Archived copy. This is Privacy Policy, Version 1.0 — Effective 20 October 2026, exactly as Kavi published it. This page is never edited. SHA-256 of the source text: 0b91062edf70b8d06554d3c874a7731b0964cb0153cd0665d3ec55baf77d67c6. Current version: kavi.audio/legal/privacy-policy. All versions: kavi.audio/legal/policies.json.

Privacy Policy

Kavi Media, Inc.
Version 1.0 — Effective 20 October 2026
Published at kavi.audio/legal/privacy-policy

In short (not part of the policy): Kavi collects what it needs to run your account, play audio, bill your Premium plan, pay creators for plays and recommend titles. Kavi does not sell your personal data, does not use it for targeted advertising, and sends no listener data to outside AI companies. Your profile name, photo and bio are public on the web, and creators you follow can see your name and photo. When you delete your account, Kavi deletes or de-identifies your personal information but keeps your de-identified listening history: creators are paid from it, Kavi uses it to improve recommendations, and Kavi may use it to train and evaluate its own AI models (for people in India, only as Indian law allows). It is never sold, and never given to outside AI companies to train theirs. Kavi sells no ads today; creator sponsor spots may play (never in family content), and Kavi uses no third-party advertising or analytics trackers. US accounts get Kavi newsletters by default (unsubscribe at any time); India accounts get them only if you opt in. Questions: privacy@kavi.audio.

1. About this Policy

1.1 This Privacy Policy explains what personal data Kavi Media, Inc. collects about the people it covers (section 2), why it collects it, who receives it, where it is stored, how long it is kept, what happens when you delete your account, and the rights you have and how to use them.

1.2 Kavi Media, Inc. is a Delaware corporation with its principal place of business in Alpharetta, Georgia, USA (mailing address: 169 Madison Ave STE 30314, New York, NY 10016, USA; phone: +1 (929) 224-4143) ("Kavi", "we", "us"). Kavi decides why and how your personal data is processed. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), Kavi is the data fiduciary for your personal data.

1.3 Privacy & Grievance Officer. Kavi's Privacy & Grievance Officer, who is also Kavi's Grievance Officer for India, is Srihith Pallamreddy, privacy@kavi.audio, +1 (929) 224-4143, Kavi Media, Inc., 169 Madison Ave STE 30314, New York, NY 10016, USA. His details are also at kavi.audio/legal/grievance-officer.

1.4 In this Policy: (a) the "Service" means Kavi's Telugu-language audio service (podcasts, audio shows, audiobooks, music, readings and short "Bites") on the website kavi.audio and in the Kavi mobile app; (b) your "account" is the paid or free account you sign up for, and a "profile" is one of the up to 4 listener profiles on an account; (c) "personal data" means information about an identified or identifiable person; and (d) "de-identified" data is defined in section 7.1.

1.5 This Policy should be read with Kavi's Terms of Service (kavi.audio/legal/terms) and Cookie Policy (kavi.audio/legal/cookie-policy).

1.6 Languages. This Policy is in English. Kavi will make it available in Telugu, and on request in any other language listed in the Eighth Schedule to the Constitution of India, by 13 May 2027.

2. Who this Policy applies to

2.1 This Policy applies to: (a) listeners: anyone who signs up for, or starts signing up for, a Kavi account, and each person who uses a profile on it; (b) website visitors to kavi.audio; (c) people who joined Kavi's waitlist before launch; and (d) affiliate program participants who are not creators or contributors, including people who hold only a Program account (for example, residents of Canada), under Kavi's Affiliate and Referral Program Terms (kavi.audio/legal/affiliate-program-terms) (the "Program"), and people who sent Kavi the affiliate interest form at kavi.audio/affiliate.

2.2 Creators and contributors have their own notices. If you are a creator, co-host, co-owner or approved short-form creator, the Creator Privacy Notice (kavi.audio/legal/creator-privacy-notice) covers your creator data. If you are a guest, cast member, writer, freelance editor, narrator or translator, the Contributor Privacy Notice (kavi.audio/legal/contributor-privacy-notice) covers your contributor data. If you also listen to Kavi, this Policy covers your listening.

