Privacy Policy

1. Who We Are

Alma ("Alma", "the App") is an AI-powered conversational companion that helps you record, preserve, and organize your life story through voice conversations.

Alma is operated by Kindras Ltd, a company based in the United Kingdom. If you have any questions about this policy, you can reach us at: hello@kindras.io

2. Information We Collect

We collect and process only the information necessary to deliver our service safely and effectively. This may include:

a) Information you provide directly

• Name and contact details when you sign up (via Apple Sign-In or Google Sign-In).
• Voice conversations and the memories, reflections, and personal narratives you share during sessions.

b) Automatically collected data

• Technical information such as device type, operating system version, and session duration (used only for analytics, debugging, and security).
• Conversation metadata (date, duration, number of items saved).

c) Voice and interaction data

• Audio recordings and transcripts of your conversations, processed to extract and organize your life story.
• AI-generated content such as memory summaries, character profiles, reflections, and enrichments derived from your conversations.

All voice and text content is stored securely and can be permanently deleted at any time via the account deletion feature in the App.

3. How We Use This Information

• Provide and improve the Alma conversational and autobiography service.
• Process your voice conversations using AI to extract, organize, and enrich your memories and life story.
• Personalise interactions and conversation topics for each user.
• Maintain service security and detect misuse.
• Comply with legal obligations.

We do not sell or share personal information with advertisers or unrelated third parties.

4. AI Processing

Your voice conversations are processed by AI language models to extract memories, generate summaries, and create structured autobiography content. This processing is essential to the core functionality of the App.

• Voice-to-text transcription is handled by our voice processing partner (ElevenLabs).
• Text analysis and content generation is handled by AI language models (Google Gemini).
• Your data is not used to train third-party AI models.

5. Legal Basis for Processing

Under UK GDPR, Alma processes personal data on the following bases:

• Consent: for recording, storing, and AI-processing your conversations.
• Legitimate interest: for providing the service and improving user experience.
• Contractual necessity: for delivering the subscription service you have purchased.
• Legal obligation: for handling safety concerns or compliance with regulations.

You can withdraw consent at any time by deleting your account in the App or by emailing privacy@kindras.io.

6. Data Storage & Security

• All data is encrypted in transit (TLS) and at rest.
• Data is stored on secure cloud infrastructure (Google Cloud Platform).
• We use access controls and monitoring to prevent unauthorized access.
• Audio recordings are stored separately from text data in secure cloud storage.

We retain data only as long as your account is active or as needed to meet legal requirements. You can delete all your data at any time by deleting your account.

7. Third-Party Service Providers

We work with trusted service providers who help us operate Alma. These include:

• Google Cloud Platform: hosting, data storage, and AI processing.
• Firebase (Google): authentication and real-time database.
• ElevenLabs: voice conversation processing and transcription.
• RevenueCat: subscription management (processes purchase receipts; does not access your personal content).
• Apple: payment processing for in-app subscriptions. We do not see or store your payment card details — all billing is handled by Apple through your Apple ID account.

All partners are bound by strict data protection agreements and cannot use your information for any other purpose. We will never sell, rent, or trade user data.

8. Your Rights

You have the right to:

• Access, correct, or delete your data.
• Withdraw consent for processing.
• Request a copy of your data (data portability).
• Delete your account and all associated data from within the App (Settings → Danger Zone → Delete My Account).
• Complain to the UK Information Commissioner's Office (ICO) if you believe your rights are violated.

To exercise these rights, use the in-app features or contact privacy@kindras.io.

9. Children's Privacy

Alma is not designed for users under 18 years old. If we learn that we've collected data from a child without parental consent, we'll delete it promptly.

10. Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we'll post the updated version here and revise the "Effective date" above.

11. Contact

If you have questions about this Privacy Policy, contact us at: privacy@kindras.io