Privacy Policy

Last updated: September 28, 2026 · Version 1.6

1. Introduction

This Privacy Policy explains how Swastik AI Technology ("YUVAA AI", "Company", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you use the YUVAA AI mobile application, website, and related services.

We want you to know exactly what we collect, why we collect it, which outside companies process it, and what happens to sensitive things like your medical reports, financial details, or your child's health data. This version of the policy is written to be as specific and complete as possible, including naming the actual third-party providers we use and describing exactly what happens to files you upload.

By using YUVAA AI, you agree to the practices described in this Privacy Policy.

2. Scope

This Privacy Policy applies to:

the YUVAA AI mobile application
the YUVAA AI website
support, complaint, feedback, and communication channels
subscriptions, payments, and related account management
any related product experience operated by Swastik AI Technology under the YUVAA AI brand

3. Our Agents and Services

YUVAA AI is a collection of specialised AI "agents," each built for a specific area of your life. Not every agent listed below is available to the public yet — we're telling you about all of them, including the ones still in development, so you have full visibility into where the product is headed and how each one will handle your data once it launches.

Currently available (confirmed September 24, 2026):

Gym Trainer — workout plans, meal tracking, and photo-based meal/gym analysis
Jyotish (Astrology) — Vedic astrology, birth charts, and voice-based chat
Report Guide — plain-language explanations of medical/lab reports
Pregnancy Friend — week-by-week pregnancy guidance and report analysis
Newborn Care — 0–12 month baby care guidance and pediatric report analysis
Travel Planner — trip planning, flights, hotels, and itinerary generation
Vedic Maths — a subject tutor for school-level Vedic Maths
Financial Adviser — financial planning, including an optional credit-score check
Fashion Advisor — outfit and styling recommendations from your photos
Biology Tutor — a subject tutor for school-level Biology
SoulMate — a marriage-readiness self-assessment, followed by optional partner matching based on that assessment. See Sections 4.1, 9, and 10.4 for what makes this agent's data handling different from every other agent — it's the only one where information you provide can become visible to, or shared with, another user

In development (not yet publicly launched):

Tax Assistant — income tax filing and GST compliance help
Government Schemes Finder — matching you to government welfare schemes
Physics, Chemistry, History, Civics, and Geography Tutors — additional subject tutors, built on the same pattern as Vedic Maths and Biology Tutor

Sections 4, 6, 8, and 9 below already describe how the in-development agents will collect and use data, so you can review those practices before the agent goes live. When we launch a new agent, or launch any agent listed above as "in development," we will update this Privacy Policy first (see Section 17), and we will revise the "Last updated" date whenever we do.

4. Personal Data We Collect

We collect personal data in the following categories.

4.1 Personal Data You Provide

Account and Profile Information

When you create or use an account, we may collect information associated with that account, including:

mobile number (used as your primary account identifier and for OTP login)
name
email address, if you choose to provide it
username, if you choose to provide it
age, date of birth, or gender, if you choose to provide it
pincode, city, or state, if you choose to provide it
subscription and account identifiers linked to your profile

User Content

We collect personal data that you provide in inputs to our services ("Content"), including:

prompts and messages you type
chat inputs and follow-up responses
profile and onboarding information you choose to share
support, suggestion, or complaint submissions
files, photos, or reports you upload for analysis (for example: medical/lab reports, ultrasound reports, pediatric reports, Kundli/birth-chart photos, meal or gym photos, styling photos, or Form 16 documents)
for SoulMate specifically: up to 4 profile photos, your answers to a 64-question relationship/marriage-readiness assessment, your bio and what you're looking for in a partner, and (optionally, if you want a Kundli Match check) your birth date, time, and place

What happens to files you upload: when a feature analyses a photo or document (medical reports, ultrasound/lab reports, Kundli photos, meal or gym-machine photos, styling photos, tax documents), the file is processed in memory by our AI systems to extract the relevant information (for example, test results, chart positions, body type, or income figures). We do not permanently store the original photo or document itself — only the structured, extracted data is saved to our database. Section 8 explains which AI provider performs this extraction.

