Privacy Policy

This policy explains how Annus Mirabilis LLP (“we”, “us”) collects and uses personal data when you use Hita, our WhatsApp helper service, and when you visit annusmirabilis.io. We are the Data Fiduciary for this data under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

In short: we collect only what we need to help you, we ask for your consent first, we never ask for your OTP or PIN, and you can withdraw consent and ask us to delete your data at any time.

1. Who we are

Hita is a brand and service owned and operated by Annus Mirabilis LLP.

2. Data we collect

When you use Hita on WhatsApp:

• Contact details: your WhatsApp phone number and the name on your WhatsApp profile or the name you tell us.
• Preferences: your preferred language, and whether you want a family member to get updates.
• Your messages: text, voice notes and images you send to Hita, including messages you forward to us for a scam check.
• Service records: reminders you set; tasks you request (for example, “recharge my phone”), with the details needed to complete them such as the operator, consumer or account number, amount and the payment or transaction reference; and how often recurring tasks happen, so we can remind you on time.
• Family link: if a family member sets up Hita for you, we link your number to theirs so they can pay for tasks and, if you agree, receive updates.
• Consent records: when you gave or withdrew consent.

What we never ask for or store: OTPs, UPI PINs, card numbers, CVVs, net-banking or other passwords. If you send one by mistake, we will not use it, and we delete it as soon as we notice it.

When you visit annusmirabilis.io: the site sets no cookies and runs no analytics or advertising trackers. Our host keeps standard server logs (IP address, browser and pages requested) for security. Fonts load from Google Fonts. If you contact us through our Google Form, Google processes the data you enter there under its own privacy policy.

3. How we use it

• To provide Hita: answer your messages, check suspicious messages, send reminders, and complete the bills, recharges and bookings you ask for.
• To understand voice notes and replies in your language. We use AI services for this; see section 5.
• To keep your family member informed, only if you have said yes.
• To keep the service safe, prevent fraud and misuse, and fix problems.
• To meet legal obligations, such as tax, accounting and lawful requests from authorities.

We do not sell your personal data, and we do not use it for advertising.

4. Consent

We process your data on the basis of your consent. Before Hita helps you, it asks on WhatsApp, in your language, whether you agree. You can say no, and you can withdraw consent at any time (see section 8). Withdrawing consent does not affect anything we lawfully did before that.

Some processing is permitted without consent under the DPDP Act, for example to comply with a law or a court order.

5. Who we share data with

We share data only with service providers that help us run Hita, under contracts that limit their use of it:

• Meta Platforms (WhatsApp Business Platform): to send and receive WhatsApp messages.
• Google Cloud (including Gemini): hosting, and AI that understands messages, transcribes voice notes, translates and helps detect scams. We use paid API access, which Google does not use to train its models.
• Sarvam AI: speech-to-text and text-to-speech for Indian languages.
• Supabase: our database, hosted in Mumbai, India.
• Licensed payment and bill-payment partners (for example, RBI-authorised payment aggregators and Bharat BillPay operating units): to collect payment from the family member who pays and to complete bill payments and recharges. They get only what is needed for that transaction.
• Your linked family member: short task updates, only if you agreed.
• Authorities: where the law requires it.

Some providers may process data outside India. We do this only where the DPDP Act permits it, and the providers protect it with security measures and contracts.

6. How long we keep data

• Account, reminders and task records: while you use Hita. When you ask us to delete your data, we delete them within 30 days, except for the records in the next point.
• Payment and transaction records: as long as tax and accounting law requires (usually up to 8 years).
• Message content and voice notes: only as long as needed to provide the service, and deleted with your account.
• Server logs for the website: up to 90 days.

7. Security

WhatsApp messages are encrypted in transit. Our database is encrypted, access is restricted to the people who need it to run the service, and our keys are stored securely. No system is perfectly secure. If a personal data breach occurs, we will inform you and the Data Protection Board of India as the law requires.

8. Your rights

Under the DPDP Act you can:

• ask what personal data we hold about you and who we've shared it with;
• ask us to correct or update it;
• withdraw consent and ask us to delete it;
• nominate someone to exercise these rights for you if you die or become unable to;
• raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied.

To use these rights, send “STOP” or “Delete my data” to Hita on WhatsApp, or email twinkle@annusmirabilis.io. We reply within 7 days and resolve grievances within 30 days.

9. Children

Hita is meant for adults. We do not knowingly collect data from anyone under 18. If you believe a child has used Hita, contact us and we will delete their data.

10. Changes to this policy

If we change this policy, we will post the new version here and update the effective date. For important changes, we will also tell Hita users on WhatsApp.

11. Grievance Officer

For any question or complaint about your personal data, contact our Grievance Officer: