Privacy Policy

We collect your phone number, your messages to the service (which may include health or feelings you choose to share), payment details, and technical/usage data — and use them to run Unalone, respond to you via AI, take payments, and meet legal duties. We do not sell your personal data.

Draft — pending legal review. Last updated: 19 July 2026.

Plain-English summary. Your messages may be processed by AI providers and other vendors on our behalf, and some data may be stored or processed outside India. You can access, correct, or delete your data, withdraw consent, and complain to our Grievance Officer. No system is perfectly secure and we cannot promise absolute confidentiality.

1. Who we are

This Privacy Policy is issued by [Legal entity — to be confirmed], registered office [Address — to be confirmed] (“we”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for personal data processed through Unalone. It covers data processed when you use the service via WhatsApp, our website, checkout pages, and support channels.

2. How Unalone works on WhatsApp

Unalone is delivered primarily as a chat experience over the WhatsApp Business Platform (operated by Meta / WhatsApp LLC). When you message an Unalone companion:

WhatsApp delivers your message to our servers through the official WhatsApp Business Cloud API. Meta/WhatsApp acts as an independent controller of the WhatsApp transport layer under its own Privacy Policy and Business Terms; we do not control that processing.
Once your message reaches our systems, WhatsApp's end-to-end encryption no longer applies — we can read the message content in order to generate a response, maintain your companion's memory, and operate the service.
We send replies back to you via the same WhatsApp Business API. Delivery, read, and failure receipts that WhatsApp exposes to businesses are recorded for reliability and support.
Your interaction with an Unalone companion is a one-to-one business conversation with us. Other WhatsApp users cannot see your messages to Unalone, and Unalone does not post to or read your other WhatsApp chats, groups, contacts, status, or media library.
You can stop the service at any time by replying STOP, blocking the number in WhatsApp, or emailing help@unaloneai.com. Blocking in WhatsApp prevents further messages from us but does not by itself delete data already stored — use STOP or email us to request deletion.

3. Personal data we collect

Identity and contact: your WhatsApp phone number, WhatsApp user/profile identifier and (where visible to businesses) WhatsApp display name and profile picture, any name or details you choose to share in-conversation, timezone/locale, and — if you contact us outside WhatsApp — your email address.
Message content: the text of every message you send to and receive from an Unalone companion, plus any voice notes, images, documents, stickers, reactions, or files you send. Media is stored so the companion can refer back to it and so we can support you.
Health and wellbeing information you volunteer: e.g., stress levels, mood, sleep, fitness activity, dietary habits. You are not required to share this — share only what you are comfortable sharing.
Companion memory: summaries, facts, preferences, goals, and other context we derive from your conversations and store against your account so your companion can respond consistently over time. You can ask us to reset or delete this memory at any time.
Account and subscription data: plan, status, trial usage, renewal dates.
Payment data: processed by our payment provider; we receive confirmation, masked instrument details, and transaction identifiers, not full card numbers.
WhatsApp delivery metadata: message timestamps, WhatsApp message IDs, delivery/read/failure status, conversation category (service, utility, marketing) and template names used, and the cost/session-window information Meta exposes to businesses.
Device and usage data: interaction patterns, feature usage, technical logs, and IP address / user-agent when you use our website.
Website/analytics data: as described in the Cookie Policy.
Support data: your communications with our support team.

4. Purposes and lawful basis

Under the DPDP Act we process personal data on the basis of your consent (obtained at onboarding and checkout) and for certain legitimate uses recognised by law.

Purposes: delivering the WhatsApp chat experience and generating companion responses (which involves AI processing); maintaining your companion's persistent memory so conversations stay coherent over time; sending proactive check-ins and reminders you have opted into; account, subscription, billing, and renewal management; customer support and grievance handling; safety, including responding to messages indicating risk of harm, and abuse prevention; service improvement, quality assurance, and analytics; legal compliance, dispute resolution, and enforcement of our terms; service and (with your consent) marketing communications via WhatsApp, with opt-out.

5. Proactive and template messages on WhatsApp

Meta requires businesses to use approved message templates to start conversations outside the 24-hour customer-service window. We only send proactive messages (check-ins, reminders, renewal notices) that you have opted into by starting a conversation with a companion or by explicitly enabling reminders. You can pause or stop these at any time by replying STOP. We do not send marketing broadcasts to WhatsApp numbers that have not opted in to Unalone.

6. AI processing

Your messages are processed by automated systems, including AI models operated by third-party AI providers acting as our processors, to generate responses. Our contracts with AI providers restrict use of your data to providing services to us.

7. Human review

Our team does not routinely read your conversations. Limited human access may occur where necessary for support you request, safety review, abuse investigation, legal compliance, or technical troubleshooting, under our internal access controls.

8. Model training

We do not use your identifiable conversations to train third-party AI models. We may use anonymised and aggregated data that no longer identifies you for service improvement and analytics.

9. Sharing and disclosures

We share personal data with data processors acting on our instructions, including: Meta Platforms / WhatsApp LLC (WhatsApp Business Cloud API for message transport and delivery), our cloud and database hosting providers, AI model providers, our transactional email provider, our payment processor, and analytics and customer-support tooling. We may disclose data to comply with law, court orders, or lawful requests; to enforce our terms; to protect the rights, safety, or property of users, the public, or us; and to professional advisers under confidentiality.

We do not sell your personal data. We do not share your WhatsApp conversations with advertisers, and we do not use them for advertising or to build advertising profiles. WhatsApp/Meta independently processes data relating to your use of WhatsApp — such as who you message, when, and delivery metadata — under its own terms and privacy policy; we do not control that processing.

10. International transfers

Our processors — including Meta/WhatsApp, AI providers, and cloud hosting — may store or process data outside India (for example in the United States and Europe), consistent with the DPDP Act and contractual safeguards with our processors.

11. Retention and deletion

We retain personal data only as long as needed for the purposes above or as required by law. Message content and companion memory are retained for the life of your account so your companion can maintain continuity; you can request deletion at any time by replying DELETE on WhatsApp or emailing help@unaloneai.com. Payment/tax records are retained as required by Indian tax and accounting law. Meta/WhatsApp retains its own delivery logs under its own policies. On expiry or on request, data is deleted or anonymised, subject to legal holds.

12. Your rights (India — DPDP Act)

You have the right to: access a summary of your personal data and processing; correction and updating; erasure, subject to legal retention needs; grievance redressal; and to nominate a person to exercise your rights in case of death or incapacity. You may withdraw consent at any time by messaging STOP on WhatsApp or emailing support. Withdrawal does not affect prior lawful processing and may mean we can no longer provide the service.

13. Children

The service is for users 18+. We do not knowingly process children’s data. If we learn a user is under 18, we will terminate the account and delete associated data, subject to legal requirements.

14. Security

We use reasonable technical and organisational safeguards appropriate to the nature of the data, including access controls, encryption in transit where supported, and vendor due diligence. Messages are end-to-end encrypted within WhatsApp’s transport, but once received into our business systems they are accessible to our systems and processors. No method of transmission or storage is completely secure — we cannot guarantee absolute security, confidentiality, or anonymity.

15. Data breaches

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act and applicable rules, and take reasonable remediation steps.

16. Grievances

Grievance Officer: [Name — to be confirmed], email help@unaloneai.com. If unsatisfied, you may approach the Data Protection Board of India.

17. Changes

We will notify material changes via WhatsApp and/or email before they take effect.