SoulMate profile photos are the one exception to "not permanently stored" above. Unlike every other photo type in this app, your SoulMate profile photos are retained and shown to other users you're matched with, or who you're browsing as a potential match — that's the whole point of a profile photo. They are not processed-then-discarded the way a medical report photo is.

Depending on the feature you use, Content may include sensitive information — see Section 9 for specifics on medical, pregnancy, newborn, financial, and tax-related data.

Communication Information

If you communicate with us, we may collect:

your name
your contact details
the contents of messages, complaints, or support requests
records of our replies and follow-up actions

Other Information You Provide

We may also collect other information you choose to provide, for example:

survey responses
event participation details
business or verification information if needed to resolve an issue or comply with law

4.2 Personal Data We Receive From Your Use of the Services

Log Data

When you visit, use, or interact with our services, we may automatically receive information such as:

IP address
request timestamps
browser type and browser settings
device and app version details
requested pages, endpoints, or service actions
error and diagnostic logs (via Sentry — see Section 8; our error monitoring is configured to exclude personal data/PII from these logs)

Usage Data

We may collect information about how you use YUVAA AI, such as:

the features or agents you use
the type of workflows you engage with
subscription status and access patterns
complaint submission and support interaction events
session timing and product activity patterns

We do not use any third-party analytics, advertising, or cross-app tracking SDK (such as Firebase Analytics, Mixpanel, or PostHog) in the app today. Usage data described above is recorded in our own backend systems only.

Device Information

We may collect limited device information such as:

device type
operating system
app version
browser type
a push notification (FCM) token, so we can send you notifications — see below
basic device identifiers needed for security or service delivery

Location Information

We do not access your device's live GPS location. Where a location is needed for a feature — for example, converting a birth place you type into map coordinates for an astrology chart — we convert the place name you typed into approximate coordinates using OpenStreetMap/Nominatim (see Section 8). We may also infer a general, city/state-level location from your IP address or the pincode/city you provide in your profile, used for security, fraud prevention, and basic personalization.

Cookies and Similar Technologies

If you use our website, we may use cookies, local storage, or similar technologies to:

keep the website functioning properly
remember preferences
maintain session continuity where relevant
improve website performance and reliability
support security and abuse prevention

5. Information We Receive From Other Sources

We may receive limited information from other sources, such as:

our SMS/OTP provider (Fast2SMS, with Twilio as a backup) confirming that an OTP was delivered
our payment provider confirming subscription and payment status — Razorpay or Google Play Billing on Android, Razorpay on the web, Apple (via the App Store) on iOS
if you use the optional credit-score check in Financial Adviser, our credit bureau partner (Experian India) — see Section 9
service providers supporting hosting, delivery, security, logging, or messaging
lawful requests, legal processes, or compliance-related sources where applicable

We do not scrape public internet data about you for this product experience.

6. How We Use Personal Data

We use personal data for the following purposes:

to provide, operate, and maintain our services
to create and manage user accounts, and to authenticate you via OTP
to respond to prompts, messages, and workflow inputs, including generating AI responses via OpenAI and Anthropic (see Section 8)
to personalize and improve product experience
to provide subscriptions, manage access, and process billing-related states — via Razorpay or Google Play Billing on Android, Razorpay on the web, or Apple's In-App Purchase system on iOS (Section 8)
to send push notifications you'd expect from the agents you use (for example, a daily pregnancy check-in reminder or a workout streak nudge)
to respond to support requests, complaints, and feedback
to monitor performance, reliability, abuse, and safety issues
to improve and develop product features, workflows, prompts, and service quality
to conduct internal analysis, debugging, and service research
to prevent fraud, misuse, unauthorized access, and other harmful activity
to comply with law, regulation, legal process, or enforcement obligations
to protect the rights, privacy, safety, security, and property of users, the public, YUVAA AI, and third parties

We may also aggregate or de-identify personal data so that it no longer identifies you and use that information for analytics, service improvement, reliability, and product development purposes.

7. How AI Processing Works

YUVAA AI's agents are built on large language models from two providers: OpenAI and Anthropic. We do not use any other AI model provider today.