2.3 Where Kavi is offered. The Service is offered only to people aged 18 or over in the United States and India. Kavi does not offer the Service in the European Union, the United Kingdom or any other country, and this Policy is not written for their laws. Affiliate participants may also be resident in Canada (section 17.4).

3. Personal data Kavi collects

3.1 Listeners.

3.2 Waitlist sign-ups. If you joined Kavi's waitlist before launch, Kavi collected: name, email address, location, age, gender, how you heard about Kavi, any referral code you used or were given and who referred you, your answer to the Instagram question, campaign tags from the link you followed, your browser information, and a one-way scrambled code (a keyed hash) made from your IP address, which Kavi uses to spot duplicate and abusive sign-ups. A waitlist sign-up is not a Kavi account.

3.3 Affiliate program participants.

3.4 IP address and country. Kavi uses your IP address, and the country that Kavi's network provider reports for it, at the moment you use the Service: to set your region and, if your device does not report a time zone, a time zone; and to limit repeated requests (for example, too many sign-in attempts). Kavi does this with a lookup on its own servers, not an outside service. Kavi does not store your IP address with your account. It stores IP addresses only in the verification records for profile email changes (section 3.1) and, as a keyed hash, for the waitlist and the affiliate interest form.

3.5 What Kavi does not collect. Kavi does not collect: (a) your card number or bank details as a listener (Stripe collects them); (b) a device identifier or advertising identifier, or your precise location; (c) push-notification tokens (the app does not send push notifications); (d) the text of your searches (section 6.4); (e) your contacts, photos (other than a profile photo or playlist cover you choose to upload) or microphone; or (f) government identity documents or Aadhaar numbers. To confirm a privacy request, Kavi uses only information it already holds (section 18.3). Profile photos and playlist covers are resized when you upload them, which removes their embedded metadata (such as camera details and location).

4. Where Kavi gets personal data

5. Why Kavi uses personal data, and on what basis

5.1 Kavi uses personal data only for the purposes in this table.

5.2 India. For people in India, Kavi processes the data you provide to open and use your account, listen, pay for Premium and take part in the Program, for those specified purposes, as a legitimate use under section 7 of the DPDP Act (data voluntarily provided for a specified purpose, where you have not said you do not consent), and to comply with law. Kavi relies on your consent only where the table says so (marketing emails and the referral cookie where Kavi asks for it) and where section 7.4 says Indian law requires it for AI training. Kavi asks for each consent separately, never with a pre-ticked box, and you can withdraw it as easily as you gave it (section 17.3(e)). The DPDP Act's duties on notice, consent, data principal rights, children's data, security and breach notification bind Kavi by law from 13 May 2027, or any earlier date the Government of India notifies. Kavi applies this Policy to people in India now.

5.3 United States. Kavi uses personal data for the purposes in this Policy to provide the Service you asked for, to comply with law, and for the business purposes described above.

5.4 Canada (affiliates only). If you are an affiliate resident in Canada, Kavi collects, uses and discloses your personal information with your consent for the Program purposes in this Policy.

5.5 What Kavi does not do. Kavi does not sell your personal data, rent it or trade it. Kavi does not share it for targeted (cross-context behavioral) advertising and has no advertising or analytics tools from other companies in its website or app. The only third-party tracking is Rewardful's affiliate referral cookie on the website, which section 10 explains. Kavi does not disclose your listening history to anyone outside Kavi for their own use. Kavi does not use your personal data for any purpose this Policy does not describe; if it wants to, it will update this Policy first (section 21) and, where the law requires, ask for your consent.

5.6 Ads and sponsors. Premium is not ad-free. Episodes may include a sponsor spot that a creator sells and Kavi approves (at most one per episode, and never in family content, section 15.2). These spots are part of the audio; sponsors receive no personal data about you from Kavi. Kavi sells no ads today. If Kavi starts selling its own ads, it will update this Policy and give you notice before those ads start.

