Privacy Policy

1. Who We Are & What This Covers

Gyanee.ai ("Gyanee.ai", "we", "us", or "our") operates an AI-powered chat assistant that helps you discover coupons and deals from third-party merchants. This Privacy Policy explains what information we collect when you use our mobile apps and website (together, the "Services"), how we use and share it, how long we keep it, and the choices and rights you have. Gyanee.ai is the controller (in India, the "data fiduciary") for the personal information described here. By using the Services you agree to the practices described in this Policy; where the law requires your consent, we ask for it separately in the app.

2. What We Collect, At a Glance

This table summarises the data types we handle, and matches the declarations on our Google Play "Data safety" and Apple "App Privacy" store listings. Each row is explained in more detail below.

We do not collect your contacts, calendar, call logs, SMS inbox, photo library, health data, precise GPS coordinates, or payment card details. Payments happen on the merchant's own site - we never see your card or bank credentials.

3. Information We Collect

• Account information. Your mobile phone number (your unique account identifier, verified with a one-time password), and any profile details you choose to add such as name, email address, date of birth, gender, profile picture, and language preference.
• Conversations. The messages and questions you send the assistant and the replies it returns, kept as your chat history so you can come back to a conversation.
• Voice data. If you use voice chat, the audio of your spoken turns, its transcript, and the audio of the assistant's spoken reply. See section 6.
• Approximate location. Your area (locality), city, state, and country, plus whether it came from your device or you typed it, and when it was last updated. See section 5.
• Activity data. The deals and coupons you view or click, the resulting redirects to merchant sites, and purchase conversions reported back to us by our affiliate partners.
• Rewards data. Your wallet balance and the ledger of credits and debits, where the Services include rewards.
• Connected social accounts. If you connect a Facebook Page or Instagram business account to publish posts, the access token, account identifiers, and publishing records for that connection.
• Technical and diagnostic data. Session tokens, timestamps, IP address, app version, and basic device or browser information needed to operate, secure, and debug the Services, including error logs.
• Support correspondence. What you send us through the contact form or by email, so we can answer you.

4. Device Permissions

The app asks for a permission only at the point it is needed, and explains why first. Every permission below is optional - declining one only disables the feature that needs it, and you can change your mind later in your device settings (Android: Settings → Apps → Gyanee → Permissions; iOS: Settings → Gyanee).

• Microphone optional

  Only while you are in a voice chat, to capture what you say and turn it into text. We do not listen in the background.

• Location optional

  To fill in your area and city for location-dependent searches. Read only when you allow it; you can type a city instead.

• Notifications optional

  Account and service messages, such as when your account becomes active. You can turn these off in your device settings.

• Photos / camera optional

  Only when you choose a profile picture. We access the single image you pick, not your library.

5. How We Handle Location

Location is used for one purpose: answering questions where the place matters ("hotel offers near me", "stores in my city") without asking you every time. Specifically:

• We store coarse location only - area, city, state, and country as text. Your exact coordinates never reach our servers: the app converts the device reading into place names on your phone and sends only those names.
• You can skip the permission entirely and just tell the assistant your city; a city you set yourself is never silently overwritten by a device reading.
• We do not track your movements, build a location history, or use location for advertising, and we do not share it with third parties.
• Revoking the permission stops any further reading. To also remove the stored place names, update or clear them in the app or ask us at info@nquire.ai; deleting your account removes them too.

6. How We Handle Voice & Audio

The microphone is active only during a voice chat you start, and the app shows when a call is live. During that call:

• Your speech is streamed to our speech provider to be transcribed, and the assistant's reply is converted back into audio.
• Each spoken turn is saved to your conversation as text plus an audio clip, so you can read or replay it later. Deleting the conversation or your account deletes those clips.
• We do not record in the background, and we do not use your voice for biometric identification or voice-print matching.

