Privacy Policy

How we handle the things you trust us with.

Effective: 26 May 2026  ·  Version: 1.0

01Who we are

Aadda is operated as a private pilot project. The app is available at app.aadda.ai and on the Google Play Store as "Aadda". When this policy says "we" or "us", it means the small team operating Aadda. When it says "you", it means the person who signs in — usually a caregiver or family member of the elder using the app.

02What data we collect

From you, when you sign in

• Your email address. We use it to send you a 6-digit code so you can sign in. We don't send marketing emails.

From you, when you set up a profile

• The name of the person who will use the companion (e.g. your mother's name).
• The companion's chosen name, voice gender, and language (Bengali or English).
• Photos you choose to upload for the profile (optional).

From each conversation

• An audio recording of the call — both the elder's voice and the companion's voice.
• A written transcript of what was said, generated automatically.
• Conversation metadata — when it started, when it ended, how long it was.

Automatically, in normal use

• Basic technical information like browser type and approximate device details, which our hosting providers log for security and reliability. We don't track you across the web.

We do not collect: phone numbers, payment information, passwords, contact lists, location, browsing history outside the app, or biometric data beyond the voice present in your conversations.

03Why we collect it

• Email — to sign you in. Without it, there is no way to keep your conversations private to you.
• Profile name, photos, language — so the companion can speak in the right language and feel personal.
• Audio recordings and transcripts — so you and your loved one can revisit conversations later from the caregiver dashboard. This is the core feature of Aadda — preserving these moments is what the app is for.
• Conversation metadata — to organize the list of past conversations and show you when each one happened.
• Technical logs — to keep the service running, fix bugs, and prevent abuse.

04Where your data lives

Your data is stored on infrastructure provided by trusted third parties. We don't run our own servers.

• Supabase — stores your account, profile, transcripts, and audio recordings. Data is hosted in Supabase's Singapore region. Supabase's privacy practices are available at supabase.com/privacy.
• Vercel — hosts the app itself (the web pages and code). Vercel's privacy practices are at vercel.com/legal/privacy-policy.
• Vapi — handles the live voice connection during calls. Vapi's privacy practices are at vapi.ai/privacy.
• Cloudflare — provides DNS and security at the network edge. Cloudflare's privacy practices are at cloudflare.com/privacypolicy.

Data sent between your phone and these services is encrypted in transit (HTTPS/TLS). Data at rest in Supabase is encrypted by Supabase using industry-standard methods.

05Who can see your data

Only you can see your conversations. Aadda's database uses row-level security — when you log in, the system only ever returns data linked to your own account. Other users of Aadda cannot see your conversations, your profile, or your photos.

The small team operating Aadda has technical access to the database for the purpose of running the service. We do not listen to your conversations as a matter of course. We may access specific data only if (a) you ask us to help debug an issue, (b) we're legally required to, or (c) we have a strong reason to believe abuse or harm is happening.

We do not sell your data. We do not share it with advertisers. We have no business model that depends on your data being seen by anyone else.

06How long we keep it

• Your account and conversations — for as long as you have an account with us. If you ask us to delete your account, we remove all of it within 30 days.
• Technical logs — typically 30 to 90 days, depending on the service provider.
• Backups — automated database backups may retain data for up to 30 days after deletion, after which they are overwritten.

07Your rights

You can, at any time:

• See your data — your conversations and profile are visible in the app itself.
• Edit your profile — change names, photos, language, or companion settings.
• Delete individual conversations — from the caregiver dashboard.
• Delete your entire account — email us and we will erase your account, all profiles you created, all conversations, all transcripts, and all photos within 30 days.
• Ask us a question — about anything in this policy or about your data.

To do any of these, write to us at the email address below.

08Children

Aadda is built for adults — caregivers and elders. It is not designed for or directed at children under 13, and we do not knowingly collect data from children. If you believe a child has signed up, please tell us and we will delete the account.

09Security

We use standard, well-understood security practices: HTTPS everywhere, encrypted storage at rest, email-based one-time-code login (no passwords to leak), row-level database security, and trusted infrastructure providers. No system is perfectly secure, but we will tell you promptly if we ever learn of a breach that affects your data.

10Changes to this policy

If we change this policy in a way that affects how your data is handled, we will let you know inside the app and by email before the change takes effect. The "Effective" date at the top of this page will be updated. Older versions of this policy are kept for reference — email us if you'd like to see them.