Privacy Policy

Introduction

Welcome to Akiluma (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mental health and wellness application.

By using Akiluma, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our application.

Information We Collect

Personal Information

• Name and email address
• Username and profile information
• Authentication credentials (encrypted)
• Gender/sex (optional)

Health and Wellness Data

• Mood tracking information (Happy, Normal, Sad)
• Journal entries including titles, descriptions, and gratitude practices
• Wellbeing check-in preferences and focus areas
• Responses to onboarding questionnaires about mental health goals

Conversation Data

• Voice recordings from conversations with our AI assistant
• Transcripts of voice conversations
• Text-based chat messages
• AI voice preferences (Shimmer, Echo, Ash, Coral)

Technical Information

• Device information and identifiers
• App usage data and analytics
• IP address and approximate location data (only if you grant permission)
• Login timestamps and session information
• App version and operating system information

How We Use Your Information

We use the collected information for the following purposes:

• Provide personalized mental health and wellness support through AI conversations
• Track your wellness journey and progress over time
• Generate insights and recommendations based on your mood and journal entries
• Authenticate your account and maintain security
• Send you important updates and notifications about your wellness activities
• Improve our AI models and application features
• Comply with legal obligations and protect our rights
• Detect, prevent, and address technical issues or security threats

Data Sharing and Disclosure

We take your privacy seriously and do not sell your personal information. We may share your information only in the following circumstances:

Service Providers

We work with trusted third-party services to provide our application:

• AWS Services: For voice transcription (Transcribe), text-to-speech (Polly), and AI models (Bedrock)
• OpenAI & Anthropic: For AI-powered conversations and insights
• Firebase: For push notifications and authentication
• Google/Apple: For OAuth authentication services

Legal Requirements

We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect rights, property, or safety.

Aggregated Data

We may share aggregated, anonymized data that cannot identify you personally for research or analytical purposes.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner, subject to the same privacy protections described in this policy.

Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for all conversations using TweetNaCl
• Unique encryption keys for each user
• Secure HTTPS/WSS protocols for all data transmission
• JWT tokens with refresh mechanisms for session management
• Regular security audits and updates
• Secure storage of sensitive data with encryption at rest

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any breaches as required by law.

Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations:

• Chat History: Automatically deleted after 1 year
• Conversation Summaries: Automatically deleted after 2 years
• Journal Entries: Retained until you delete them or close your account
• Account Data: Retained while your account is active
• Deleted Accounts: Permanently purged after 30 days

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Export

You can request a copy of all your personal data through the app's data export feature.

Correction

You can update your profile information at any time through the app settings.

Deletion

You can request complete deletion of your account and all associated data. This action is permanent and cannot be undone.

Opt-Out

You can opt out of:

• Push notifications through your device settings
• Marketing communications (though we send minimal marketing emails)
• Certain data collection by adjusting app permissions

Data Portability

You can export your data in a machine-readable format for transfer to another service.

Children's Privacy

Akiluma is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. Users must be at least 13 years old to use Akiluma.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by:

• Posting the new policy on this page with an updated “Last Updated” date
• Sending an in-app notification or email for significant changes

We encourage you to review this policy periodically. Your continued use of Akiluma after changes indicates acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For immediate assistance with account deletion or data export, please use the in-app features available in your profile settings.