6. Recommendations and other automated processing

6.1 How recommendations work. Kavi runs its own recommendation system (built on the open-source software Gorse, on Kavi's own servers). For each profile it uses: (a) your activity: completed titles, likes, dislikes, shares, downloads and views (and their reversal, such as an unlike); (b) the content types and genres you chose when you set up the profile; and (c) labels made from your profile and account: your age bracket (made from your date of birth), gender, time zone, region and plan. It uses these to fill the Home, Podcasts, Audiobooks, Shows, Music, Radio, Bites and family shelves with titles you may like. Trending lists count likes, shares and plays across all listeners over the last 3 days.

6.2 No setting to turn recommendations off. The Service does not offer a setting to switch off personalized recommendations. Liking or disliking titles changes what is recommended. You can ask about recommendations at privacy@kavi.audio.

6.3 Decisions with effects on you. The only automated decision Kavi makes about listeners that affects what you can do is whether you can play a title: this depends on whether you have Premium and, if not, how much of your 3 free hours you have used. Kavi makes no automated decisions about your credit, price (other than the price for your region), or eligibility for anything else. If you think the paywall has been applied to you wrongly, email contact@kavi.audio and a person will look at it.

6.4 Search. Search results are ranked by how well titles match your words, not by your personal data. Kavi does not store what you search for. Your search words are part of the web address your app or browser requests, so they can appear in the request records of Kavi's network provider and error-monitoring provider (section 9).

6.5 No health inferences. Kavi does not try to work out your health, or other sensitive characteristics such as your religion or sexuality, from what you listen to. The interests you choose can include health, fitness or wellness genres. Kavi uses them only as content preferences, to recommend titles, and does not use them to infer anything about your health.

7. De-identified data and AI model training

7.1 What "de-identified" means here. When this Policy says Kavi keeps data in de-identified form, it means Kavi has removed your name, email address, photo, bio and sign-in details from it and keeps it linked only to an internal profile number. It is not anonymous: it can still include the details section 13.3 lists (such as your date of birth, gender and time zone), so Kavi treats it as personal data, protects it as this Policy describes, and honors the rights in section 17 for it where the law gives them. Kavi does not try to re-identify de-identified data, and does not allow anyone it gives access to try.

7.2 What Kavi uses it for. Kavi may use de-identified listening and engagement history (plays, listening time, completions, likes, dislikes, shares, downloads, views, follows of shows and playlist contents), together with the profile details section 13.3 lists: (a) as the ledger from which creators are paid and their statistics are counted; (b) to improve recommendations and trending lists for all listeners; (c) to detect fraud and invalid plays; and (d) to train, test and evaluate AI models that Kavi owns or exclusively controls (for example, recommendation models).

7.3 Limits. Kavi never sells this data, and never gives it to outside AI companies to train their models. Today, no listener data goes to any outside AI service. (Creators' episode transcripts are processed by an outside AI provider, under the Creator Privacy Notice; listener data is not part of that.) Kavi does not use listening of family content (section 15) to train AI models.

7.4 India. Kavi does not yet train AI models on listener data. It will use the data of people in India to train or evaluate its AI models only as Indian law allows. If the DPDP Act requires your consent for this once its duties bind Kavi (section 5.2), Kavi will ask for that consent separately before using your data for training, and you can withdraw it at any time (section 17.3(e)).

8. What other people can see

8.1 Your public profile. Your profile's name, photo and bio are public on the web. Anyone can see them, including people who are not signed in to Kavi, along with your profile's follower and following counts. A profile photo is stored at a web address that anyone who has the address can open. Do not put anything in your profile name, photo or bio that you do not want to be public. You can change your profile name, photo and bio in the app at any time.

8.2 Creators you follow. When you follow a creator, that creator can see your profile's name and photo in their list of followers.

8.3 Creators' audience statistics. Creators see statistics about who listens to their content, combined across listeners: plays and listening time, and breakdowns by gender, age bracket (for example 18–24 or 55+), country and the hour of day people listen. These statistics do not name you. Because some titles have few listeners, a breakdown may cover only a small number of people. The statistics continue to include de-identified data from deleted accounts (section 13).

