Privacy Policy
Last updated: April 9, 2026
This Privacy Policy describes how Runaq.ai ("we", "us", "our") collects, uses, and protects your personal data when you use Osmoaudio ("the Service"), in compliance with the Brazilian General Data Protection Law (LGPD, Lei 13.709/2018).
1. Data Controller
Runaq.ai is the data controller responsible for your personal data. Contact: contact@runaq.ai
2. What Data We Collect
| Data | Purpose | Legal Basis (LGPD) |
|---|---|---|
| Phone number | Account identification, message delivery | Consent (Art. 7, I) |
| Display name | Personalized greetings | Consent (Art. 7, I) |
| Language preference | Content localization | Consent (Art. 7, I) |
| Topic interests | Episode personalization | Consent (Art. 7, I) |
| Delivery style preferences | Content format optimization | Consent (Art. 7, I) |
| Episode feedback (thumbs up/down) | Improving future episodes | Consent (Art. 7, I) |
| Conversation messages | Processing your requests | Consent (Art. 7, I) |
We do not collect financial data, precise location, health data, or biometric data.
3. How We Use Your Data
- Generate personalized daily podcast episodes based on your interests and preferences
- Deliver episodes and messages via WhatsApp
- Improve the Service through aggregated, anonymized analytics
- Provide your personal web portal and RSS podcast feed
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for profiling beyond what is necessary to deliver the Service.
4. Third-Party Services
We use the following third-party services to operate Osmoaudio:
- WhatsApp (Meta Platforms) — message delivery. Subject to WhatsApp's own privacy policy.
- Amazon Web Services (AWS) — data storage (DynamoDB), audio generation (Bedrock AI), audio hosting (S3/CloudFront). Data is stored in the US East (N. Virginia) region.
- Google Cloud — text-to-speech audio generation.
5. Data Retention
- Profile and preferences: Retained while your account is active.
- Episodes: Retained for 90 days after generation, then automatically deleted via TTL.
- Conversation history: Session data is retained for up to 24 hours, then automatically deleted.
- Rate limiting data: Automatically deleted after 24 hours.
6. Data Security
We protect your data with:
- Encryption at rest (AES-256 via AWS managed encryption)
- Encryption in transit (TLS 1.2+)
- Signed, time-limited audio URLs (not publicly accessible)
- PII-sanitized application logs (phone numbers and tokens are masked)
- IAM-scoped access controls with least-privilege permissions
7. Your Rights Under LGPD
Under the Brazilian General Data Protection Law (Lei 13.709/2018), you have the right to:
- Access your personal data — visit your Osmoaudio portal
- Correct inaccurate data — update your topics or preferences via WhatsApp
- Delete your data — send "delete my data" to Osmoaudio via WhatsApp
- Revoke consent — stop using the Service at any time
- Data portability — your podcast feed (RSS) is portable to any podcast app
- Information about third parties with whom data is shared
To exercise any of these rights, send a message to Osmoaudio via WhatsApp or email contact@runaq.ai. We will respond within 15 business days as required by LGPD.
8. Children's Privacy
Osmoaudio is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.
9. International Data Transfers
Your data is processed and stored on AWS servers in the United States. This transfer is necessary for the performance of the Service and is conducted with appropriate security safeguards as described in Section 6.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via WhatsApp. The "Last updated" date at the top indicates the most recent revision.
11. Contact
For privacy-related questions or to exercise your LGPD rights:
Email: contact@runaq.ai
Data Controller: Runaq.ai