Service Providers

Hriday Vanka runs Yuga and decides what personal data Yuga uses and why. That makes us the controller of your data (in India, the data fiduciary).

A processor is a company that handles personal data for us, on our instructions and for no purpose of its own: for example, the company whose computers run our website. Different laws use different names for the same idea: “processor” under the GDPR and UK GDPR, “data processor” under India’s Digital Personal Data Protection Act, and “service provider” under California law. Many companies also call them subprocessors, because a business customer’s data passes through us to them. This page uses “processor” for all of these.

A processor must sign a contract with us that limits what it may do with the data, requires it to keep the data secure, and requires it to help us respect your rights. It may not sell your data or use it for its own purposes.

Some companies you meet while using Yuga are not our processors. Google and Apple, when you sign in with them, and the App Store and Google Play, when you download the app, act for themselves under their own privacy policies. We list them separately in section 3 so you know who they are and what they see.

These are every processor we use today, and the ones we have chosen but not switched on yet.

Your conversations are not stored by Yuga or by any of these companies on our behalf. We send each turn to the AI, send the reply to the voice service, and keep neither. The only exception is a reply you choose to report with Report this reply, which we keep, without anything that identifies you, for 12 months. Our AI and Content Policy page explains how the figures work.

The companies below are controllers in their own right, not our processors. You have your own relationship with them, they decide for themselves what they do with your data, and their own privacy policies apply. We don’t control them, and they don’t act on our instructions.

Our software can work with the provider below, but we do not use it, so it receives no data from Yuga:

• Anthropic (Claude models), through Google Cloud Vertex AI. Our code can switch the figures to Claude. If we turn it on, it would receive the same conversation text Gemini receives now, through Google Cloud. We will add it to the table above at least 30 days before that happens.

We don’t use analytics, advertising networks, tracking pixels, data brokers or marketing email services. The website’s fonts are served from our own server, not from a font service.

Most of what we process is held in the United States. The AI model may answer from any region where Google offers it. If you live somewhere else, this means your data leaves your country.

For data from the European Economic Area, the United Kingdom and Switzerland, our contracts with these providers include the European Commission’s Standard Contractual Clauses and the UK’s addendum to them, or rely on another lawful transfer mechanism such as the EU-US Data Privacy Framework where the provider is certified. For data from India, we transfer data only to countries the Indian government has not restricted. Our Privacy Policy explains transfers in full.

Before a provider handles personal data for Yuga, we check that:

• we need it: we give each provider only the data its job requires, and nothing else;
• it will sign a data processing agreement that meets the laws that apply to us, including terms for transfers between countries;
• it keeps data secure, with encryption, access controls and independent security audits (such as ISO 27001 or SOC 2 reports);
• it does not use our users’ data to train its own models or for advertising, or lets us turn that off;
• it tells us about security incidents quickly, and lets us delete data when we ask.

We review our providers when their terms change and at least once a year.

We will update this page at least 30 days before a new provider starts processing personal data for Yuga, and add an entry to the change log below saying what changed and when.

The exception is an urgent replacement: for example, if a provider has a security problem or stops its service and we must move quickly to keep Yuga running safely. Then we will update this page as soon as we can, and explain why the change could not wait.

If you object to a new provider, write to us at support@foundationalcreations.com before it starts. We will tell you what it would receive about you, and you can always delete your account. You can also use Yuga without an account, in which case nothing about you is stored. Your rights are explained in our Privacy Policy.

Questions about our providers, or a request for a copy of the data protection terms we have with one of them: write to support@foundationalcreations.com.

Hriday Vanka, Hyderabad, Telangana, India, India.