Legal

Privacy Policy

Last updated: March 15, 2026

Your privacy matters deeply to us. Shvaas is built around the principle that what you share stays yours. This policy explains what we collect, how we use it, and how we protect it.

1. What We Collect

Account information:

• Email address (required for account creation)
• Name (from Google OAuth, if used)
• Subscription and billing status

Session data:

• Voice input — transcribed to text in real time, never stored as audio
• Session transcripts — stored temporarily during a session and deleted after insights are extracted
• Extracted memory insights (themes, emotional patterns, triggers) — stored as structured data, not as raw conversation

Usage data:

• Number of sessions used
• Preferred companion voice
• Internal safety event flags (crisis signals) — stored without conversation content

2. What We Do Not Collect

• We do not store raw audio recordings
• We do not permanently store full conversation transcripts
• We do not sell your data to third parties
• We do not use your conversations to train AI models
• We do not share your data with advertisers

3. How We Use Your Data

• To provide and improve the Service
• To personalize your companion experience using extracted memory insights
• To process subscription payments
• To monitor for safety signals and respond appropriately
• To send essential service communications (account, billing)

4. Data Retention

Session transcripts are deleted after memory extraction runs (typically within minutes of ending a session). Extracted memory insights are retained as long as your account is active. You may request deletion of your memory data at any time by contacting us. When you delete your account, all associated data is permanently deleted within 30 days.

5. Third-Party Services

Shvaas uses the following third-party services to operate:

• Supabase — database and authentication
• Anthropic (Claude) — AI conversation processing
• Deepgram — real-time speech-to-text transcription
• ElevenLabs — text-to-speech voice synthesis
• Polar / Stripe — payment processing

These services process data only as necessary to deliver the Service and are bound by their own privacy policies and data processing agreements.

6. Security

All data is transmitted over encrypted connections (TLS). Database access is restricted by row-level security policies — your data is only accessible to your account. We do not log raw conversation content to application logs.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your memory insights data

To exercise any of these rights, contact us at hello@shvaas.app.

8. Children

Shvaas is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete the account promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

Privacy questions or requests? Contact us at hello@shvaas.app.