Privacy Policy
We collect your phone number, your messages to the service (which may include health or feelings you choose to share), payment details, and technical/usage data — and use them to run Unalone, respond to you via AI, take payments, and meet legal duties. We do not sell your personal data.
1. Who we are
This Privacy Policy is issued by [Legal entity — to be confirmed], registered office [Address — to be confirmed] (“we”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for personal data processed through Unalone. It covers data processed when you use the service via WhatsApp, our website, checkout pages, and support channels.
2. Personal data we collect
- Identity and contact: name (if provided), phone number, WhatsApp identifier.
- Message content: text messages, and any voice notes, images, documents, or files you send.
- Health and wellbeing information you volunteer: e.g., stress levels, mood, sleep, fitness activity, dietary habits. You are not required to share this — share only what you are comfortable sharing.
- Account and subscription data: plan, status, trial usage, renewal dates.
- Payment data: processed by our payment provider; we receive confirmation, masked instrument details, and transaction identifiers, not full card numbers.
- Device and usage data: message timestamps, delivery/read metadata available to us, interaction patterns, feature usage, technical logs.
- Website/analytics data: as described in the Cookie Policy.
- Support data: your communications with our support team.
3. Purposes and lawful basis
Under the DPDP Act we process personal data on the basis of your consent (obtained at onboarding and checkout) and for certain legitimate uses recognised by law.
Purposes: providing and personalising the service, including generating responses (which may involve AI processing); account, subscription, billing, and renewal management; customer support and grievance handling; safety, including responding to messages indicating risk of harm, and abuse prevention; service improvement, quality assurance, and analytics; legal compliance, dispute resolution, and enforcement of our terms; marketing communications, only with your consent and with opt-out.
4. AI processing
Your messages are processed by automated systems, including AI models operated by third-party AI providers acting as our processors, to generate responses. Our contracts with AI providers restrict use of your data to providing services to us.
5. Human review
Our team does not routinely read your conversations. Limited human access may occur where necessary for support you request, safety review, abuse investigation, legal compliance, or technical troubleshooting, under our internal access controls.
6. Model training
We do not use your identifiable conversations to train third-party AI models. We may use anonymised and aggregated data that no longer identifies you for service improvement and analytics.
7. Sharing and disclosures
We share personal data with data processors acting on our instructions: WhatsApp Business API provider, cloud hosting, AI provider, payment gateway, analytics, and customer-support tooling. We may disclose data to comply with law, court orders, or lawful requests; to enforce our terms; to protect the rights, safety, or property of users, the public, or us; and to professional advisers under confidentiality.
We do not sell your personal data. We do not share your conversations with advertisers. WhatsApp/Meta independently processes data relating to your use of WhatsApp under its own terms and privacy policy; we do not control that processing.
8. International transfers
Our processors may store or process data outside India, consistent with the DPDP Act and contractual safeguards with our processors.
9. Retention
We retain personal data only as long as needed for the purposes above or as required by law. Payment/tax records are retained as required by Indian tax and accounting law. On expiry, data is deleted or anonymised, subject to legal holds.
10. Your rights (India — DPDP Act)
You have the right to: access a summary of your personal data and processing; correction and updating; erasure, subject to legal retention needs; grievance redressal; and to nominate a person to exercise your rights in case of death or incapacity. You may withdraw consent at any time by messaging STOP on WhatsApp or emailing support. Withdrawal does not affect prior lawful processing and may mean we can no longer provide the service.
11. Children
The service is for users 18+. We do not knowingly process children’s data. If we learn a user is under 18, we will terminate the account and delete associated data, subject to legal requirements.
12. Security
We use reasonable technical and organisational safeguards appropriate to the nature of the data, including access controls, encryption in transit where supported, and vendor due diligence. Messages are end-to-end encrypted within WhatsApp’s transport, but once received into our business systems they are accessible to our systems and processors. No method of transmission or storage is completely secure — we cannot guarantee absolute security, confidentiality, or anonymity.
13. Data breaches
In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act and applicable rules, and take reasonable remediation steps.
14. Grievances
Grievance Officer: [Name — to be confirmed], email help@unaloneai.com. If unsatisfied, you may approach the Data Protection Board of India.
15. Changes
We will notify material changes via WhatsApp and/or email before they take effect.