8.4 What stays private. Your playlists, listening history, likes, downloads, email address, date of birth and subscription details are not shown to other listeners or to creators as information about you. Profiles on one account do not have separate passwords: anyone signed in to the account can switch to any of its profiles and see that profile's history, playlists and settings.

8.5 Affiliates. If you subscribe through an affiliate's link or code, the affiliate sees in their Program dashboard only that a referral signed up and the commission it earned, not your name or email address. Kavi never shares your listening activity with affiliates.

9. Who receives personal data

9.1 Service providers. Kavi uses these service providers to process personal data for Kavi. Each may use it only to provide its service to Kavi, except where this table says the provider also acts under its own terms.

9.2 Kavi's own systems. Kavi's recommendation system (Gorse) and search system (Elasticsearch) run on Kavi's own AWS servers. They are not outside companies.

9.3 AI providers. Kavi uses an outside AI provider (Anthropic, and OpenAI as an alternative) to process creators' episode transcripts, titles and descriptions. No listener, waitlist or affiliate personal data is sent to any AI provider.

9.4 Other recipients, by category: (a) email and office software providers Kavi uses to receive and answer your emails (Google Workspace); (b) creators, as section 8 describes; (c) the public, for your public profile (section 8.1); (d) Kavi's professional advisers (such as accountants and lawyers), under confidentiality; (e) tax authorities (for affiliates' tax forms and commission payments), as tax law requires; (f) courts, regulators, law enforcement and government agencies, where the law requires or to respond to a valid legal order, and to report illegal content where the law requires; (g) people who complain about content or conduct, only to the extent the law requires; and (h) a buyer or successor of Kavi's business or of the Service, who must keep using your personal data as this Policy describes unless you are told otherwise and, where the law requires, agree.

9.5 App stores. If you download the Kavi app, Apple or Google handles the download under its own privacy policy. Kavi does not receive personal data about you from the app store.

10. Cookies and similar technologies

10.1 Kavi's website uses one cookie that it needs to work (a session cookie), a cookie that remembers your cookie choice, security cookies its network provider may set, and one optional cookie: Rewardful's referral cookie, which remembers for 60 days that you arrived through an affiliate's link, so the affiliate can be credited and you can get the referred-subscriber discount. Kavi uses no analytics or advertising cookies.

10.2 Your choice. If you are in India or anywhere else outside the United States, or Kavi cannot tell where you are, Kavi loads Rewardful's script and sets the referral cookie only after you choose "Allow" in Kavi's cookie notice, or when you type a referral code at checkout yourself. If you are in the United States, it is on by default, and you can turn it off at any time with the "Cookie settings" link at the foot of every page; if your browser sends a Global Privacy Control signal, Kavi treats it as turning it off (section 20).

10.3 The app does not use cookies. It stores sign-in tokens and app data on your device.

10.4 The Cookie Policy (kavi.audio/legal/cookie-policy) lists every cookie and storage item, with its provider, purpose and duration.

11. Where data is stored and international transfers

11.1 Kavi stores personal data in the United States, on AWS in a US region. If you are in India, your personal data is transferred to and processed in the United States.

11.2 Kavi's other service providers (section 9.1) process data in the places they operate. Cloudflare handles requests at the network location nearest to you. Stripe, Mailchimp, Rewardful, Sentry, Google, Discord, Expo, Wise and TaxBandits may process data in the United States and in other countries where they or their sub-processors operate.

11.3 While your personal data is outside your country, it is subject to the laws of the country where it is, and may be accessed by that country's courts, law-enforcement and national-security authorities.

11.4 India. Kavi transfers personal data of people in India outside India only as the DPDP Act allows. If the Government of India restricts transfers to a country Kavi uses, Kavi will stop transferring your data there or use another lawful means.

11.5 Canada (affiliates). You may ask Kavi's Privacy & Grievance Officer about Kavi's policies and practices for service providers outside Canada.

12. How long Kavi keeps personal data

Kavi may keep data for longer only where the law requires it, or where it is needed for a legal claim, investigation or legal hold, and then only for that purpose.

