Privacy Policy

1. What personal data we collect

• Account data. When you sign in with Google we receive your name, email address, and profile photo from Google. With email sign-in we receive the address you enter. If you try the app without signing in, the display name you choose is stored only in your browser.
• Your conversations. Text messages you send, photos you attach, images generated for you, and voice-call transcripts/captions. Voice audio is processed live to carry the call and is not kept as recordings by us.
• Trial and safety data. Your IP address is used only to enforce anonymous trial limits (a few calls or messages per window) and to detect abuse. A one-way hash of your account is shared with our AI provider for safety monitoring.
• Waitlist data. If you join the waiting list, we keep the email address you provide.
• Product analytics (PostHog). Page visits and feature usage as metadata only (for example, that a trial message was sent — never what it said).
• Error reports (Sentry). Crash diagnostics with scrubbed URLs to fix reliability issues.
• On-device preferences. Theme choice, invite status, and demo-mode details live in your browser's local storage and never leave your device unless needed for the service.

2. Why we collect it

• To create your account and keep you signed in.
• To generate replies, images, and live voice calls you request.
• To save your chat history so it is there when you return.
• To prevent fraud, spam, and abuse of free trials.
• To answer support requests and tell waitlisted users when access opens.

3. How we use it

Your content is used to operate the service: it is sent to our AI providers to produce a response and stored in your account history. We do not use your conversations to show you ads, and we do not build advertising profiles. Aggregated, de-identified statistics (for example, how many trial calls were started) may be used to keep the service reliable.

4. Where and how it is stored

Account and conversation data is stored in our managed Postgres database (Supabase) with encryption in transit and at rest, plus access controls limited to operating the service. Preferences and demo-mode data stay in your own browser. Ephemeral voice-call keys expire within minutes of a call ending.

5. Third parties we share it with

• Supabase — authentication, database, and account storage.
• Google — only if you choose Google sign-in (OAuth profile data).
• AI providers (OpenAI, Google, OpenRouter) — the messages, images, or live audio needed to generate the response you asked for, governed by their own data-processing terms.
• Cloudflare — hosting and delivery of the app.
• PostHog — product analytics (page visits, feature usage as metadata only, no message content).
• Sentry — error and crash monitoring with scrubbed URLs.

We share data only as needed to run the service, comply with law, or protect safety. We never sell personal data.

6. Analytics and advertising

AI Bhai carries no third-party advertising and no advertising trackers. For pre-launch validation we use PostHog for product analytics (what features get used, as metadata only — never message content) and Sentry for error monitoring (crash reports with scrubbed URLs). PostHog honors your browser's Do-Not-Track setting.

7. Your rights

Depending on where you live (including rights under India's DPDP Act where applicable), you may ask to access, correct, export, or delete your personal data. You can rename or delete individual conversations in the app at any time, and signing out plus clearing the app's site data removes demo-mode information from your device. For anything you cannot do yourself, email us and we will help.

8. Data retention and deletion

• Conversations you delete are removed from your account and are no longer served to you.
• Accounts and remaining data are kept while your account is active; ask us to delete your account and we will erase it within 30 days, except where law requires longer retention.
• System backups roll off on a short cycle and are not used to restore deleted content.
• Trial and rate-limit counters expire automatically (typically within 24 hours).
• Waitlist emails are kept until launch access opens or you ask to be removed.

9. Children

AI Bhai is not directed at children. If you are under 18, please use it only with a parent or guardian's permission, and do not share personal details in chats.

10. Changes to this policy

If we make material changes, we will update the date above and, where appropriate, notify you in the app before they take effect.

Contact us

Questions about this policy? Write to [email protected] and we will respond as quickly as we can.