Privacy Policy
Last updated: October 2026
At KOVA, we believe privacy is a fundamental right. KOVA lets someone at your vehicle reach you without either of you seeing the other's phone number. This policy explains what personal data KOVA collects, why, who it is shared with, how long it is kept, and the rights you have over it. It covers the KOVA app for Android and Wear OS, kova.buzz and its web dashboard, and the page a person reaches by scanning a KOVA Tag.
1. Who We Are
KOVA is operated by KOVA Connected Intelligence LLP, an Unspiring brand. KOVA Connected Intelligence LLP A-116, Plot No. 35, Urbtech Trade Centre Sector 132, Noida Gautam Buddha Nagar, Uttar Pradesh 201304 India For anything about your personal data, write to privacy@kova.buzz. Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), KOVA is the Data Fiduciary for the personal data described here.
2. What We Collect
If you own a vehicle on KOVA: - Account details: your phone number, which you sign in with, and the name and email address you add - Vehicles: make, model, colour, number plate, and the KOVA Tag linked to each - Contact preferences: which ways guests may reach you, the language the KOVA Assistant speaks, and how KOVA sends you alerts - Emergency contacts: the names, relationships and phone numbers of the people you add - Activity: a record of each call and message that reaches you through your KOVA Tags (which vehicle, when, the channel, how it ended, the text of messages, and for calls, the recording, transcript and summary described in section 4) - Your phone or watch: a push notification token and the app version, so KOVA can notify the right device. The KOVA watch app shows your default vehicle, which it gets from the KOVA app on your phone, and collects nothing of its own - Payments: your plan, its renewal date, the payment and order records for plans and KOVA Tags, and the delivery address for KOVA Tag orders. Card and UPI details are handled by our payment provider, not stored by KOVA - Sign-ins: the IP address and device type of each sign-in, so you can see where your account is signed in and sign out of sessions - Support: your conversations with KOVA Support If you contact a vehicle owner through a KOVA Tag (a "guest"): - What you send: the text of your message, and for calls, what is said on the call (see section 4) - Your phone number, if you give one: to place a call through Talk to Owner, KOVA asks for your number so it can call you. It is kept with the record of that call and never shown to the vehicle owner - The time of your request and the vehicle it was about What we don't collect: your location or contacts, or your photos or files unless you attach one in a KOVA Support chat. Scanning a KOVA Tag's QR code happens on your phone, through Google's code scanner, and no image is kept.
3. How We Use It
- To run the service: route calls and messages between guests and owners without revealing either number, and show owners their activity - To send you the alerts and notifications you have chosen, and service messages about your account, plan and KOVA Tags - To process payments and deliver KOVA Tags - To provide support - To apply fair usage, prevent misuse and investigate reports, as our Terms of Service set out - To meet legal obligations, including tax records and lawful requests from authorities We do not sell or rent personal data, and we do not use it for advertising.
4. Calls, Recordings, Transcripts and AI
Calls through KOVA are handled by the KOVA Assistant, an AI voice. It speaks with the vehicle owner, and on Talk to Owner calls it asks the owner whether to take the guest's call before connecting you. Guests are told this before they call. - Calls are recorded. The audio is kept to provide support, check call quality and investigate misuse - Calls are transcribed, so the owner can read what was said afterwards in their activity - KOVA uses AI to write a short conclusion of how a call ended and, when the owner asks, to translate a transcript into English Recordings, transcripts, summaries and translations are available only to the vehicle owner (transcripts and summaries) and to KOVA staff when needed for support or to investigate misuse. They are kept while the owner's account exists and deleted with it. AI summaries and translations can contain mistakes.
5. Who We Share It With
We share personal data only with the service providers who run parts of KOVA for us, and only as much as each needs: - Google (Firebase, Google Cloud, Gemini on Vertex AI): sign-in, data storage, push notifications, hosting the call service, the AI voice, transcripts, summaries and translation - Microsoft Azure: backup AI voice for calls - ElevenLabs: AI voice for calls, where used - Plivo: placing, connecting and recording phone calls - Twilio: sending SMS and WhatsApp messages - Meta (WhatsApp): delivering WhatsApp messages - Intercom: KOVA Support chat - Razorpay: payments for plans and KOVA Tags - Google Play: purchases made in the KOVA app - Resend: sending email - fal.ai: drawing the vehicle illustrations shown in the app, from the vehicle's make, model, year and colour only; no personal details are sent - Vercel: hosting kova.buzz and the web dashboard, and privacy-friendly website analytics that don't use cookies Each provider may process data only to provide its service to KOVA. We also disclose data when the law requires it, for example in response to a valid order from a court or law enforcement agency. Some of these providers process data outside India, for example Google's AI services in the United States. We use only providers bound to protect it, and we don't transfer data to any country the Government of India restricts under the DPDP Act.