7. How We Use Your Information

• To create and secure your account and verify it via OTP.
• To understand your request and surface relevant deals and coupons.
• To measure which deals are useful and earn the affiliate commissions that keep the Services free.
• To personalise recommendations and improve the relevance and quality of results.
• To operate voice chat and multi-language support.
• To maintain your chat history and rewards ledger.
• To communicate with you about your account, support requests, and important service updates.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with our legal, tax, and regulatory obligations.

We do not use your personal information to serve third-party advertising, and we do not sell it or share it for cross-context behavioural advertising.

8. Our Legal Bases

Where the GDPR, UK GDPR, or India's Digital Personal Data Protection Act, 2023 applies, we rely on:

• Performance of a contract - to give you the account and assistant you asked for.
• Consent - for optional features such as location, microphone, notifications, and connecting a social account. You can withdraw consent at any time by revoking the permission or disconnecting the account, without affecting the rest of the Services.
• Legitimate interests - to secure the Services, prevent fraud and abuse, and improve quality, balanced against your rights.
• Legal obligation - to keep records the law requires us to keep.

9. AI Processing & The Models We Use

Your messages, and the transcript of anything you say in voice chat, are processed by third-party large language models to interpret your request and generate a response. We name below exactly which models are involved, who runs them, and what is sent to each, so you know where your content goes.

Requests to OpenAI models are routed through OpenRouter, Inc., an API gateway; OpenAI performs the inference. We may change or add a model where it improves quality, reliability, or cost - if we do, we will update this table and the "Last updated" date above.

• We send only what the model needs to answer you - your message, the recent turns of the same conversation, and matching deals from our catalogue. Your phone number, email, date of birth, and wallet balance are not sent to any model provider. Where a question depends on location, only the place names (area, city, state, country) are included, never coordinates.
• Prompts are sent for inference under contractual confidentiality terms and are not used by us or by our providers to train public or foundation models. We do not sell your conversations and we do not publish them.
• The models used for conversation titles and for deal matching run on our own infrastructure, so that content is not sent to any third party.
• The assistant recommends deals retrieved from our catalogue and does not make automated decisions that produce legal or similarly significant effects about you.

AI output can be wrong or out of date, so always confirm price and coupon terms on the merchant's own site. Please avoid sharing sensitive personal information - such as government ID numbers, financial credentials, or health details - in your chats.

10. Service Providers & Affiliate Networks

We earn affiliate commissions through the networks and merchants you shop with, and this is how the Services stay free for you. When you click a deal, we append a tracking identifier to the merchant link so the purchase can be attributed and our commission confirmed. The affiliate network and merchant then process your purchase under their own privacy policies, which we do not control.

We also use the categories of processor below, each bound by confidentiality and security obligations and permitted to use your data only on our instructions:

• OpenAI, accessed through OpenRouter (OpenRouter, Inc.). Runs the GPT-5.5, GPT-4o and GPT-4o mini models that generate the assistant's replies. OpenRouter routes the request; OpenAI performs the inference. Prompts are sent for inference only and are not used to train their public models.
• Sarvam AI. Speech-to-text (Saaras v3) and text-to-speech (Bulbul v3) for voice chat, including Indian-language support.
• MSG91 / WhatsApp Business. Deliver your one-time sign-in codes and account notifications.
• Cloud hosting and database providers. Run the application servers, database, and file storage for uploads such as avatars and voice clips.
• Affiliate networks and merchants. Attribute a purchase made through a deal link so our commission can be confirmed.
• Email delivery provider. Send transactional email, including replies to support requests.

11. How We Share Information

We do not sell your personal information, share it with data brokers, or disclose it for third-party advertising or cross-app tracking. We share it only:

• with affiliate networks and merchants as needed to attribute purchases;
• with the service providers listed above, acting on our instructions to operate the Services;
• with Facebook or Instagram, only to publish the content you explicitly ask us to publish;
• where required by law, regulation, or legal process, or to protect the rights, safety, and security of our users and the Services;
• in connection with a merger, acquisition, or sale of assets, subject to this Policy;
• with your consent, for anything else.

