This Privacy Policy explains how Lahta LLC (“we,” “us,” or “our”) collects, uses, and protects your information when you use the Nimbo mobile application (the “App”). Nimbo is a voice-based AI companion for iOS.
By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
Summary
- Your voice never leaves your device as audio. Microphone audio is processed entirely on your device to detect speech and convert it to text. We do not record, store, or transmit raw audio recordings.
- We send the text transcript of what you say to our servers, and share it with a third-party AI service — Google’s Gemini API — to generate a response. The App asks for your explicit permission before any of your data is shared.
- Nimbo can remember things you tell it (“memories”) to personalize your experience. These are stored on our servers and you can view and delete them at any time.
- We do not require an account, email, name (for login), or password. You are identified only by a random anonymous ID generated on your device.
- We use privacy-conscious analytics (no session recording, no screen recording, no automatic interaction tracking).
- Nimbo’s responses are spoken using an AI-generated synthetic voice.
Information we collect
a. Microphone audio (processed on-device only)
When you start a voice conversation, the App listens through your microphone. This audio is:
- processed locally on your device for voice activity detection and speech-to-text (using on-device speech-recognition models);
- not stored as audio files, and not transmitted to our servers or any third party as audio.
Only the resulting text transcript of your speech is sent to our servers to produce a reply.
b. Conversation content
- The text transcripts of your conversations (both your messages and Nimbo’s replies) are sent to and processed by our backend in order to generate responses. To generate each reply, your messages and conversation context (including relevant memories and the name/age you optionally provided) are processed by Google’s Gemini API on our behalf — see “Third parties we share data with” below.
- Memories: Nimbo may save facts you choose to share (for example, your preferences or details you mention) so it can personalize future conversations. These memories are stored on our servers and are associated with your anonymous ID.
c. Profile information you provide
During onboarding you may optionally provide:
- a first name or nickname (how Nimbo addresses you);
- your age.
This information is used to personalize the experience and is associated with your anonymous ID.
d. Anonymous device identifier
The App generates a single random identifier (a UUID) stored in the iOS Keychain on first launch. This identifier:
- is not linked to your real name, email, phone number, or Apple ID;
- is used to associate your session, memories, and profile with your install;
- is the same identifier used by our analytics provider so usage is consistent.
You can reset this identifier (and thereby start fresh) using the in-app account deletion feature.
e. Usage and performance analytics
We use PostHog to understand how the App is used and to improve performance and reliability. We collect curated, app-defined events such as:
- screens opened (home, call, chat, memory, profile);
- onboarding progress and completion;
- microphone permission result;
- voice-interaction performance metrics (e.g., response latency, interruption/barge-in events, errors);
- mute toggles, voice/character customization changes, messages sent, and account deletion.
Our analytics configuration explicitly disables:
- session replay / session recording;
- automatic screen-view capture;
- element-level autocapture (we do not automatically track taps or on-screen content).
We do not collect the content of your conversations for analytics purposes.
f. Information we do not collect
- We do not collect raw audio recordings.
- We do not require or collect login credentials, email addresses, or phone numbers.
- We do not knowingly collect precise location data, contacts, photos, or health data.
How we collect information
We collect information in three ways:
- Directly from you — what you say (converted to text on your device) or type in conversations, and the optional name and age you enter during onboarding;
- Automatically from the App — the random anonymous identifier generated on your device, and the curated analytics events listed above, which the App sends to our analytics provider as you use it;
- Generated during use — Nimbo’s replies and the “memories” it saves from your conversations.
How we use your information
We use the information described above to:
- provide the core functionality of the App (understand your speech and respond);
- personalize Nimbo’s responses using your profile and saved memories;
- maintain, debug, secure, and improve the App;
- measure aggregate usage and performance.
We do not sell your personal information, and we do not use your conversations to serve third-party advertising.
Your consent to data sharing
Before you can start using the App, it presents a consent screen that explains what data will be shared and with whom. No conversation data is sent to our servers or to any third party until you expressly agree. You can withdraw your consent at any time by ceasing to use the App and deleting your data with the in-app account deletion feature.
Third parties we share data with
We share data only with the service providers below, only to operate the App. We have reviewed each provider’s data-protection commitments and require each of them to protect your data to a standard equal to or greater than this policy:
- Google LLC (Gemini API) — a third-party AI service. Your conversation transcripts and conversation context (including relevant memories and the name/age you optionally provided) are sent to Google’s Gemini API to generate Nimbo’s responses. Under the Gemini API’s paid-tier terms, this data is not used to train Google’s models.
- PostHog, Inc. — usage events and performance diagnostics, associated only with your anonymous ID, as described in their privacy policy.
We do not share your data with advertisers or data brokers, and we do not sell your personal information.
AI-generated content disclosure
Nimbo is an artificial intelligence. Its responses are generated by an AI language model and spoken using an AI-generated synthetic voice. Nimbo is not a human, and its responses may be inaccurate. Nimbo is not a substitute for professional advice (medical, legal, financial, or mental-health). If you are in crisis or need help, please contact a qualified professional or emergency services.
Data retention
- Conversation transcripts and memories are retained on our servers for as long as your install is active, or until you delete them.
- You can delete individual memories from within the App.
- You can delete your data and reset your anonymous identity using the in-app account deletion feature, which removes the data associated with your anonymous ID.
- Analytics events may be retained by our analytics provider in aggregate for a limited period.
To request deletion or ask questions about your data, contact us at the email below.
Your choices and controls
- Microphone: You can grant or revoke microphone and speech-recognition permission at any time in iOS Settings → Nimbo. The voice features require these permissions to function.
- Memories: View and delete saved memories in the App’s Memory screen.
- Account/data deletion: Use the in-app account deletion option to wipe your associated data and reset your identity.
- Profile: You can update or clear the name and age you provided.
Children’s privacy
The App is not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.
Data security
We use industry-standard measures to protect your information, including encrypted transport (TLS/HTTPS and secure WebSocket connections) and storage of your device identifier in the iOS Keychain. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Your privacy rights
Depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have rights to access, correct, delete, or restrict the processing of your personal information, and to data portability. To exercise these rights, contact us at the email below. We will not discriminate against you for exercising your rights.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice within the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.
Contact us
If you have questions or requests regarding this Privacy Policy or your data, contact:
Email: founders@lahta.co