13. Deleting your account or a profile

13.1 How. You can delete your account in the app's Settings, or by emailing privacy@kavi.audio from your account's email address. You can delete an additional profile (not the main one) in the same place. Kavi calls this account deletion. It is described exactly below, because Kavi keeps some de-identified data afterwards.

13.2 What Kavi deletes or removes when you delete your account: (a) your sign-in account (email address, password, name, date of birth and gender held by Kavi's sign-in service); (b) on every profile: the name (replaced with "Deleted User"), the email address (replaced with a random placeholder), the photo, the bio and the email subscriptions; (c) on the account record: the email address (replaced with a random placeholder), the link to your sign-in account and the Stripe reference numbers; (d) your profile photos and custom playlist covers, from Kavi's file storage; (e) your follows of creators and creators' follows of you, and your follower and following counts; (f) your alert settings, verification codes and verification records, and any pending sign-up record; (g) the details field of your activity events (the events themselves are kept, as section 13.3 says); (h) your email address and first name from Kavi's newsletter list at Mailchimp; (i) your email address from Kavi's recommendation system and from Kavi's log of billing events; and (j) at Stripe, your subscriptions (canceled) and your customer record (deleted). Stripe keeps the records it must keep under its own legal obligations.

13.3 What Kavi keeps, de-identified (linked to an internal profile number, not to your name, email address, photo or sign-in): (a) listening and engagement history: plays that count toward creators' payments, listening history and resume positions, activity events, likes, dislikes, shares, downloads and views, votes, follows of shows, and the titles in your playlists (the playlists are renamed "Deleted playlist" and made private); (b) profile details: gender, date of birth, time zone, display language and app settings; (c) account details: region, plan, and subscription start and customer dates; (d) recommendation record: each profile's number with its age bracket, gender, time zone, region, plan and interests labels, and its activity history; and (e) free-tier usage: the seconds used. Section 7 says how Kavi uses this data. It continues to count in creators' statistics and payments.

13.4 Free-tier hash. If you used any of your free hours, Kavi stores a keyed one-way hash of your email address (made after lower-casing it and removing "+" tags and, for Gmail addresses, dots) together with the seconds used. Kavi cannot turn the hash back into your email address. If you sign up again with the same address, the hash matches and your free-tier usage carries over. Nothing is stored if you used no free listening.

13.5 Backups and legal records. Deleted data stays in Kavi's database backups for up to 35 days and in server snapshots for up to 14 days, until those copies expire. Kavi does not restore deleted data from them except to recover from a technical failure, and then re-applies the deletion. Kavi keeps billing records as section 12 says.

13.6 On your device. Deleting your account signs you out and removes your sign-in tokens from the app. It does not remove downloads, your play queue, your last-played title or plays waiting to be sent from your device. To remove them, delete downloads in the app, or uninstall the app or clear its data.

13.7 If you never finished signing up. Kavi does not add you to its newsletter or create a payment record for you until you confirm your email address. If you never confirm it, Kavi deletes the records it created for your sign-up 90 days later, or sooner if you ask at privacy@kavi.audio.

13.8 Deleting an additional profile removes or de-identifies that profile's data in the same way as section 13.2(b), (d), (e) and (g) and section 13.3. It does not affect the account or other profiles. Kavi unsubscribes the profile's email address from the newsletter list unless another profile on Kavi still uses that address and gets the newsletter. Deleting only a profile does not yet remove that profile's email address from Kavi's recommendation system; to have it removed, email privacy@kavi.audio.

13.9 Creator profiles. If any profile on your account is a creator profile, deleting the account in the app does not delete anything, and deleting a creator profile in the app does not delete it. Kavi emails you instead with how to ask for deletion through privacy@kavi.audio (kavi.audio/legal/privacy-request explains how), because creator data is subject to your creator agreement and the Creator Privacy Notice.

13.10 Questions and further requests. If you want to know more about what Kavi keeps, or want to ask Kavi to delete more than section 13.2 describes, email privacy@kavi.audio. Kavi will tell you what it can delete and, if it cannot, why. India: from 13 May 2027, or any earlier date the DPDP Act's duties bind Kavi, if the DPDP Act requires Kavi to erase data that section 13.3 would otherwise keep, Kavi will erase it or make it anonymous so that it can no longer be linked to you, keeping only totals that are not linked to any person.

14. Security

14.1 Kavi uses reasonable technical and organizational measures to protect personal data, including encrypted connections to the website, app and API, access to servers limited to authorized people through AWS's access controls, audio delivered through short-lived signed links, encryption of the password Kavi holds briefly during sign-up, and contracts with service providers.

14.2 Your password is handled by Kavi's sign-in service (AWS Cognito). Kavi does not keep your password in its own database, except in encrypted form for up to 1 hour during sign-up. Kavi never receives your card details.

14.3 No system is perfectly secure. If a personal data breach affects your data, Kavi will notify you without undue delay, and will notify regulators, as the law requires.

14.4 Kavi will never ask for your password or card details by email, message or phone.

15. Children, 18+ and family content

15.1 18+ only. You must be 18 or over to open a Kavi account, and every profile must be for someone aged 18 or over. Kavi asks for a date of birth at sign-up and does not open an account if it shows the account holder is under 18. Kavi does not offer kids' profiles.

15.2 Family content. Some content on Kavi is labeled as suitable for family listening ("family content"). Family content is chosen and played by adults, on the adult's own profile. When family content plays on your profile, Kavi records it as your activity in the same way as any other listening, to resume it, count it toward the creator's payment and recommend other titles. Kavi sells no ads today. It does not place advertising in family content, and does not allow creator sponsor spots or sponsored Bites in it (Terms of Service, section 3.4). Kavi uses no analytics or advertising tools from other companies anywhere on Kavi, and does not use family-content listening to train AI models (section 7.3).

15.3 Not directed to children. Kavi is a general-audience service for adults. It is not directed to children under 13 and does not knowingly collect personal information from children under 13, or from anyone under 18 as an account holder or profile. Kavi does not knowingly collect data from children under 13. Kavi markets family content to adults, not to children.

15.4 If a child's data reaches Kavi. If Kavi learns that a profile is used by or was set up for someone under 18, it will delete that profile and its personal data, except what the law requires Kavi to keep. If you are a parent or guardian and believe a child has given Kavi personal information, email privacy@kavi.audio and Kavi will delete it.

15.5 Waitlist. The pre-launch waitlist accepted sign-ups from people aged 13 or older. If you joined the waitlist while under 18, you still cannot open a Kavi account until you are 18. You, or your parent or guardian, can ask Kavi to delete your waitlist entry at privacy@kavi.audio.

15.6 Parental controls. The Terms of Service explain where to find information about commercially available parental-control tools.

16. Marketing emails and other messages

16.1 Kinds of email. Kavi sends: (a) service emails, such as verification codes, password resets, receipts, renewal reminders, price-change notices, cancellation confirmations and notices about your account, the Terms or this Policy. These always go out while you have an account, whatever your email preferences; (b) newsletters about Kavi; and (c) new-content emails about new Telugu content on Kavi.

16.2 United States (and every account not identified as India). Each profile is subscribed to newsletters and new-content emails by default when it is created, and its email address is added to Kavi's newsletter list at Mailchimp at that time. You can unsubscribe at any time with the link in every newsletter and new-content email, or in the app's notification settings. The unsubscribe link in each newsletter or new-content email turns off that kind of email.

16.3 India. Profiles in India are not subscribed by default. You get newsletters and new-content emails only if you tick the unticked boxes when you sign up on the website or add a profile, or turn them on later in the app's notification settings. You can turn them off the same way, or with the unsubscribe link in every email.

16.4 Region. Kavi decides which of these applies from the region recorded at sign-up (section 3.4). If you are in India and are getting marketing emails you did not ask for, unsubscribe and tell privacy@kavi.audio so Kavi can correct your region.

16.5 Every marketing email identifies Kavi, includes Kavi's postal address, and has a working unsubscribe link. Kavi honors an unsubscribe within 10 business days.

16.6 No push notifications or text messages. The app does not send push notifications, and Kavi does not send marketing text messages. The iOS app may show an occasional in-app message about Premium; it is based only on a counter of how many times you have opened the app, stored on your device.

