On It Privacy Policy
On It turns what you say into tasks for you and your team. This policy explains what the app collects, why, where it goes, and how to remove it. It is written to be read, not skimmed.
What we collect
| Data | Why | Kept |
|---|---|---|
| Mobile number | Your login and the way teammates are identified when you delegate to them | Until you delete your account |
| Name and email (optional) | Shown to your team; email is used for task alerts and login codes | Until you delete your account |
| Voice recordings | Sent to Google's Gemini model on Google Cloud (Vertex AI) to turn speech into tasks | Not stored by On It after processing; Google does not use Vertex AI inputs to train its models |
| Transcripts and tasks | The product itself: what was said, who owns it, when it is due, proof of completion | Until you delete the task or your account; trashed tasks are removable |
| Push notification token | To deliver alerts to your phone | Until you sign out or uninstall |
| Delivery receipts | Whether an alert was sent, delivered or read on WhatsApp/email, shown to the sender | With the task |
Permissions the app asks for
Microphone, only while you hold the mic to speak. Speech recognition on your phone, to show words as you talk. Notifications, for alerts. Nothing runs in the background, and the microphone is never on without the button pressed.
Who else sees your data
- Your team: people you delegate to see the task, the deadline, and the details you spoke. They do not see your other tasks.
- Google Cloud (Vertex AI): processes audio and text to extract tasks. Region: India/US. Data is not retained for training.
- Microsoft Azure (Central India): hosts our servers and database.
- Meta (WhatsApp Business), ZeptoMail, Expo: deliver alerts and login codes to WhatsApp, email and push. They receive your number/email and the alert text.
We do not sell data, show ads, or share data with anyone for marketing.
Security
Everything travels over HTTPS. Login is by one-time code; sessions use short-lived tokens. Login codes are stored hashed and expire in five minutes. Access to production systems is limited to named engineers.
Your choices
- Delete a task: swipe or use Delete; it moves to Trash, and Trash can be emptied.
- Delete your account and all data: email privacy@nuvena.co from your registered email, or from the app menu, Log out then request deletion. We delete within 7 days and confirm by email.
- Export: ask at the same address; you get a JSON file of your tasks.
Children
On It is for working adults. It is not directed at anyone under 18.
Changes
If this policy changes in a way that matters, the app will tell you before the change takes effect.