Privacy Policy
HeyVini ("we", "us", "our") helps families check in on aging loved ones. Because the Service involves personal and wellbeing-related information, we take privacy seriously. This policy explains what we collect, why, and the choices you have. It applies to the HeyVini website, web app, and the Vini companion on WhatsApp and Telegram (the "Service").
1. Information we collect
- Account and family details: names, email addresses, phone numbers, family roles (e.g. parent, adult child, caregiver), time zones, preferred messaging channel, and check-in schedules.
- Messages and activity: the messages you and your family members exchange with Vini, tasks and reminders you create, check-in replies (including how someone says they are feeling), alerts raised, and family contacts you save.
- Technical data: basic device and usage information collected through our website via Google Tag Manager, Google Analytics, and Microsoft Clarity (such as pages visited and approximate location by region), used to understand and improve the website.
We do not collect precise location, and we do not record audio or video. If a message contains sensitive identifiers such as bank details, card numbers, passwords, OTPs, or government ID numbers, Vini is designed to decline to store them — please do not share these in chat.
2. How we use information
- To operate the Service: send check-ins and reminders at the right local time, record replies, notify family members when a check-in goes unanswered or someone reports feeling unwell, and answer questions in chat.
- To keep the Service safe and reliable: quality review of conversations, detecting failures, and preventing abuse.
- To communicate with you about your account and the Service.
- To improve the product, using aggregated or de-identified information where possible.
We do not sell your personal information, and we do not use your family's conversations for advertising.
3. AI processing
Vini's replies are generated using third-party AI providers (currently OpenAI and Anthropic). Relevant parts of a conversation and family context are shared with these providers solely to generate responses and safety classifications. We use these providers under terms that restrict them from using this data to train their models.
4. Who we share information with
We share personal information only with service providers who help us run the Service, under appropriate contractual protections:
- Supabase — database and authentication (hosted in the Asia-Pacific (Singapore) region)
- Twilio — WhatsApp message delivery
- Telegram — Telegram message delivery
- OpenAI and Anthropic — AI response generation and safety classification
- n8n Cloud — workflow processing
- Google and Microsoft — website analytics
We may also disclose information if required by law, or to protect the rights, safety, or property of our users or others.
5. International transfers
Your information is stored primarily in Singapore and may be processed by our providers in other countries, including the United States and the European Union. Wherever it is processed, we apply the protections described in this policy.
6. Retention
We keep personal information for as long as your family's account is active and as needed to provide the Service. When an account or family member is deleted, we delete or anonymise their personal information within a reasonable period, except where we must retain records to comply with legal obligations or resolve disputes.
7. Your rights and choices
Depending on where you live (including under India's DPDP Act, the EU/UK GDPR, and Malaysia's PDPA), you may have the right to access, correct, download, or delete your personal information, object to or restrict certain processing, and withdraw consent. Any family member — not only the admin — can exercise these rights for their own information. To do so, email us at acve@askvishwas.com. We will respond within a reasonable time and in accordance with applicable law. You can also opt out of website analytics using your browser settings or standard opt-out tools.
8. Children
The Service is intended for adults. Family admins must be at least 18 years old, and the Service is not directed at children under 18. We do not knowingly collect personal information from children; if you believe a child's information has been provided to us, contact us and we will delete it.
9. Security
We use reasonable technical and organisational measures to protect personal information, including verified identity on web chat, restricted database access, encrypted transport, and quality monitoring. No system is perfectly secure, so please also protect access to your own email and messaging accounts.
10. Changes to this policy
We may update this policy from time to time. If a change is material, we will notify you through the Service or by email before it takes effect. The "Last updated" date above shows the current version.
11. Contact
Privacy questions or requests: acve@askvishwas.com