
• Email address
• Phone number (for authentication)
• Partner link code (to connect two accounts)

Conversation Data

• Messages you send to the AI companion in Private Space and Joint Sessions
• AI-generated synthesis notes (themes only, never raw private content)
• Emotion labels and wellness scores derived from conversations

Usage Data

• App usage patterns (session frequency, feature usage)
• Device information (OS version, app version)
• Crash reports and performance data

Data We Do NOT Collect

• Location data
• Contact lists
• Photos or media from your device
• Financial or payment information (handled by App Store / Play Store)
• Biometric data

3. Why We Process Your Data

• Providing the service: Delivering AI companion conversations, tracking relationship patterns over time, generating wellness insights
• Partner connectivity: Enabling the Bridge (joint session) feature between linked partners
• Service improvement: Analysing anonymised, aggregated usage patterns to improve the AI companion's quality
• Safety: Detecting crisis situations and providing helpline referrals
• Communication: Sending you service-related notifications

We do NOT use your personal data for advertising, ad targeting, or selling to third parties.

4. Consent

We process your personal data based on your informed, specific, and freely given consent, collected at the time of account creation. You may withdraw your consent at any time by contacting us at thenaata.ai@gmail.com or using the in-app settings. Withdrawing consent will result in the deletion of your account and associated data.

5. How We Protect Your Data

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest
• Row Level Security (RLS): Supabase database enforces that each user can only access their own data
• Private Space isolation: Private conversations are NEVER accessible to your partner
• Access control: Only authorised team members can access production data
• Infrastructure: Hosted on Google Cloud (asia-south1 region) and Supabase with enterprise-grade security

6. Data Sharing

We do NOT sell your personal data. We share data only with:

• Anthropic (Claude API): For AI responses. Anthropic does not retain your data beyond the API request.
• Supabase: Database hosting provider. Data stored with encryption and RLS.
• Google Cloud: Infrastructure hosting provider (asia-south1 region, India).
• Voyage AI: For generating text embeddings. No raw conversation text is stored by Voyage AI.

7. Data Retention

• Active accounts: We retain your data for as long as your account is active
• Account deletion: When you delete your account, all personal data is permanently deleted within 30 days
• Inactive accounts: Accounts inactive for 12 months will receive a notification. If no response, data will be deleted after an additional 30 days

8. Your Rights (Data Principal Rights under DPDPA)

• Right to access: Request a summary of your personal data
• Right to correction: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to withdraw consent: Withdraw consent at any time
• Right to grievance redressal: File a complaint with us or the Data Protection Board of India
• Right to nominate: Nominate another person to exercise your rights

To exercise any of these rights, contact us at thenaata.ai@gmail.com. We will respond within 30 days.

9. Children's Data

naata.ai is designed for adults (18 years and above). We do not knowingly collect personal data from children. If we learn that a user is under 18, we will delete their account and data promptly.

10. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India promptly, notify affected users without unreasonable delay, and take immediate steps to contain and remediate the breach.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email.

12. Contact Us

Email: thenaata.ai@gmail.com
Address: India

13. Crisis Resources