16.7 Affiliates. Kavi sends Program participants Program notices and statements as the Program Terms describe. If you promote Kavi by email, the Program Terms require you to follow anti-spam law.

17. Your rights

17.1 Everyone. Wherever you live, you may ask Kavi to: (a) tell you what personal data Kavi holds about you and how it is used, and give you a copy, in a commonly used electronic format where you ask for one; (b) correct inaccurate or incomplete data, or update it (you can change most profile data yourself in the app); (c) delete your personal data (section 13 explains what account deletion does, and section 13.10 how to ask for more); (d) stop sending you marketing emails (section 16); and (e) withdraw any consent you have given. Kavi does not yet offer a download button for your data; Kavi handles access and copy requests by email. Kavi may decline or limit a request where the law allows, for example where Kavi must keep billing or tax records or another person's rights would be affected. Kavi will tell you why.

17.2 United States. (a) Which laws apply. California's Online Privacy Protection Act requires this Policy and applies to Kavi. The comprehensive state privacy laws (such as California's Consumer Privacy Act and the laws of Colorado, Connecticut, Virginia, Texas and other states) generally apply only to businesses above size or data-volume thresholds, which Kavi is currently below. Some, such as Connecticut's, can also apply to a business that processes certain sensitive data; Kavi does not process listeners' sensitive data, and honors the rights below whether or not a state law requires it. Kavi does not sell personal data or use it for targeted advertising. (b) What Kavi offers anyway. Kavi honors the rights in section 17.1 for people in every US state, whether or not a state law requires it. If Kavi declines your request, you may appeal by replying to Kavi's decision; Kavi will tell you the outcome of the appeal and, where your state's law provides for it, how to contact your state attorney general. (c) Washington. Kavi's Consumer Health Data Privacy Policy (kavi.audio/legal/consumer-health-data-privacy-policy) explains how Kavi handles consumer health data under Washington's My Health My Data Act and how to exercise your rights under it. Kavi does not collect consumer health data from listeners (section 6.5).

17.3 India (DPDP Act). If you are in India, you have the right to: (a) obtain a summary of your personal data being processed and of the processing activities, and the identities of the data fiduciaries and data processors with whom it has been shared, with a description of the data shared; (b) correct, complete, update and erase your personal data, subject to the law; (c) have your grievances redressed by Kavi (section 19); (d) nominate another individual to exercise your rights if you die or become unable to. You can make or change a nomination by emailing privacy@kavi.audio with the nominee's name and contact details; and (e) withdraw consent you have given, as easily as you gave it: turn off marketing emails in the app's notification settings or with the unsubscribe link; change your cookie choice with the "Cookie settings" link on the website; and withdraw any other consent you have given (including any consent Kavi asks for under section 7.4) by emailing privacy@kavi.audio. Withdrawal does not affect processing before you withdraw. You may complain to the Data Protection Board of India after using Kavi's grievance process (section 19.3). Kavi applies these rights now, although the DPDP Act's duties bind Kavi by law from 13 May 2027 (section 5.2).

17.4 Canada (affiliates only). If you are an affiliate resident in Canada, you may access the personal information Kavi holds about you, challenge its accuracy and completeness and have it amended, withdraw consent (subject to legal or contractual restrictions and reasonable notice; for example, Kavi cannot pay you without your tax and payout details), ask about Kavi's practices for service providers outside Canada, and complain to Kavi and to the Office of the Privacy Commissioner of Canada. If you live in British Columbia, you may also complain to the Office of the Information and Privacy Commissioner for British Columbia.

18. How to make a request

18.1 Email privacy@kavi.audio (kavi.audio/legal/privacy-request explains how), or write to Kavi at the address in section 22. You do not need a Kavi account to make a request.

18.2 Tell Kavi your name, the email address on your account (or on your waitlist or affiliate entry), where you live (US state, India or Canada), and what you are asking for.

18.3 Verification. Kavi verifies your identity before acting, using information it already holds: for example, writing to the email address on your account, or details already on your account. Kavi never asks for a government identification number or Aadhaar number to confirm a privacy request, and never asks you to send identity documents to confirm who you are. If Kavi cannot confirm your identity with reasonable effort, it will tell you and ask for more information it can check against what it holds.

