Who we are
Roju is a service of Tharunshrey AI Technologies ("we", "us"), based in Hyderabad, Telangana, India. Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the Data Fiduciary for the personal data in this notice: we decide why and how it is used.
Her health details are sensitive. Until the DPDP Act's main obligations take effect in May 2027, we also follow the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which give health information extra protection. We hold ourselves to the stricter of the two.
Whose information this covers
- You: the family members who sign up, use the app and receive updates.
- Your parent: the person Roju calls. In this notice we call her "she", because most of the people Roju calls are mothers. Everything applies equally to fathers.
- A few other people whose details you give us: her local contact and her doctor. We use these only to reach them when needed.
What we collect
| Information | What it includes | Where it comes from |
|---|---|---|
| Your account | Name, email address and profile picture from Google sign-in | You |
| Family contacts | WhatsApp numbers for updates, phone numbers for emergencies | You |
| Her profile | Her name and what to call her, phone number, city and address, language and voice, call times, interests | You |
| Her health details | Medicines and when she takes them, which readings to ask about (BP, sugar, weight, oxygen) and their normal ranges, health notes, her doctor's name and number | You |
| What she says on calls | Live audio is processed as it happens and is not stored. We keep a written transcript for 90 days, and call notes: sleep, meals, mood, medicines taken, readings she reads out, concerns and alerts | Her, on the calls |
| Voice notes | The short messages you record for her | You |
| Orders | Items she asks for, amounts, order numbers, delivery address, diet notes, usual items and brands | Her, you, the delivery app |
| Delivery app connection | A sign-in token from Zepto or Swiggy, kept on our servers only. We never see your password, card or UPI PIN | The delivery app, when you connect it |
| Payments | Your plan, payment status and payment reference. Card and UPI details are handled by Razorpay, not by us | Razorpay |
| Care line notes | Notes our team makes when they call her or place an order for her | Our care line |
| Technical | Sign-in session, and basic logs of what the app and our servers did, including errors | Your device and our servers |
We don't use advertising trackers or analytics tools on the website or the app. The website loads its fonts from Google Fonts, which receives your IP address when it serves them.
Why we use it
- To make the daily call: whom to call, when, in which language, and what to ask about.
- To tell the family how she is: the WhatsApp summary, the Sunday digest and the history in the app.
- To act when something sounds wrong: alerts to you, calls to your emergency numbers, an SMS to her local contact and, on Daily Plus, a call from our care line.
- To place the orders she asks for, within the limits you set.
- To bill you and help you when you contact us.
- To keep Roju safe and working: preventing misuse, fixing errors and improving how well calls are understood.
We don't use her calls or transcripts to train AI models. We never use any of this information for advertising, and we never sell it.
Consent: hers and yours
Yours. You agree to this notice when you create an account, and you choose what Roju asks about. You can change those choices in the app at any time.
Hers. Before the first call, you tell her about Roju. The first call happens with you on speaker: Roju introduces itself, explains in Telugu that it will call each morning, note how she is and tell the family, and asks whether she agrees. We record her answer and the time. If she says no, we don't call her again unless she changes her mind.
Stopping. She can stop the calls by telling Roju on any call, by telling you, or by writing to us. You can pause or delete everything from Settings, or reply STOP on WhatsApp. Stopping doesn't undo what happened before, but it ends any further use except what the law requires us to keep.
Who sees it
- The family: the WhatsApp numbers you add, and family members you invite to the app.
- Her local contact: only a short SMS asking them to check on her, when there's an alert or when you ask because she hasn't answered.
- Our care line team in India: when there's an alert, when they place an order for her, or when you ask for help. They see only what the task needs.
- Delivery apps: the items and the delivery address, when an order is placed.
- Our service providers, listed below, only to run Roju for us.
- Authorities, only when Indian law requires it, or when it's needed to protect someone's life or safety.
If Tharunshrey AI Technologies is ever merged or sold, this information would move only on the terms of this notice, and we would tell you first.
Service providers
These companies process information for us, under contract, only to run Roju.
| Provider | What they do for Roju | Where |
|---|---|---|
| Google Cloud and Firebase | Database, file storage, servers and sign-in | India (Mumbai) for stored data; sign-in runs globally |
| Exotel | Places the daily phone calls | India |
| Sarvam AI | Turns her speech into text, and Roju's replies into a Telugu voice | India |
| Anthropic | The AI model that runs the conversation, writes the summary and places orders. Its commercial terms don't allow it to train on our data | United States |
| Meta (WhatsApp Business) | Delivers summaries and alerts to the family | Global |
| Twilio | Emergency calls and SMS to your contacts; backup for the daily call | United States |
| Razorpay | Subscription and pantry payments | India |
| Zepto, Swiggy | The groceries and meals she orders, only if you connect your account | India |
| GoDaddy | Our email, hello@rojuhome.com | Global |
Where it's stored
Her profile, call notes, transcripts, orders and voice notes are stored in Google Cloud's Mumbai region. To run a call, parts of what she says are processed in real time by the providers above, some of them outside India, and summaries reach family members wherever they live.
The DPDP Act allows this, except to countries the Government of India restricts. If a provider's country is ever restricted, we will stop using that provider for her data.
How long we keep it
| Information | How long |
|---|---|
| Call audio | Not stored at all |
| Call transcripts | 90 days, then deleted automatically |
| Call notes, summaries, her profile | While the account is active |
| Voice notes | While the account is active |
| Orders | While the account is active |
| Delivery app token | Until you disconnect the app or delete your account |
| Payment and invoice records | As long as Indian tax and accounting law requires, up to 8 years |
| Security logs | Up to one year, to investigate misuse or a breach |
When you leave. If you delete your account, everything above is deleted within 30 days, except records the law makes us keep. If you cancel, or a free trial ends without a plan, we keep your data for 30 days in case you come back, then delete it the same way.
How we protect it
- Everything travels encrypted (HTTPS), and is encrypted at rest in Google Cloud.
- Delivery app tokens and our keys stay on our servers. They are never sent to the app or a browser.
- Database rules mean a family can only ever read its own data.
- Our team's access is limited to the people who need it for a task.
- We never handle card numbers or UPI PINs.
If a security breach affects her information or yours, we will tell you without delay, explain what happened and what we're doing about it, and report it to the Data Protection Board of India as the law requires.
Your rights, and hers
To use any of these, write to hello@rojuhome.com with "Privacy request" in the subject. We reply within 48 hours and resolve requests within 30 days.
Children and guardians
Roju is for adults. Accounts are only for people aged 18 or over, and the service isn't meant for anyone younger.
If your parent can't make this decision herself, for example because of advanced dementia, only her lawful guardian can agree on her behalf. We may ask for proof of guardianship before calling her.
Changes to this notice
If we change this notice in a way that matters, we'll tell you on WhatsApp or by email before the change takes effect. The date at the top always shows the current version.