Home / Privacy Policy

Privacy Policy

Last revised on 6 November 2026

This Privacy Policy explains how Karvo ("Karvo", "we", "us", "our") collects, uses, shares and deletes information about you when you use the website at heykarvo.com, the Karvo app at app.heykarvo.com, the Karvo apps for Android, iPhone and iPad, and Karvo's assistant on WhatsApp and Telegram (together, the "Services"). "You" means you, as someone who uses the Services.

Karvo is an AI-assisted personal concierge service for everyday plans, reminders and errands. The assistant is a private pilot for invited adults in India. Available tasks depend on your connected accounts, permissions, channel and pilot access. This notice explains our data practices; individual connections, recording notices and action approvals are presented in their own flows. Our Terms of Service explain use of the service, and our Acceptable Use Policy explains its limits.

Changes to this policy

We may update this policy from time to time and will change the date at the top when we do. If a change affects how we use or share your information in a way that matters, we will tell you in your chat with Karvo before it applies to you, and take any further steps the law requires. If you do not agree with a change, you can stop using the Services and delete your data as described below.

Information we collect and how we use it

We use the information described below to provide the Services: to understand what you ask, plan and carry out tasks for you (including with the apps and services you connect), answer you, and remember what helps Karvo help you next time. We also use it to keep the Services safe and working, to fix problems, to improve Karvo as described below, and to meet our legal obligations. We do not sell your information, do not share it with data brokers, and do not use it to show you ads.

Information you give us

• Waitlist details. If you join the waitlist, we collect your name, mobile number and self-reported age range to manage interest, assess pilot eligibility and contact you about access. These details are submitted to Google Forms and stored in an operator-controlled Google Sheet. Joining the waitlist does not by itself authorize unrelated promotional WhatsApp messages or connect your accounts.
• Your phone number. You sign in with the number you use on WhatsApp; a code sent by SMS confirms it is yours. We store the number encrypted and use it to identify your account and connect your WhatsApp chat.
• Your messages. What you send Karvo on WhatsApp, Telegram, the website or the app, and Karvo's replies, including voice notes if that feature is turned on for you.
• Details you share for tasks, such as delivery addresses, saved places, working hours and preferences.
• Your agreements: the notices you accepted, when, and your confirmation that you are 18 or over.

Karvo never asks for, sees or stores card numbers, CVVs, UPI PINs, or the passwords and one-time codes of banks, wallets and payment apps. You enter those on the provider's own page.

Information from the apps you connect

Karvo works through the accounts you choose to connect, and only with the access you grant. You can disconnect Google or Swiggy at any time: open Connections on app.heykarvo.com or in the Karvo iPhone app and choose Disconnect. An order in progress needs Swiggy until it finishes. Leaving Karvo disconnects everything.

• Swiggy. Karvo reads your order history, restaurants, menus and carts, and places an order only after you approve its bill. Karvo learns your usual choices from your order history.
• Telegram and WhatsApp. Your chat identifier on each, so Karvo knows which chat is yours.
• Google, as described in the next section.

The keys these services give Karvo to act for you are stored encrypted, with keys held in Google Cloud's key management service.

Information from Google

If you connect Google, you choose Calendar, Gmail or both. With Calendar, Karvo can read your events, find free time, and propose changes that you approve. With Gmail, Karvo can read and search your email, summarize it, and draft replies; an email is sent only after you approve it.

Karvo also receives the email address of the Google account you connect, to show you which account it is, and keeps only a code that tells it whether you later connect the same account.

If you connect Google, Karvo also remembers useful things from your mail and calendar, such as a booking, a trip or an appointment, so it can help you later. To do this it reads your new mail and calendar in the background, every hour, and once looks back over the last 30 days when you connect. It skips promotional and social mail, and security messages such as sign-in codes. Imported mail and calendar text is kept encrypted for at most 7 days while Karvo learns from it, then deleted. The short facts learned from that import are used only for you, never to improve Karvo for other people and never to train AI. They are deleted when you disconnect Google, when Google access ends and you don't reconnect within 30 days, when you ask Karvo to forget everything, or when you leave Karvo.

