Privacy Policy

Effective date: 2026-06-04  ·  Last updated: 2026-06-04

1. Who We Are

Vaani ("we", "us", "our") operates the website accessible at https://talktovaani.com (the "Service"). Vaani is a spiritual-guidance product that draws on the Bhagavad Gītā, the Upaniṣads, and the Vedas. Inquiries relating to this Privacy Policy may be directed to: privacy@talktovaani.com.

2. Information We Collect

2.1 Information You Provide

Vaani does not require registration, account creation, or any submission of personally identifying information to use the Service. Any text you type into the conversation interface ("Messages") is processed by the AI model to generate a response and is not transmitted to or stored on our servers. Messages are held transiently in your browser's local storage solely to maintain conversational context within a session. You may clear this data at any time by clearing your browser's local storage or site data.

2.2 Usage and Analytics Data (PostHog)

We use PostHog (PostHog, Inc., San Francisco, CA, USA; EU-adequate data transfer mechanisms apply) to collect anonymised analytics data about how visitors interact with the Service. This may include:

• Pages viewed and navigation paths
• Feature interactions (e.g., entering the conversation chamber, selecting a feeling prompt, sharing a verse)
• Approximate geographic region (country/city level, derived from IP address which is not stored)
• Browser type, operating system, and screen size
• Referring URL and session duration

PostHog is configured with person_profiles: 'identified_only', meaning no persistent person profile is created for anonymous visitors. A pseudonymous session identifier (a randomly generated string) is stored in a first-party cookie or local storage for the duration of your visit. PostHog's data is stored on servers in the United States. For details, see PostHog's Privacy Policy.

2.3 Hosting and Infrastructure Data (Cloudflare)

Our Service is hosted on Cloudflare Pages (Cloudflare, Inc.). Cloudflare may process your IP address and standard HTTP request metadata for the purposes of routing, DDoS mitigation, and security. This data is governed by Cloudflare's Privacy Policy. We do not have access to individual request logs.

2.4 Fonts (Google Fonts)

We load typefaces from Google Fonts (Google LLC). When your browser fetches font files, Google may receive your IP address and user-agent string. For details, see Google's Privacy Policy.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing personal data are:

• Legitimate interests (Article 6(1)(f) GDPR): Analytics data is processed to understand how the Service is used and to improve it. Our legitimate interest is balanced against your privacy rights; we use anonymised, aggregate data and do not build individual profiles of anonymous users.
• Consent: Where required by applicable law (e.g., the ePrivacy Directive), we rely on your consent for the placement of analytics cookies. You may withdraw consent at any time by adjusting your browser settings or using a browser extension to block PostHog (us.i.posthog.com).

4. How We Use Your Information

• To operate and improve the Service
• To understand which content and features are most valuable to users
• To detect and address technical errors and security issues
• To comply with legal obligations

We do not use your data for: targeted advertising, sale to third parties, profiling for automated decision-making, or any purpose incompatible with those stated above.

5. Cookies and Similar Technologies

We use the following cookies and local-storage entries:

• PostHog session cookie / local-storage key (ph_*): First-party. Stores an anonymous session identifier. Expires at end of session or after 1 year (persistent variant). Purpose: analytics.
• Browser local storage: Used to persist your conversation context across page loads within the same browser. Contains only the content you have typed. Never transmitted to our servers.

You may delete or block these at any time through your browser's settings. Blocking the PostHog cookie will not affect your ability to use the Service.

6. Data Retention

• Analytics data (PostHog): Retained for up to 1 year from collection, after which it is automatically deleted in accordance with PostHog's data-retention settings.
• Conversation data (local storage): Retained only in your browser; we have no copy. You control deletion entirely.
• Infrastructure logs (Cloudflare): Governed by Cloudflare's own retention policies, which we do not control.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding personal data we hold about you:

• Access and portability: Request a copy of data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure ("right to be forgotten"): Request deletion of your personal data.
• Restriction of processing: Request that we limit how we use your data.
• Objection: Object to processing based on legitimate interests.
• Withdrawal of consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

Because Vaani does not collect personally identifiable information directly and does not maintain user accounts, we are generally unable to identify you from analytics data alone. To exercise any right, or to contact our supervisory authority (EEA/UK users), please email privacy@talktovaani.com.

California residents (CCPA/CPRA): You have the right to know what personal information is collected, to delete it, to opt out of sale (we do not sell personal information), and to non-discrimination for exercising your rights. To submit a request, email privacy@talktovaani.com.

8. Children's Privacy

The Service is not directed at children under 13 years of age (or under 16 where required by applicable law). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the Service, please contact us and we will promptly delete it.

9. Third-Party Links

The Service may contain links to third-party websites (including Google Fonts, PostHog documentation). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. International Data Transfers

Analytics data processed by PostHog may be transferred to and stored in the United States. PostHog complies with applicable data-transfer mechanisms including Standard Contractual Clauses (SCCs) where required. Cloudflare operates globally; see their privacy policy for details on data localisation.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Effective date" at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries: privacy@talktovaani.com
For general inquiries: hello@talktovaani.com