Privacy Policy

Welcome to Lavola ("we", "us", or "our"), an AI-powered conversational companion application. We respect your privacy, value your trust, and are committed to safeguarding personal data across your interactions with our multi-persona AI companions, multimedia chat, and in-app voice calling features.

1. Overview & Scope

This Privacy Policy explains our practices regarding the collection, storage, processing, transfer, and deletion of information when you access or use:

• The Lavola mobile application (available on Android via Google Play and iOS via Apple App Store);
• Our legal, account management, and web portals hosted under lavola.ai; and
• Any related services, AI personas, calling credits, and customer support channels provided by Lavola.

2. Information We Collect

We only collect information strictly required to deliver, secure, personalize, and bill for the companion experience.

A. Account & Authentication Information

• India-Based Users: Mobile phone number and One-Time Password (OTP) verification tokens.
• International Users: Google Sign-In credentials (email address, user identifier) and Apple Sign-In credentials (including Apple Private Relay randomized emails).
• Linked Accounts: If you choose to link multiple sign-in methods (e.g., Mobile + Google), your authentication identifiers are unified to prevent duplicate accounts.
• Basic Profile: Display name and optional profile avatar that you configure.

B. Conversational & Media Inputs

• Chat Messages & Prompts: Text messages and questions you send to an AI companion.
• User-Uploaded Images: Photos you share inside the chat. Uploaded images are analyzed in real-time by computer vision models to understand context (e.g., recognizing your pet or a travel landmark) so the companion can converse naturally.
• Voice Notes: Audio snippets submitted to companions for speech-to-text processing.

C. In-App Calling & Audio Streaming Data

• Microphone Audio Streams: When you initiate an in-app voice call, real-time microphone audio is securely streamed to speech-to-text (STT) inference engines to generate instantaneous AI voice responses.
• Call Metadata: Call initiation time, duration in seconds, credit consumption rate, disconnection status, and network latency logs.

D. Financial, Subscription & Credit Wallet Data

• Subscriptions: Subscription plan type, renewal date, and transaction status supplied by official app store platforms (Google Play Billing on Android, Apple App Store In-App Purchases on iOS).
• Calling Credits: Your User Credit Wallet balance and top-up transaction history managed through app store in-app purchases.
• Credential Security: Lavola never receives or stores complete debit/credit card numbers, banking passwords, or UPI PINs. All payment processing is securely handled directly by Google Play or Apple.

3. Multi-Persona Architecture & Isolated Memory

Lavola features multiple distinct AI companions, each offering unique personalities (Friendly, Caring, Romantic, Flirty, Funny, or Supportive), conversational styles, and custom voice models.

• Partitioned Persona Memory: Each AI companion maintains an independent long-term memory graph. For example, personal anecdotes, relationship milestones, and preferences shared with "Persona A" are strictly isolated and cannot be accessed, read, or utilized by "Persona B".
• Global Profile Attributes: Only essential global profile attributes (such as your chosen display name, preferred language, and time zone) are accessible across multiple personas to ensure consistent salutations.
• Isolated Chat Reset: You have the right to reset or delete the chat history and memory of a single specific persona at any time without wiping your overall account or affecting other companions.

4. Voice Calling & Microphone Permissions

To enable real-time voice calls between you and your AI companions, Lavola requires explicit microphone permission on your device.

• Ephemeral Processing: Audio streams transmitted during voice calls are processed ephemerally for instantaneous transcription and synthesized voice response (TTS). Call audio is not recorded for public playback or surveillance.
• User Credit Wallet: User-initiated voice calls consume credits from your visible User Credit Wallet according to the persona's designated calling rate.
• Proactive AI Voice Calls: If an AI companion initiates a proactive voice call (such as a birthday greeting or re-engagement check-in), the call consumes internal System Credits and never deducts credits from your personal balance.
• Revoking Permissions: You may revoke microphone access at any time through your operating system settings; however, voice calling will be disabled until permission is restored.

5. Local-First Storage Architecture

In accordance with our privacy-by-design principles:

• On-Device Storage: All chat message transcripts, generated photos, generated videos, voice notes, and media cache are stored locally in the Lavola application sandbox on your device.
• No Cloud Message Backups: We do not maintain a permanent, unencrypted cloud transcript of your day-to-day chat messages. If you switch devices, your chat transcript starts fresh on the new device, retaining only the high-level persona interaction memory graph stored on secure servers.
• Local Data Removal: If you clear the application cache/data from your operating system settings or uninstall the app, all locally stored conversation histories and cached media are immediately deleted.

6. How We Use Information

We process information exclusively for the following lawful purposes:

• Service Operation: Authenticating accounts, facilitating chat sessions, streaming real-time voice calls, and calculating credit wallet deductions.
• Personalization: Enabling AI companions to recall prior conversational context, celebrate milestones, and adapt tone according to relationship progress.
• Billing & Entitlements: Managing trial periods, processing auto-renewals via approved mandates, and recording credit top-ups.
• Proactive Notifications: Sending re-engagement messages, greeting reminders, and subscription notices via push notifications or SMS/WhatsApp OTP alerts.
• Safety & Abuse Prevention: Enforcing content boundaries (preventing illegal activities, abusive behavior, or automated scraping) and maintaining platform security.

7. Third-Party Service Providers & Data Sharing

We do not sell, rent, or trade your personal information. We disclose minimal necessary data only to vetted service providers acting as processors under confidentiality agreements:

• App Store Platforms (Google Play, Apple App Store): Handles subscription billing, in-app renewal management, and credit package purchases.
  Data Shared: Anonymized Store User ID, receipt verification tokens, and transaction timestamps.
• Cloud Infrastructure (AWS / Google Cloud): Provides secure cloud hosting, database management, and memory storage.
  Data Shared: Encrypted user accounts, memory embeddings, and wallet balances.
• AI Inference Providers: Powers real-time text, vision, and speech synthesis processing.
  Data Shared: De-identified prompt inputs, images, and audio streams.
• Telecommunications & OTP: Delivers two-factor SMS and WhatsApp authentication.
  Data Shared: Phone number and time-limited verification codes.

8. Data Retention & Security

• Encryption Standards: All data transmitted between your device and our servers is encrypted using modern TLS (Transport Layer Security) 1.3 protocols. Stored server data is encrypted at rest using AES-256 standards.
• Retention Timelines: Active account data and persona memories are retained for as long as your account exists. If an account is deleted, personal data undergoes a 30-day processing purge before permanent eradication, except where retention is legally mandated (e.g., GST tax records).

9. Your Privacy Rights

Depending on your jurisdiction (including the Indian Digital Personal Data Protection Act, 2023, and global standards), you have the right to:

• Access & Portability: Request a summary of personal information associated with your account.
• Correction: Update or rectify your display name, linked authentication methods, or preferences.
• Persona Reset: Erase conversations with a specific persona directly from within the app.
• Account Deletion: Permanently delete your entire Lavola account and associated data through the in-app menu or via our Account Deletion Portal.

10. Children's Privacy (Strict 18+ Requirement)

Lavola is strictly intended for adult users aged 18 years or older (or the legal age of majority in your jurisdiction). We do not knowingly collect, solicit, or maintain personal data from minors. If we discover that an account has been registered by an underage user, we will promptly deactivate the account and delete associated data.

11. Changes, Grievances & Contact Information

We may update this Privacy Policy periodically to reflect technological advancements, product features, or regulatory requirements. The revised version will always be posted with an updated "Effective Date".

For any privacy inquiries, data deletion requests, or grievance redressal, please contact our Data Protection Officer: