Privacy Policy

Last updated: April 2026

1. Introduction

Welcome to Rumi (“Rumi”, “the App”). Rumi is an AI companion chat application that enables you to engage in text and voice conversations with AI-powered companions. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use the Rumi mobile application and any related services (collectively, the “Service”).

By downloading, installing, or using Rumi, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

In this Privacy Policy, “we”, “our”, or “us” refers to Zonko Labs Private Limited, and “you” or “your” refers to the individual accessing or using the Service.

2. Company Information

Rumi is developed and operated by:

Zonko Labs Private Limited
CIN: U62099MH2025PTC463134
20th Floor, Oberoi Commerz II, Goregaon East, Mumbai – 400063, Maharashtra, India
Email: support@zonko.ai

For the purposes of applicable data protection legislation, Zonko Labs Private Limited is the data controller and data fiduciary responsible for your personal data collected through the Service.

3. Information We Collect

We collect different categories of information depending on how you interact with the Service. We are committed to collecting only the information that is necessary to provide, improve, and secure the Service.

3.1 Personal Information You Provide

When you create an account and use Rumi, you may provide us with the following personal information:

  • Name: Your first name or display name, provided during the onboarding process, used to personalise your companion experience.
  • Age: Your age, collected during onboarding to ensure age-appropriate content and compliance with applicable laws.
  • Phone number: Your mobile phone number, used for account creation, authentication, and account recovery.

3.2 Content You Create

As you interact with the Service, the following content is generated and stored:

  • Conversation messages: Text messages you send to and receive from your AI companions. These messages are stored to maintain conversation history, enable companion memory, and provide continuity in your interactions.
  • Voice messages: Audio recordings of voice messages you send to your AI companions. Voice data is processed to generate AI responses and may be temporarily stored for the purpose of delivering the Service. Voice messages are handled securely and are not used for purposes unrelated to the Service.

3.3 Automatically Collected Information

When you use the Service, certain information is collected automatically:

  • Device information: Device model, operating system and version, unique device identifiers, screen resolution, language settings, and time zone.
  • Usage analytics: Feature usage patterns, session duration, interaction events (such as taps and navigation), app performance metrics, crash reports, and other diagnostic data. This information is collected in an anonymised or aggregated form wherever possible.
  • Network information: IP address (used to derive approximate location at the country or region level), network type (Wi-Fi or mobile data), and carrier information.

3.4 What We Do NOT Collect

We respect your privacy and have designed Rumi to minimise data collection. We do not collect the following information:

  • Contacts: We do not access, read, or store your phone contacts or address book.
  • Photo gallery or media files: We do not access your camera roll, photos, videos, or other media files stored on your device.
  • Precise location: We do not collect GPS data, precise geolocation, or track your physical movements. Any location inference is limited to the country or region level based on your IP address.
  • Financial information: We do not collect credit card numbers, bank account details, UPI IDs, or any other financial or payment instrument data directly. All payment processing, if applicable, is handled by third-party payment processors in compliance with applicable regulations.

4. How We Use Your Information

We use the information we collect for the following purposes:

  • Personalisation: To personalise and enhance your AI companion experience, including adapting companion behaviour, tone, and responses based on your interactions, preferences, and profile information.
  • Account management: To create and manage your account, authenticate your identity, enable secure login, and provide account recovery functionality.
  • Service delivery: To process your text and voice messages, generate AI companion responses, deliver voice-based interactions, maintain conversation history, and ensure the smooth functioning of the Service.
  • Communication: To send you important service-related communications, including account notifications, security alerts, updates to our terms or policies, and responses to your support requests.
  • Improvement and development: To analyse usage patterns, diagnose technical issues, measure performance, conduct research, and develop new features and improvements to the Service.
  • Safety and security: To detect and prevent fraud, abuse, security incidents, and other harmful activities, and to enforce our terms of service and acceptable use policies.
  • Legal compliance: To comply with applicable laws, regulations, and legal processes, and to respond to lawful requests from governmental authorities.

