Privacy Policy

Last updated: June 6, 2026

1. Who We Are

Baby Whispers is operated by Resolver Vicky (Sole Proprietor). We provide a subscription service that sends daily AI-generated voice messages to expecting parents via Telegram. Our registered address is Madurai, Tamil Nadu, India.

2. What Data We Collect

We collect the following categories of data:

Account data: name, email address (via Google OAuth)
Profile data: baby nickname, baby gender, due date (optional), preferred delivery time, timezone
Telegram data: Telegram user ID, Telegram username (when you connect the bot)
Payment data: handled entirely by Dodo Payments — we do NOT store card details. We store: plan type, subscription status, Dodo customer ID, and payment reference.
Usage data: delivery logs (which voice note was sent, delivery status, timestamp)
Technical data: IP address, browser type (for rate limiting and security only)
No cookies except a strictly necessary auth session cookie (see our Cookie Policy)

3. How We Use Your Data

We use your data only for these purposes:

To deliver the daily voice note service via Telegram
To process payments via Dodo Payments
To send transactional emails (sign-in links, payment receipts) via Resend
To prevent fraud and abuse (rate limiting via Upstash Redis)

We do not use your data for advertising. We do not sell your data to third parties. We do not use your data for AI training.

If you are in the European Economic Area (EEA), our legal basis for processing your data is:

Contractual necessity: delivering the service you paid for
Legitimate interest: security, fraud prevention
Consent: for any optional communications

5. Third-Party Services

We share data with these service providers, each of whom has their own privacy policy governing their use of your data:

Dodo Payments — payment processing (their privacy policy governs card data)
Telegram — message delivery (Telegram's privacy policy governs message data)
Cloudinary — audio file CDN (stores pre-generated audio only, no user-identifiable data)
Upstash — Redis (temporary session state and rate limit counters only)
Supabase — database hosting (all account and subscription data)
Vercel — hosting (web requests, server logs)
Resend — email delivery (transactional emails)
Google — OAuth provider (if you sign in with Google)

6. Data Retention

Active account data: retained while your subscription is active
Delivery logs: retained for 12 months, then anonymised or deleted
Payment records: retained for 7 years (legal and tax requirements)
If you delete your account: all personal data is deleted within 30 days, except payment records required by law

You have the following rights regarding your data:

Right to access your data
Right to correct inaccurate data
Right to delete your account and data
Right to data portability
Right to object to processing

To exercise these rights, email us at resolvervicky@gmail.com. We will respond within 30 days.

8. Children's Privacy

The service is designed for adults (parents). We do not knowingly collect data from anyone under 18 years of age. The voice messages simulate a child's voice but are generated by artificial intelligence — no actual children's data is collected or used.

9. International Transfers

Your data may be processed in the United States (Cloudinary, Upstash, Vercel, Resend) and the European Union (Supabase). Where required, we rely on Standard Contractual Clauses approved by the European Commission to protect your data.

10. Changes to This Policy

We will notify you by email of material changes to this policy at least 14 days before they take effect. Your continued use of the service after the effective date constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this policy or your data, please contact us at resolvervicky@gmail.com.

Other legal pages