18.4 Someone acting for you. You may make a request through an authorized agent, or as a nominee in India; Kavi may ask for proof of authority (for example, a signed permission or power of attorney) and may confirm the request with you.

18.5 Timing and cost. Kavi acknowledges requests promptly and responds within the time the law that applies to you requires: for Washington consumer health data, within 45 days, extendable once by up to 45 more days (as the Consumer Health Data Privacy Policy explains); for people in India, at most 90 days. Kavi does not charge for a request and will not treat you differently because you made one.

19. Grievances and complaints

19.1 You may raise any privacy concern or grievance with Kavi's Privacy & Grievance Officer, who is also Kavi's Grievance Officer for India: Srihith Pallamreddy, privacy@kavi.audio, +1 (929) 224-4143, Kavi Media, Inc., 169 Madison Ave STE 30314, New York, NY 10016, USA (also at kavi.audio/legal/grievance-officer). Please use the subject line "Grievance".

19.2 Kavi acknowledges privacy grievances promptly and resolves them within the time the law that applies to you requires (for people in India, at most 90 days). For complaints about content or moderation, Kavi acknowledges within 24 hours and resolves within 7 days, or sooner where the law requires; for other complaints, including billing, it acknowledges within 24 hours and resolves within 15 days. Section 25.2 of the Terms of Service and kavi.audio/legal/grievance-officer give the details, including removal times for content.

19.3 India. If you are not satisfied with Kavi's response, you may complain to the Data Protection Board of India, as the DPDP Act provides.

19.4 United States. You may contact your state attorney general or the US Federal Trade Commission.

19.5 Canada (affiliates). See section 17.4.

20. Do Not Track and Global Privacy Control

20.1 Do Not Track. Kavi does not track you across other websites over time, and does not allow other companies to do so through Kavi for advertising. Because there is no such tracking to switch off, Kavi's website and app do not change how they work when your browser sends a "Do Not Track" signal.

20.2 Global Privacy Control. If your browser sends a Global Privacy Control signal, Kavi's website treats it as refusing the optional referral cookie and does not load Rewardful's script, unless you type a referral code at checkout yourself.

20.3 Others collecting data through Kavi. When you use Kavi's website, Cloudflare, Google (Google Fonts), Rewardful (where its script loads) and, at checkout, Stripe receive your IP address and browser information directly, as section 9 describes. They handle it under their contracts with Kavi and, where section 9 says so, their own privacy policies. Kavi has no advertising or analytics partners that collect data about your activity across other websites.

21. Changes to this Policy

21.1 Kavi will post every change on this page with a new version number and effective date, and keep earlier versions available on this page.

21.2 For a material change, Kavi will tell you at least 30 days before it takes effect, by email to your account's email address and by a notice on the website or in the app, with a summary of what changed. Kavi may give shorter notice only where the law, a court or regulator, an app store or payment provider requires it, or to deal with an urgent security or safety risk.

21.3 Kavi will not use personal data it has already collected in a materially different way from this Policy (for example, a new kind of AI use or sharing with a new kind of third party) without your consent where the law requires it. A change never applies to processing before it takes effect.

22. Contact

• Privacy questions, requests and grievances: privacy@kavi.audio
• How to make a privacy request: kavi.audio/legal/privacy-request
• Privacy & Grievance Officer (also Grievance Officer for India): Srihith Pallamreddy, privacy@kavi.audio, +1 (929) 224-4143; details at kavi.audio/legal/grievance-officer
• General questions and billing: contact@kavi.audio
• Post: Kavi Media, Inc., 169 Madison Ave STE 30314, New York, NY 10016, USA

23. How this Policy relates to other agreements

23.1 If you have a signed creator, contributor, equipment, editing, narration or affiliate agreement with Kavi, that agreement, and the privacy notice it refers to, governs your personal data for that relationship, and prevails over this Policy if they conflict.

23.2 Nothing in this Policy limits a right the law gives you that cannot be limited by agreement.