Privacy Policy

1. Who This Policy Covers

This Privacy Policy explains how Kuku Technologies Limited ("we", "us") collects and uses information through Aiva — both from you, the app user, and from the people who call you and reach our AI assistant. Callers never install anything, but the same care applies to them: our assistant always tells them, out loud, that they're talking to an AI before anything else happens.

2. Information We Collect From You

Your phone number (verified via OTP), name, gender, and preferred language if you share them, your chosen assistant voice, and your device's push-notification token. If you subscribe, we receive the plan, price and payment status from our payment providers — never your card or bank details. We also see the status of the call-forwarding rules you register, so we can tell you if one has stopped working.

3. Information We Collect From Calls

When our assistant answers a forwarded call, we receive the caller's number as seen by the carrier, a text transcript of the conversation, and a short AI-generated summary of what the call was about. We never receive or store the call's audio — the voice platform handles the live conversation, and only the resulting transcript reaches us. Before we store anything, we strip out anything that looks like an OTP, card number, CVV, Aadhaar, PAN, UPI PIN, or bank IFSC code. While a call is in progress, we may also pass each turn of the conversation to your phone by push notification so you can read a live transcript. Those live turns are redacted the same way, are never stored on our servers, and are cleared from your phone shortly after the call ends.

4. What We Deliberately Don't Collect

We never read your call log. If you optionally enable Read Contacts, the app checks a caller's number against the contacts on your phone so the live-call notification, overlay and live transcript, a completed-call notification, your call list, and a call's own page can show their saved name. That check happens on your device, only for callers Aiva is handling or has handled; the name is shown and discarded, and the app never enumerates, uploads, or stores your contact list or saved names. We don't store call audio, and we don't build a spam database or caller reputation score from the calls we see. Standing instructions can only be one of a fixed set of presets — never free text — so nothing you or the caller says can be stored as an open-ended instruction.

5. How We Use This Information

To run the assistant on your behalf: answering forwarded calls, applying your standing instructions, extracting a summary from the transcript, sending you a notification, and checking that your forwarding rules are still active. We also use aggregated, non-identifying signals to improve the product.

6. The AI Disclosure

Every call our assistant answers opens with a spoken disclosure that the caller is talking to an AI. That disclosure is built into the assistant's core instructions, not just a message we can override per user, so it can't be silently switched off for anyone.

7. Who We Share Data With

A third-party voice-AI platform runs the live conversation (speech recognition, the conversational model, and text-to-speech) and hands the resulting transcript to us. A telephony provider carries the call. Cloud infrastructure providers host our backend and database, handle sign-in, and run the model that extracts summaries from transcripts. Razorpay and Google Play process subscription payments. We share app install and account identifiers, and for purchases the amount, currency and plan, with AppsFlyer, which passes them on to Meta to measure where our users come from. We never share transcripts, summaries, or callers' numbers with them.

8. Where Data Is Stored

Our backend and database run on cloud infrastructure. Call routing for Indian numbers is anchored within India per telecom residency requirements.

9. How Long We Keep It

We keep your account information and call history for as long as your account is active. If you delete your account, we clear the forwarding rules we registered on your line and permanently remove your stored data — your profile, call history, transcripts and instructions are all gone, not just hidden. The one thing we keep is your phone number itself, on its own, for up to 90 days, so we can tell our calling system to keep declining calls meant for the account you deleted rather than answering them for nobody. That record carries no name, no history, and nothing else about you, and it's deleted automatically once that window ends or you sign up again.

10. Security

We verify every incoming webhook from our voice platform cryptographically before trusting it, we redact sensitive values before a transcript is ever written to storage, and we log failures loudly so a lost call is a known problem, not a silent one.

11. Your Rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to give you a copy of your data, correct it, or erase it, and you can withdraw consent at any time by turning off forwarding or deleting your account. To exercise any of these, write to us at the address below.

12. Callers Who Reach Our Assistant

If you called someone using Aiva, our assistant told you it was an AI at the start of the call. We keep a transcript and a short summary of that call so the person you called can see what you needed. We don't identify or track you across other calls, and we don't build any profile of you as a caller.

13. Children

Aiva isn't directed at, and we don't knowingly collect information from, anyone under 18.

14. Changes to This Policy

We'll update the date above whenever this policy changes, and tell you in the app if a change is significant.

15. Grievance Officer & Contact

For any privacy question, write to us at privacy@kukufm.com. For a complaint or a request under the DPDP Act, contact our Grievance Officer at grievance@kukufm.com, or by post at Kuku Technologies Limited, UrbanVault 262, 3rd Floor, 16th Cross Road, HSR Sector 6, Bangalore, Karnataka 560102, India.