12. International Transfers

We operate primarily from India, and our providers may process data in India, the United States, the European Union, or other countries. When personal information moves across borders we rely on appropriate safeguards - such as the European Commission's standard contractual clauses, or transfers to countries not restricted by the Indian government - and require our providers to protect it to the standard described in this Policy.

13. Data Retention

We keep your information only as long as it serves the purpose it was collected for:

• Account and profile data - while your account is active, then removed or anonymised when you delete it.
• Conversations and voice clips - until you delete the conversation or your account.
• One-time passwords - invalidated on use or expiry, within minutes.
• Location place names - until you change or clear them, or delete your account.
• Access tokens for connected social accounts - deleted immediately when you disconnect the account.
• Rewards ledger, commission and tax records - retained in a de-identified form for as long as accounting, fraud-prevention, and legal obligations require, because these are financial records we must be able to reconcile.
• Security and diagnostic logs - kept for a short rolling period, then discarded.

14. Your Rights & Choices

• Access & correction. View and update your profile information at any time from within the app, or ask us for a copy of your data.
• Deletion. Delete your account from the app or by email - see section 15.
• Withdraw consent. Revoke the microphone, location, or notification permission, or disconnect a social account, at any time.
• Portability & objection. Where the law gives you these rights, ask us to export your data in a machine-readable form or to object to or restrict a particular use.
• Communications. Opt out of non-essential messages; we may still send service-related notices such as security or account alerts.
• Complaints. Contact our Grievance Officer (section 21). You may also complain to your data protection authority - in India, the Data Protection Board; in the EEA or UK, your national supervisory authority.
• California residents. You have the right to know, delete, and correct your personal information and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

To exercise any right, email info@nquire.ai. We verify requests against your registered phone number or email and respond within the time the applicable law allows (normally within 30 days). Using an authorised agent is fine where the law permits it.

15. Deleting Your Account & Data

You can delete your account entirely from Profile → Delete account in the app, or by emailing info@nquire.ai with the subject "Data Deletion Request". Deletion deactivates the account, removes or anonymises your profile, location, chats, voice clips, and any connected social-account tokens, and releases your phone number so you can register again later. Verified requests are completed within 30 days; only the de-identified financial and compliance records described in section 13 are retained. Full instructions, including how to disconnect a social account without deleting your account, are on the Data Deletion page.

16. Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS/TLS), short-lived one-time codes, expiring session tokens, access controls that limit who on our team can see user data, and rate limiting on sign-in. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires. Keep your device and phone number secure, and tell us immediately if you think your account has been used by someone else.

17. Children's Privacy

The Services are intended for adults: they are not directed to children, and we do not knowingly collect personal information from anyone under 18. Our store listings are not targeted at children or families. If you believe a child has provided us information, contact us and we will delete the account and its data promptly.

18. Cookies & Local Storage

On the website and in the app we use your device's local storage to keep you signed in (for example, storing your session token) and to remember basic preferences such as language. These are strictly necessary for the Services to work - we do not use advertising cookies or third-party tracking pixels. Clearing your browser or app storage signs you out.

19. Third-Party Links & Merchants

Deals take you to merchant and affiliate-network websites we do not operate. Once you leave the Services, the destination site's own privacy policy and terms govern what it collects, including any cookies it sets and any account you create there. Please read them before you buy.

20. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above, keep the store listings in step, and - for material changes - notify you through the Services or by message before they take effect. Your continued use after that constitutes acceptance of the revised Policy; if you disagree, you can delete your account.

21. Contact & Grievance Officer

If you have questions or concerns about this Privacy Policy, want to exercise a right, or wish to raise a grievance, contact our Grievance Officer / Data Protection contact:

Email: info@nquire.ai

We acknowledge grievances within 48 hours and aim to resolve them within 30 days. For help with the app itself, our Support & Help Center is usually faster.