5. Data Storage and Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction.

  • Encryption: All personal data is encrypted at rest and in transit using industry-standard encryption protocols (such as TLS 1.2 or higher for data in transit and AES-256 or equivalent for data at rest).
  • Access controls: Access to personal data is strictly restricted to authorised personnel who require access for the performance of their duties. We employ role-based access controls and audit logging.
  • No selling of data: We do not sell, rent, or trade your personal data to third parties for their marketing or advertising purposes. Your data is used solely for the purposes described in this Privacy Policy.
  • Secure conversation processing: Your conversations with AI companions are processed securely on our servers and through our AI service providers. We implement safeguards to ensure that conversation data is handled in accordance with this Privacy Policy and applicable data protection laws.
  • Infrastructure: We use reputable cloud service providers that maintain industry-recognised security certifications and comply with applicable data protection standards.

While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining robust protections consistent with industry best practices and applicable legal requirements.

6. Data Retention

We retain your personal data in accordance with the following principles:

  • Active accounts: For as long as your account remains active and you continue to use the Service, we retain your personal information and conversation history to provide you with a continuous and personalised experience.
  • Inactive accounts: If your account becomes inactive for an extended period, we may retain your data in accordance with our internal data retention policies and applicable legal requirements.
  • Deletion upon request: Upon receiving a valid deletion request, we will delete or anonymise your personal data within thirty (30) days, except where retention is required by applicable law, regulation, or legitimate business purposes (such as fraud prevention or legal compliance). You will receive confirmation once the deletion process is complete.
  • Aggregated and anonymised data: We may retain aggregated or anonymised data that does not personally identify you for analytical, research, and service improvement purposes, even after account deletion.

7. Your Rights and Data Deletion

Depending on your jurisdiction and applicable laws, you may have the following rights regarding your personal data:

  • Right to access: You have the right to request information about the personal data we hold about you, including the categories of data collected, the purposes of processing, and any third parties with whom your data has been shared.
  • Right to correction: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain information directly within the App, or contact us for assistance.
  • Right to deletion: You have the right to request the deletion of your personal data. To exercise this right, please send an email to support@zonko.ai with the subject line “Data Deletion Request”. Please include your registered phone number or other identifying information so that we can locate and process your request. We will process your request within thirty (30) days.
  • Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
  • Right to data portability: Where technically feasible and required by applicable law, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at support@zonko.ai. We may require you to verify your identity before processing your request.

8. Third-Party Services

We use a limited number of third-party services to operate, maintain, and improve Rumi. These third parties process data on our behalf and are contractually obligated to handle your data securely and only for the purposes we specify.

  • AI service providers: We use third-party AI model providers to generate text and voice responses from your AI companions. Conversation inputs are transmitted securely to these providers for the sole purpose of generating responses. These providers are bound by data processing agreements and are prohibited from using your data for their own purposes.
  • Analytics: We use Firebase Analytics and similar tools to collect anonymised usage data, including app usage patterns, session information, and performance metrics. This data is used to understand how the Service is used and to improve the user experience. Analytics data is collected in an anonymised or pseudonymised form wherever possible.
  • Cloud infrastructure: We use reputable cloud service providers for hosting, data storage, and content delivery. These providers maintain industry-standard security certifications and comply with applicable data protection regulations.
  • Authentication services: We may use third-party services for phone number verification and authentication during the account creation and login process.

We do not share your personal data with third parties for their own marketing or advertising purposes. Any data sharing with third-party service providers is strictly limited to what is necessary for the operation of the Service.

9. Children’s Privacy

Rumi is not intended for use by individuals under the age of thirteen (13). We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at support@zonko.ai. Upon verification, we will promptly take steps to delete such information from our systems.

Users between the ages of 13 and 18 should review this Privacy Policy with a parent or guardian to ensure they understand and agree to its terms before using the Service.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational reasons. When we make changes, we will update the “Last updated” date at the top of this page.

If we make material changes that significantly affect your rights or the way we handle your personal data, we will provide prominent notice through the App (such as an in-app notification) or by other appropriate means before the changes take effect.

Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@zonko.ai

Zonko Labs Private Limited
CIN: U62099MH2025PTC463134
20th Floor, Oberoi Commerz II, Goregaon East, Mumbai – 400063, Maharashtra, India

We will endeavour to respond to all legitimate enquiries within a reasonable timeframe and no later than thirty (30) days from receipt of your request.