Specifically:

OpenAI (GPT-4o family) generates chat responses across most agents, analyses uploaded photos and documents (medical reports, Kundli photos, meal/gym photos, styling photos, Form 16 documents), transcribes voice input via Whisper (used in Jyotish), converts responses to speech via OpenAI's text-to-speech (also Jyotish), and generates illustrative destination photography via DALL·E (used only by Travel Planner).
Anthropic (Claude Sonnet/Haiku family) generates chat responses for several agents, including Tax Assistant, Report Guide, Pregnancy Friend, and Newborn Care.

When you use the service, your Content is processed by:

our application servers and orchestration/routing systems
our database and infrastructure systems
OpenAI and/or Anthropic, to generate the actual AI response or extraction

Because OpenAI and Anthropic operate primarily outside India, this means your Content may be transmitted outside India for processing — see Section 15.

We may use Content you provide to operate, review, improve, debug, and make the service safer and more useful. This may include quality review, workflow refinement, abuse detection, prompt evaluation, and product improvement.

We do not sell your personal conversation data to third parties, and we do not share your Content with OpenAI or Anthropic for use in training their general-purpose models beyond what their standard API terms provide (both providers' standard commercial API terms exclude API data from model training by default).

8. Third-Party Services We Use

We use the following named providers for specific operational functions. We list every provider actually integrated into YUVAA AI today, plus the providers that will come into use when an in-development agent (Section 3) launches.

Used across the app today:

Fast2SMS — sends the OTP text message used to log in. This is our primary login mechanism.
Twilio — a backup SMS provider, used only if Fast2SMS is unavailable.
Firebase Cloud Messaging (Google) — delivers push notifications to your device. Firebase is not used for login or authentication.
Razorpay — processes subscription payments and one-time orders on Android and the web.
Google Play Billing — an alternative in-app payment path for Android, used instead of Razorpay for some Android purchases. Google handles the payment method and receipt directly; we receive only transaction/subscription status from Google Play, never your card details.
Apple, via the App Store's In-App Purchase system — processes subscription payments and one-time purchases on iOS. Apple handles the payment method, receipt, and refund process directly; we receive only transaction/subscription status from Apple, never your card or Apple ID payment details.
OpenAI and Anthropic — generate AI responses and analyse uploaded content, as described in Section 7.
Sentry — server-side error monitoring, configured to exclude personal data/PII from error reports, so we can find and fix bugs.
Oracle Cloud Infrastructure (OCI) Object Storage — hosts static lesson media (diagrams, illustrations) for our subject-tutor agents (Vedic Maths today; Biology, Physics, Chemistry, History, Civics, and Geography once launched). This storage holds our own lesson content, not your personal uploads.
OpenStreetMap / Nominatim — converts a birth-place name you type into map coordinates for astrology chart calculations (Section 4.2).
Google Flights and Google Hotels (via SerpAPI), Cleartrip, Booking.com (via RapidAPI), Google Distance Matrix, OpenWeather, and Pexels — used by Travel Planner to search flights/hotels, check weather, calculate travel times, and source destination photography.

Used only by specific in-development agents, once launched:

Financial Adviser: Experian India, our credit bureau partner for the optional credit-score feature — see Section 9 for how this works and the consent required.

These providers process data only as needed to perform services for us, subject to their contractual and policy obligations, and (for OpenAI/Anthropic/Experian) subject to the cross-border transfer notice in Section 15.

9. Sensitive Information

Several YUVAA AI agents necessarily handle sensitive information. We describe exactly what, so you can decide how much to share.

