privacy policy
last updated: july 15, 2026
our commitment to your privacy
we, rumik.ai ("Rumik", "we", "our", "us"), operating as a research company, is committed to protecting your privacy under Digital Personal Data Privacy Act, 2023 ("DPDP Act"). This privacy policy explains how we collect, use, disclose, and safeguard your personal data when you use the services ("Services"), interact with our website (rumik.ai), our conversational AI "Ira", mobile applications, Silk API and any services that link to this policy ("Services").
This policy is governed by DPDP Act, 2023 and the rules notified thereunder, along with other applicable Laws of India. By using our services, you consent to the collection and processing of your personal data as described in this policy.
information we collect
Personal Information: we collect your personally identifiable information (such as your name, email address, contact number, age, city, authentication credentials) that you voluntarily provide when you register or use the services, for the purpose of account creation, authentication, result delivery, and communication.
Personalised Interaction Data: We collect your responses, texts, inputs, and any other information you submit as part of interaction with our services to determine your preferences, values, and interests. Your response may include details relating to your preferences, behaviours, thought patterns, or self-descriptions, for the purpose of generating personalised experiences and recommendations (consent-based).
Decision Interaction Data: We collect data about how you interact with our services, including the patterns of interaction, timing of interaction, and the options presented to you by our AI system. This includes which options you selected, deselected, and your choices with our services, for the purpose of service improvement, research, and improving the quality of our AI-generated recommendations.
Information We Collect Automatically: We automatically collect certain information when you visit, use, or navigate our website or services. This information does not reveal your specific identity but may include:
•
Device information, operating system, browser type.
•
IP address, approximate location.
•
Usage pattern, timestamps, page views, interactions.
•
Log files, cookies, crash reports.
•
Internet service provider.
We collect this for the purpose of security, fraud prevention, analytics, and service optimisation, which is defined as legitimate use under DPDP Act section 7.
information from other sources
If you interact with any services provided by us through third-party platforms, we may collect your profile identifier from those platforms.
how we collect your information
•
Information provided by you directly: information you provided through forms, interactions, and account creation.
•
Automated collection: Cookies, analytical tools, and tracking technologies.
•
Legitimate uses: Certain data processing is carried out under "legitimate uses" as defined in section 7 of DPDP Act, 2023, where processing is reasonably expected by the Data Principal and is necessary for the purpose stated in this policy.
how we use your information
•
To provide our Services: We use your information to operate, maintain, and enhance your experience with Ira and our other Services.
•
To communicate with you: We may send you announcements, updates, or respond to your inquiries.
•
To improve our Services: We analyse how users interact with Ira or any other services of our company to improve its conversational abilities, develop new features, and ensure the safety and security of the platform.
•
Research and Development: We may use anonymized and aggregated data to conduct research and development for improving our AI models and services.
•
Rumik's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
•
Rumik reads your YouTube subscriptions, playlists and liked videos, and the titles and times of your Google Calendar events, solely to infer your interests and personalize your conversations with Ira.
•
We never sell this data, never use it for advertising, and never use it to train generalized AI models. You can delete it at any time from Settings, or revoke Rumik's access at myaccount.google.com/permissions.
•
We may engage certain third-party service providers to assist in processing certain types of data. All such partners are bound by agreements that require them to safeguard your data and use it strictly for the services they perform on our behalf.
•
We do not sell or rent your personal data to any third party. Information is shared only with service providers necessary for delivering the service or where required by law.
sharing your information
•
Service Providers: We may share your information with trusted third-party service providers who help us with things like hosting, security, and customer support.
•
Business Transfers: If Rumik.ai undergoes a merger, acquisition, or sale, your information may be transferred.
•
Legal Compliance: We may disclose your information to comply with legal obligations or to protect our rights, safety, or property.
•
Payment gateway (Razorpay): we may share your data with the payment gateway for processing premium feature payments.
All third-party processors are contractually bound to safeguard your data and use it only for the specific services they perform on our behalf.
We do not sell personal data. Identifiable data is never shared for third-party marketing purposes.
We do not store any financial data such as debit card or credit card numbers.
Payment transactions are processed and stored by our payment gateway provider.