6. How Long We Keep It
- Account, vehicles, preferences and emergency contacts: while your account exists - Activity, including recordings, transcripts and summaries: while your account exists - Guest messages and call records: with the vehicle owner's activity, and deleted with it - Sign-in sessions: while your account exists - Payment and order records: as long as tax and accounting law requires - Support requests: see section 8 - When you delete your account: see section 10
7. Emergency Contact Confidentiality
Emergency contacts you add are used only by KOVA, to reach them in a situation that needs it. They are never shown to, shared with or accessible by any guest or third party. Add only people who have agreed to be your emergency contact.
8. Support Requests
KOVA Support, on kova.buzz and in the KOVA app, is a chat run by Intercom, our support provider. If you aren't signed in, KOVA Support may ask for your email address to find your account. Conversations are kept as long as needed to help you, and deleted on request: write to privacy@kova.buzz. The same applies to requests made before October 2026 through our earlier support form.
9. Newsletter
KOVA doesn't send a newsletter today. If we start one, we'll send it only to people who sign up for it themselves, and every issue will include a link to unsubscribe.
10. Deleting Your Account
You can ask KOVA to delete your account at any time, in the KOVA app (Account → Delete account), by emailing privacy@kova.buzz, or as described at kova.buzz/delete-account. We do so within 30 days, and your account keeps working until then. Deletion removes: - Your account and profile - Your vehicles and their KOVA Tag links - Your emergency contacts - Your activity, including call recordings and transcripts - Your notifications and registered devices We keep payment and order records as long as the law requires, and a dated record that your request was carried out, without your personal details.
11. Your Rights
Under the DPDP Act you have the right to: - Access: ask for a summary of the personal data we hold about you and how it is used - Correction: correct or update it. Most of it you can edit yourself in the app - Erasure: have it deleted (section 10) - Withdraw consent: for anything we do on the basis of your consent, such as notifications you have chosen to receive. Withdrawing doesn't affect what was done before - Nominate: name someone to exercise these rights for you if you die or can no longer do so - Grievance redressal: complain to our Grievance Officer (below), and if you aren't satisfied, to the Data Protection Board of India To use any of these rights, write to privacy@kova.buzz from the email address on your account, or mention the phone number your account uses.
12. Children
KOVA is for adults. You must be 18 or older to create a KOVA account. We don't knowingly collect personal data from anyone under 18. If you believe a child has given us their data, write to privacy@kova.buzz and we will delete it.
13. Security
Data travels encrypted (HTTPS/TLS) between the app, the website and our servers. Access to personal data within KOVA is limited, by role, to the staff who need it. Phone numbers are never shown to the other party on a call or message. No system is perfectly secure, but we take reasonable steps to protect your data, as the DPDP Act requires. If a breach affects your personal data, we will inform you and the Data Protection Board as the law requires.
14. Permissions the App Asks For
- Notifications: to tell you when someone is trying to reach you, and about your account. You can turn each kind off in your phone's settings - Microphone and photos/files: only if you choose to send a voice message or attach a file in a KOVA Support chat - Internet: to connect to KOVA Scanning a KOVA Tag uses Google's code scanner, which opens your camera through Google Play services; the KOVA app itself has no camera access, and no image is kept.
15. Changes to This Policy
We may update this policy. The date at the top shows when it last changed. If a change materially affects how we use your personal data, we will tell you by email or in the app before it takes effect.
Grievance Officer
Under the Information Technology (Intermediary Guidelines) Rules, 2021, KOVA has appointed a Grievance Officer to address complaints and concerns:
Grievance Officer
Samiya Khan
Email: grievance@kova.buzz
Complaints are acknowledged within 24 hours and resolved within 15 days.