Separately, the words of your conversations about Gmail or Calendar, including email or event excerpts quoted in Karvo's replies, can be kept encrypted for up to a year for your personal memory. We use these conversations and what Karvo remembers from them only to help you, never to train AI or improve the experience of other users. Disconnecting Google stops further access but does not automatically remove these conversations or their chat-derived memory. Ask Karvo to forget everything and confirm to clear learned memory and stop retained conversations being used for personal memory. Original conversation records may remain under a separate recording setting until their retention period ends; leave Karvo to delete them with your account.

Karvo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide and improve the features you use in Karvo.
• We do not use Google data to train or improve AI models. Google-related conversation records are for your personal memory and are excluded from model-training exports, even if a conversation record is also retained under the recording setting described below.
• We do not use Google data for advertising, and we do not sell it.
• The AI model providers that power Karvo process Google data only to answer your request, on our behalf, and may not use it for their own purposes.
• No person at Karvo reads your Google data, except with your permission, for security, or as the law requires.

You can remove Karvo's access to Google at any time: choose Disconnect Google in Connections on app.heykarvo.com or in the Karvo iPhone app, use the third-party connections page in your Google Account settings, or write to us. Disconnecting deletes the keys Karvo held and asks Google to end Karvo's access, unless another Karvo sign-in or connection is still using that Google account. Leaving Karvo also disconnects Google.

What Karvo learns about you

To help without asking every time, Karvo remembers what you tell it and what it learns from your conversations and connected apps: preferences, people you mention, plans and places. It can also remind you of plans that are coming up, in the morning and the evening; say "stop reminders" to turn reminders off. You can ask Karvo what it remembers, ask it to forget one thing, or ask it to forget everything. Forgetting cannot be undone. Say "stop remembering" to pause, and "start remembering" to resume.

Improving Karvo

Your conversations with Karvo are recorded to improve it, unless you turn this off: say "stop recording" at any time and keep using Karvo. Recordings are encrypted and kept for up to a year, with the phone numbers and addresses in them. Payment details Karvo can spot are removed (it may miss some), and phone numbers and addresses are removed before anything is used for training. Google-related conversation records are handled as described above and excluded from model-training exports. Swiggy order details are excluded from pilot members' training records. Eligible recordings may be used to evaluate and improve Karvo, including the models behind it, only within the permissions and provider restrictions described below.

Voice notes. When your conversations are being recorded, the audio of the voice notes you send is stored too, encrypted, for up to the same year. Saying "stop recording" stops this and deletes the audio already kept, and it is deleted with your account. A note that speaks a card number, PIN, one-time code or password, as far as Karvo can tell from its transcript, is not kept.

WhatsApp data. We do not use or allow providers to use data obtained through the WhatsApp Business Platform, including anonymized, aggregated or derived data, to create, develop, train or improve AI models, except for fine-tuning a model for Karvo's exclusive use where Meta's terms permit it. Such fine-tuning must not train or improve any other AI model. A recording agreement does not override these restrictions. Google data remains excluded from model training regardless of your recording setting.

The iPhone and iPad app

The app keeps you signed in with a session stored in the iOS Keychain on your device, kept out of iCloud sync. It does not read your device's contacts, location, photos, files, camera or microphone, does not ask to show you notifications, and contains no advertising or analytics code. When you sign in, Google Firebase confirms the request comes from the genuine app, using a silent Apple push message or a reCAPTCHA check, and sends your sign-in code. When you connect Google, Google's own page opens in Apple's secure browser sheet to ask for your consent and then returns you to the app. Chat with Karvo stays on WhatsApp and Telegram.

The Android app

The app keeps you signed in with the same session as the website, stored on your phone encrypted with a key held in Android's keystore and left out of phone backups. It asks only for internet access. It does not read your phone's contacts, location, photos or files, and it contains no advertising or analytics code. When you sign in, Google Firebase checks with Google Play that the request comes from the genuine Karvo app. When you connect Google, Google's own page opens to ask for your consent and then returns you to the app.

Information collected automatically

• Service logs: technical records of how the Services run, with ids, codes, counts and timings. They never contain the text of your messages, your addresses, links or codes. They are kept for 30 days.
• Network data: your IP address and browser or app details when you use the website or the app, used to keep the Services secure and to limit abuse, and kept in request logs for 30 days.
• Website visits: counted with Cloudflare Web Analytics, which uses no cookies and does not follow you across sites.