Please refer to their privacy policy for details.
google user data — limited use
•
Rumik's use and transfer of information received from Google APIs — including the YouTube Data API and Google Workspace APIs (Google Calendar) — adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements. We do not use, transfer, or sell this information — in raw, aggregated, or derived form — to any third party to create, train, or improve any generalized or foundational AI/ML models. This data is used only to power the personalization feature you connect, is processed only by Google's own models, and is deleted when you disconnect your Google account or delete your Rumik account.
your privacy rights and choices
•
Delete your account: You can request to delete your account by contacting us.
•
Opt out of communications: You can unsubscribe from our communications.
•
Data access and correction: You can request access to and correction of your personal data.
•
Data portability: Where applicable, you can request a copy of your data in a portable format.
•
Right to object: You can object to the processing of your data in certain circumstances.
security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
consent and your rights to withdraw
We believe in putting you in control of your data:
How We Obtain Consent: We obtain your explicit, informed consent through a clear checkbox on our sign-up form. Before you agree, we provide a visible disclosure explaining exactly what you are consenting to, including AI processing and the use of anonymized data for research. Any behavioral analytics tracking is optional and remains off by default.
For Users Under 18: We prioritize safety by obtaining verifiable parental consent through email verification before any data processing begins.
Withdrawing Your Consent: You may withdraw your consent at any time by emailing our Grievance Officer at internal@rumik.ai with the subject line "Consent Withdrawal."
What Happens Next: Once consent is withdrawn, access to the Services will be discontinued. Your personal data will be permanently deleted within 30 days. Please note that we may retain anonymized or aggregated data that does not identify you.
rights under the dpdp act
Under the Digital Personal Data Protection (DPDP) Act, 2023, you have specific rights regarding your personal information. As your digital companion, we are committed to upholding these rights:
•
Right to Access: You can request a summary of the personal data we hold about you and details on how it is being processed.
•
Right to Correction: If you notice that your information is inaccurate or incomplete, you can ask us to update or correct it.
•
Right to Erasure: You have the right to request the deletion of your personal data. We will fulfill these requests within 30 days.
•
Right to Withdraw Consent: You may withdraw your consent at any time by contacting our Grievance Officer. Please note that this will not affect the legality of any processing that occurred before your withdrawal.
•
Right to Nominate: Should you become incapacitated or in the event of your passing, you may nominate another individual to exercise these rights on your behalf, as provided for under the DPDP Act.
•
Right to Grievance Redressal: If you have concerns, please reach out to our Grievance Officer. If your issue remains unresolved, you have the right to escalate your grievance to the Data Protection Board of India.
How to Exercise Your Rights: To exercise any of the rights listed above, please contact our Grievance Officer at the email address provided in the Grievance Officer section below.
children's privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect or process personal data from children under 13.
Users ages 13 to under 18 must obtain verifiable parental or guardian consent before providing any personal data or using the services. We implement this through a parent/guardian email verification: a verification link will be sent to the provided parent's email, which must be confirmed before the minor can proceed.
Parental consent records (parent email, verification timestamp) are stored securely and can be audited.
We completely disable behavioural tracking, analytics, and profiling for users under 18 years of age, in compliance with section 9(4) of the DPDP Act.
If we discover we have collected data from a child under 13 without appropriate consent, we will delete it promptly.
Parents or guardians may contact our grievance officer at any time to request access to, correction of, or deletion of their child's data.
data breach notification
Your security is our top priority. While we employ robust measures to protect your information, we believe in being fully transparent should any unexpected incident occur:
•
In the event of a personal data breach that may impact your rights, we will notify you via email without unreasonable delay.
•
We are committed to full transparency and will report the incident to the Data Protection Board of India, as required by the DPDP Act and applicable regulations.
•
We will take immediate, decisive steps to contain the breach, investigate the cause, and remediate the situation to prevent further risk.
•
We will provide you with a clear explanation of what happened and, most importantly, provide actionable steps you can take to protect yourself.
grievance officer
In accordance with the DPDP Act, 2023, we have designated a Grievance Officer to address your concerns regarding data processing:
Title: Grievance Officer
Email: internal@rumik.ai
Response Time: we will acknowledge your grievance within 7 working days and aim to resolve it within 30 days.
If your grievance is not satisfactorily resolved, you may approach the Data Protection Board of India for further redressal, as provided under the DPDP Act.
data retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations.
changes to this policy
We may update this Privacy Policy periodically. We will notify you of any material changes.
contact us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at internal@rumik.ai.