Report Guide, Pregnancy Friend, Newborn Care: health details you or your uploaded reports describe — for example, test results, health conditions (such as gestational diabetes, anemia, thyroid, or hypertension), doctor and emergency-contact details, and pediatric information about your baby. As described in Section 4.1, the original report/photo is not retained — only the extracted data.
Tax Assistant and Financial Adviser: financial figures (income, deductions, loans, insurance), your GSTIN if applicable, and your PAN (Permanent Account Number), which we store to support tax filing, GST compliance, and financial-profile features. We do not collect your Aadhaar number or a copy of your Aadhaar document; a checkbox in Financial Adviser only records whether you've organized your own Aadhaar paperwork, not the number itself.
Financial Adviser's optional credit-score feature: if you choose to check your credit score, we will ask for your explicit, separate consent before sending your PAN, name, mobile number, and date of birth to our credit bureau partner, Experian India, to perform a soft credit pull. This only happens if you actively request a credit-score check — it is never run automatically.
Government Schemes Finder: to match you to schemes, we may ask for sensitive eligibility details including your caste category and family income. This information is held only in a temporary session cache for up to 12 hours to complete your eligibility check, and is not written to our permanent database.
Astrology: your date, time, and place of birth, used to calculate your chart. Place of birth is converted to approximate coordinates as described in Section 4.2 — we do not access live GPS.
Fashion Advisor: photos you upload are analysed to derive attributes like body type and undertone; only these derived attributes are stored, not the original photo.
SoulMate: your answers to a 64-question relationship/marriage-readiness assessment (covering things like emotional maturity, conflict style, family expectations, and money philosophy), your profile photos, and, if you opt into a Kundli Match check, your birth date, time, and place. Your individual assessment report is private to you — see Section 10.4 for exactly what becomes visible to other users, and when.

You decide what to share with YUVAA AI. Please avoid providing more personal or sensitive information than is necessary for your intended use of a feature. Where sensitive information is processed, we use it only for the legitimate service purpose described above, plus safety, support, product quality, and legal purposes.

If the information you share relates to someone other than yourself — for example, a spouse's or family member's medical report, an unborn or newborn child's health details, a family member's PAN for the credit-score feature, or a household member's caste or income details for the Government Schemes Finder — you must have that person's consent to share it with us (or, where they are a minor or otherwise unable to consent, you must be their parent or legal guardian acting in their interest). We rely on your confirmation of this when you submit such information; see the corresponding representation in our Terms and Conditions.

10. Disclosure of Personal Data

We may disclose personal data in the following circumstances:

10.1 Vendors and Service Providers

We may disclose personal data to the vendors named in Section 8, each acting within the scope described there. We do not disclose personal data to any vendor not named in this policy without updating the policy first.

10.2 Business Transfers

If we are involved in a merger, acquisition, restructuring, financing, insolvency event, asset sale, or similar business transaction, personal data may be disclosed as part of diligence and may be transferred as part of that transaction, subject to appropriate protections.

10.3 Government Authorities or Other Third Parties

We may disclose personal data where required or permitted by law, including:

to comply with legal obligations
to respond to lawful requests, orders, or process
to protect and defend our rights or property
to investigate or prevent fraud, abuse, misuse, security incidents, or illegal activity
to protect the safety, security, and integrity of our users, platform, employees, or the public
to reduce legal or regulatory risk

10.4 Other Users — SoulMate

SoulMate is the only agent where your information can become visible to, or be shared with, another user of the App, rather than only with us and the vendors named in Section 8. Specifically:

Your individual assessment report is private. The narrative read of your 64-question assessment, and your raw answers, are visible only to you — never to another user, and never used to publicly label or score you.
Other users can see your profile — your photos, bio, and what you've said you're looking for — while browsing potential matches, along with a compatibility summary generated from both your assessments (not your raw answers or theirs).
Contact details are shared only on mutual, two-way consent. Sending a SoulMate Request does not share anything beyond what's already visible in your profile. Your phone number and other contact details become visible to a specific other user only after both of you have independently chosen to accept a match with each other. You can decline or ignore a request with no obligation and no notification sent to the other user about your decision.
If you opt into a Kundli Match check, your birth date/time/place is used to calculate compatibility with a specific match candidate; we do not display your raw birth details to other users, only the resulting compatibility read, unless you choose to share them yourself.

Beyond SoulMate, if a future feature allows sharing, publishing, or transmitting content to third parties, information you intentionally share through that feature will be handled according to the design of that feature and any applicable third-party terms, and we will update this policy when such a feature launches.

10.5 Aggregated or De-Identified Data

We may share aggregated or de-identified information that does not reasonably identify you for analytics, reliability, service improvement, or business reporting.