Cookies

The Karvo website and app use only the cookies they need to work: one that keeps you signed in, and short-lived ones that carry your sign-in or invite between steps. We do not use advertising or tracking cookies. If you block cookies, you will not be able to sign in.

How we share information

We share information only as needed to provide the Services, with:

• Service providers who run parts of the Services for us: Google Cloud (hosting, storage and encryption keys, in India), Google Firebase (the sign-in code, and the check that the Android, iPhone or iPad app is genuine), Apple (the silent push message used in that check on iPhone and iPad), Cloudflare (network and website visit counts), and Meta (WhatsApp) and Telegram (your chats with Karvo). Google Forms and Sheets store waitlist submissions.
• AI model providers (OpenAI and Anthropic), who receive your messages and the context needed to answer them. They process this for us and may process it outside India. Their use of connected-service data is limited by the source-specific restrictions above; we do not authorize them to use WhatsApp data to train or improve models for other customers.
• Sarvam, which turns the voice notes you send into text. It receives the audio of a note, not the rest of your chat, and processes it for us.
• The services Karvo acts on for you, such as Swiggy when you approve an order, or Google when you approve a calendar change or an email.
• Others when the law requires, or to protect the safety and rights of people and of Karvo, and to prevent fraud or abuse.
• A successor, if Karvo is merged, sold or reorganized, who will remain bound by this policy for the information we hold.

How long we keep it

• Waitlist details: while managing your request for access; contact us below to request their removal.
• Your account, connected apps and what Karvo has learned: until you leave Karvo.
• Raw mail and calendar text Karvo reads to learn from: at most 7 days.
• Conversation text kept for personal memory, including Google-related chat excerpts: up to a year.
• The facts Karvo remembers: until you ask it to forget them or leave Karvo. Disconnecting Google also deletes facts learned from imported Google data; it does not automatically delete chat-derived memory.
• Recordings for improving Karvo: up to a year.
• Service and request logs: 30 days.
• Backups: 30 days.

Your choices and deleting your data

• Delete your account: send /stop or /delete to Karvo and complete the confirmation, or choose Leave Karvo in the Karvo app or on app.heykarvo.com, or ask us by email. Karvo deletes your account and what it holds about you and disconnects the apps you connected. You may need to resolve an active order and retry before deletion can complete. Copies in logs and backups expire within 30 days. Waitlist entries in Google Forms/Sheets are separate; contact us below to request their removal.
• Disconnect an app: Open Connections on app.heykarvo.com or in the Karvo iPhone app and choose Disconnect. It works for Google and Swiggy. You can also remove Google on the third-party connections page in your Google Account settings, or write to us about either.
• Stop proactive WhatsApp messages: send STOP or UNSUBSCRIBE. This does not delete your account or cancel an order already requested. Replies to messages you send and necessary updates for an active, approved order may continue. Send START to resume eligible messages; it does not grant new account permissions.
• See, correct or forget what Karvo remembers: ask Karvo in the chat.
• Other requests, including under India's Digital Personal Data Protection Act, 2023: write to us at the address below.

Acting on your behalf

Karvo can take actions for you, so please review what it proposes. Nothing is ordered, paid for or sent until you approve it, on a bill or a message Karvo shows you. Karvo treats the content of emails, web pages and menus as information, not as instructions, but it can still make mistakes or be misled, and its answers can be incomplete or wrong. Karvo is not a financial, legal or medical adviser.

Children

The Karvo assistant is for people aged 18 or over. Waitlist age ranges help us assess eligibility and are not proof of age. If a child has submitted personal information, a parent or guardian can contact us to request its removal. Do not share someone else's private information without the necessary authority.

Security

We protect your information with encryption in transit and at rest, encryption keys held in Google Cloud's key management service, and access limited to what each part of Karvo needs. No system is perfectly secure, and we cannot guarantee that your information will never be accessed without permission.

Contact us

For human help, privacy questions, or a request to access, correct or delete your information, contact us at [email protected]. We may ask for enough information to verify that the request concerns your account. Never email passwords or payment secrets. Provide identity documents only if needed through a separately agreed, secure verification process.