Privacy Policy

We collect only what Ava needs to work for you. Depending on how you use Ava, this includes:

Information you give us

• Account information: your mobile number, used to sign in with a one-time code, and your name.
• Profile details you choose to add, such as your role, company and preferences, so Ava can tailor its responses.
• Content you create in Ava: tasks, reminders, contacts, notes, scheduled briefings and anything you ask Ava to remember.
• Your messages and voice requests to Ava.

Meeting recordings

• When you tap record, Ava captures audio from your device's microphone to produce a transcript (with speakers separated where possible), a summary, tags and action items.
• Ava records only while you have recording turned on. It does not listen in the background.

Information from services you connect

• Google Calendar: your events and their details, so Ava can show your schedule, prepare briefings and create or change events when you ask.
• Gmail (read-only): email messages and threads, so Ava can prepare meeting briefings, summarise priority and unread emails, and search your inbox when you ask. Ava cannot send, delete or modify your email.
• The email address of the connected Google account.

Information collected automatically

• Approximate location, only if you allow it, used to determine your city, local time zone and weather.
• Basic technical information such as device type, app version and error logs, used to keep the service running and fix problems.

We use your information to provide and improve the features you use, specifically to:

• Answer your requests by voice or text and take the actions you ask for.
• Prepare pre-meeting briefings from the email threads related to your meetings.
• Transcribe and summarise meetings you record, and link them to the people involved.
• Create and manage your tasks, delegated tasks, reminders and calendar events.
• Send your morning and evening briefs and other notifications you have turned on.
• Keep your account secure, prevent misuse and troubleshoot problems.
• Contact you about your account or important changes to the service.

We do not sell your personal information, and we do not use your data for advertising.

Ava's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google Calendar and Gmail data only to provide and improve the user-facing features described in this policy.
• We do not transfer Google user data to others except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with your notice.
• We do not use Google user data for advertising, and we do not sell it.
• We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.
• No person at Ainoize reads your Google data unless you give explicit permission for a specific purpose (for example, to help with a support request), it is necessary for security or to investigate abuse, or it is required by law.

Calendar and Gmail are connected separately, and you can disconnect either at any time from the Connected Apps screen in Ava, or from your Google Account's security settings.

We use trusted providers to run parts of Ava. They process your information only on our instructions and only to deliver their part of the service:

• OpenAI — generates Ava's responses and summaries from your requests and the relevant context.
• Sarvam AI — converts speech to text (including meeting transcription in English and Indian languages) and text to speech.
• Rumik — provides voices for spoken responses.
• Google — Calendar and Gmail, when you connect them.
• BigDataCloud and Open-Meteo — turn approximate coordinates into a city, time zone and weather, if you share your location.
• Cloud hosting and infrastructure providers that store and serve the application.

We protect your information with industry-standard measures, including encrypted connections (HTTPS) between the app and our servers, access controls that limit who can reach production systems, and authentication on every request to your data.

Access to your Google account uses Google's own sign-in (OAuth). We never see or store your Google password.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

• Meeting and voice audio is deleted from our servers as soon as it has been transcribed. We keep the resulting transcript and summary, not the recording.
• Transcripts, summaries, tasks, reminders, contacts, notes and messages are kept until you delete them or delete your account.
• Google access tokens are kept only while a service is connected and are removed when you disconnect it.
• Technical logs are kept for a limited period for security and troubleshooting.

We may retain limited information for longer where the law requires it.

You stay in control of your data inside the app:

• Delete individual notes, tasks, reminders and contacts at any time.
• Disconnect Google Calendar or Gmail from the Connected Apps screen.
• Delete all of your data from your Profile screen using "Delete all your data".
• Turn location access and notifications on or off in your device settings.

Under India's Digital Personal Data Protection Act, 2023, you also have the right to access a summary of your personal data, to correct or update it, to have it erased, to withdraw consent, to nominate another person to exercise these rights, and to raise a grievance with us. To exercise any of these rights, contact us using the details below. Withdrawing consent does not affect processing that took place before you withdrew it.

We share your information only:

• With the service providers listed above, to operate Ava.
• When you ask Ava to act on your behalf — for example, creating a calendar event that includes other attendees.
• When required by law, regulation, legal process or a valid government request.
• To protect the rights, safety and security of our users, Ainoize or the public.
• As part of a merger, acquisition or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

Meetings involve other people. When you record a meeting with Ava, you are responsible for informing the participants and obtaining any consent required by law before recording. Transcripts and summaries of those meetings are stored in your account and are not shared with the other participants unless you share them.

Ava is built for professionals and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Ava is operated from India. Some of our service providers may process data in other countries. Where this happens, we take steps to ensure your information remains protected in line with this policy and applicable law.

We may update this policy as Ava evolves. If we make material changes, we will notify you in the app or by other means before they take effect. The "Last updated" date at the top shows when this policy was last revised.

If you have questions about this policy, want to exercise your rights, or have a complaint about how we handle your data, contact our Grievance Officer:

• Ainoize — Grievance Officer
• Email: hello@ainoize.com

We will acknowledge your request promptly and respond within the time required by applicable law.