11. Data Retention

We retain personal data only for as long as reasonably necessary to:

provide the service to you
maintain account, subscription, and transaction history
resolve disputes, complaints, or support requests
protect against fraud, abuse, and security incidents
comply with legal, tax, accounting, payment, or regulatory obligations

Retention depends on the type of information, how we use it, and any legal or operational need to keep it. For example:

account and profile data may be retained while your account remains active
extracted data from uploaded reports/photos is retained as part of your agent history; the original file is not retained (Section 4.1)
Government Schemes Finder eligibility details (including caste/income) are held for a maximum of 12 hours in a temporary session cache, not permanently
subscriptions and payment-related records may be retained for accounting, compliance, and dispute-resolution purposes
support or complaint records may be retained for follow-up, quality, safety, and audit purposes
logs and technical records may be retained for security, abuse prevention, diagnostics, and reliability

If you request deletion of your account or personal data, we will take reasonable steps to delete or anonymize applicable data within a reasonable time, unless we need to keep certain data longer for legal, financial, security, fraud-prevention, or compliance reasons.

12. Data Controls

Here is exactly what you can control today, and what requires contacting us:

You can delete an individual conversation directly in the app, at any time, from within the relevant agent — this permanently removes that conversation and its messages.
You can review and update certain profile information directly in the app.
You can cancel your subscription directly in the app.
You can permanently delete your entire account directly in the app (Settings > Delete Account) — this cancels active subscriptions, purges your chat history and per-agent context, and locks the account immediately. If you'd rather request it by email instead, contact support@yuvaa.ai and we will process it within a reasonable time, subject to the retention exceptions in Section 11.
We do not currently offer a self-service data export, model-training opt-out, or contact-syncing control; if you'd like a copy of your data, email support@yuvaa.ai.

13. Your Rights

Depending on where you live and applicable law, you may have rights relating to your personal data, such as the right to:

access personal data we hold about you
request correction or updating of inaccurate personal data
request deletion of applicable personal data
request restriction of certain processing
object to certain processing where allowed by law
request portability of certain personal data where applicable
withdraw consent where processing is based on consent
lodge a complaint with a competent authority where applicable

To make a privacy-related request, contact support@yuvaa.ai. We may need to verify your identity before completing certain requests.

14. Children and Age Eligibility

YUVAA AI is intended primarily for adults.

Users must be at least 18 years old to use the service independently.
Users aged 13 to 17 may use the service only under the supervision of a parent or legal guardian.

We do not knowingly collect personal data from children in violation of applicable law. If we learn that such data has been collected improperly, we will take reasonable steps to investigate and delete it where appropriate.

15. International Processing

Some of our data leaves India during processing:

OpenAI and Anthropic, our AI providers (Section 7), operate primarily in the United States. Content you send to an agent may be transmitted to and processed by these providers outside India.
Experian India, our credit bureau partner used only for Financial Adviser's optional credit-score feature, processes data within India.

Where data is processed outside India, we take reasonable steps to work with providers appropriate for operating the service and protecting user information under applicable legal and contractual frameworks.

16. Security

We implement commercially reasonable technical, administrative, and organizational measures designed to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. This includes not retaining original uploaded files (Section 4.1) and configuring our error-monitoring tool (Sentry) to exclude personal data from diagnostic logs (Section 8).

However:

no system is completely secure, and we do not and cannot guarantee absolute security
no internet transmission is completely risk-free
you are responsible for protecting your device, OTPs, credentials, and access to your account
to the maximum extent permitted by applicable law, we are not liable for unauthorized access, disclosure, alteration, or loss of data caused by circumstances beyond our reasonable control — including a breach or failure of a third-party provider named in Section 8, a security incident caused by your failure to protect your OTP, credentials, or device, or any other cause not attributable to our own gross negligence or wilful default

17. Policy Updates

We may update this Privacy Policy from time to time. In particular, we will update this policy — and revise the "Last updated" date above — before or at the same time as we launch any new agent, or launch any of the in-development agents listed in Section 3, so that this policy always reflects what the product actually does. Where a change is material, we will provide additional notice through the app, website, or support channels.

Your continued use of YUVAA AI after an updated Privacy Policy becomes effective means you accept the revised policy.

18. Contact Us

If you have privacy questions, concerns, or data-related requests, contact us at:

Support email: support@yuvaa.ai
Brand: YUVAA AI
Company: Swastik AI Technology