Privacy Policy

Introduction

Welcome to Akiluma (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wellness application.

By using Akiluma, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our application.

Information We Collect

Personal Information

• Name and email address
• Username and profile information
• Authentication credentials (encrypted)
• Gender/sex (optional)

Health and Wellness Data

• Mood tracking information
• Journal entries including titles, descriptions, and gratitude practices
• Wellbeing check-in preferences and focus areas
• Responses to onboarding questionnaires about goals

Conversation and Audio Data

• Voice recordings and audio data: We record and process audio from your device's microphone when you engage in voice conversations with our AI assistant
• Real-time audio capture during active conversation sessions
• Transcripts generated from your voice recordings
• Text-based chat messages
• AI voice preferences (Shimmer, Echo, Ash, Coral)

Note: Microphone access is required for voice conversations. Audio is processed securely and encrypted during transmission and storage.

Device Permissions and File Access

• Storage access: We may access files and media on your device to store app data, cache conversation history, and save your journal entries locally
• Profile pictures and images you choose to upload
• Temporary audio files during voice recording sessions
• App-specific data stored in your device's local storage
• Export files when you request data downloads

Note: We only access files necessary for app functionality. We do not scan or access other personal files on your device.

Technical Information

• Device information and identifiers
• App usage data and analytics
• IP address and approximate location data (only if you grant permission)
• Login timestamps and session information
• App version and operating system information

How We Use Your Information

We use the collected information for the following purposes:

• Provide personalized wellness support through AI conversations
• Track your wellness journey and progress over time
• Generate insights and recommendations based on your mood and journal entries
• Authenticate your account and maintain security
• Send you important updates and notifications about your wellness activities
• Improve our AI models and application features
• Comply with legal obligations and protect our rights
• Detect, prevent, and address technical issues or security threats

Data Sharing and Disclosure

We take your privacy seriously and do not sell your personal information. We may share your information only in the following circumstances:

Service Providers

We work with trusted third-party services to provide our application:

• AWS Services: For voice transcription (Transcribe), text-to-speech (Polly), and AI models (Bedrock)
• OpenAI & Anthropic: For AI-powered conversations and insights
• Firebase: For push notifications and authentication
• Google/Apple: For OAuth authentication services

Legal Requirements

We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect rights, property, or safety.

Aggregated Data

We may share aggregated, anonymized data that cannot identify you personally for research or analytical purposes.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner, subject to the same privacy protections described in this policy.

Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for all conversations using TweetNaCl
• Unique encryption keys for each user
• Secure HTTPS/WSS protocols for all data transmission
• JWT tokens with refresh mechanisms for session management
• Regular security audits and updates
• Secure storage of sensitive data with encryption at rest
• We follow HIPAA and GDPR requirements for safeguarding personal information

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any breaches as required by law.

Compliance

We adhere to HIPAA (Health Insurance Portability and Accountability Act) and GDPR (General Data Protection Regulation) requirements to help protect your privacy and security.

For questions about our compliance practices or to exercise your data rights, contact support@akiluma.com.

Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations:

• Chat History: Automatically deleted after 1 year
• Conversation Summaries: Automatically deleted after 2 years
• Journal Entries: Retained until you delete them or close your account
• Account Data: Retained while your account is active
• Deleted Accounts: Permanently purged after 30 days

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Export

You can request a copy of all your personal data through the app's data export feature.

Correction

You can update your profile information at any time through the app settings.

Account Deletion

You have the right to delete your account and all associated data at any time. We provide multiple ways to delete your account:

Important: Account deletion is permanent and will result in:

• Immediate loss of access to your account
• Deletion of all your personal data, conversations, and journal entries
• Removal of your data from our servers within 30 days
• This action cannot be reversed

Opt-Out

You can opt out of:

• Push notifications through your device settings
• Marketing communications (though we send minimal marketing emails)
• Certain data collection by adjusting app permissions

Data Portability

You can export your data in a machine-readable format for transfer to another service.

Children's Privacy

Akiluma is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. Users must be at least 13 years old to use Akiluma.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by:

• Posting the new policy on this page with an updated “Last Updated” date
• Sending an in-app notification or email for significant changes

We encourage you to review this policy periodically. Your continued use of Akiluma after changes indicates acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For immediate assistance with account deletion or data export, please use the in-app features available in your profile settings.