Privacy Policy

Effective date: September 7, 2026

Kusum ("we", "our", or "us") is an AI-powered call intelligence app for Android. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

• Phone number — used for account creation and authentication via WhatsApp OTP.
• Name and email — optionally provided during onboarding, used to personalize your account.
• Audio recordings — call recordings you choose to upload from your device are uploaded to cloud storage for transcription and analysis.
• Contacts — if you grant the optional contacts permission, contact names and phone numbers are uploaded for caller-name matching.
• Device information — a random app device identifier and basic device/app details are used for account ownership and reliability.

2. How We Use Your Data

• Transcribe your call recordings using Deepgram's speech-to-text API.
• Analyze transcripts using OpenAI's GPT models to generate summaries, action items, and insights.
• Deliver summaries to you via WhatsApp using Meta's WhatsApp Cloud API.
• Match recordings with caller names using contacts when you grant that permission.
• Maintain your account and manage usage limits.

3. Third Parties We Share Data With

• Supabase — cloud database and file storage (privacy policy)
• Deepgram — audio transcription (privacy policy)
• OpenAI — transcript analysis and summarization; recording filenames are not sent (privacy policy)
• Meta (WhatsApp) — OTP delivery, call summaries, automated app-recovery reminders when enabled, and the operator-only service digest (privacy policy)
• Google Apps Script or Sheets — not enabled in the production release.

Kusum does not sell personal data or use it for advertising. Each Deepgram transcription request opts out of Deepgram's Model Improvement Program. OpenAI states that API data is not used to train its models unless the API customer opts in; its standard abuse-monitoring logs may retain API content for up to 30 days. Provider controls and terms can change, so the linked provider policies also apply.

4. Data Retention

• Cloud audio: Kusum deletes its Supabase Storage copy after the transcript and analysis are saved, even if WhatsApp delivery later fails. An independent cleanup runs every eight hours and targets uploaded audio older than 32 hours, providing headroom for our maximum 48-hour cloud-audio retention policy. Cleanup failures are retried and checked; prolonged infrastructure outages may delay deletion and require recovery. This policy covers Kusum's uploaded audio copy, not third-party retention or backups. The original recording on your phone remains under your control.
• Transcripts and analysis: retained while your account is active so the app can show your call intelligence. In Settings, you can opt into automatic removal after a number of days you choose.
• Account, device, contacts, and upload metadata: retained while your account is active and removed through the account-deletion process.
• OTP and operational records: OTP codes expire after 10 minutes; their database rows are automatically removed 24 hours after expiry. Bounded service logs are kept as needed to operate and protect the service and are included in account deletion where linked to your account.
• Backups: the current Supabase Free production project does not include scheduled database backups. The operator may keep a protected manual database export for recovery for up to 30 days. Account deletion removes live records; a copy may remain in a recovery export until that export is retired, and is not used for normal processing. Database exports do not include the stored audio files themselves.

Copies already delivered through WhatsApp remain in your WhatsApp history. Kusum cannot erase them from your device or Meta account. You can use WhatsApp's own message, chat, and disappearing-message controls.

5. Security

Kusum uses HTTPS, private cloud storage, per-user access controls, protected server credentials, and bounded processing. No online system can guarantee absolute security.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time. See the account-deletion page for the automatic, verified-phone deletion process.

7. Children's Privacy

Kusum is not designed for children under 13. The initial release is offered in India. A parent or guardian must approve use when required by the user's age or applicable rules.

8. Recording Responsibility

Upload a recording only when you have the right to record and process it. You are responsible for informing other participants and obtaining any permission required where you live. Kusum does not bypass or verify recording-consent requirements.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or WhatsApp.

10. Contact Us

For privacy questions or data requests, contact:
Shaurya Laddha
shauryaladdha@gmail.com