Privacy policy

Last updated 3 November 2026 · Neulish Labs, India · hello@neulish.com

This page explains what Neulish Speech ("Vani", "we") collects when you use neulish-vani.vercel.app and the Vani coaching calls, why, who else touches it, and what you can do about it. It is written to be read, not skimmed. Where it says "you", it means the person signed in.

1. What we collect

1.1 Your account

Name and email address from your sign-in (Google, Apple, or an email link), handled by Supabase Auth.
Your plan, its dates, bought minutes and any promo code you used.
Your approximate country, from your network address, to understand where Vani is used.

1.2 Your calls

Transcript. What you and Vani said, as text. It is saved so Vani can remember your last sessions and so the Insights page can show your progress.
Session notes. Vani's short summary, the ratings you gave her (confidence, severity), techniques practised, homework, and a safety flag if the call turned to a crisis.
Voice readings. Numbers only: averages of how your voice sounded (tension, calm, confidence, energy, flat) and the listener-panel scores (fluency, clarity, pace, blocks, nerves). We do not keep your voice audio.
Camera readings (only if you turn the camera on). Numbers only: how much your face moved and a smile score. We do not keep video or pictures.

1.3 Microphone and camera

The microphone is used only during a call. Audio goes live to ElevenLabs (Vani's voice) and, on plans that include it, to Hume (voice readings). The camera is off unless you turn it on, and sends one small picture every ten seconds to Hume. Neither we nor they keep the recordings beyond processing. You can stop either at any time from the browser's address bar.

1.4 Payments

Payments are taken by Razorpay. We never see your card, UPI or bank details; we receive the order id, the amount, the method name and the result.

1.5 Usage

We record which parts of the page are used (taps, pages viewed, calls started, plans viewed and bought) with PostHog, together with your approximate country and device type, so we can see what helps people and what confuses them. No session replay, no keystroke logging.

2. Why we use it

To run the call and let Vani remember you between sessions.
To show you your own progress on the Insights page and suggest what to work on next.
To count your minutes and manage your plan.
To keep you safe: a call that turns to crisis is never cut short by a minute limit.
To improve Vani. Transcripts may be read in anonymised, aggregated form to tune her prompts. They are never sold and never used for advertising.

3. Who else sees it

Service	What goes there	Why
Supabase (database and sign-in)	Account, plan, session rows	Storing your data with row-level security, encrypted at rest and in transit
ElevenLabs	Live audio during a call; the transcript and Vani's summary	Vani's voice and conversation
Hume AI	Live audio, and camera frames if you turn the camera on	Voice and face readings on plans that include them
Razorpay	Payment details, handled on their pages	Taking payments
PostHog	Usage events, country, device	Product analytics
Vercel	Serves the site	Hosting

We disclose data only if the law requires it, or to protect someone's safety. We do not sell, rent or trade your data.

4. Sensitive data

Speech is personal. Transcripts, ratings and anything you say about your health or state of mind are treated as sensitive: access-controlled, never shared with employers, insurers or schools, never used for automated decisions about you, and deletable by you.

5. Your rights

See it. The Insights page shows your records; "Download CSV" exports your sessions.
Delete it. Email hello@neulish.com from your sign-in address and we delete your account and every session within 7 days. You can also ask for a single session to be removed.
Withdraw. Deny the microphone or camera in your browser at any time; the call ends.
Correct it. Ask us to fix a wrong name or email.

6. Children

Vani is for people aged 13 and over. The Parents & Kids room is written for a parent speaking on a child's behalf. If you believe a child under 13 has an account, email us and we will remove it.

7. Keeping it safe

Data lives in Supabase (PostgreSQL) in Mumbai, encrypted at rest and in transit. Every row is tied to your account by row-level security; the site's own servers hold no master key to your records. Even so, no system is perfectly safe: please do not say anything to Vani you would not want disclosed in a breach.

8. Changes

If this policy changes in a way that matters, the date at the top changes and we tell you on the page before your next call.