Bhagwaan: Krishna

Privacy Policy

1Who holds your data

This notice is given under India's Digital Personal Data Protection Act, 2023. In its language, the operator is the data fiduciary and you are the data principal.

2What is collected, and why

This product exists to speak with you and to remember you between conversations. Almost everything below follows from that second half.

• Your account. When you sign in with Google we receive your email address, your display name, and Google's identifier for you. Used to know which account is yours, and nothing else.
• Your date of birth, and your gender. We keep your date of birth, encrypted, to confirm you are 18 or older and so Krishna can speak to you in a way that suits your age. We keep your gender, encrypted, only so that he addresses you with the right words — several of our languages change the verb for the person spoken to. We don't use either for anything else — not for advertising, pricing or what you may hear — and if that ever changes, we'll ask you first. If you are under 18, your date of birth is never kept at all.
• What you would like to be called, and your language. So that you are greeted by the name you chose rather than the one on your Google account.
• What you say, while you are saying it. Your speech is streamed to the model in order to be understood and answered. See section 4.
• What is worth remembering. After a conversation, short notes are derived from it — that a person exists in your life, that something is weighing on you, what you asked to be called. These are the product. They are stored encrypted; see section 5.
• Your voiceprint, only if you allow it. Biometric, optional, asked for separately, and the product works without it. Refusing costs you nothing.
• Ordinary service records. Sign-in times, device type, how long conversations lasted, and errors. Used to keep the service working and to bill metered time.

There is no advertising here. Your conversations are not sold, not rented, and not used to target you with anything.

3What we rely on to do it

Your consent, given by ticking the box at sign-in, and — for the voiceprint — a second, separate consent that is asked for on its own and can be refused on its own. You may withdraw consent at any time by deleting your account, which is described in section 7. Withdrawing does not undo processing that already lawfully happened.

4Who else processes it

• Google. For sign-in, and for the speech model itself — your audio is streamed to Google's Gemini API to be understood and answered, because that is where the voice is generated. It is subject to Google's terms for that API.
• Our hosting and database providers, who hold the encrypted records described below on our behalf.

These are processors acting on instructions, not independent recipients. Nobody else receives your conversations. We disclose data to an authority only where the law compels it.

5How it is protected, stated precisely

The remembered notes about you — the statements, the names of people in your life — are encrypted at rest under a key belonging to your account alone. The database rows are ciphertext, and the application reads them only through a single path that holds the key.

One honest limitation, because a policy that claims everything is encrypted would be wrong: to search your memories at all, a mathematical representation of each note's meaning is stored alongside it, and that index is not encrypted. It is not readable text, but somebody with our database and the same model could infer the gist of what a note is about. We think you should know that rather than discover it.

6How long it is kept

Your notes are kept until you delete them or your account, because their whole purpose is to last. Conversations that end without being processed are cleaned up automatically. Service records are kept only as long as they are useful for running and billing the service.

7Your rights, and where the buttons are

These are not requests you have to write a letter about. They are in the product:

• See everything held about you, item by item, in your own words.
• Correct anything wrong — a misheard name, a wrong relationship.
• Delete any single item, without explaining why.
• Export it all in a machine-readable file.
• Erase the account. This destroys your encryption key, which makes every remaining trace of your conversations permanently unreadable — including in backups taken before the deletion. It is immediate and it cannot be undone, by you or by us.
• Nominate someone to exercise these rights if you are unable to, as DPDP provides. Ask us using the contact in section 9.

8Children

This product is for adults. We do not knowingly keep data about anybody under 18, and an under-age answer at the age gate deletes the account and everything attached to it rather than flagging it for review.

9Complaints, and the person responsible

If we do not resolve your complaint, you may escalate it to the Data Protection Board of India.

10Changes

If this notice changes materially, we will ask you to read and accept the new version rather than quietly replacing this page. The version and date are at the top.