HiNikki Privacy Policy

Effective date: August 31, 2026

Last updated: August 31, 2026

HiNikki is a voice companion for older adults and a companion app for their family members or caregivers. This policy explains what information HiNikki handles, why it is used, which service providers process it, and the choices available to users.

Who is responsible for HiNikki

HiNikki is operated by Willem Grasso. Questions or privacy requests can be sent to wpggrasso@gmail.com.

Information HiNikki handles

Depending on how the app is used, HiNikki may handle:

• caregiver account details, including email address and authentication information;
• the older adult's name and profile, family relationships, contact details, notes, schedule, reminders, safe places, and familiar addresses;
• family photos selected by a caregiver;
• precise device location when location features are used;
• microphone audio during a conversation with Nikki;
• conversation transcripts, summaries, support notes, memories, and actions proposed during a conversation;
• app and device information needed for security, notifications, troubleshooting, and delivery of the service; and
• push-notification tokens and the content needed to deliver a notification.

HiNikki does not sell personal information or use it for third-party advertising.

Why the information is used

HiNikki uses this information to:

• provide the voice companion and answer questions using the context a family has added;
• show people, schedules, reminders, weather, safe places, and other app features;
• connect an older adult's profile with an approved caregiver account;
• let caregivers review and approve proposed changes before they become part of the older adult's main profile, except for limited support notes that the app is designed to save automatically;
• send service and safety notifications;
• protect accounts and prevent unauthorized access; and
• maintain, troubleshoot, and improve the reliability and accessibility of the app.

Service providers

HiNikki relies on the following service providers. They process information only as needed to provide their part of the service and under their own privacy and security terms.

• Supabase provides authentication, the database, file storage, realtime synchronization, and server-side functions. Account data, profiles, photos, locations, schedules, notes, pairing records, and other app data may be stored or processed by Supabase.
• ElevenLabs provides Nikki's conversational voice service, including speech recognition, voice generation, and conversation processing. Microphone audio, conversation context, and transcripts or conversation records may be sent to and processed by ElevenLabs when a voice conversation is used.
• LiveKit provides the realtime audio connection used by the voice service. Live microphone audio and connection metadata may pass through LiveKit during a conversation.
• Open-Meteo provides weather information. Approximate or precise coordinates may be sent to Open-Meteo to return local weather. HiNikki does not send the user's name with a weather request.
• Expo provides app build and update infrastructure and push-notification delivery. Expo may process app build metadata, device push tokens, and notification payloads needed to deliver notifications.

These providers may process information in countries outside the user's country. Their handling of information is also governed by their privacy notices and the safeguards they offer for international transfers.

Device permissions

HiNikki may request these permissions:

• Microphone: used to let the user speak with Nikki. Audio is streamed to the voice services described above while a conversation is active.
• Camera: the current voice engine requires a camera permission in the app build, but HiNikki does not use the camera to capture video during Nikki conversations.
• Location while using the app: used for local weather, safe-place guidance, event locations, and location-sharing features selected by the user. The current version does not use continuous background location.
• Photos: used when a caregiver chooses a familiar-face or profile photo to upload.
• Notifications: used for reminders, family updates, safety events, and other service messages.

Users can change permissions in their device settings. Turning off a permission may disable the related feature.

Audio and conversation records

Microphone audio is sent to ElevenLabs and LiveKit during a Nikki conversation so the service can understand and respond to the user. Conversation text, summaries, support notes, memories, or proposed actions may be stored with the user's HiNikki data in Supabase so the app can provide continuity and caregiver review.

HiNikki should not be used for emergencies or as a replacement for medical care. Users should avoid sharing information in a voice conversation that is not needed for the service.

Retention and deletion

HiNikki keeps account and app data for as long as the account is active or as needed to provide the service, protect the service, meet legal obligations, or handle a dispute. Different categories may be kept for different periods. Service providers may also keep limited backups, security logs, or conversation records according to their configured retention periods and legal obligations.

A user or authorized caregiver can request access, correction, export, or deletion by emailing wpggrasso@gmail.com. Before acting on a request, HiNikki may need to verify the requester's identity and authority. When a valid deletion request is completed, HiNikki will delete or anonymize information under its control and instruct relevant providers to delete it where applicable. Residual copies may remain temporarily in protected backups or where retention is required by law.

User rights

Subject to applicable law, users may have the right to:

• know what personal information is processed and receive a copy;
• correct inaccurate or incomplete information;
• request deletion or restriction of processing;
• object to certain processing;
• withdraw consent where processing relies on consent; and
• receive portable data or complain to a data-protection authority.

To exercise a right, email wpggrasso@gmail.com. Users in the Netherlands may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

HiNikki uses access controls, encrypted network connections, private storage, and server-side authorization rules intended to limit information to linked users and approved service providers. No service can guarantee absolute security. Users should protect their account credentials and report suspected unauthorized access.

Children

HiNikki is not directed to children under 13. It should not be used to create an account for a child under 13 without appropriate parental authorization and a separate review of the legal requirements that apply.

Changes to this policy

This policy may change when HiNikki's features or providers change. The updated version will show a new "Last updated" date. Material changes will be communicated in the app or through another appropriate channel when required.

Contact

For privacy questions or requests:

Willem Grasso

Email: wpggrasso@gmail.com