1. Introduction

Welcome to Huvo, your private memory preservation companion. This Privacy Policy explains how Larna AI Ltd ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use the Huvo mobile application and related services. We are committed to protecting your privacy and ensuring the confidentiality of your most personal memories.

Huvo is designed with privacy at its core. Your memories are personal, and we treat them with the utmost respect and security.

2. Information We Collect

2.1 Account Information

• Authentication Data: Email address, display name, profile photo URL (from Google or Apple Sign-In)
• Unique Identifiers: User ID, authentication tokens
• Account Settings: Notification preferences, app settings

2.2 Memory Content (User-Created)

• Photos: Images you upload to preserve memories
• Videos: Video recordings you choose to save
• Voice Notes: Audio recordings and voice memos
• Text Notes: Written entries, journals, and reflections
• Emotions: Emotional states and feelings you choose to record
• Memory Metadata: Titles, dates, tags, and organizational information

2.3 Technical and Usage Data

• Device Information: Device type, operating system version, app version
• Usage Analytics: Feature usage patterns, session duration (anonymized)
• Performance Data: App crashes, error logs for troubleshooting
• Push Notification Tokens: Firebase Cloud Messaging tokens for notifications

2.4 Payment Information

• Subscription Status: Active/inactive status, subscription tier
• Transaction Metadata: Purchase dates, subscription periods
• Important: We do NOT store credit card numbers, CVV codes, or direct payment credentials. All payments are processed securely by Apple App Store or Google Play Store.

3. How We Use Your Information

3.1 Core App Functionality

• Memory Storage: Securely store your photos, videos, voice notes, and text entries
• Organization: Enable you to organize, search, and browse your memories
• Emotion Tracking: Display and analyze your emotional journey over time
• Synchronization: Keep your memories synced across your devices

3.2 Service Operations

• Account Management: Authenticate users, manage subscriptions
• Notifications: Send reminders and important updates (with your consent)
• Customer Support: Respond to your inquiries and provide assistance

3.3 Service Improvement

• Analytics: Understand how users interact with the app (anonymized data only)
• Bug Fixes: Identify and resolve technical issues
• Feature Development: Improve and develop new features based on usage patterns

4. Data Storage and Security

4.1 Cloud Infrastructure

• Firebase/Firestore: Primary data storage on Google Cloud Platform
• Firebase Storage: Secure storage for photos, videos, and voice recordings
• Encryption: All data encrypted in transit (TLS/SSL) and at rest (AES-256)

4.2 Security Measures

• Access Controls: Strict access controls ensure only you can access your memories
• Authentication: Secure OAuth 2.0 authentication via Google or Apple
• Data Isolation: Your data is completely isolated from other users
• Regular Monitoring: Continuous security monitoring for threats
• No Third-Party Access: Your memories are never shared with or sold to third parties

4.3 Your Privacy Commitment

5. Data Sharing and Third Parties

5.1 Essential Service Providers

• Google Firebase: Authentication, database, file storage, and notifications
• Apple/Google: App Store and Play Store for payment processing

5.2 What We Share

• With Firebase: Encrypted memory data for storage and sync
• With App Stores: Subscription status only (no memory content)

5.3 No Sale of Personal Data

We do NOT sell, rent, or trade your personal information or memory content to third parties for any purpose. Your memories are yours alone.

6. Your Rights and Controls

6.1 Access and Control

• View Your Data: Access all your memories and account data through the app
• Edit and Delete: Modify or remove any memory at any time
• Export: Request a copy of your data in a portable format
• Account Deletion: Permanently delete your account and all data

6.2 Privacy Controls

• Camera/Microphone: Control app access via device settings
• Photo Library: Control access to your device photos
• Notifications: Manage notification preferences in device settings

6.3 GDPR and Privacy Rights

• Right to Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Object to certain types of data processing
• Right to Withdraw Consent: Withdraw consent for data processing at any time

7. Data Retention

7.1 Active Accounts

• Memories: Retained as long as your account is active
• Account Data: Retained while you have an active subscription
• Usage Analytics: Anonymized data retained for service improvement

7.2 Account Deletion

• Immediate: Access to your account is immediately revoked
• 30 Days: Personal data deleted from primary systems
• 90 Days: Encrypted backups purged from disaster recovery systems
• Legal Requirements: Some data may be retained if required by law

8. Children's Privacy

• Age Requirement: Huvo is intended for users 13 years and older
• Parental Consent: Users under 18 should have parental consent
• COPPA Compliance: We do not knowingly collect data from children under 13
• Discovery: If we discover data from a child under 13, we will delete it immediately
• Parental Rights: Parents can contact us to request deletion of their child's data

9. International Data Transfers

• Cloud Services: Data stored on Google Cloud Platform infrastructure
• Transfer Safeguards: Standard contractual clauses and encryption protect your data
• GDPR Compliance: We comply with GDPR and applicable international data protection laws

10. App Permissions Explained

10.1 Required Permissions

• Internet Access: Required to sync your memories to the cloud
• Storage: Required to save and access your memories on your device

10.2 Optional Permissions

• Camera: Capture photos and videos directly in the app
• Microphone: Record voice notes and audio memories
• Photo Library: Import existing photos from your device
• Notifications: Receive reminders and updates (you can disable anytime)

All optional permissions can be revoked at any time in your device settings. The app will continue to function with reduced features.

11. Changes to This Policy

• Notification: Material changes will be communicated via email or push notification
• Effective Date: Changes become effective 30 days after notification
• Continued Use: Continued use of Huvo after changes constitutes acceptance
• Opt-Out: If you disagree with changes, you may delete your account before the effective date

12. Contact Information

12.1 Privacy Inquiries

• Email: privacy@larna-ai.app
• Support: contact@larna-ai.app
• Response Time: We respond to privacy requests within 30 days

12.2 Company Information

13. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide Huvo services (memory storage, sync)
• Consent: Camera, microphone, photo library access, and push notifications (withdrawable)
• Legitimate Interests: Security monitoring, service improvement, fraud prevention
• Legal Obligations: Compliance with applicable laws and regulations