Privacy Policy.

This Privacy Policy explains what personal data Recollia collects, why we collect it, how we use and share it, how long we keep it, and the rights you have over it. It applies to the Recollia mobile app (Android) and website (recollia.ai), operated by Viian Genomics Private Limited ("Recollia", "we", "us"). Recollia is built for medical students and doctors and is intended only for users aged 18 and over. We are committed to complying with India's Digital Personal Data Protection Act, 2023 (DPDP Act). By using Recollia, you agree to the practices described here.

Recollia is an education product, not a medical service. It does not provide medical advice, diagnosis, or treatment, and it is not a counselling, therapy, or crisis service.

1. The short version

• What we collect: your email address and display name, the questions, answers, and content you create, voice recordings and images (if you use those features), Companion wellbeing conversations (if you use them), usage/analytics, device data, and subscription records.
• Why: to provide and personalise the Service, process subscriptions, keep the app safe and reliable, and improve it.
• Do we sell your data? No.
• Ads? No advertising use.
• Do we train AI models on your content? No. Our AI providers process your content only to generate responses to you.
• Sensitive data: we process health-related and mental-wellbeing information and treat it with heightened care (Section 5).
• Your controls: access, correct, export, and delete your data — including one-tap deletion of your Companion history and full account deletion.

2. The personal data we collect

Information you give us:

• Account & identity: your email address and display name. You sign in with an email and password, or with Google. We do not collect a phone number. A profile photo you choose is stored on your own device and is not uploaded to us.
• Profile & preferences: preferred language, career stage, and study preferences such as exam date and daily study hours.
• Content you create: questions to the AI Tutor, your answers and MCQ attempts, notes, and planner activity.
• Voice recordings: if you use voice features, the audio you speak and its transcript.
• Images you upload: clinical images you choose to upload for study, and any other images you submit.
• Companion conversations: if you use the Companion, the messages you send and receive, and any safety plan or emergency contact you choose to add.
• Support communications: information you send us when you contact support.

Information we generate or collect automatically:

• Usage & activity: features used, study sessions, MCQ performance, and derived study-behaviour signals used to personalise your experience.
• Device & technical data: device/app information, session metadata, IP address, and diagnostic/crash information.
• Push tokens: if you enable notifications, a device token (via Firebase Cloud Messaging).
• Analytics: product-analytics events (via PostHog) about how the Service is used.
• Cookies / local storage: session tokens and preferences stored on your device.

Subscription & payment data: when you subscribe to Recollia Pro we process purchase records and a purchase reference token (a Google Play purchase token on Android, or a Razorpay order/payment ID on web). We do not collect or store your card, UPI, or bank details — payments are handled by Google Play Billing or Razorpay under their own privacy policies.

What we do not collect: we do not collect your precise (GPS) location, and we do not knowingly collect data from anyone under 18.

3. How we use your data, and our legal basis

Under the DPDP Act we process your data on the basis of your consent and, where applicable, for legitimate uses permitted by law — to provide and personalise the Service, process subscriptions, power voice and AI features, keep the Service safe and reliable, communicate with you, and improve the product through analytics and limited quality review. We ask for your consent at sign-up and, where required, when a specific feature (e.g. voice, Companion) is first used. You can withdraw consent at any time; doing so may mean parts of the Service no longer work.

4. How AI is used to process your content

Recollia uses AI services to power its features:

• Anthropic (Claude): processes your questions, conversation content, uploaded images, and voice transcripts to generate responses.
• Sarvam AI: processes your voice audio and transcripts for speech-to-text and text-to-speech in Indian languages. Sarvam operates India-resident infrastructure and processes voice ephemerally.

These providers process your content only to deliver the feature to you. We do not permit your personal content to be used to train their or our foundation models. Some providers process data outside India (Section 7).

5. Sensitive data — health and mental wellbeing

Because Recollia is a medical-education product, you may submit clinical images and health-related study content, and we record your medical-education profile and performance. We process this to provide educational features only.

The optional Companion feature is a supportive space for study stress and wellbeing. If you use it:

• It is private to you. We do not share Companion conversations or wellbeing signals with employers, hospitals, medical councils, family members, or any other person or institution.
• No advertising use. No third-party sharing. No use to train models.
• Companion is not a therapist or crisis service and is not a substitute for professional help.
• Crisis handling: if the app detects that you may be in distress, it will — within the app — gently surface publicly available helpline numbers (for example, the Government of India's Tele-MANAS line, 14416) and, if you created one, your own safety plan. Recollia does not contact any helpline, emergency service, or other person on your behalf, and does not transmit your data to them. The choice to reach out always remains yours.
• Emergency contact: any emergency contact you add is stored for your reference and export only, and is never used by us to contact anyone.
• Your control: you can view, edit, export, and delete your entire Companion history at any time.

6. When we share data, and with whom

We do not sell your personal data. We share it only with service providers (data processors) who help us run Recollia, under contracts that require them to protect your data and use it only for the services they provide to us. These include our authentication and database provider (Amazon Web Services — Cognito for accounts and RDS for your data), cloud hosting and object storage, caching, our AI providers (Anthropic, Sarvam AI), payment providers (Google Play Billing, Razorpay), push notifications (Firebase Cloud Messaging), product analytics (PostHog), and error monitoring (Sentry). We may also disclose data where required by law, to protect our rights or users' safety, or in connection with a business transfer, subject to this Policy.

7. International data transfers

We are consolidating primary storage of your data in India and use India-resident infrastructure for voice processing. Some of our processors — including Anthropic, Google, PostHog, and Sentry — may process your data on servers outside India. Where data is transferred outside India, we rely on the transfer mechanisms permitted under the DPDP Act and require appropriate safeguards.

8. How long we keep your data

We keep your personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can delete specific content (including your Companion history) and delete your entire account at any time. When you delete your account, we delete or irreversibly anonymise your personal data, except where we are required to retain certain records (e.g. transaction records for tax/accounting).

9. How we protect your data

• Encryption in transit (TLS) between your device and our servers.
• Encryption at rest as provided by our infrastructure and database providers.
• Access controls and secret management (credentials held in a dedicated vault, not in code), with database row-level security enabled.
• Server-side verification of all subscription purchases.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal-data breach, we will follow the notification procedures required under the DPDP Act.

10. Your rights

Subject to the DPDP Act, you have the right to access your data, correct it, erase it / delete your account, export a copy, withdraw consent, nominate another person to exercise your rights, and seek grievance redressal. To exercise your rights, use the in-app controls or email support@recollia.ai. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by law.

11. Managing and deleting your data

You can view and edit your profile and what the Companion remembers, request an export of your data, delete your Companion history in one action, and delete your entire account — from within the app and via our Account & Data Deletion page. Deleting the app alone does not delete your account.

12. Children

Recollia is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact support@recollia.ai and we will delete it.

13. Grievance Officer & contact

If you have questions, requests, or complaints about your data, contact our Grievance Officer Vignesh Bageerathan at vian@recollia.ai, or general support at support@recollia.ai. Entity: Viian Genomics Private Limited. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, notify you in-app or by other means.