Privacy policy

Who we are

Nitya is a product of Taranuka AB, a company registered in Sweden. Taranuka AB is the controller of the personal data described in this policy. You can reach us at info_nitya@taranuka.com; our full contact details are at the end of this page.

What this policy covers

It covers this website, the waitlist, and the Nitya service: the daily calls Nitya makes to your parent or grandparent, and the summaries and alerts it sends to you and your family.

The data we collect

What we hold depends on how you use Nitya.

• When you join the waitlist: your name and email, the region you live in, who Nitya would call, their city and language, whether they use WhatsApp, the best time to call, how you heard about us, the campaign link you arrived from (if any), and when you gave consent to be contacted.
• When you visit the website: if analytics is turned on, Google Analytics records the pages you visit, the buttons you press (such as "Try it yourself"), your device and browser type, and your approximate location. It uses cookies to do this. Our servers also keep short technical logs (time, page and status code) for security; they don't include what you type into forms.
• To stop abuse of the waitlist, we briefly keep your IP address in memory to count requests. It is never written to our database or logs.
• When you use the service: your account details (name, email, time zone); what you tell us about the person Nitya calls (their name, how to address them, WhatsApp number, language, city, interests, and, if you choose, their medicines and a local contact); and, for each call, the recording, the transcript, the summary, any alerts, and the things Nitya remembers for the next call.
• Consent records: when and how you confirmed your parent's agreement, and when your parent agreed on a call or on WhatsApp.

Why we use it, and our legal basis

• To contact you about the pilot, based on the consent you give on the waitlist form. You can withdraw it at any time by writing to us.
• To understand which parts of the website work, through Google Analytics, based on our legitimate interest in improving the website.
• To provide the service: to make the calls, write and send the summaries and alerts, and remember what matters to your parent. This is necessary to perform our agreement with you, and is based on your parent's own agreement to the calls.
• To keep Nitya safe and secure, and to check call quality during the pilot, based on our legitimate interest in a reliable and safe service.
• To meet legal obligations, such as bookkeeping once we charge for the service.

Your parent, and the people we call

Nitya only calls someone who has agreed to the calls. It says at the start of each call that it is an AI assistant set up by their family, and it stops calling whenever they ask. The person we call has the same rights over their data as you do, and can contact us directly.

Summaries are shared with the family members you add. They are written to help you look after your parent, not to monitor them, and your parent can ask what is shared.

Who processes data for us

We use these service providers. Each processes data only on our instructions, under a data processing agreement.

• Supabase: our database and sign-in service, hosted in the EU.
• Railway: hosts the website and the service, in the EU.
• Google: the Gemini AI model writes the summaries and the brief for the next call; Google Analytics measures website use.
• Sarvam AI: speech recognition, the conversation model and the voice during calls, processed in India.
• Meta: WhatsApp carries the calls and messages.

Transfers outside the EU

Our data is stored in the EU. Some providers process it elsewhere while doing their work: Sarvam AI in India, and Google and Meta in the United States and other countries. Where a country does not have an adequacy decision from the European Commission, we rely on the Commission's standard contractual clauses or, for US companies, the EU–US Data Privacy Framework.

How long we keep it

• Waitlist sign-ups: until the pilot invitations are done, and never longer than 24 months, unless you become a customer.
• Call recordings: 30 days.
• Transcripts: 12 months. Summaries and memories: until you delete them or close your account.
• Calls from "Try it yourself": 7 days.
• Analytics data: at most 14 months.
• When you close your account, we delete your family's data within 30 days, except what the law requires us to keep.

Who can see it

The family members you add see your parent's summaries, alerts and memories. During the pilot, a small number of people at Taranuka AB read call transcripts to check that calls are kind, safe and useful. We never sell personal data, and we never use it for advertising.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, ask for it in a portable format, and withdraw consent at any time. Write to info_nitya@taranuka.com and we will answer within a month. If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY) or to the data protection authority where you live.

Not an emergency service

Nitya is not a medical or emergency service. In an emergency in India, call 112.

Children

Nitya is for adults. We don't knowingly collect data from anyone under 18.

Changes to this policy

We will update this page when our practices change, and tell you directly about important changes before they take effect.