Privacy Policy

Who We Are

Humraaz is an AI companion application operated by the Humraaz team. For privacy enquiries, contact us at [email protected].

Information We Collect

We collect the following categories of information:

We do not collect or verify your age, government identification numbers, payment card information (handled by Apple or Google), or precise real-time location data.

• **Account information:** Email address and display name provided by your Google or Apple sign-in. We do not offer direct registration, so we do not collect passwords. Mobile number is optional and collected only if you choose to provide it.
• **Conversation content:** Text you enter during AI companion sessions may be stored to maintain session continuity, generate responses, improve conversation quality, and support platform reliability.
• **Device and technical information:** App version, operating system, device type, crash reports, and diagnostic data used to support performance monitoring and troubleshooting.
• **Usage analytics:** Aggregated or de-identified feature interaction signals and session quality metrics used to understand how the Service is used and improve the experience.

How We Use Your Information

We use collected information to:

Where required by applicable law, we process personal data based on legitimate interests, contractual necessity to provide the Service, user consent where applicable, or compliance with legal obligations.

• Deliver and operate the AI companion Service
• Maintain and improve AI conversation quality and system performance
• Provide account management, authentication, and customer support
• Detect and prevent abuse, fraud, and platform reliability issues
• Comply with legal obligations in applicable jurisdictions
• Send service-related communications (not marketing communications without consent)

Conversation Data and Identity Separation

Humraaz is designed so that conversation content processed by the AI is not directly linked to your account identity, email address, or profile within the AI processing layer. This architectural separation means that while conversation data may be stored, it is processed in a de-identified manner for AI response generation.

However, you should exercise caution about the personal information you share in conversations, as data is stored on our systems and subject to this Privacy Policy.

Sensitive and Emotional Context Data

Because users may discuss sensitive personal topics — such as relationship difficulties, emotional distress, grief, parenting challenges, and personal confidence — we apply enhanced care in access controls, monitoring, and data minimisation.

Conversation content is treated as sensitive data within our systems and internal access is restricted to authorised personnel who require it for operational, security, or support purposes.

AI Processing

Humraaz uses AI systems to generate responses to user messages. Conversation text you submit may be processed by AI infrastructure providers that assist us in delivering AI-generated responses. These providers process data only on our behalf and under contractual confidentiality and data protection obligations.

Data Sharing

We do not sell your personal information.

We may share limited information in the following circumstances:

We do not share your conversation content with third parties for advertising, profiling, or data brokerage purposes.

• **Trusted service providers:** Third-party processors (such as cloud hosting, analytics, authentication providers, and AI infrastructure providers) who assist us in operating the Service under appropriate data processing agreements.
• **Legal obligations:** Where we are required to disclose information by law, court order, or regulatory authority.
• **Safety and rights protection:** Where disclosure is necessary to protect the rights, safety, or property of Humraaz, our users, or the public.
• **Business transfers:** In the event of a merger, acquisition, or asset sale, your information may be transferred to a successor entity, subject to equivalent privacy protections.

Third-Party Sign-In Providers

When you sign in with Google or Apple, we receive your email address and display name from those providers.

Your use of Google Sign-In and Apple Sign-In is also governed by the privacy policies of those providers. We do not receive your contacts, social graph, or other account data beyond what is necessary for authentication.

Data Security

We implement industry-standard safeguards designed to protect personal information, including encryption in transit (TLS), secure storage, and restricted access controls.

Access to user data is limited to authorised personnel on a need-to-know basis for operational, support, or security purposes.

While we strive to protect user data, no system is completely secure. We continuously improve our monitoring, safeguards, and incident response procedures.

If a data breach occurs that affects your personal information, we will notify affected users and relevant authorities where required by applicable law.

Data Retention

We retain personal information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Conversation data may be retained to support conversation continuity, service improvement, and system reliability.

When information is no longer required, we delete or de-identify it where reasonably possible.

If you delete your account or request deletion, we will remove your personal information and associated data from our systems subject to legal or operational retention requirements.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Users in the United Kingdom and European jurisdictions may have rights under UK GDPR or GDPR.

California residents may have rights under CCPA or CPRA.

Canadian users may have rights under PIPEDA and provincial privacy laws.

Australian users may have rights under the Privacy Act 1988.

Indian users may have rights under applicable data protection legislation.

To exercise your rights, contact [email protected]. We may verify your identity before processing requests and will respond within the timeframe required by applicable law.

• **Access:** Request a copy of the personal information we hold about you.
• **Correction:** Request correction of inaccurate or incomplete data.
• **Deletion:** Request deletion of your personal information.
• **Portability:** Request your data in a structured, machine-readable format where applicable.
• **Restriction or objection:** Object to or request restriction of certain data processing activities.
• **Withdraw consent:** Withdraw consent where processing is based on consent.

Children and Teens

Humraaz is not intended for children under 13.

We do not knowingly collect personal information from children under 13. If we become aware that a user under 13 has created an account, we will delete the account and associated data.

Teen users aged 13 to 17 should use the Service with parental guidance where required by law in their jurisdiction.

International Data Transfers

Your information may be processed and stored in countries other than your country of residence.

When personal data is transferred internationally, we apply appropriate safeguards required by applicable privacy laws, including contractual protections and equivalent mechanisms where required under UK GDPR, Canadian law, or Australian privacy law.

Region-Specific Disclosures

We are committed to protecting your privacy and processing personal data in accordance with applicable data protection laws.

We implement reasonable administrative, technical, and organisational safeguards designed to protect your personal information.

Policy Updates

We may update this Privacy Policy periodically.

If material changes are made, we will post the updated version with a revised date and may notify users through the app or via email where appropriate.

Your continued use of the Service after updates are posted constitutes acceptance of the revised Privacy Policy.

Contact

For privacy questions, requests, or concerns, contact us at [email protected]. We aim to respond within 30 days or within the timeframe required by applicable law.